Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft
File:                     wxmve7T5gWEa0Awy-KNX3mNT3DY.mft (raw, json)
Hash identifier:          p8SOFfqaGrujnyTVujphw/APJudJHHlofhTP2CSB3Ps=
Subject key identifier:   0D:E4:59:B3:0A:2F:24:52:3B:37:75:30:4B:8B:9C:52:1E:54:D9:FA
Authority key identifier: C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36
Certificate issuer:       /CN=A91C1DB8/serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36
Certificate serial:       1486
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft
Manifest number:          1457
Signing time:             Tue 30 Jun 2026 17:08:10 +0000
Manifest this update:     Tue 30 Jun 2026 17:08:10 +0000
Manifest next update:     Tue 07 Jul 2026 17:08:10 +0000
Files and hashes:         1: wxmve7T5gWEa0Awy-KNX3mNT3DY.crl (hash: pcmZVVG1k3xgCemL1kRQCTzqsdX8IDZ2srSPYw35lxU=)
                          2: 7A6DC1B2ED5011F0BF908D85516F56BC.roa (hash: Pf2Xcfz159pyHDj2hXgdqjwAgXXP/RYEqTKSIfi/V/I=)
                          3: 56F161A6E4E911EEBC24E249C4F9AE02.roa (hash: z/b7i8bugbJfMnPzMbcPCKt6lu9pPtbu5hUl0vugU0w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl
                          rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 Jul 2026 17:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5254 (0x1486)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1DB8, serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36
        Validity
            Not Before: Jun 30 17:08:10 2026 GMT
            Not After : Jul  7 17:08:10 2026 GMT
        Subject: CN=6a43f7fa-e402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cf:7e:60:8d:d0:37:99:a2:4c:46:b2:e8:91:
                    b1:a2:09:ac:0e:4d:e2:eb:dc:78:49:a0:96:bb:35:
                    68:11:e6:cc:b7:39:03:b3:d5:47:bc:41:a7:e4:39:
                    e1:34:73:dc:12:ae:7a:16:c3:f7:d4:d7:12:a0:e8:
                    ae:f9:db:f8:e0:c4:5c:30:5a:aa:b0:d0:b1:ec:b7:
                    2f:f8:ac:78:c8:73:c1:ad:0b:47:35:5b:a1:b8:0a:
                    94:d7:72:0f:94:3e:2f:36:50:09:58:1b:d7:2c:67:
                    98:cd:b2:33:6d:30:d2:77:fc:e9:ff:2e:39:c2:34:
                    cf:4d:a1:42:45:ad:bb:a9:d4:0c:ba:fe:f8:6c:e5:
                    b5:66:de:90:16:a5:48:3b:fa:59:98:7d:e8:62:2b:
                    7d:83:0b:da:a0:63:76:24:1b:d3:58:b1:98:31:d4:
                    4b:38:50:1d:98:bd:80:ac:4a:2b:56:22:c3:e1:57:
                    7c:df:07:09:5e:86:6f:a5:ad:da:f2:75:da:53:5c:
                    d0:7c:5d:e6:ef:92:c9:d4:68:aa:b1:7c:76:ed:38:
                    93:02:b7:71:69:d3:65:86:f1:50:8b:f4:36:5f:07:
                    5e:0c:99:14:fb:d0:20:ca:52:28:89:73:48:23:33:
                    bd:fe:1c:3f:b2:ee:86:4b:d2:83:87:47:f1:ed:61:
                    6e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E4:59:B3:0A:2F:24:52:3B:37:75:30:4B:8B:9C:52:1E:54:D9:FA
            X509v3 Authority Key Identifier:
                keyid:C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f5:50:a8:13:bf:68:31:95:1f:7c:ac:bb:08:fa:9c:1d:b5:
         a4:ee:2f:86:ff:42:e1:76:2a:ae:19:37:89:f4:83:24:78:2e:
         f4:8e:e3:c8:4b:6d:44:71:5d:c7:75:33:db:3d:66:10:ff:23:
         0b:7a:94:17:15:eb:5b:e0:b2:2a:bc:4c:0c:11:b0:39:e3:cf:
         50:51:15:0e:c2:7a:94:9a:a9:95:5f:5c:49:8c:55:34:3b:4b:
         1e:fd:22:f2:3e:e2:21:a7:a7:ed:a1:56:62:8b:d3:5b:0a:d2:
         6f:52:d1:48:61:86:e1:ac:99:be:8a:5f:43:06:c8:66:3b:ce:
         f2:9b:25:e8:6e:65:61:ba:19:fb:62:02:85:d7:9b:2f:eb:7a:
         4d:62:2a:b2:40:2b:b9:03:ea:07:ac:2e:fa:77:4b:21:11:ac:
         7c:65:a7:1c:07:26:5b:de:e9:1a:51:81:60:c4:2e:5e:15:f6:
         8d:98:58:c5:95:d2:6a:e5:9c:b8:13:07:8a:1f:52:45:89:3e:
         a7:b3:a4:b5:68:44:7a:14:ca:d3:b2:3a:38:2f:d5:18:69:fb:
         a8:d3:77:56:37:17:12:36:94:75:3f:b9:98:3c:1c:09:62:a3:
         f1:18:27:9c:86:36:7f:2c:f2:11:b3:32:1c:3f:f4:b3:ae:ba:
         4a:c5:73:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 09:04:18 2026 by rpki-client