Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
File:                     wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft (raw, json)
Hash identifier:          V38QC12LgzY1COyxzJg0VoTKL1INcvDOkHZDP6szf7Y=
Subject key identifier:   0B:8D:E8:C7:FD:A4:85:F3:7E:0A:C9:A4:9F:3E:7B:AE:B3:02:B7:DA
Authority key identifier: C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
Certificate issuer:       /CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
Certificate serial:       1874
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
Manifest number:          1837
Signing time:             Tue 28 Jul 2026 16:37:27 +0000
Manifest this update:     Tue 28 Jul 2026 16:37:26 +0000
Manifest next update:     Tue 04 Aug 2026 16:37:26 +0000
Files and hashes:         1: wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl (hash: FLVVrxD+UaKyFVUozWmK4ZpDedufZgm57Tu0JfLbqLM=)
                          2: 51635E7E32B011EE89DFF774C4F9AE02.roa (hash: n1u9iSyb9bdQc1QOK/WYlhLEbmOoYxOlffVDVXq1fW4=)
                          3: 507A39A632B011EE89DFF774C4F9AE02.roa (hash: t9gfSRrRBhg5aKee6bLsa2HCvO/wXMYsjYUGDi3D7i0=)
                          4: 047C0BCC373211F1887E264A90833773.roa (hash: LWhnCQp9VfJYhsJdhzflBR7RBHFtlmggsyH3Tj4cj0M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl
                          rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6260 (0x1874)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91478E2, serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
        Validity
            Not Before: Jul 28 16:37:26 2026 GMT
            Not After : Aug  4 16:37:26 2026 GMT
        Subject: CN=6a68dac7-1057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2d:19:5d:2e:59:1d:5b:dc:49:0a:cc:f3:31:
                    80:8d:61:dd:77:dd:9b:c6:9a:c4:80:6a:20:69:4f:
                    30:da:9d:85:71:25:20:75:fc:54:aa:13:7e:c8:25:
                    40:30:c8:2c:4c:53:52:a5:bc:73:93:6a:5b:61:17:
                    c8:5a:c9:ff:6f:ce:a4:54:b8:c6:00:16:8a:d3:a2:
                    af:bc:cc:b1:d8:46:bd:c8:f3:59:fb:c1:23:e9:c2:
                    90:f1:0e:7a:0f:76:a8:45:14:48:8f:7b:27:ea:40:
                    eb:9d:67:31:d7:a2:3c:47:05:24:36:85:91:8a:f0:
                    e0:8d:a9:f3:f6:f4:05:2a:bb:29:07:3d:21:f7:f4:
                    a5:59:e7:28:d6:a5:e6:67:df:5d:a0:ee:87:ef:d4:
                    5f:fc:b9:e6:6e:f2:24:02:e3:b7:cf:27:03:70:15:
                    d7:f8:45:51:1e:f9:e6:de:5c:95:c3:b8:89:25:ff:
                    3c:68:fb:11:b0:7b:02:42:6c:b8:34:ee:d1:4a:75:
                    cd:d0:6a:d1:85:74:42:ab:50:6f:23:90:41:07:24:
                    30:96:bf:7b:91:67:12:eb:fa:db:36:0f:1b:ef:ec:
                    a3:6e:9f:17:c1:1d:05:a1:e6:8a:fb:b7:e3:2b:3a:
                    09:5c:e1:1a:ca:94:77:ca:21:15:13:8f:1d:7c:46:
                    84:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8D:E8:C7:FD:A4:85:F3:7E:0A:C9:A4:9F:3E:7B:AE:B3:02:B7:DA
            X509v3 Authority Key Identifier:
                keyid:C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:a4:6a:0f:4a:46:7c:57:6f:63:89:62:21:7e:e6:09:ec:2d:
         05:2b:35:2a:8a:3d:85:59:ff:d4:d6:1d:03:37:c3:5e:b7:7e:
         6f:03:3e:cf:62:44:65:64:83:bc:28:a2:49:d5:56:a7:84:16:
         b1:eb:93:1b:e1:73:fa:0c:81:10:20:e5:5b:12:70:41:4c:19:
         e1:3d:c6:87:36:fa:57:a5:e5:64:5f:f3:19:3f:9f:95:ef:91:
         58:b5:d4:f8:dd:5c:8a:1b:f3:58:35:6f:a1:e6:ff:50:d0:4e:
         28:af:e1:fd:2b:1d:a9:fa:0a:b3:1b:b8:e9:8e:db:4a:36:9e:
         82:57:1b:33:65:bc:e7:51:fe:38:fe:a0:c8:89:38:9a:c3:48:
         b2:aa:cc:d9:6d:2f:6f:d3:b2:c1:50:82:2a:3b:aa:ab:77:f6:
         60:39:2f:a0:ca:93:51:51:e8:db:50:a5:87:7e:39:5c:e3:3d:
         13:bc:79:9a:62:4f:0b:ce:29:a7:f8:cf:bf:1d:d4:65:2d:20:
         b6:3a:3a:18:24:c4:fc:51:59:6c:b8:65:f7:d5:c4:1d:57:a9:
         ed:9a:e0:fd:72:a2:7e:fb:b9:cd:28:5a:e3:51:da:e5:94:8c:
         fb:42:0f:c6:0a:92:7f:fa:22:e3:27:ff:47:cf:09:7c:4b:14:
         67:c1:54:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:05:16 2026 by rpki-client