Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft
File:                     wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft (raw, json)
Hash identifier:          egxqj9/LanfbBwrYugnsmHSYdW4V+x4GUQnkzq3uNZ0=
Subject key identifier:   9F:FD:85:45:76:FC:7F:DE:CF:E8:30:8D:3C:7F:1D:9D:D7:70:5C:4E
Authority key identifier: C0:F7:D8:D6:D5:41:63:76:5F:F6:F3:E2:FB:33:7F:CF:E1:50:72:19
Certificate issuer:       /CN=A91A445C/serialNumber=C0F7D8D6D54163765FF6F3E2FB337FCFE1507219
Certificate serial:       30B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft
Manifest number:          30AA
Signing time:             Sat 04 Jul 2026 15:27:25 +0000
Manifest this update:     Sat 04 Jul 2026 15:27:24 +0000
Manifest next update:     Sat 11 Jul 2026 15:27:24 +0000
Files and hashes:         1: wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl (hash: C7YG0Zt4YXoIqIZftBFRGtv5tsIq/yJaZ/hZTSs244A=)
                          2: 47A21580B6CC11EC98672826C4F9AE02.roa (hash: cztq4WM+cyh6Dv8KVPvE42rjfiHW8NZMn1s0RvbxLJo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl
                          rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 15:27:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12470 (0x30b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A445C, serialNumber=C0F7D8D6D54163765FF6F3E2FB337FCFE1507219
        Validity
            Not Before: Jul  4 15:27:24 2026 GMT
            Not After : Jul 11 15:27:24 2026 GMT
        Subject: CN=6a49265d-2252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fd:e1:99:a7:b4:dd:e0:64:c5:d6:12:ef:5a:
                    c0:c4:31:89:4c:a7:40:09:44:05:91:59:77:e1:29:
                    ff:74:6b:35:a9:a6:68:fa:48:bc:d2:00:f2:a7:46:
                    64:b2:bb:ba:76:3e:09:f0:4b:d9:71:58:5c:dc:bd:
                    46:78:f0:44:24:a3:e8:9b:0f:ee:6b:fd:71:d0:bf:
                    eb:96:ae:67:a2:44:fc:4f:6a:44:22:05:e1:25:c7:
                    05:2e:3c:79:8b:84:f0:88:1c:df:b7:c8:09:2a:01:
                    ac:25:2d:8a:94:90:dc:ae:d2:be:19:98:b9:86:47:
                    2f:8f:5d:e9:c0:b0:17:dd:39:32:92:9d:18:e7:aa:
                    a6:5f:b4:6c:ce:3e:a7:21:cc:76:ad:27:5c:8e:95:
                    4a:b7:10:7c:fe:e9:6b:d6:67:8d:27:d5:0f:d2:cd:
                    35:fe:5b:fc:74:0a:cb:2a:05:b7:90:78:a7:3f:1a:
                    e1:91:b7:6f:7e:a2:5c:3a:eb:eb:4a:8f:24:a1:65:
                    1f:81:d2:94:87:e3:9e:ba:34:18:d5:f9:7e:48:75:
                    c5:e7:0e:24:68:99:8d:de:f4:26:6a:7c:93:c0:ab:
                    b4:95:21:14:7c:0f:4b:df:3a:af:e0:bc:a1:6b:c4:
                    cf:51:2e:54:96:ec:95:b6:fc:c3:82:0e:6c:ad:ec:
                    e5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FD:85:45:76:FC:7F:DE:CF:E8:30:8D:3C:7F:1D:9D:D7:70:5C:4E
            X509v3 Authority Key Identifier:
                keyid:C0:F7:D8:D6:D5:41:63:76:5F:F6:F3:E2:FB:33:7F:CF:E1:50:72:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:b8:f5:a0:d3:11:96:e8:d1:f9:a6:8a:b4:1e:ea:d0:39:e1:
         50:5e:47:c5:72:bc:cf:93:d5:76:b6:73:11:e0:91:44:3e:9b:
         bc:d6:15:39:a8:17:9f:55:59:0a:47:7a:2c:c9:bb:80:4a:9e:
         a7:7a:9a:48:3c:75:e0:05:19:13:45:e4:ea:ee:2d:d8:3a:7a:
         72:60:0d:38:5f:30:c6:e5:3e:e2:5d:d8:02:08:80:bf:f3:85:
         29:6f:cb:d6:b8:e9:b2:e8:ce:5e:13:59:16:8b:99:1c:1f:ef:
         19:13:ab:e7:07:92:ad:ee:6a:03:f5:07:0a:23:f8:13:f6:35:
         f1:c4:e5:50:3a:4f:fa:53:41:37:00:f2:e2:40:7e:ae:99:8e:
         c3:bf:50:1d:f5:7b:43:50:f4:ed:1d:49:36:2a:0b:35:00:b8:
         18:8d:d2:c6:a1:a5:38:ce:83:0c:c4:f6:d5:bf:93:12:1b:30:
         02:06:5f:25:04:7b:e1:af:d3:9f:e1:a9:f8:28:8c:97:81:03:
         65:77:c7:6e:6a:32:8e:d6:fa:66:03:78:52:25:aa:1b:27:12:
         72:36:2f:f9:87:5f:30:ba:3b:29:2e:cd:4c:2c:92:81:7c:b9:
         60:5b:4d:4d:c2:03:cc:42:5d:41:e2:1a:46:95:78:86:97:55:
         df:18:3c:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICMLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ0NUMxMTAvBgNVBAUTKEMwRjdEOEQ2RDU0MTYzNzY1RkY2RjNFMkZCMzM3RkNG
RTE1MDcyMTkwHhcNMjYwNzA0MTUyNzI0WhcNMjYwNzExMTUyNzI0WjAYMRYwFAYD
VQQDEw02YTQ5MjY1ZC0yMjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAov3hmae03eBkxdYS71rAxDGJTKdACUQFkVl34Sn/dGs1qaZo+ki80gDyp0Zk
sru6dj4J8EvZcVhc3L1GePBEJKPomw/ua/1x0L/rlq5nokT8T2pEIgXhJccFLjx5
i4TwiBzft8gJKgGsJS2KlJDcrtK+GZi5hkcvj13pwLAX3Tkykp0Y56qmX7Rszj6n
Icx2rSdcjpVKtxB8/ulr1meNJ9UP0s01/lv8dArLKgW3kHinPxrhkbdvfqJcOuvr
So8koWUfgdKUh+OeujQY1fl+SHXF5w4kaJmN3vQmanyTwKu0lSEUfA9L3zqv4Lyh
a8TPUS5UluyVtvzDgg5srezlnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ/9hUV2
/H/ez+gwjTx/HZ3XcFxOMB8GA1UdIwQYMBaAFMD32NbVQWN2X/bz4vszf8/hUHIZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQ1Qy81QThBRDA4ODBC
MTgxMUUzQjYzN0M2Nzk1OTExRUEzMi93UGZZMXRWQlkzWmY5dlBpLXpOX3otRlFj
aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dQZlkxdFZCWTNaZjl2UGktek5fei1GUWNoay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDQ1Qy81QThBRDA4ODBCMTgxMUUzQjYzN0M2Nzk1OTExRUEzMi93UGZZMXRWQlkz
WmY5dlBpLXpOX3otRlFjaGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVrj1oNMRlujR+aaKtB7q0DnhUF5HxXK8z5PVdrZzEeCRRD6bvNYVOagXn1VZ
Ckd6LMm7gEqep3qaSDx14AUZE0Xk6u4t2Dp6cmANOF8wxuU+4l3YAgiAv/OFKW/L
1rjpsujOXhNZFouZHB/vGROr5weSre5qA/UHCiP4E/Y18cTlUDpP+lNBNwDy4kB+
rpmOw79QHfV7Q1D07R1JNioLNQC4GI3SxqGlOM6DDMT21b+TEhswAgZfJQR74a/T
n+Gp+CiMl4EDZXfHbmoyjtb6ZgN4UiWqGycScjYv+YdfMLo7KS7NTCySgXy5YFtN
TcIDzEJdQeIaRpV4hpdV3xg8NQ==
-----END CERTIFICATE-----
Generated at Sun Jul 5 07:55:23 2026 by rpki-client