Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft
File:                     WWtkT4ORAfVZi9Egyt6VSFGgzko.mft (raw, json)
Hash identifier:          foqTRnmQWEF0nGq69R1muD7FcWhYQ7Al/fBC2e0r0as=
Subject key identifier:   F8:CA:D2:D9:6F:25:4C:D4:BB:42:D5:00:F7:AD:3A:30:57:87:6E:14
Authority key identifier: 59:6B:64:4F:83:91:01:F5:59:8B:D1:20:CA:DE:95:48:51:A0:CE:4A
Certificate issuer:       /CN=A91AC1CF/serialNumber=596B644F839101F5598BD120CADE954851A0CE4A
Certificate serial:       4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWtkT4ORAfVZi9Egyt6VSFGgzko.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft
Manifest number:          4C
Signing time:             Wed 05 Aug 2026 10:04:02 +0000
Manifest this update:     Wed 05 Aug 2026 10:04:01 +0000
Manifest next update:     Wed 12 Aug 2026 10:04:01 +0000
Files and hashes:         1: WWtkT4ORAfVZi9Egyt6VSFGgzko.crl (hash: ZexEgKYjEis4QVt+s2xjv+V79cw/vZreu3R4Jbeg6vk=)
                          2: 840FB8CC1DAE11F1AA3EBAC03D3D8C67.roa (hash: r5BB+japYC6seEdkVZLK22Dexuxs6mCJDX2FzRf3yv4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.crl
                          rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWtkT4ORAfVZi9Egyt6VSFGgzko.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Aug 2026 10:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC1CF, serialNumber=596B644F839101F5598BD120CADE954851A0CE4A
        Validity
            Not Before: Aug  5 10:04:01 2026 GMT
            Not After : Aug 12 10:04:01 2026 GMT
        Subject: CN=6a730a92-b7ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:64:26:5d:52:7a:44:34:f8:77:33:5a:25:2e:
                    c1:5d:ae:81:bc:6c:8d:ef:35:67:06:c4:73:db:b1:
                    1e:2f:50:22:1f:b0:4c:fa:b1:cb:1c:18:5a:cf:86:
                    f3:aa:ec:5b:18:bd:1a:ee:23:f6:58:31:fc:fc:b6:
                    01:b3:42:0d:c1:b1:61:7b:91:a0:0d:b2:b4:09:bf:
                    d5:45:f2:a8:18:a6:c2:23:ed:7b:66:ff:0b:50:1b:
                    62:42:14:36:52:8e:9c:30:bb:66:70:84:34:75:68:
                    5e:b3:a1:df:47:e7:70:00:e2:be:c0:df:68:e8:a8:
                    ad:52:c9:3c:04:88:f8:4f:59:3f:0f:ab:50:fa:44:
                    08:c4:41:44:7d:43:44:a9:95:a2:dd:9d:b2:6e:80:
                    b1:37:ea:c7:c2:f6:8b:1a:34:f5:d4:22:cc:39:49:
                    18:96:41:ae:a4:87:a6:38:3b:11:07:5b:3c:89:31:
                    56:3b:c3:bf:05:28:28:7b:d9:19:43:26:10:6f:14:
                    4d:fa:a1:b4:01:9c:a2:fc:65:6c:8f:26:0b:67:d2:
                    b2:f4:2a:f5:cb:bb:23:69:a7:24:c2:8b:d6:4a:29:
                    7a:75:ac:bb:9e:70:6d:4d:90:3b:f2:30:0d:75:b4:
                    e2:da:70:73:c7:6b:f0:d7:2e:69:76:78:f0:5b:12:
                    7b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CA:D2:D9:6F:25:4C:D4:BB:42:D5:00:F7:AD:3A:30:57:87:6E:14
            X509v3 Authority Key Identifier:
                keyid:59:6B:64:4F:83:91:01:F5:59:8B:D1:20:CA:DE:95:48:51:A0:CE:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWtkT4ORAfVZi9Egyt6VSFGgzko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:e8:22:a0:ee:2e:9a:c3:f3:3f:66:54:a6:b8:fc:b3:db:67:
         7b:ec:49:6a:bf:5d:cc:53:b4:c3:b4:5e:a9:99:ac:d5:cb:ae:
         2e:b2:b8:21:e3:61:54:bf:8b:91:40:e6:59:8c:58:df:e7:f3:
         e6:53:57:ed:36:9e:6f:45:2f:da:9d:a7:20:48:2f:4b:c3:7b:
         ac:10:3e:ec:ff:93:b5:eb:35:7a:3e:46:b1:ab:8f:8b:3c:a9:
         e1:f4:73:f5:3d:de:f4:1e:82:f2:d6:19:81:87:c0:a4:19:cb:
         46:73:13:db:74:d4:c8:4d:b9:6b:af:f5:5b:69:e4:4a:d5:43:
         9e:13:bc:96:0f:11:6a:ca:ee:a5:c4:fa:5d:a4:52:f7:5b:ae:
         44:02:d7:5c:63:a7:7d:ab:49:40:14:7d:16:4a:d5:12:1b:96:
         31:28:18:aa:20:26:c9:99:33:46:06:8d:a6:de:af:22:9f:5d:
         29:5c:db:a0:1d:fb:1e:cd:d9:e1:d4:de:b2:08:87:ed:97:55:
         73:06:0f:67:0c:7e:76:69:5e:21:bd:86:01:a8:9a:05:fd:13:
         09:1f:43:b7:b8:66:63:49:fc:b7:dd:5c:24:50:98:18:60:95:
         7e:de:7f:d7:fe:5c:2d:63:b1:a0:f9:6c:d2:cd:f3:dc:82:9f:
         b0:0c:8e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 22:12:39 2026 by rpki-client