Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft
File:                     wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft (raw, json)
Hash identifier:          iv2sJDCPp3wsxRUKthEsrCqI3tWCvmlCffRbI/Q1+Xg=
Subject key identifier:   68:D0:97:4C:68:3A:CD:DA:84:CC:56:D8:2F:DB:A0:CA:67:C9:E4:CC
Authority key identifier: C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72
Certificate issuer:       /CN=A91365B9/serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272
Certificate serial:       0468
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft
Manifest number:          0461
Signing time:             Sun 05 Jul 2026 00:32:19 +0000
Manifest this update:     Sun 05 Jul 2026 00:32:18 +0000
Manifest next update:     Sun 12 Jul 2026 00:32:18 +0000
Files and hashes:         1: wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl (hash: GXck/ICFqEr8J6g242raA6q4HZYlqK5D1AYM14QyGOI=)
                          2: AFF4E1F89EB711EC8210607DC4F9AE02.roa (hash: r355JtbsChvpKdcC5nW7ewoVZ03Rj0iVIbKKdmTNzQU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl
                          rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 00:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1128 (0x468)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91365B9, serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272
        Validity
            Not Before: Jul  5 00:32:18 2026 GMT
            Not After : Jul 12 00:32:18 2026 GMT
        Subject: CN=6a49a612-b493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:26:bc:ec:3d:21:fb:98:a1:a2:13:f9:47:ed:
                    73:33:48:5f:cd:05:a3:91:1b:0c:55:43:94:41:79:
                    d3:72:77:4c:39:ca:53:f5:c7:cb:93:c3:f0:2d:90:
                    20:e3:bf:39:5f:97:d7:ac:a4:e1:01:99:55:21:de:
                    1c:21:46:7e:79:0f:c8:ff:87:e1:6e:20:86:2d:5e:
                    88:e4:0a:4e:86:d1:c4:bc:33:b8:0d:77:e7:4b:61:
                    50:88:8a:aa:0e:ca:94:1c:22:69:51:71:52:2b:1d:
                    bc:67:e5:e1:35:bc:b7:be:c2:87:3d:10:42:b7:40:
                    d5:0d:48:94:28:40:ee:73:98:2d:60:66:02:78:25:
                    04:f5:45:09:40:38:dd:7e:f7:b5:50:bd:ef:0a:c0:
                    a1:cb:a1:fe:a7:36:75:09:97:b8:5d:20:86:2a:2b:
                    08:37:13:21:c4:45:14:4f:2a:1e:55:f9:26:5c:be:
                    e6:9c:fe:9f:60:1b:51:c1:f3:8e:6a:71:07:0b:71:
                    38:4a:74:97:d7:18:b9:4a:83:83:37:f7:d0:b3:5b:
                    a3:45:50:b5:9e:e4:9f:6c:f3:3b:0e:c3:c4:8f:76:
                    1c:a6:3e:2f:cd:33:ba:56:d7:ed:22:10:76:8e:ca:
                    06:a3:49:75:83:70:d9:d9:cf:f8:a9:5d:ef:a5:e7:
                    c6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D0:97:4C:68:3A:CD:DA:84:CC:56:D8:2F:DB:A0:CA:67:C9:E4:CC
            X509v3 Authority Key Identifier:
                keyid:C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:45:7a:a0:47:16:c9:41:55:62:5d:eb:b1:de:cf:d3:4a:58:
         78:68:45:be:54:07:47:e1:0c:1b:f4:46:fb:fb:21:c8:fd:ea:
         41:45:ef:32:d4:55:cb:a7:c0:30:20:90:48:46:da:62:9f:e5:
         7a:c3:bd:32:9c:04:7f:ee:8e:f3:51:fd:2a:9a:ff:0c:a7:40:
         c1:c5:01:15:80:a4:64:80:51:51:6b:db:7f:c6:66:89:1b:6b:
         d3:c1:d2:3a:d6:5b:02:df:2d:dd:19:f2:de:46:ef:87:2a:7d:
         4f:6b:18:b0:86:35:7b:3e:1d:ce:fb:07:2a:be:53:a3:74:92:
         3a:b4:81:42:2c:be:6c:b5:11:3b:75:fb:04:17:fd:51:38:f0:
         ea:6e:57:0b:f2:f3:8d:ab:a1:2e:62:51:1f:ca:05:df:70:a4:
         a7:c3:8d:a6:70:2c:25:06:a0:3a:7d:5b:31:f8:94:29:1f:91:
         87:e6:46:d8:0e:ab:05:73:a1:83:33:26:83:e0:67:55:6a:db:
         dc:77:86:34:fb:e9:0e:69:fd:65:d3:04:6f:4a:b7:15:80:77:
         65:56:cc:eb:0f:90:ec:a0:95:e8:35:17:52:36:7e:70:00:a3:
         f4:60:99:48:9c:1d:6c:77:33:ab:68:17:f3:a4:5a:3f:ba:dd:
         60:99:e5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:39:27 2026 by rpki-client