Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
File:                     wj38Jpc5QY-leSH40pBboWdC_E0.mft (raw, json)
Hash identifier:          WuYkxg4s1HhV1k5ckYxXA7lswv8kUo48kMZNL7s4Ke4=
Subject key identifier:   95:61:19:A0:4C:21:B3:48:53:1C:90:22:5D:4E:4F:73:28:3E:A9:8C
Authority key identifier: C2:3D:FC:26:97:39:41:8F:A5:79:21:F8:D2:90:5B:A1:67:42:FC:4D
Certificate issuer:       /CN=A913F3A2/serialNumber=C23DFC269739418FA57921F8D2905BA16742FC4D
Certificate serial:       013D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
Manifest number:          0139
Signing time:             Mon 27 Jul 2026 07:28:36 +0000
Manifest this update:     Mon 27 Jul 2026 07:28:36 +0000
Manifest next update:     Mon 03 Aug 2026 07:28:36 +0000
Files and hashes:         1: wj38Jpc5QY-leSH40pBboWdC_E0.crl (hash: /3qC9+lwOT7UKLiKxaxglaxXlZfz4zet7LFV4YxxHTE=)
                          2: 0136C13EAE4C11EFACFD730EC4F9AE02.roa (hash: P/+7lAtPI3issqT9a6IOyY1aqCxq2bFNbcPxzYMG+q4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.crl
                          rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F3A2, serialNumber=C23DFC269739418FA57921F8D2905BA16742FC4D
        Validity
            Not Before: Jul 27 07:28:36 2026 GMT
            Not After : Aug  3 07:28:36 2026 GMT
        Subject: CN=6a6708a4-d830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bf:a2:6e:2e:e5:57:41:3f:ef:65:e8:1b:b1:
                    9d:f3:96:0a:64:35:45:f8:22:32:2b:c0:01:0f:ae:
                    7a:c6:6f:59:cc:09:ca:9e:dc:e2:89:cd:e3:c8:e1:
                    60:ad:be:d6:fb:92:18:80:d7:40:90:52:e6:bf:3e:
                    a8:56:01:ea:ab:ac:9e:04:8d:e3:2d:c4:18:fd:bf:
                    c6:ab:11:92:e9:00:f9:29:2c:e5:18:0e:0a:d2:e5:
                    a7:9c:e2:44:a3:ec:a4:b8:42:03:f4:27:78:a3:d5:
                    c6:5b:ff:74:00:ed:97:9d:5d:9b:27:96:6a:0f:08:
                    64:48:a8:a5:d4:13:6c:23:a9:09:e3:b0:17:cd:d8:
                    d6:50:48:c3:fe:30:ba:dc:0b:f9:e3:68:5b:7d:ad:
                    f7:70:23:25:6c:a4:bb:eb:26:bb:50:2c:13:96:18:
                    d2:52:3f:7d:23:dc:2e:34:56:f9:27:a1:b1:25:49:
                    1e:01:d8:7a:3c:c3:77:3f:b3:f5:7a:a7:f3:75:0f:
                    b5:b6:a0:54:71:f8:cc:8a:fa:43:0a:fe:a4:96:21:
                    83:8f:69:58:4c:2f:f4:00:d1:35:df:78:dc:11:78:
                    a9:b9:e7:dd:69:02:c4:c3:d9:bb:bb:ba:a4:e2:f2:
                    39:9d:22:1f:a2:87:95:f9:2c:78:af:c4:47:89:1c:
                    64:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:61:19:A0:4C:21:B3:48:53:1C:90:22:5D:4E:4F:73:28:3E:A9:8C
            X509v3 Authority Key Identifier:
                keyid:C2:3D:FC:26:97:39:41:8F:A5:79:21:F8:D2:90:5B:A1:67:42:FC:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:21:4e:cf:20:ba:a4:6d:c2:74:df:ec:3f:56:45:b7:24:8a:
         3c:49:27:95:8e:f3:47:53:37:0f:d1:70:a4:f6:80:8d:9b:fc:
         c8:95:ce:3f:30:60:ae:a3:4f:62:53:93:86:85:15:78:c3:26:
         e2:c2:ec:bd:ae:55:98:2c:07:dc:f0:56:85:7e:3d:8d:65:16:
         1e:62:d0:de:ca:df:a4:0e:9d:95:72:fc:92:d4:78:a9:1f:00:
         cc:0d:02:8a:99:85:bf:e8:96:7f:99:5d:c5:ee:30:a6:bc:3b:
         25:03:6b:8a:b6:7b:4a:ab:c2:10:29:91:e6:d3:d7:c6:3d:e2:
         6c:0f:c4:ca:42:d6:f4:0c:79:95:ec:f3:4e:9a:69:7a:25:cc:
         e2:ab:f3:da:b6:5c:e6:e4:2c:84:04:1c:21:ca:13:be:ed:fa:
         16:6a:4a:e1:ba:31:83:88:ef:46:df:7f:73:11:11:14:1e:f5:
         36:14:6f:ea:fa:f7:b3:96:b8:05:9e:57:04:f9:c3:ab:9c:eb:
         f6:1b:ca:4d:86:70:b6:52:ca:13:e8:9f:33:6c:9a:81:4e:89:
         96:a6:37:5d:35:af:62:9d:74:bd:12:11:b4:d6:c1:18:2b:f9:
         81:d2:8e:ab:18:40:75:4d:23:e8:14:e7:39:42:95:bf:ef:b1:
         81:1c:67:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:23:11 2026 by rpki-client