Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft
File:                     WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft (raw, json)
Hash identifier:          eJViej+B6EHMCspb+FRTHVO7OMt1EuGdJDIQMLrK4s0=
Subject key identifier:   E4:95:26:E2:6C:3D:5D:F1:25:16:20:7B:76:95:93:6B:A9:F1:9E:08
Authority key identifier: 58:15:E5:EB:E8:AF:7E:70:13:07:02:2A:58:FA:8F:0D:E6:38:56:24
Certificate issuer:       /CN=A91A1366/serialNumber=5815E5EBE8AF7E701307022A58FA8F0DE6385624
Certificate serial:       34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBXl6-ivfnATBwIqWPqPDeY4ViQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft
Manifest number:          30
Signing time:             Tue 21 Jul 2026 10:35:04 +0000
Manifest this update:     Tue 21 Jul 2026 10:35:03 +0000
Manifest next update:     Tue 28 Jul 2026 10:35:03 +0000
Files and hashes:         1: WBXl6-ivfnATBwIqWPqPDeY4ViQ.crl (hash: sBY4V4ObI7R63Y1csJfga+sU1ObgBsfLHJAL8U0MDLI=)
                          2: 857B25F03EDF11F1939FAF8DB6833773.roa (hash: jvx3jLr9s6QjVJZgrGVKD9kTWgR2nMK23/H41dS7lCY=)
                          3: 9DE21B78534111F196833CCBCD833773.roa (hash: 5D8pGtcI0i0PyQLkaDycsxgJHQA/3dZqJfK5aATBRWs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBXl6-ivfnATBwIqWPqPDeY4ViQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 10:35:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1366, serialNumber=5815E5EBE8AF7E701307022A58FA8F0DE6385624
        Validity
            Not Before: Jul 21 10:35:03 2026 GMT
            Not After : Jul 28 10:35:03 2026 GMT
        Subject: CN=6a5f4b57-3b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:c3:1e:27:5b:5c:51:70:20:54:1a:74:7f:6b:
                    66:ba:0d:a2:83:04:72:83:0a:a5:1e:9d:66:c2:8d:
                    49:5a:37:76:8d:33:85:8b:a6:75:6a:1f:6d:a8:cc:
                    08:ca:12:38:f6:57:01:c4:0e:fe:ea:a3:db:4e:33:
                    47:74:d2:58:f6:12:cb:12:a2:9c:f0:d6:4b:fb:fb:
                    2e:dd:dd:22:c6:ef:1d:72:49:38:38:3e:e9:40:89:
                    1d:dc:d0:f1:29:af:30:1c:50:98:f0:6e:4a:8b:4e:
                    14:c1:7b:0e:fa:2f:49:cc:2e:93:b0:98:d4:db:34:
                    5a:1b:b9:3d:5d:f2:37:1a:48:e2:96:f1:43:7d:0f:
                    53:4d:ff:fb:02:f6:2b:1e:d9:71:e8:2a:2c:d1:bb:
                    66:d7:11:5e:6d:fe:3b:0d:99:1f:7d:c3:b7:b0:0a:
                    a2:02:29:a1:89:b3:3a:6a:11:b5:d2:a4:44:6f:23:
                    e9:0a:42:40:d3:29:37:54:68:0c:a0:09:ec:42:37:
                    66:cf:18:d0:dc:f0:af:fc:68:ba:41:01:a7:ce:f7:
                    91:68:d9:8f:68:16:cf:0d:a5:90:77:11:f1:ac:d4:
                    bd:ff:4c:83:50:de:64:c1:db:d8:ae:52:ee:a3:f5:
                    d2:43:4e:91:dd:64:69:95:0b:ab:69:26:5b:1b:3d:
                    76:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:95:26:E2:6C:3D:5D:F1:25:16:20:7B:76:95:93:6B:A9:F1:9E:08
            X509v3 Authority Key Identifier:
                keyid:58:15:E5:EB:E8:AF:7E:70:13:07:02:2A:58:FA:8F:0D:E6:38:56:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBXl6-ivfnATBwIqWPqPDeY4ViQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:b2:60:8d:ea:86:13:7a:2d:80:d4:7c:49:b8:95:a1:44:3b:
         53:b6:66:c0:ca:68:cd:5b:e8:4c:0f:9b:06:6f:5c:a9:52:b9:
         49:55:fc:bb:ef:d6:d0:a7:7b:47:1d:9e:c3:5d:d8:1f:ba:55:
         55:7a:ac:5a:4f:be:ae:20:e9:56:88:cf:00:93:b0:6d:aa:84:
         8a:2e:a6:e7:43:06:9f:00:91:d7:09:ab:5c:52:5f:67:19:41:
         37:ef:ea:3b:63:cd:72:6e:96:61:6b:64:50:fa:c6:3d:73:77:
         93:36:bb:ed:e1:c4:1c:ae:de:71:76:7f:17:93:ed:e1:1b:98:
         ae:63:5f:c1:fd:99:d1:ed:2a:9d:9b:6c:b0:3e:46:e1:31:9c:
         d5:ec:8c:00:07:a0:76:7a:96:c9:8d:62:4a:cc:d2:53:28:dd:
         f8:4c:44:e4:36:a9:70:a9:2f:dc:73:45:29:68:c6:4c:f3:b1:
         ad:10:5a:b5:bc:b5:39:ef:78:5d:50:b5:84:6a:43:49:99:eb:
         b9:3b:6c:4f:9a:ac:eb:c4:36:59:21:7e:1f:3b:7f:49:3a:e3:
         b7:c3:b6:83:1c:0a:28:cb:e7:9f:21:b6:d5:6f:ad:11:15:9a:
         90:0d:1c:f4:c8:c2:40:d0:01:d0:39:76:63:1d:f7:80:d1:51:
         7f:8f:ed:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:10:59 2026 by rpki-client