Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
File:                     WRGN11PwUw7cK4w74mO-2wzOvA4.mft (raw, json)
Hash identifier:          OAIUMEf46UCCY8QpG2lFz47UJmB1GzZef7Zzlf97Nj0=
Subject key identifier:   C9:DA:A7:46:ED:C6:0A:2B:64:77:A7:C5:2C:04:E0:23:17:D9:EA:05
Authority key identifier: 59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E
Certificate issuer:       /CN=A91B12FB/serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E
Certificate serial:       03C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
Manifest number:          03AB
Signing time:             Sat 25 Jul 2026 01:38:54 +0000
Manifest this update:     Sat 25 Jul 2026 01:38:54 +0000
Manifest next update:     Sat 01 Aug 2026 01:38:54 +0000
Files and hashes:         1: WRGN11PwUw7cK4w74mO-2wzOvA4.crl (hash: xrO4JjG7OahxrBw7OZXFSdM8uK0FY89GXq9Ax5YDkEc=)
                          2: E15780AA32E111EFB163924BC4F9AE02.roa (hash: YJWEr2nrAdnP2NutE9Ms8r6Gtbwk3PCYEKG8MqYno4Y=)
                          3: 8409527078B011EE8D737723C4F9AE02.roa (hash: S/EE8dzEnvlxDFYWVTl3pTW1+xiF5BVX2thc9vnDMAU=)
                          4: 6967C1F494F711EF905E5F13C4F9AE02.roa (hash: pAZV68jGjWuKWqhQJP5ckwM2V0tQYdqN4ZXDEqElElc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl
                          rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Aug 2026 01:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 960 (0x3c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B12FB, serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E
        Validity
            Not Before: Jul 25 01:38:54 2026 GMT
            Not After : Aug  1 01:38:54 2026 GMT
        Subject: CN=6a6413ae-933a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1f:42:11:bd:6b:e4:a8:38:ba:82:33:95:53:
                    90:29:fb:33:34:3f:3c:79:24:30:6b:27:7e:35:01:
                    b0:4e:d2:94:5a:41:e5:1a:7f:b8:9f:12:08:53:e4:
                    e8:2f:70:8d:7b:22:20:33:23:68:af:6d:ff:f3:ce:
                    b1:74:6c:72:f4:b3:c0:ff:35:a7:d5:b9:dc:09:ff:
                    76:af:90:e5:6e:0a:b3:a6:29:9e:93:2d:24:b7:e0:
                    5c:61:54:b2:fa:ae:19:67:7f:02:d7:15:a0:31:db:
                    cc:ea:59:64:8c:b4:65:3c:ab:79:70:71:58:ea:e1:
                    1c:8e:69:f9:aa:57:4c:13:a0:76:f8:50:b1:f9:a8:
                    5d:08:ad:0d:67:92:8b:d4:04:1d:64:ae:04:6f:3b:
                    fc:69:aa:58:51:ae:94:95:28:ef:9f:6b:29:0d:4a:
                    cf:61:46:b8:bb:8f:5c:c7:0a:32:85:1d:d4:60:ba:
                    dd:c0:a6:d5:67:cb:60:7f:b1:46:02:e5:49:f1:60:
                    29:02:fa:a3:46:ab:49:fc:29:bf:cf:7f:be:57:38:
                    df:52:3d:e7:7c:15:81:bd:55:9e:89:18:b2:5c:27:
                    a9:43:a9:39:04:d7:a3:73:4f:00:32:5a:e2:37:6e:
                    62:0d:99:44:2f:ca:4a:9f:58:a0:62:3b:85:08:3a:
                    6f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:DA:A7:46:ED:C6:0A:2B:64:77:A7:C5:2C:04:E0:23:17:D9:EA:05
            X509v3 Authority Key Identifier:
                keyid:59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:be:66:11:1f:da:65:8b:cc:2a:a7:17:14:85:a3:ad:79:44:
         a5:01:ff:2b:3b:9e:97:8d:24:37:c6:4b:1d:af:bc:64:14:80:
         00:f1:97:4d:f0:89:19:bf:5a:14:c8:be:03:e7:51:ce:f5:4f:
         8f:2a:7e:96:23:8b:b9:70:6b:ab:e1:35:33:ad:dd:76:8b:9f:
         84:05:10:9c:d6:05:eb:16:84:7f:aa:5f:39:fa:eb:bf:a8:cf:
         87:ba:b7:81:a7:02:b6:53:2b:6a:7a:5f:ea:50:6a:6f:3b:d6:
         89:21:87:ec:3c:8d:10:63:d1:aa:71:70:72:24:11:d0:a4:6e:
         03:57:01:15:70:59:a4:36:98:8e:8e:42:41:ef:9a:70:42:d3:
         74:e6:ac:69:bb:74:f7:ba:b2:f4:4e:86:8e:a0:b1:c1:de:2e:
         21:a0:ae:60:ca:e9:4f:35:8a:e2:4f:a1:b9:97:f8:d2:38:83:
         69:63:0e:f7:09:97:60:01:ab:1d:0a:58:76:5a:ad:c5:16:57:
         bd:7f:7a:45:24:f1:a5:a6:aa:aa:7b:02:7e:2d:d8:0f:9e:99:
         96:3c:c9:05:85:94:0d:9a:fb:0c:cc:26:b3:0d:37:1d:fc:d1:
         6a:11:25:96:c8:81:97:db:1b:a1:2a:65:6c:0e:17:94:31:11:
         bf:04:bc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:37:34 2026 by rpki-client