Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft
File:                     wfSjmGHK0883hCGN7aegXoUvIn8.mft (raw, json)
Hash identifier:          PkQC5lr3Bj7vpmWHxyRzyN5Thsb0hgkjbiCe3aMQyFM=
Subject key identifier:   60:13:C1:A1:C8:69:94:BC:39:E8:3C:CC:FC:59:78:42:B1:97:9C:E9
Authority key identifier: C1:F4:A3:98:61:CA:D3:CF:37:84:21:8D:ED:A7:A0:5E:85:2F:22:7F
Certificate issuer:       /CN=A912DB97/serialNumber=C1F4A39861CAD3CF3784218DEDA7A05E852F227F
Certificate serial:       FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft
Manifest number:          FB
Signing time:             Mon 27 Jul 2026 08:20:07 +0000
Manifest this update:     Mon 27 Jul 2026 08:20:06 +0000
Manifest next update:     Mon 03 Aug 2026 08:20:06 +0000
Files and hashes:         1: wfSjmGHK0883hCGN7aegXoUvIn8.crl (hash: VA20+NvPW70AosThMlmfXv6Z2w1oEY20EUyclHNuQJA=)
                          2: 28F87D180A1611F0BC8FD10DC4F9AE02.roa (hash: Jgehc0dNGWJlml8ypNr1T5HmtWN0p5K48gpU2FwQ+nU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.crl
                          rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254 (0xfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DB97, serialNumber=C1F4A39861CAD3CF3784218DEDA7A05E852F227F
        Validity
            Not Before: Jul 27 08:20:06 2026 GMT
            Not After : Aug  3 08:20:06 2026 GMT
        Subject: CN=6a6714b7-dd93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:91:3c:3b:58:60:79:05:03:30:e9:97:31:5d:
                    ec:52:4d:e3:7b:24:3a:61:4e:41:06:b3:af:4d:ca:
                    d1:d4:7a:92:f0:95:a1:bc:b6:a5:32:55:98:bc:3d:
                    b5:c2:8f:08:a9:14:24:53:aa:7b:e3:56:5b:45:f5:
                    a7:9e:5d:a2:af:ff:77:0b:70:bb:86:b7:b7:88:c5:
                    a5:71:c0:d8:07:ee:43:db:de:c2:74:be:60:42:e8:
                    94:bc:54:c2:d1:45:a0:e4:7a:c1:a3:fb:7a:4e:93:
                    83:1e:5a:11:2f:3c:f1:1b:81:d2:50:63:85:c9:aa:
                    ff:1f:ce:4c:46:d6:b3:4d:1b:03:d1:52:e2:4c:3e:
                    a1:70:46:45:67:d4:b6:ba:db:36:89:6c:7a:6c:ff:
                    8a:3c:c8:f7:db:0a:0a:00:f2:1f:b0:dc:ea:7a:16:
                    2a:6b:89:58:88:75:b2:ed:3c:18:2a:d4:4c:60:66:
                    9e:a6:f7:7f:4b:92:b6:77:d1:be:d2:10:9a:46:2e:
                    1c:a3:d3:b0:bd:1c:1a:b2:af:c1:bb:20:4d:0d:7e:
                    d5:71:af:10:b7:eb:6c:d7:73:81:45:04:63:43:73:
                    7e:d9:64:cb:79:0b:48:12:2e:42:b8:71:59:72:47:
                    9a:ad:03:37:17:7a:81:bd:35:8e:50:cd:27:98:b2:
                    ab:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:13:C1:A1:C8:69:94:BC:39:E8:3C:CC:FC:59:78:42:B1:97:9C:E9
            X509v3 Authority Key Identifier:
                keyid:C1:F4:A3:98:61:CA:D3:CF:37:84:21:8D:ED:A7:A0:5E:85:2F:22:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:fe:d1:16:ba:a6:04:f9:6b:fc:e9:f8:45:da:ce:79:2f:e5:
         7b:85:2d:c2:d5:fb:95:4d:8c:45:aa:20:af:ef:7f:31:1b:db:
         86:b8:ac:23:5b:46:d1:2a:78:75:36:f0:58:19:21:93:87:60:
         e1:df:62:d3:70:d4:86:6c:99:21:4b:f0:e4:9c:8b:46:87:17:
         66:26:31:57:ff:16:e5:28:00:c6:18:4e:25:cd:bd:43:03:b5:
         09:f6:2d:7e:42:9d:10:0d:34:9a:b4:df:f5:1c:58:d1:95:8d:
         f1:54:52:e6:e3:c5:b6:4f:0b:2b:b0:09:ec:53:06:44:4b:ea:
         dd:59:e0:5b:8c:d4:53:a6:fb:60:cb:5e:b0:4e:5d:e4:1b:b8:
         1f:9c:a6:62:f5:73:c9:b7:4d:90:6f:bd:30:09:82:10:0e:ab:
         32:42:4b:14:06:0e:83:d8:44:ce:59:f7:87:11:a3:ce:df:cd:
         e3:03:2a:2d:83:ba:66:ad:25:dd:e9:05:a4:3d:79:cc:e8:e9:
         0e:e4:c1:75:2d:03:9b:b2:9f:df:07:65:78:d8:71:17:3e:80:
         d7:4e:df:f6:79:2e:2e:2f:49:ae:57:e9:97:d0:93:0c:bd:71:
         fb:fc:c1:63:8d:ee:0a:49:15:bf:29:e1:46:c0:45:90:db:79:
         5f:7d:fd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:50:36 2026 by rpki-client