Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft
File:                     WpjqUfgHDWcBhCEBRTothWT80ts.mft (raw, json)
Hash identifier:          8K9GT2DDV8gCP3bmzIGdOAzziOQhNTo8nyfhmBvfbx0=
Subject key identifier:   09:BE:96:F1:FE:8F:A4:73:16:3C:D5:63:B2:AE:42:E9:E3:7D:86:3D
Authority key identifier: 5A:98:EA:51:F8:07:0D:67:01:84:21:01:45:3A:2D:85:64:FC:D2:DB
Certificate issuer:       /CN=A9112FE9/serialNumber=5A98EA51F8070D6701842101453A2D8564FCD2DB
Certificate serial:       085B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpjqUfgHDWcBhCEBRTothWT80ts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft
Manifest number:          0853
Signing time:             Tue 28 Jul 2026 21:21:11 +0000
Manifest this update:     Tue 28 Jul 2026 21:21:10 +0000
Manifest next update:     Tue 04 Aug 2026 21:21:10 +0000
Files and hashes:         1: WpjqUfgHDWcBhCEBRTothWT80ts.crl (hash: YHplqSrJ5wBXDUqRTHXp8ZCOGwWiDg4O0BOo+yBffRw=)
                          2: 27EA36484AC411EB95EE2C61C4F9AE02.roa (hash: ysFrwG0ReezjXpB78/ucYqcz/JJriSnqxjoBhEJswSU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.crl
                          rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpjqUfgHDWcBhCEBRTothWT80ts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:21:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2139 (0x85b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112FE9, serialNumber=5A98EA51F8070D6701842101453A2D8564FCD2DB
        Validity
            Not Before: Jul 28 21:21:10 2026 GMT
            Not After : Aug  4 21:21:10 2026 GMT
        Subject: CN=6a691d46-6bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b0:99:62:cd:ec:7c:5e:22:c1:14:f5:6e:9c:
                    70:f9:18:ff:b1:ee:18:c8:92:df:32:2b:d7:31:29:
                    f9:ae:f9:d5:a3:9a:29:d7:33:ee:9b:d7:7c:d6:dc:
                    c8:58:54:6d:d7:43:71:61:f5:94:dd:0a:02:db:fb:
                    05:28:e6:75:c6:18:bf:c1:84:ea:50:04:04:fd:08:
                    f0:82:95:57:f7:7a:11:86:1d:d5:18:a7:82:93:e2:
                    c9:45:77:41:5a:43:bb:b2:13:74:73:98:17:48:24:
                    ad:b3:3b:a9:6b:26:bb:79:58:14:d0:9c:39:89:ad:
                    35:e9:aa:1e:b6:50:93:fe:3a:bb:97:06:91:1b:dc:
                    a6:d7:a4:da:09:45:2f:89:b6:1f:0f:58:ff:e6:b5:
                    30:53:5d:75:f7:50:78:1d:47:b0:ff:fc:00:9c:1b:
                    43:7b:58:a5:c6:e7:2e:04:61:f7:6a:11:d9:84:7b:
                    81:ce:34:a1:32:39:31:91:ed:c5:6e:d8:b9:5a:60:
                    ca:02:b4:50:04:7b:a5:bf:50:3d:cf:f2:a2:d9:a0:
                    3c:23:e4:7a:84:22:ec:aa:34:2d:55:16:79:e1:3d:
                    1d:f7:c2:a6:ac:46:5f:97:b2:4d:57:fe:6b:0f:61:
                    8f:06:7f:3d:a6:8a:6d:dd:5a:fc:0e:a8:7c:ce:4e:
                    45:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BE:96:F1:FE:8F:A4:73:16:3C:D5:63:B2:AE:42:E9:E3:7D:86:3D
            X509v3 Authority Key Identifier:
                keyid:5A:98:EA:51:F8:07:0D:67:01:84:21:01:45:3A:2D:85:64:FC:D2:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpjqUfgHDWcBhCEBRTothWT80ts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:cd:88:1f:14:51:31:1e:75:f0:a9:f5:57:bb:a9:a0:c8:57:
         22:90:b3:bd:49:1b:c2:99:0f:17:f5:ff:28:9e:53:1e:21:1e:
         5a:1f:64:a7:0a:a9:82:64:66:f5:00:a9:9e:f9:2b:2c:99:42:
         c0:53:d0:44:a1:02:97:26:f4:91:38:91:50:73:aa:27:54:37:
         e9:7f:5f:a2:32:b2:32:a4:70:4c:34:24:12:3c:b3:f4:91:4f:
         e4:2d:03:98:60:51:67:22:81:a2:03:7f:90:de:dd:58:01:20:
         21:c5:e9:95:c2:10:14:c2:7b:9e:3b:d6:09:d2:41:f8:a4:b4:
         75:48:4e:a9:e2:ca:f5:75:c4:85:16:0e:b3:0f:d7:3a:7b:8b:
         03:d9:05:85:30:ff:ad:eb:d2:99:31:73:b3:8e:86:bb:a0:80:
         a8:bf:44:1e:1f:be:1f:16:1d:26:6e:15:20:1c:6e:cb:b1:60:
         37:f8:62:bf:22:e5:6f:d8:b0:ff:b9:ac:95:d2:9b:ec:c9:9d:
         ba:e0:41:f7:88:4c:75:41:91:55:b4:e2:34:c0:b7:4e:80:2e:
         29:54:21:2b:71:41:6a:c3:2d:49:98:87:af:ff:be:14:97:5f:
         b7:e7:7e:51:4b:e4:7b:31:4a:be:80:cd:e8:bc:9c:f2:c8:fa:
         37:fc:72:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:50:18 2026 by rpki-client