Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft
File:                     wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft (raw, json)
Hash identifier:          8mY0YsbOP7b+3bSwYtNouLV1P9cCbFgw7MIamFq7Wik=
Subject key identifier:   85:29:0C:B1:0F:FF:A2:CE:58:DE:2A:37:DF:22:1E:BD:BA:76:CA:AA
Authority key identifier: C0:F7:D8:D6:D5:41:63:76:5F:F6:F3:E2:FB:33:7F:CF:E1:50:72:19
Certificate issuer:       /CN=A91A445C/serialNumber=C0F7D8D6D54163765FF6F3E2FB337FCFE1507219
Certificate serial:       30CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft
Manifest number:          30C1
Signing time:             Tue 18 Aug 2026 15:30:34 +0000
Manifest this update:     Tue 18 Aug 2026 15:30:33 +0000
Manifest next update:     Tue 25 Aug 2026 15:30:33 +0000
Files and hashes:         1: wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl (hash: aLzcM0XiAHLiTkRvgwdQBmjxppVZjWlzuJC0axJpv7o=)
                          2: 47A21580B6CC11EC98672826C4F9AE02.roa (hash: cztq4WM+cyh6Dv8KVPvE42rjfiHW8NZMn1s0RvbxLJo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl
                          rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 15:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12493 (0x30cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A445C, serialNumber=C0F7D8D6D54163765FF6F3E2FB337FCFE1507219
        Validity
            Not Before: Aug 18 15:30:33 2026 GMT
            Not After : Aug 25 15:30:33 2026 GMT
        Subject: CN=6a847a9a-108c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:66:4e:0e:a4:2c:db:f6:eb:6a:03:58:58:cc:
                    bd:ba:09:c9:25:84:2a:a2:8b:b2:97:1a:e8:c5:b0:
                    43:3d:17:e1:1f:fd:71:29:a1:2b:fc:ec:77:ce:a9:
                    71:fb:ef:9a:0b:9b:4c:e4:c6:c7:ca:09:3c:ea:46:
                    06:f9:77:96:ae:de:8f:c4:22:c0:92:cc:46:9b:d1:
                    ba:b8:6b:b6:ff:5f:7e:22:ca:4d:14:af:ed:3b:a3:
                    77:99:98:03:58:31:5f:63:db:a6:78:3f:30:a0:dc:
                    20:9f:f1:bc:07:0f:53:7a:44:ca:ae:aa:ec:94:6e:
                    ae:c4:0c:49:f9:56:31:6b:86:24:d2:b4:d2:77:a1:
                    60:d2:95:42:f1:56:f5:be:72:b0:ec:3e:17:19:76:
                    c2:3a:86:66:88:ae:1a:ca:ec:f1:fb:54:0b:53:b0:
                    0e:9d:27:aa:78:42:ff:e3:84:d5:ac:43:50:9b:b0:
                    41:b3:54:04:dc:aa:56:23:d1:8c:88:7d:18:fa:f4:
                    ef:c9:f7:d4:a5:27:2f:6b:a4:a8:82:c0:14:f0:90:
                    b0:f4:8f:53:8f:e6:4e:8d:8d:10:8c:10:a1:ef:c3:
                    76:82:56:24:15:a0:f5:63:51:7f:0d:1d:d1:fd:fc:
                    f9:75:95:af:02:5c:e4:a6:fd:5e:66:a7:7f:9b:80:
                    77:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:29:0C:B1:0F:FF:A2:CE:58:DE:2A:37:DF:22:1E:BD:BA:76:CA:AA
            X509v3 Authority Key Identifier:
                keyid:C0:F7:D8:D6:D5:41:63:76:5F:F6:F3:E2:FB:33:7F:CF:E1:50:72:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ce:ed:fc:1c:1a:47:52:d5:92:96:d6:1f:48:e0:79:bb:41:
         d9:3d:30:26:56:8d:fb:a4:29:ae:ec:90:81:3c:eb:b5:f2:59:
         82:8a:55:bf:ee:1e:ca:0d:00:85:40:ac:da:43:ef:c7:9b:41:
         57:2d:e5:27:de:fb:fb:b3:f7:cb:74:4c:ec:94:07:14:6d:17:
         38:bd:62:fb:b9:98:14:c7:38:45:99:38:7f:6b:f6:28:09:d4:
         b7:34:c6:39:dd:1d:ad:a2:68:32:5f:6a:68:51:dd:a5:08:90:
         3f:2b:f1:73:2a:11:18:5c:2f:19:78:97:49:5d:25:42:e7:90:
         ab:f9:5c:5c:1b:06:15:38:e6:2c:89:3c:90:f4:55:5b:52:0a:
         44:c6:78:09:f9:22:9c:17:7c:d9:65:ba:2a:76:ef:6f:64:53:
         92:aa:2f:52:9c:69:e4:09:c4:ac:a8:d5:a9:d7:d2:76:ef:1a:
         aa:25:74:2c:21:c2:ba:4c:45:0d:66:2c:fc:be:e6:25:0d:2b:
         1e:97:24:e7:e5:74:aa:17:0e:14:19:3c:9e:ae:19:c7:a2:1a:
         6a:6a:ce:2e:60:a3:3c:08:41:8b:e6:a2:68:a3:f6:45:df:77:
         16:3b:76:29:48:90:c0:43:92:01:07:a4:a9:ce:bd:cc:39:3a:
         2f:c2:36:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:34 2026 by rpki-client