Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft
File:                     WkoaHy2STehVVccdPbZrm7DkNkM.mft (raw, json)
Hash identifier:          Zj8/zDpANZzlD2yI12XCVBAjAlqgc4dWXBVb/LnqN1A=
Subject key identifier:   AB:75:6E:B2:3B:F2:33:AE:30:BE:86:F7:79:0A:59:7D:A4:1E:CD:E9
Authority key identifier: 5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43
Certificate issuer:       /CN=A91C2E87/serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643
Certificate serial:       0CEA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft
Manifest number:          0CC9
Signing time:             Fri 12 Jun 2026 18:28:29 +0000
Manifest this update:     Fri 12 Jun 2026 18:28:28 +0000
Manifest next update:     Fri 19 Jun 2026 18:28:28 +0000
Files and hashes:         1: WkoaHy2STehVVccdPbZrm7DkNkM.crl (hash: 2dHZF/8NSJf+J2c8NjmhTihMBrCBJhTikhLt0fYBcNc=)
                          2: 4EB9FBD63CDE11EAB553996BC4F9AE02.roa (hash: Okct4v/9F3FMQPT9GrE+GqX5m6ZwHVEGNg/r2lmDu6k=)
                          3: 4F4A22E23CDE11EAB553996BC4F9AE02.roa (hash: HZYyafIDcbCm3jYO+u2UG1J/QSznk0TLPVrt1UYauvc=)
                          4: 504C179A3CDE11EAB553996BC4F9AE02.roa (hash: tnKzNTdY3kOa3JgIyvO979Ve1nnZLeLTMwODS3F4o5I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl
                          rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3306 (0xcea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2E87, serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643
        Validity
            Not Before: Jun 12 18:28:28 2026 GMT
            Not After : Jun 19 18:28:28 2026 GMT
        Subject: CN=6a2c4fcd-408f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b7:0b:4e:1b:df:7f:ee:a2:2f:e7:5e:47:f0:
                    f4:17:6c:8e:4b:20:48:50:b1:c9:69:ce:f4:77:58:
                    9a:71:6a:4f:f8:cc:fe:bc:ca:28:08:39:f0:04:f7:
                    9f:ec:f1:49:98:6a:cb:48:25:2a:dc:12:9a:0a:53:
                    75:82:30:25:87:05:28:86:b6:4e:19:9a:d6:1e:5c:
                    a3:ab:3b:08:98:a1:0c:ee:21:11:e9:ad:05:7e:53:
                    c8:b5:d5:7b:91:49:55:9f:13:c8:e2:ea:3b:d7:93:
                    7f:54:f8:b1:40:c0:82:dd:5d:10:db:e4:fd:85:fc:
                    0d:c7:d4:cc:5e:fb:ee:58:8f:76:fa:a6:67:af:a0:
                    53:47:c4:62:c1:68:ce:c5:fa:73:c5:5a:05:8d:b6:
                    0b:34:84:aa:9b:0b:b8:2b:21:00:fe:61:37:f4:a0:
                    a2:f9:2e:90:f3:57:5f:dc:0b:56:36:53:4a:a4:5a:
                    d6:61:ad:65:7b:5a:99:7e:0c:6f:bc:58:44:a7:b4:
                    a4:da:16:b4:67:dd:79:89:30:19:07:55:91:08:40:
                    b7:eb:91:e3:65:ad:78:78:de:c8:2d:cc:f5:6c:62:
                    4c:7d:4d:86:b2:41:ea:69:e1:bc:7c:9e:ec:a6:0f:
                    62:39:e0:ff:36:8f:ba:1b:e4:4a:5b:fb:41:bc:af:
                    e1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:75:6E:B2:3B:F2:33:AE:30:BE:86:F7:79:0A:59:7D:A4:1E:CD:E9
            X509v3 Authority Key Identifier:
                keyid:5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:9d:ad:7c:33:0b:37:b4:41:77:3d:33:88:b8:92:88:42:c0:
         45:2e:4c:70:36:e5:da:b5:bc:8f:a3:87:de:06:32:d4:cb:e8:
         06:29:09:27:cd:51:90:6a:1b:cc:ad:55:ff:7e:12:7f:c1:df:
         f9:e1:28:d0:49:25:44:6c:24:b0:ab:4a:a0:59:7d:8d:b1:1e:
         6d:e8:3c:3c:74:96:eb:50:fa:a0:8e:5e:98:54:17:ea:e1:42:
         b4:16:d2:d0:6f:ce:4d:5e:4b:89:49:b9:40:70:b4:ff:2c:e0:
         a3:54:11:20:70:d1:a7:dd:78:bc:d3:3f:4b:c9:8f:e4:ed:7f:
         71:04:2b:79:6a:0b:20:17:85:64:b8:ce:40:57:74:4c:fd:ab:
         3c:c2:81:b4:e3:28:ab:25:64:31:80:e2:71:c8:ec:a6:1e:70:
         1d:70:4f:9c:44:9e:19:0c:1d:67:ed:24:47:4c:d9:f1:41:36:
         be:4d:0e:8e:79:fb:ad:10:4f:f3:24:29:11:6a:c9:39:ef:b6:
         8a:49:db:be:46:f1:00:00:99:b6:35:28:c1:42:7a:11:ce:0b:
         b4:62:2a:b3:74:50:ff:c6:8d:22:ee:c1:4a:f9:b0:cf:b9:d1:
         ad:ea:d4:8b:c5:13:c8:ed:cd:b4:87:a7:3b:c0:64:1f:79:82:
         50:3c:3e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 02:21:04 2026 by rpki-client