Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
File:                     wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft (raw, json)
Hash identifier:          zOw683GChir1zg9zTdAZAkW/d7MpQEyWDNoL3q6P7rM=
Subject key identifier:   C3:09:8C:8F:FB:02:10:9B:63:C0:0B:0F:E8:2D:2A:01:DE:5E:46:86
Authority key identifier: C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
Certificate issuer:       /CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
Certificate serial:       1870
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
Manifest number:          1833
Signing time:             Mon 20 Jul 2026 16:39:06 +0000
Manifest this update:     Mon 20 Jul 2026 16:39:05 +0000
Manifest next update:     Mon 27 Jul 2026 16:39:05 +0000
Files and hashes:         1: wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl (hash: BNjx7Mt6jjDqspn9KXPqrU1wIBQQS49YaqAn3QNFI4U=)
                          2: 507A39A632B011EE89DFF774C4F9AE02.roa (hash: t9gfSRrRBhg5aKee6bLsa2HCvO/wXMYsjYUGDi3D7i0=)
                          3: 047C0BCC373211F1887E264A90833773.roa (hash: LWhnCQp9VfJYhsJdhzflBR7RBHFtlmggsyH3Tj4cj0M=)
                          4: 51635E7E32B011EE89DFF774C4F9AE02.roa (hash: n1u9iSyb9bdQc1QOK/WYlhLEbmOoYxOlffVDVXq1fW4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl
                          rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 16:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6256 (0x1870)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91478E2, serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
        Validity
            Not Before: Jul 20 16:39:05 2026 GMT
            Not After : Jul 27 16:39:05 2026 GMT
        Subject: CN=6a5e4f2a-47b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ff:37:17:de:5c:f8:1b:df:5e:89:77:c8:55:
                    e7:6f:fe:4a:24:ab:2a:56:20:58:39:c8:90:e9:5b:
                    ea:5d:49:62:60:52:ce:19:4d:7c:12:47:46:6a:67:
                    fb:3c:49:5b:dc:7c:26:46:52:97:0e:08:9d:e8:f2:
                    98:09:49:49:2c:f5:e7:84:98:4a:5d:ec:66:33:09:
                    b1:b1:41:02:5d:4a:39:ab:b3:ae:10:7a:dc:60:df:
                    23:1e:03:f2:d6:c3:5b:20:19:ef:9a:c9:4b:4f:4b:
                    a0:0d:51:16:c7:4c:d3:67:0b:7f:58:e7:9e:00:6f:
                    58:57:35:05:75:06:da:a3:02:36:e8:8b:64:98:c4:
                    db:03:a1:b4:4c:a0:21:d4:43:48:74:f5:ef:0a:8e:
                    c3:22:42:f2:86:31:9b:cb:d1:47:0c:54:ef:5b:41:
                    81:22:80:23:e7:c2:d8:fc:19:c6:ca:7b:9f:3a:ad:
                    19:59:3a:69:fe:43:30:aa:71:45:d9:a6:61:94:12:
                    39:d9:02:14:54:97:0e:88:52:7f:05:dc:22:53:54:
                    2a:07:e1:5e:18:71:2d:23:5d:1e:6e:15:52:d8:5c:
                    30:d5:ce:9d:0e:8f:8e:3b:f5:b1:39:fc:23:2f:8f:
                    17:09:c7:1f:ed:a9:d3:cf:e5:f9:50:03:a1:b7:c1:
                    70:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:09:8C:8F:FB:02:10:9B:63:C0:0B:0F:E8:2D:2A:01:DE:5E:46:86
            X509v3 Authority Key Identifier:
                keyid:C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:ee:08:00:8b:3f:56:67:49:d0:91:9c:86:e4:a4:15:0f:b2:
         a2:ef:d9:69:42:e9:a9:77:11:e0:1d:9b:97:2e:80:4f:68:56:
         b7:e3:cd:65:58:0f:b7:1d:a5:ea:3a:5c:5c:d7:06:7b:db:d6:
         d9:15:6a:9c:e2:07:dc:5d:0c:5d:e4:2d:b1:1d:92:1f:35:ed:
         20:24:5e:3d:d1:d3:e9:ef:20:e8:00:28:3d:53:1a:6b:fa:77:
         84:41:45:74:83:64:35:3a:e0:31:4a:0a:3a:0d:c2:33:ed:7f:
         4d:b4:18:c8:24:e3:cf:0d:d5:b2:00:7b:fd:7a:fc:af:5d:34:
         15:05:db:1c:5b:82:ab:e4:ad:7d:fc:77:42:54:10:81:86:05:
         7e:dd:0c:7b:c4:e3:a4:69:17:65:6e:cd:86:62:c0:c2:6c:76:
         95:c1:ec:4a:2e:4e:fe:bf:82:47:1c:fc:68:6b:a3:f3:ed:d4:
         e4:74:4c:4c:1a:26:ab:78:b5:83:26:49:83:be:db:3b:47:07:
         88:7b:ea:b8:4d:9c:c2:5e:15:e3:ae:e9:ce:ce:03:03:39:3c:
         2c:10:13:b0:8e:f6:5b:cf:0b:29:88:bb:6a:ce:e6:bd:f0:5e:
         5c:93:f1:1b:18:9c:b0:c9:59:e6:57:19:f5:7a:29:eb:02:ee:
         77:b3:16:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:56:39 2026 by rpki-client