Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
File:                     WHRSDaeB94Db1xDULIQcE6etF1c.mft (raw, json)
Hash identifier:          TJTRYQcsbHhN71y4IBSe/53qArCDZHmpqDJvOsEuXGc=
Subject key identifier:   B1:52:94:E8:06:70:69:8B:E8:23:8B:87:5D:37:4D:B9:30:84:C2:B8
Authority key identifier: 58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57
Certificate issuer:       /CN=A91AF2CD/serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757
Certificate serial:       02AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
Manifest number:          028D
Signing time:             Mon 03 Aug 2026 03:01:59 +0000
Manifest this update:     Mon 03 Aug 2026 03:01:59 +0000
Manifest next update:     Mon 10 Aug 2026 03:01:59 +0000
Files and hashes:         1: WHRSDaeB94Db1xDULIQcE6etF1c.crl (hash: HNWi4+QeP6UXsKS2/kMlCyWw8b/f3esBur16BamTa3M=)
                          2: CF85B73C74F011F0847A5D0DC4F9AE02.roa (hash: cUxWIw+2+FfPLU6N+/hsAHJj5YAVgVl5pfPZZohiSqE=)
                          3: B412DC700EC011EE8C18290AC4F9AE02.roa (hash: 3CMrCqDOXwvVF6x32R2mcswD2RmCJaBSI7Dvz74AhRA=)
                          4: 81E1EBD44E9A11F1929EC503BD833773.roa (hash: qYTpxudTzffVviQso3oftFlC1BIwZNisWMGuaS7SjgQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl
                          rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Aug 2026 03:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 686 (0x2ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF2CD, serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757
        Validity
            Not Before: Aug  3 03:01:59 2026 GMT
            Not After : Aug 10 03:01:59 2026 GMT
        Subject: CN=6a7004a7-040d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:03:54:c3:b0:1e:47:90:f6:69:94:fa:b3:da:
                    fd:6b:63:f1:3b:00:d3:1b:0f:4a:01:b5:29:8b:1f:
                    f7:2c:a0:40:e0:17:3f:e1:48:6c:f2:ce:d8:8a:91:
                    f9:6e:ed:6a:96:64:6c:b9:49:ae:50:ee:b0:20:16:
                    94:8f:1f:cc:b5:5d:15:58:e6:2d:89:86:95:d0:c1:
                    75:90:ee:1d:e2:40:df:ed:27:4d:30:a6:4f:96:a0:
                    da:2c:79:cf:c0:da:88:51:25:bd:e1:42:0c:41:dc:
                    69:de:60:35:ee:31:8f:fa:7d:c2:a3:9d:4b:1f:67:
                    02:17:92:e1:e8:e5:8b:89:92:bc:30:cd:04:96:dd:
                    be:ce:b0:bc:9d:28:50:91:78:73:78:80:5f:5f:ba:
                    65:c8:6a:3b:59:82:07:8c:5b:a9:58:56:c4:25:84:
                    34:bf:75:c8:20:37:a5:32:1a:33:18:5a:42:79:27:
                    4b:74:14:d4:0e:34:2f:1a:72:7b:4b:73:8d:e4:ea:
                    7a:b9:17:da:b2:7b:e5:da:0f:9f:49:7e:13:45:47:
                    ac:b2:16:56:d5:a0:94:f3:a8:0e:f6:31:12:b2:8b:
                    0a:0d:bc:01:dc:6e:b2:d5:e2:6f:a1:77:60:b3:e0:
                    e6:bb:29:36:d9:19:18:15:b8:3d:ae:e1:44:b5:8a:
                    2b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:52:94:E8:06:70:69:8B:E8:23:8B:87:5D:37:4D:B9:30:84:C2:B8
            X509v3 Authority Key Identifier:
                keyid:58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:bf:2e:44:63:e6:a8:7a:2f:a2:ca:d3:02:cf:f1:f0:82:c2:
         b3:ec:a0:f6:a1:f7:cb:2f:ac:2a:9d:a7:09:bc:54:94:3d:b9:
         11:ac:ce:a0:4b:a7:2f:c3:56:a2:25:12:ef:5d:b6:28:98:64:
         01:eb:91:c6:d3:51:08:d4:47:d7:d1:54:52:48:ea:39:e9:b8:
         f8:32:11:df:46:14:74:d6:ae:7a:0d:82:c0:8f:d2:59:31:90:
         d0:69:f0:c8:3b:88:ae:99:f8:99:ae:03:b0:60:c2:bb:9e:96:
         0e:58:fe:05:34:5c:bb:16:29:25:a4:5c:b5:62:fb:23:01:eb:
         d8:15:c4:29:e3:4f:42:3a:92:0b:a4:d6:fa:1e:4b:c0:99:e4:
         0e:81:19:08:e4:c3:03:d9:e2:7e:ef:2b:4c:ee:07:63:01:7a:
         1f:c9:f5:c0:d2:3c:66:4f:ef:31:4e:c6:56:db:7a:a3:a4:6e:
         e9:69:07:12:b3:1c:36:6b:a0:5a:16:17:ac:06:61:56:9d:35:
         b7:74:72:cd:25:92:b8:f9:ee:50:bc:49:13:97:af:39:79:92:
         66:0b:02:ed:66:19:ec:b5:1f:e4:59:70:01:0f:0f:7e:16:a0:
         cd:07:96:ec:98:ba:ee:38:fe:66:9d:40:c5:98:04:fc:da:69:
         0b:4d:6b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 18:52:52 2026 by rpki-client