Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft
File:                     wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft (raw, json)
Hash identifier:          1gD9NxTm4DWMaZj7HJiiIlEIm982opXxyje7gYg0Ofc=
Subject key identifier:   C9:45:AA:7E:90:AE:C2:F3:80:81:D4:86:B2:C7:87:44:8C:BA:A4:AB
Authority key identifier: C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED
Certificate issuer:       /CN=A91AA618/serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED
Certificate serial:       0123
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft
Manifest number:          0118
Signing time:             Mon 01 Jun 2026 05:36:41 +0000
Manifest this update:     Mon 01 Jun 2026 05:36:40 +0000
Manifest next update:     Mon 08 Jun 2026 05:36:40 +0000
Files and hashes:         1: wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl (hash: Ik7RNac9asBpUq+XLyQmxOeaYaqrCJszFHezx4/aN8g=)
                          2: 1C236FDEE51411EFA6CE3C1EC4F9AE02.roa (hash: TIsKjJzrbOzkAiPTqrGyxy2WFsJF/otDJhibNIRui4Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl
                          rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 05:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA618, serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED
        Validity
            Not Before: Jun  1 05:36:40 2026 GMT
            Not After : Jun  8 05:36:40 2026 GMT
        Subject: CN=6a1d1a68-d74e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b1:89:ba:35:18:82:68:3f:f3:61:31:cf:e0:
                    4d:3d:d7:aa:5f:f4:11:a6:81:59:21:c8:0b:f7:28:
                    6e:11:aa:f6:0e:ee:a1:4a:d4:ff:26:12:af:b5:e2:
                    ce:17:91:ee:e3:fd:af:ff:cf:aa:0c:41:9d:92:7d:
                    2b:2e:fe:ea:72:05:72:c1:2b:d0:23:07:2b:38:ec:
                    f0:47:9f:77:1d:71:77:40:e4:97:57:ae:2d:25:70:
                    b9:34:8e:e4:0a:dc:f9:25:62:e8:70:45:26:74:62:
                    6e:af:87:91:20:3e:9a:79:0c:ee:95:64:3d:94:0a:
                    9b:ab:6f:87:34:c9:03:1c:3d:e0:4a:28:d2:76:08:
                    56:47:95:68:4f:90:8a:b0:41:26:7b:11:c8:f7:dc:
                    9c:d7:47:f9:13:75:a7:dc:6c:26:0a:f0:7b:16:f9:
                    48:6b:f5:df:bc:7c:3c:69:4d:30:ad:7d:28:d4:7d:
                    8f:a8:76:4b:77:3a:a0:e2:0d:5d:cd:10:1b:b7:bb:
                    4e:c9:a8:d8:2d:4f:52:e6:5a:8d:60:e3:a5:6b:14:
                    09:58:f6:f4:d7:f6:04:3d:af:51:a7:7b:1b:c0:9b:
                    23:e3:20:21:30:91:19:10:86:d0:d6:8c:54:4a:a9:
                    94:1e:fe:24:e4:5c:36:fa:f4:64:25:1a:f0:51:9a:
                    02:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:45:AA:7E:90:AE:C2:F3:80:81:D4:86:B2:C7:87:44:8C:BA:A4:AB
            X509v3 Authority Key Identifier:
                keyid:C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e8:b7:b5:ab:2c:80:88:45:39:d8:82:f9:56:be:a5:d9:34:
         6b:6b:1b:21:18:17:a4:ad:87:25:8d:70:87:b5:0a:d1:94:46:
         a4:81:ef:bb:96:c3:00:98:2c:6a:36:e5:63:8a:13:de:eb:3b:
         31:6b:e3:16:23:78:79:72:42:21:d7:f3:2e:e7:0f:94:c4:07:
         8a:d5:58:2e:a2:f0:e5:dc:c3:cd:c5:ea:a6:e2:97:8e:5c:30:
         47:97:0a:2a:2f:33:f4:6e:eb:5d:e0:f5:27:a8:64:08:c4:15:
         56:e5:39:42:87:73:59:7d:19:d0:36:c5:ba:74:d1:9f:58:c1:
         1b:66:61:aa:b3:25:da:d5:c9:ce:e5:f7:6d:02:c5:6e:68:60:
         4d:5d:a8:fe:4f:ec:e2:88:15:b7:dc:42:37:93:50:dc:64:cc:
         fd:1e:ae:51:7b:eb:80:7b:52:73:2f:24:74:dc:be:d1:d4:b4:
         c7:85:a0:99:39:6f:ce:d2:af:9d:3c:a9:e5:1f:65:3a:2e:c5:
         07:a9:c4:e8:5c:ef:3c:83:18:da:3d:c9:29:fa:0d:67:71:d1:
         c9:8c:52:eb:24:dc:72:fc:a4:d8:b8:a7:dd:60:68:5c:6c:b2:
         66:7b:46:c8:83:b7:51:df:42:64:9d:dd:ad:f3:6e:51:e8:5e:
         a0:97:94:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:41:14 2026 by rpki-client