Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
File:                     wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft (raw, json)
Hash identifier:          R0lsaDCJY029f6Z9sqroRnExokFaeu/E8FGMzLyCLic=
Subject key identifier:   5D:6B:98:AE:73:14:36:D9:9E:C8:7E:93:F3:78:47:01:EF:DF:F1:07
Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1
Certificate issuer:       /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
Certificate serial:       0950
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
Manifest number:          0930
Signing time:             Tue 14 Jul 2026 20:34:10 +0000
Manifest this update:     Tue 14 Jul 2026 20:34:10 +0000
Manifest next update:     Tue 21 Jul 2026 20:34:10 +0000
Files and hashes:         1: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl (hash: 7NLBlk49uFh53e6Y9hjkS8hcVIM4XgXUxGG4kiNBp9E=)
                          2: AB4610AA7EAF11F1B80EBCC267A30FBC.roa (hash: X3ZUS5c7YNv6h1DWtLHYPdbyqcCD2SWsBkXcjr1SmB8=)
                          3: 12789D14F82E11F09E4CD127396F56BC.roa (hash: 0lQm90IuI3a5EcWOhbRW2oYdVmTwAF33dV4T2vGRc30=)
                          4: ABDC2CE87EAF11F1B80EBCC267A30FBC.roa (hash: ukUJEgX9lQ5VeOWBPATywGFlg6QgIS8tcmX0+Cesd+M=)
                          5: 37A30AA2157A11F1B5E2F6BC3D3D8C67.roa (hash: OKp4FrMM/70sWLoITS6ZEZdodRxEqyoRybrxPzxTh/c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl
                          rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Jul 2026 20:34:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2384 (0x950)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
        Validity
            Not Before: Jul 14 20:34:10 2026 GMT
            Not After : Jul 21 20:34:10 2026 GMT
        Subject: CN=6a569d42-cb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:30:77:db:16:ee:c4:ab:31:73:b1:20:e6:db:
                    cf:b1:60:fd:58:74:ad:77:fd:ca:ff:98:e1:56:9b:
                    e4:c0:9e:42:fd:5f:e6:8b:ff:ff:0f:de:17:45:45:
                    26:a2:c3:0c:2c:1c:ae:ae:75:df:cc:3e:db:89:86:
                    54:f4:f0:7a:00:5e:20:a8:bc:20:04:e8:b6:45:1a:
                    f9:df:7f:c2:d0:80:cd:ed:f6:04:d0:20:2d:36:a3:
                    69:16:9d:0e:39:4d:1e:52:2f:3e:b9:95:f1:42:44:
                    a3:bc:2b:77:d0:e6:4b:78:a1:f3:50:59:88:6a:7e:
                    5e:ae:c0:02:56:fe:1f:1e:db:cf:55:07:a4:0f:41:
                    d4:37:ac:43:d0:b4:33:db:7c:33:2a:6f:7c:ae:7b:
                    9f:9a:96:02:2b:c8:4e:cd:57:92:6b:2b:57:b7:1a:
                    7d:6d:b2:d9:c1:58:64:66:67:0e:99:50:15:be:2f:
                    93:33:f6:f3:d4:92:a1:ee:82:61:1d:8e:81:3b:2f:
                    c5:dc:14:c5:34:a8:ab:ec:15:74:7c:d6:93:7d:c2:
                    1a:ef:35:7c:50:c1:cb:5a:52:2b:95:63:63:91:15:
                    94:48:bd:41:ba:22:e1:de:52:b7:57:bc:40:0c:82:
                    c2:7b:ed:b3:49:9c:a0:ef:df:06:c4:d3:ba:e1:82:
                    57:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6B:98:AE:73:14:36:D9:9E:C8:7E:93:F3:78:47:01:EF:DF:F1:07
            X509v3 Authority Key Identifier:
                keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:34:77:bd:ee:21:ee:1e:4e:49:37:aa:05:9a:06:09:da:79:
         0a:3f:21:e1:40:1f:d4:cb:80:54:f3:b9:15:99:55:44:cc:36:
         45:bd:50:fd:73:f9:b5:50:ba:a0:1e:33:96:d1:ca:24:bc:92:
         5f:b5:53:b3:c0:04:6c:00:fd:55:c6:af:12:73:ff:55:9d:e6:
         20:b9:13:8a:8b:79:70:4c:37:b5:9c:9a:58:7a:c2:62:8f:45:
         cd:be:f9:05:46:2d:d5:30:bd:54:af:c5:65:31:10:9e:c4:2d:
         de:7a:e0:f9:41:43:42:8b:50:e9:bf:91:7b:b8:67:39:d3:f5:
         eb:cd:9c:33:6f:cb:d8:33:98:89:06:f5:84:a9:bd:31:48:be:
         20:c8:4f:23:df:4e:9e:4e:0b:e3:13:41:69:38:32:d2:20:d5:
         35:90:62:7e:65:9f:c8:68:93:f9:e4:98:dc:18:d8:83:17:96:
         21:ee:86:c5:cc:e6:6e:d6:2f:e5:fc:86:91:51:d6:2e:54:b0:
         a8:3d:59:77:80:0d:5e:e8:e2:6b:eb:d4:8c:4e:e9:bb:7c:a2:
         c8:45:3d:30:74:36:fb:f2:44:f6:48:98:82:64:2d:d0:0d:51:
         d6:8b:8c:78:37:d9:e9:65:82:3c:5d:bd:a0:69:70:47:28:d1:
         a5:44:10:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 23:42:37 2026 by rpki-client