Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
File:                     s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft (raw, json)
Hash identifier:          k9rW34QTGkwk7Q9oqkYLpTTiwWysYmAqdyqyJOAsiF4=
Subject key identifier:   9F:07:87:E7:6C:A1:D8:4D:0C:4C:75:5A:3D:41:50:4B:9C:69:1C:F0
Authority key identifier: B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8
Certificate issuer:       /CN=A91A381A/serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8
Certificate serial:       0201
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
Manifest number:          01F3
Signing time:             Tue 23 Jun 2026 03:30:20 +0000
Manifest this update:     Tue 23 Jun 2026 03:30:19 +0000
Manifest next update:     Tue 30 Jun 2026 03:30:19 +0000
Files and hashes:         1: s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl (hash: LqWidUwxSUMFIEJtyNAzglz86sIKW8vtQOtj3RvI7Is=)
                          2: EBB7A41AB4DA11EEBD650259C4F9AE02.roa (hash: SDwmGnNA62CDBnu6SIeNZtXcNKrSVhcMHLtnwpsVMtg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl
                          rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 03:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513 (0x201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A381A, serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8
        Validity
            Not Before: Jun 23 03:30:19 2026 GMT
            Not After : Jun 30 03:30:19 2026 GMT
        Subject: CN=6a39fdcb-95b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:30:54:4d:8e:93:83:0e:f4:e9:c6:20:10:27:
                    f5:b5:c1:c7:99:e8:68:b2:40:a4:a4:20:49:73:c7:
                    47:a5:05:a4:cc:6e:5d:1e:41:47:51:98:50:52:39:
                    f0:e0:da:d2:23:0d:90:03:2d:0d:b9:5d:59:1a:b3:
                    68:d8:b4:92:22:15:a6:f8:e6:34:4f:fe:ad:e0:0c:
                    6b:3c:3f:74:70:5a:ee:36:63:49:e2:5e:4e:99:89:
                    b8:d0:c0:5e:c2:7e:c8:0f:85:67:2c:79:d6:58:af:
                    f8:50:7e:85:24:b5:67:0a:e6:ce:ab:65:d0:a8:4f:
                    bf:f0:7d:05:ee:fc:02:50:6b:6f:28:d8:6d:30:0c:
                    a0:41:2e:52:82:5c:2a:c0:ed:36:5a:7e:5c:cd:a6:
                    c1:c7:02:82:18:ad:95:2c:24:a5:40:de:c9:06:6b:
                    fe:28:c3:28:1e:7a:28:0e:72:24:bc:bd:3e:85:8c:
                    17:db:49:07:f2:d0:3c:8c:88:0b:15:f8:5b:de:34:
                    2a:c2:00:69:dc:57:34:b5:38:f0:f9:c5:59:7e:af:
                    68:5a:c6:4e:46:44:09:42:4a:36:7b:c5:dd:07:87:
                    35:2d:6d:16:3a:ce:9c:ef:e3:92:75:62:8e:c9:a9:
                    b6:6b:94:41:f1:59:c3:fc:3d:2c:63:80:87:95:05:
                    3b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:07:87:E7:6C:A1:D8:4D:0C:4C:75:5A:3D:41:50:4B:9C:69:1C:F0
            X509v3 Authority Key Identifier:
                keyid:B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:17:ee:8f:79:d3:eb:92:08:51:8c:4f:64:bc:c9:3c:52:3b:
         34:2d:a7:43:0f:58:7c:c3:24:34:d5:e7:ec:90:d2:03:20:c0:
         a0:99:2c:97:76:31:86:4c:a9:33:2b:38:55:ae:86:c0:6a:d6:
         8b:d2:11:c4:77:4f:79:da:13:94:86:87:1f:ea:cb:35:39:5e:
         c3:16:c9:52:9b:fa:c5:e0:69:1a:7f:1a:91:a8:3e:b6:bf:61:
         94:26:cc:77:52:61:a8:7a:6d:eb:7e:1e:67:9e:34:cb:be:46:
         bc:68:9e:1d:d7:2c:60:35:96:c5:cc:7c:88:7b:90:13:ae:52:
         13:27:31:78:34:78:d6:d7:a7:16:5d:f3:4a:b1:ea:c0:a5:bd:
         2e:54:82:c4:58:87:db:bb:ae:0c:41:69:17:fa:f3:41:0b:fb:
         c7:3a:fd:22:cb:4e:dc:39:08:94:e7:a5:f8:d2:88:0a:70:17:
         eb:db:2c:5a:04:83:d1:dd:78:b8:47:f0:8b:d9:ca:4e:42:cc:
         c2:51:d7:17:c4:36:fc:59:2b:1b:56:aa:0a:78:43:43:7d:18:
         b9:61:a8:ca:2a:78:14:ae:04:04:f5:b1:e3:9e:13:11:82:92:
         41:3e:e9:e4:1f:47:4d:44:c8:ba:ff:3a:d4:a1:62:f3:48:f1:
         5f:1d:a3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:28:51 2026 by rpki-client