Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
File:                     WdWIElpxZphzjR0enm2KaNdAmyc.mft (raw, json)
Hash identifier:          QCFCgfURivzl7Ksmgi1gt8kUhtXDAa7a7jereELnqEE=
Subject key identifier:   50:51:AA:2A:6A:4B:B3:61:B6:98:1D:8D:2D:60:32:06:D1:08:26:12
Authority key identifier: 59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27
Certificate issuer:       /CN=A91A27AB/serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
Certificate serial:       027E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
Manifest number:          025E
Signing time:             Sun 23 Aug 2026 02:17:08 +0000
Manifest this update:     Sun 23 Aug 2026 02:17:07 +0000
Manifest next update:     Sun 30 Aug 2026 02:17:07 +0000
Files and hashes:         1: WdWIElpxZphzjR0enm2KaNdAmyc.crl (hash: GI1R55pOOzPwWw/rgrYG8Jj2sEfACC/5DVsD4maX/0Y=)
                          2: E7AA3C5A37D911F1B36666D1C4833773.roa (hash: siCvmhGtqnY35C3NOh4YSIg2JyFDveLmbf9cMd4ZK0U=)
                          3: 74444F50490E11EFA7EAAA70C4F9AE02.roa (hash: NMrm1g9FM9NJPr1lYfQZFfpW90lnT17RE5GP7Fw1OY4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl
                          rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Aug 2026 02:17:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 638 (0x27e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A27AB, serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
        Validity
            Not Before: Aug 23 02:17:07 2026 GMT
            Not After : Aug 30 02:17:07 2026 GMT
        Subject: CN=6a8a5824-0492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:95:31:95:49:60:97:8c:23:c3:a3:41:c3:4e:
                    b3:cb:2e:44:03:78:08:da:05:27:f2:ba:02:7d:a2:
                    25:b8:16:97:2b:4a:6a:13:09:03:71:85:4e:bf:92:
                    49:41:d7:cc:a4:5c:c3:55:d3:bb:97:6b:96:46:c9:
                    ea:dd:ec:b8:c0:2c:68:ed:96:50:72:71:5e:98:73:
                    7a:82:0f:b1:2f:f3:7a:7c:bb:29:38:2e:ff:45:67:
                    62:a8:5e:26:e4:84:a7:bb:6e:63:8e:c7:c8:4c:ae:
                    cd:35:53:2a:2a:c6:7f:9c:79:73:e0:96:c5:ff:c5:
                    6c:f0:94:2f:6b:b5:12:7e:06:a7:88:0a:53:92:27:
                    6e:32:be:d1:66:e0:4b:d9:49:5a:68:1a:a2:d2:30:
                    55:96:90:71:6e:bb:cb:b9:89:d2:49:a0:30:9d:3c:
                    30:8c:01:ff:13:57:51:22:0a:e1:32:ee:a1:cf:5c:
                    8c:24:e7:e1:af:99:a0:c1:16:7a:23:c2:6a:f9:b8:
                    09:7f:dd:4c:6c:34:43:b3:99:f3:08:bd:6f:42:5f:
                    53:a2:5a:7a:a1:b0:47:9e:8e:b8:c6:92:47:26:2f:
                    7d:73:55:9b:c8:b0:38:fd:4d:32:e0:58:60:98:92:
                    74:17:d4:af:ef:dc:08:a3:0f:fb:f9:10:02:36:ea:
                    10:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:51:AA:2A:6A:4B:B3:61:B6:98:1D:8D:2D:60:32:06:D1:08:26:12
            X509v3 Authority Key Identifier:
                keyid:59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:2e:24:3a:8c:56:75:02:9c:e5:c1:29:b2:47:89:94:fc:ed:
         25:a3:2d:97:f9:0d:49:c9:e9:7a:03:e1:22:fc:ad:74:5d:15:
         dd:bd:2a:29:34:20:80:5e:f9:9c:5b:3b:7a:68:9d:0d:85:46:
         13:36:94:c3:51:53:89:fb:49:ea:b5:e0:fd:56:25:23:bc:98:
         f9:f7:58:8b:32:a1:e8:2a:ed:61:57:e8:c6:01:be:64:49:74:
         a4:ce:1f:c2:2b:96:62:65:30:4e:79:a6:34:59:b3:64:8e:82:
         8c:ba:57:4f:13:e0:fc:16:b4:8d:d1:5b:f8:30:8c:54:2d:2f:
         ec:2e:59:1c:1c:d5:3d:b7:de:56:0a:c7:6f:10:5e:2b:ef:07:
         04:fb:c2:a5:57:68:d4:70:e4:42:54:8c:37:ce:9e:66:9b:2f:
         a5:34:15:d3:bd:cd:18:7f:57:90:9b:17:2a:ea:17:1e:54:f7:
         37:65:60:83:17:f1:55:ab:5c:0e:86:70:af:22:52:ba:79:52:
         61:4c:7a:c9:09:b7:3c:b4:5f:72:50:fd:f6:bd:31:e7:43:b1:
         07:d0:6c:be:f1:20:38:97:a9:10:c9:63:18:99:50:a4:18:78:
         dc:7d:56:10:93:03:2c:ce:eb:41:04:a7:f5:95:5c:ef:1d:bf:
         7c:4d:1f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 20:59:24 2026 by rpki-client