Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
File:                     W6jQXcmakxBGLGPF0CafXoheSJ0.mft (raw, json)
Hash identifier:          O/Aj1IOsoWAy0BbVKGVp2NRYLCY7q7TPMeBcmH62FUQ=
Subject key identifier:   9D:00:51:5F:6C:F1:F6:0A:9F:AC:6F:62:16:B6:3E:FE:17:75:13:6C
Authority key identifier: 5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D
Certificate issuer:       /CN=A91789F9/serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
Certificate serial:       03F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
Manifest number:          03E7
Signing time:             Tue 23 Jun 2026 00:35:10 +0000
Manifest this update:     Tue 23 Jun 2026 00:35:10 +0000
Manifest next update:     Tue 30 Jun 2026 00:35:10 +0000
Files and hashes:         1: W6jQXcmakxBGLGPF0CafXoheSJ0.crl (hash: 6nQzmuN33+GuGiB+e3dvz3cFt/nLcWK2oghe+i9pR/w=)
                          2: 40C76F3ACC1611EC80603209C4F9AE02.roa (hash: xA0rurA/PEYXlJ3WLFAqJrvgYkaEX5VuqrE31iWX5bs=)
                          3: 41789B66CC1611EC80603209C4F9AE02.roa (hash: x8CNlILI4xwGzQizPMapiMVh5w4V5MvV0nMmJ++GLls=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 00:35:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1013 (0x3f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91789F9, serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
        Validity
            Not Before: Jun 23 00:35:10 2026 GMT
            Not After : Jun 30 00:35:10 2026 GMT
        Subject: CN=6a39d4be-95c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:04:bc:12:fb:ba:db:35:a4:aa:97:eb:66:c2:
                    ef:2f:6f:22:3d:a7:1a:d0:e0:36:0c:95:5a:7b:6d:
                    32:19:12:f3:82:3a:5e:8b:08:e7:82:d3:81:3b:63:
                    84:22:4f:75:a9:5a:2a:a6:b5:9e:4e:51:75:dd:9a:
                    8d:89:0d:e0:bb:04:ca:7b:e5:c3:11:57:31:cf:b2:
                    77:65:fa:3a:39:d0:09:86:97:4b:6d:76:42:ac:08:
                    46:bb:6b:47:74:02:63:20:97:47:aa:f4:25:9d:a9:
                    0a:34:4b:0e:9f:99:ec:32:5a:ef:f8:ca:da:dd:71:
                    2f:9d:33:47:98:aa:e9:ea:bf:87:d6:4b:ec:f1:dc:
                    68:4a:2d:37:75:a6:9d:3c:5a:fd:6a:40:38:22:ba:
                    d1:4c:73:24:fc:ec:e8:9d:2b:ef:72:bf:ea:f2:66:
                    a3:cd:73:96:b7:ee:df:c6:13:0f:16:f6:47:52:7d:
                    a4:ec:d4:b1:00:1a:88:b0:bf:b1:6d:22:e3:5e:d3:
                    29:3a:d7:c8:0b:25:f3:6a:a7:fc:48:40:1b:79:72:
                    84:d6:7b:5a:87:93:e6:cf:91:5d:15:50:46:92:e5:
                    17:c6:a2:34:c9:8b:1d:95:45:3a:ef:f1:04:3e:e5:
                    a1:e6:e7:15:c6:0c:e8:3d:7c:17:c7:7c:5f:d1:fd:
                    77:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:00:51:5F:6C:F1:F6:0A:9F:AC:6F:62:16:B6:3E:FE:17:75:13:6C
            X509v3 Authority Key Identifier:
                keyid:5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:1a:c5:45:e6:2d:fc:4d:67:e5:b9:8d:a9:e0:75:b0:26:1b:
         fb:7f:46:c7:f8:6f:62:d0:4a:6d:6f:6c:f3:6a:03:1d:d1:2b:
         94:b5:79:04:4d:4f:36:5e:75:57:94:63:82:ef:4a:71:52:63:
         22:ad:f1:44:d8:a4:7b:ce:ac:b4:4d:d0:c0:73:e1:6f:de:58:
         68:b5:d3:0c:f0:7a:c9:b1:99:f4:2b:a6:f8:8c:75:72:76:b5:
         5c:ea:e8:84:fc:f2:a5:25:ba:8d:0b:04:ad:9b:77:e9:91:65:
         36:5c:91:a5:5e:74:a6:b7:dd:92:e6:e7:06:dc:cc:ac:ad:01:
         24:15:ed:79:10:ba:c5:55:7c:ae:fc:a6:d2:97:9e:48:e2:10:
         34:c5:c3:27:d3:04:2c:92:d9:7e:64:b4:d1:d3:0c:56:2d:fc:
         d1:31:50:44:89:98:fe:a6:8a:ff:cc:de:30:aa:a3:45:97:33:
         15:b2:02:4e:d8:d2:84:94:c3:02:4b:51:01:87:46:11:d2:e9:
         75:e2:e7:59:fc:b3:94:cf:10:f5:bc:af:5f:cc:a0:f0:bd:ef:
         20:56:83:4a:2f:d1:f9:af:c6:ce:0f:72:59:61:22:53:d9:00:
         f6:54:6b:f9:5e:8f:00:e7:a4:e2:d5:5c:fb:36:12:77:ac:3b:
         12:1d:1e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:14:13 2026 by rpki-client