Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
File:                     WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft (raw, json)
Hash identifier:          bW3fS8D2uLnBGsO6mm6yOQK6NqurZoYqo/EeBY2uDbk=
Subject key identifier:   7D:0D:B6:0D:CB:D2:3D:6F:C1:4B:57:DA:D7:49:ED:93:54:51:3F:86
Authority key identifier: 59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76
Certificate issuer:       /CN=A91275A6/serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876
Certificate serial:       029B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
Manifest number:          0295
Signing time:             Mon 27 Jul 2026 03:06:51 +0000
Manifest this update:     Mon 27 Jul 2026 03:06:50 +0000
Manifest next update:     Mon 03 Aug 2026 03:06:50 +0000
Files and hashes:         1: WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl (hash: 7n0fxUMXk06V/aArIQ0YrjT9OCVrlSSjvs+q0OJArm8=)
                          2: 8FA08DC29C8511EDB3506E5AC4F9AE02.roa (hash: TaJdRiGSYLXxN+5sGdAd2EbJ36eAZlZPdEwMNT5EY+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl
                          rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 667 (0x29b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91275A6, serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876
        Validity
            Not Before: Jul 27 03:06:50 2026 GMT
            Not After : Aug  3 03:06:50 2026 GMT
        Subject: CN=6a66cb4b-1c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8c:ff:b6:9d:a9:2d:58:6d:df:f8:10:22:5f:
                    87:46:f8:2f:90:11:3d:bb:37:10:89:3a:b9:91:f8:
                    b4:04:df:3d:ad:40:78:a0:ce:c2:c9:20:5f:a9:53:
                    6b:52:95:4b:f9:52:88:84:82:31:12:be:9e:70:a6:
                    e4:26:0f:60:5d:3f:9b:a9:ec:05:f6:d8:86:93:ec:
                    9f:35:23:7a:54:4e:3f:83:89:60:11:e7:ea:1d:92:
                    08:ae:70:4c:6e:69:f9:e6:c9:14:39:a4:4e:69:58:
                    9f:d6:bd:7e:6f:01:b7:0e:d4:3e:62:8f:e9:81:57:
                    07:0f:1e:0c:45:39:a1:90:42:58:de:7a:47:c9:46:
                    b8:ae:09:58:ab:6f:7c:da:6a:a7:dd:83:b1:aa:05:
                    42:aa:33:1a:02:c3:35:60:e0:b1:ef:5f:22:dd:f5:
                    ea:05:83:ff:be:56:65:0f:f5:5d:72:09:05:22:90:
                    76:5d:52:2d:3a:5b:8f:e6:e2:89:9f:61:c4:12:f7:
                    ca:39:1a:ba:e0:0f:a2:db:52:ee:ab:63:e4:a0:65:
                    a7:87:f4:c0:0c:a5:0a:4f:e8:26:d8:7f:db:75:95:
                    39:22:f2:ee:ac:75:82:ec:16:85:2b:28:b2:36:23:
                    56:cf:e0:37:af:1f:e3:bc:ad:4e:f4:99:73:4d:71:
                    38:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0D:B6:0D:CB:D2:3D:6F:C1:4B:57:DA:D7:49:ED:93:54:51:3F:86
            X509v3 Authority Key Identifier:
                keyid:59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:55:ae:90:8b:05:fc:93:de:3c:91:4f:a5:cc:84:83:24:a8:
         b2:37:fe:4b:5f:e5:70:ce:d2:60:11:bc:25:01:5c:de:1a:09:
         1d:3d:f3:4a:04:fe:8e:b6:17:56:d6:39:5f:6a:dd:56:50:91:
         a7:db:82:78:89:1e:3c:47:81:d5:ed:fc:c8:63:da:09:16:0e:
         95:e8:2a:ae:9a:73:b5:d9:93:5f:6e:2f:92:42:24:a3:b2:74:
         d4:fc:aa:1c:cf:e0:cb:74:70:38:5c:0e:ca:e2:8e:3c:d8:1a:
         6c:08:c3:fd:a3:5a:54:da:31:a6:3c:e1:ef:a2:eb:83:57:3b:
         7a:8b:43:79:33:e9:60:b0:2e:45:f0:4f:71:0c:ef:02:ff:1c:
         1a:d7:42:53:0a:9b:c4:15:2d:a5:4c:43:23:c2:b2:bb:27:1a:
         fe:cf:d3:40:33:7e:2a:74:d4:db:9e:17:3e:bf:9b:e3:f0:c2:
         0a:71:0d:2e:d9:c6:70:cd:e8:8e:6f:74:d9:e6:d8:70:3e:c2:
         9f:25:40:94:d3:34:5b:25:9a:8b:76:fc:16:5d:4b:45:83:2a:
         33:f7:5e:d8:ea:64:74:9b:ad:86:15:96:40:a9:f1:09:31:53:
         0e:e3:85:d0:3e:cd:08:25:80:b3:a1:ec:a2:36:78:1d:22:31:
         aa:ce:8c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:52:08 2026 by rpki-client