Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
File:                     WKqOb2Cb9VgUA20moSpeKyUViTo.mft (raw, json)
Hash identifier:          kM1N23wym78/ixrsUOr6xqYLFa38b+3okvlI4Pzm1sA=
Subject key identifier:   A6:EA:02:3B:27:6C:E6:C2:A1:BC:94:A1:55:33:FA:3D:0B:E5:BC:5E
Authority key identifier: 58:AA:8E:6F:60:9B:F5:58:14:03:6D:26:A1:2A:5E:2B:25:15:89:3A
Certificate issuer:       /CN=A914EBB2/serialNumber=58AA8E6F609BF55814036D26A12A5E2B2515893A
Certificate serial:       61
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
Manifest number:          5A
Signing time:             Sat 13 Jun 2026 04:41:48 +0000
Manifest this update:     Sat 13 Jun 2026 04:41:48 +0000
Manifest next update:     Sat 20 Jun 2026 04:41:48 +0000
Files and hashes:         1: WKqOb2Cb9VgUA20moSpeKyUViTo.crl (hash: JZp1uC4g6WNY35dP1W36HFFBo1kQBCupxrBmdBpzbFI=)
                          2: 651B78142DD711F187F45729B3833773.roa (hash: orGvvH8EtrQFqpfDS8Xvz4vEWTgyCI2f9BcO9d6cJBw=)
                          3: D23FC546011111F1B3598E67446F56BC.roa (hash: vcrWn/T7PWva5wilhUJF83D5sEdB2Zxd5D/0CZVE3OU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.crl
                          rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:41:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EBB2, serialNumber=58AA8E6F609BF55814036D26A12A5E2B2515893A
        Validity
            Not Before: Jun 13 04:41:48 2026 GMT
            Not After : Jun 20 04:41:48 2026 GMT
        Subject: CN=6a2cdf8c-52e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ee:fd:4e:cf:29:2b:5d:de:dd:b5:d1:d3:0a:
                    f2:5a:e8:91:70:6f:7c:20:b2:31:81:2f:fe:66:3a:
                    ba:a8:25:d8:42:37:c3:f7:63:cf:f0:03:6d:5a:09:
                    15:a8:77:ed:17:26:8c:2d:f5:dd:69:a7:3f:d5:7e:
                    ce:3f:92:0f:c6:f3:54:68:93:ce:5a:b3:66:d4:4d:
                    63:d0:b4:f7:cf:b5:ce:95:41:c5:fc:c9:8e:56:1a:
                    dc:63:48:f8:87:e7:23:16:37:3c:64:05:40:b3:ff:
                    c9:cb:6f:00:5b:4c:64:c7:e6:10:93:a2:9b:0d:af:
                    bb:8e:48:bc:e3:2c:c6:35:26:8a:65:36:d3:0a:6b:
                    af:ba:85:1f:42:c8:87:57:5d:52:3a:50:bc:44:38:
                    e6:b9:59:50:3e:98:86:c0:66:ef:88:53:6f:a3:6e:
                    4b:20:21:18:2d:fb:ef:41:a9:ae:6f:c2:fb:08:88:
                    84:d5:a5:f3:50:03:19:44:15:ab:23:cf:43:48:4e:
                    d5:eb:ed:1f:e2:0c:34:d2:9c:38:c3:37:90:10:32:
                    b7:75:09:3a:13:ae:62:f9:55:20:8b:f6:4e:d8:dc:
                    88:37:e5:19:0c:f3:2e:8d:8a:09:e4:6f:8b:4e:62:
                    cd:65:2d:de:e6:78:47:a5:f5:6c:6e:9c:14:8e:da:
                    be:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:EA:02:3B:27:6C:E6:C2:A1:BC:94:A1:55:33:FA:3D:0B:E5:BC:5E
            X509v3 Authority Key Identifier:
                keyid:58:AA:8E:6F:60:9B:F5:58:14:03:6D:26:A1:2A:5E:2B:25:15:89:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:6a:1e:1d:9d:c9:f3:ce:73:5b:83:ef:e3:70:9f:15:08:ca:
         f6:49:36:84:0b:3c:25:90:d4:69:69:d4:9b:82:2d:75:99:37:
         25:b5:6b:41:48:7b:10:df:c1:8f:87:54:35:e6:22:7f:ed:6a:
         e2:61:2a:24:b6:e9:e4:fd:9a:28:d2:ff:69:bf:7d:f6:16:3d:
         64:94:9b:19:3f:e5:a1:c1:2f:2f:20:2c:c0:55:13:6f:7e:d8:
         5f:29:46:cc:0e:ba:f0:cb:76:79:42:2c:2a:ac:ea:0d:cd:4a:
         59:f6:b4:55:10:c0:b5:4f:d0:b3:3a:52:e4:46:a7:a9:95:9b:
         45:7d:d3:28:bd:aa:8a:a9:bb:eb:94:b0:d4:1d:ec:e7:f4:c4:
         7e:fa:fb:38:77:ee:b1:dd:98:5a:96:36:1f:f9:1d:d9:ec:39:
         c8:f5:fe:84:a0:01:e2:f9:12:78:fe:e5:0a:29:b8:f6:3e:24:
         3e:65:9e:5c:64:f9:9e:bb:33:a3:7d:96:5c:a3:10:17:b6:68:
         b1:95:0d:41:ec:97:7b:e7:48:43:42:53:ba:16:84:11:b8:7f:
         c0:39:b4:80:49:f4:06:97:25:a6:d1:15:15:a2:f4:39:87:d6:
         b2:9b:64:57:84:21:a3:8d:bc:00:f3:ac:e5:68:bf:fc:cf:72:
         11:cc:67:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:02:22 2026 by rpki-client