Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
File:                     WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft (raw, json)
Hash identifier:          1ektOxku2jahd1EEsKoDyKRtULer7XCqcokSvfdecSc=
Subject key identifier:   E5:90:BB:33:99:2D:0B:2A:F8:5B:7E:8C:4A:16:C3:E2:85:EB:10:78
Authority key identifier: 58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84
Certificate issuer:       /CN=A91C7B15/serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584
Certificate serial:       02A7
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
Manifest number:          02A2
Signing time:             Mon 20 Jul 2026 16:56:46 +0000
Manifest this update:     Mon 20 Jul 2026 16:56:45 +0000
Manifest next update:     Mon 27 Jul 2026 16:56:45 +0000
Files and hashes:         1: WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl (hash: w9dK8FSq0XrJnHB3UFGucsiDhvuuzpVT04/21/lpMtA=)
                          2: 04594232DEA011EE91181415C4F9AE02.roa (hash: c8YRBXzB3c5ZciuZ47whRGlvNacQEORBuyS+ujABTZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 16:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 679 (0x2a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7B15, serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584
        Validity
            Not Before: Jul 20 16:56:45 2026 GMT
            Not After : Jul 27 16:56:45 2026 GMT
        Subject: CN=6a5e534e-8847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3b:26:4b:2b:97:a9:7c:a5:8e:bc:1e:d6:a7:
                    36:f0:7d:13:e2:15:e5:54:79:6d:0e:d8:80:d1:b0:
                    d2:a2:ec:e5:0c:fe:1e:c0:54:c7:b4:63:b5:27:1c:
                    c6:b6:26:06:2a:ca:29:ff:bb:73:19:86:be:d6:b7:
                    82:9a:f4:21:cc:ef:8d:53:06:4e:a9:0f:2a:c9:93:
                    12:2a:d1:53:77:7b:02:15:6a:5d:60:d2:e3:8c:94:
                    6c:f0:5c:ed:cb:0a:24:3e:ef:ba:de:45:a6:a2:ea:
                    f1:dc:64:d2:c2:50:7a:96:06:3c:50:8d:d5:dc:04:
                    d2:fb:a9:6d:16:70:e3:d1:ac:8f:04:b1:dc:9d:82:
                    49:70:50:9a:c1:9f:79:1a:e8:c1:65:94:98:61:66:
                    b6:bc:0b:3e:7d:93:c8:23:2d:2a:42:4f:fc:cb:f3:
                    f1:83:49:59:fc:c7:f8:1f:19:50:3f:cb:5a:ad:ea:
                    9a:70:50:f1:52:02:b0:f3:ae:64:82:e8:3d:66:42:
                    18:5b:32:5c:9a:2f:c9:7d:84:0e:f7:d4:a3:37:12:
                    32:7c:74:4e:65:f3:cf:a0:e7:2d:bd:21:f1:0a:77:
                    f3:e1:dc:f0:c9:d9:cf:63:08:e3:48:4c:aa:37:ad:
                    8d:f1:29:03:42:a5:0e:d3:2c:3a:f8:47:82:9a:a9:
                    40:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:90:BB:33:99:2D:0B:2A:F8:5B:7E:8C:4A:16:C3:E2:85:EB:10:78
            X509v3 Authority Key Identifier:
                keyid:58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:6a:ed:8a:67:27:52:47:9d:83:57:be:26:78:89:7a:3a:96:
         41:55:a9:47:ec:5a:7a:40:59:ff:b9:04:05:90:fa:c1:a0:54:
         1b:92:29:a6:90:63:77:03:79:ac:dd:eb:17:e9:94:0f:a0:29:
         92:a9:45:67:45:ad:49:5c:56:d4:0c:0b:fc:fe:3f:bd:f4:79:
         6b:79:ea:12:24:56:87:a3:cc:5b:40:c2:78:0f:f4:44:53:0c:
         27:17:2c:a7:dd:7e:7d:a7:78:3d:32:81:d6:18:6c:e8:0f:94:
         43:00:c2:44:98:4a:6d:2c:2a:e6:e5:dc:b8:cb:4e:6c:ef:ed:
         b6:ac:31:38:68:03:86:d2:a0:0c:04:ae:a3:49:c2:3e:21:37:
         bf:08:eb:cc:bb:6f:2b:8b:9c:65:4e:a6:3e:c7:d4:b3:83:1f:
         65:a6:10:7d:69:0a:8f:6c:7a:0f:98:88:47:ec:05:f4:b9:10:
         02:4d:38:8c:76:8b:62:29:e2:73:30:35:70:dc:bd:90:53:29:
         e0:b7:ef:be:91:96:6b:c8:8f:89:de:89:00:cb:71:d2:d3:e9:
         0b:dd:64:54:7c:2e:7a:8b:52:79:50:53:90:b5:2a:13:40:c7:
         88:96:97:ed:ac:fa:f8:4b:77:3f:c7:cd:21:a6:aa:2c:57:05:
         01:bc:43:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzdCMTUxMTAvBgNVBAUTKDU4MEU0NjZCN0Q0RkE4NjQ5RDJFMEIyNzM3NUVBMjg2
QzZDNTQ1ODQwHhcNMjYwNzIwMTY1NjQ1WhcNMjYwNzI3MTY1NjQ1WjAYMRYwFAYD
VQQDEw02YTVlNTM0ZS04ODQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwzsmSyuXqXyljrwe1qc28H0T4hXlVHltDtiA0bDSouzlDP4ewFTHtGO1JxzG
tiYGKsop/7tzGYa+1reCmvQhzO+NUwZOqQ8qyZMSKtFTd3sCFWpdYNLjjJRs8Fzt
ywokPu+63kWmourx3GTSwlB6lgY8UI3V3ATS+6ltFnDj0ayPBLHcnYJJcFCawZ95
GujBZZSYYWa2vAs+fZPIIy0qQk/8y/Pxg0lZ/Mf4HxlQP8tareqacFDxUgKw865k
gug9ZkIYWzJcmi/JfYQO99SjNxIyfHROZfPPoOctvSHxCnfz4dzwydnPYwjjSEyq
N62N8SkDQqUO0yw6+EeCmqlAmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOWQuzOZ
LQsq+Ft+jEoWw+KF6xB4MB8GA1UdIwQYMBaAFFgORmt9T6hknS4LJzdeoobGxUWE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS8zMjZFQjBCNDhE
RUIxMUVEOTNGQUFEMEZDNEY5QUUwMi9XQTVHYTMxUHFHU2RMZ3NuTjE2aWhzYkZS
WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1dBNUdhMzFQcUdTZExnc25OMTZpaHNiRlJZUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
N0IxNS8zMjZFQjBCNDhERUIxMUVEOTNGQUFEMEZDNEY5QUUwMi9XQTVHYTMxUHFH
U2RMZ3NuTjE2aWhzYkZSWVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJmrtimcnUkedg1e+JniJejqWQVWpR+xaekBZ/7kEBZD6waBUG5IpppBjdwN5
rN3rF+mUD6ApkqlFZ0WtSVxW1AwL/P4/vfR5a3nqEiRWh6PMW0DCeA/0RFMMJxcs
p91+fad4PTKB1hhs6A+UQwDCRJhKbSwq5uXcuMtObO/ttqwxOGgDhtKgDASuo0nC
PiE3vwjrzLtvK4ucZU6mPsfUs4MfZaYQfWkKj2x6D5iIR+wF9LkQAk04jHaLYini
czA1cNy9kFMp4LfvvpGWa8iPid6JAMtx0tPpC91kVHwueotSeVBTkLUqE0DHiJaX
7az6+Et3P8fNIaaqLFcFAbxDPA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:50:34 2026 by rpki-client