Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft
File:                     qWaisn_hSTe-NtJ9tfTXaICEfdc.mft (raw, json)
Hash identifier:          wEGYiuuY8cliJ5Y9kwBjEg268PIOnDDrPr9h2773cn4=
Subject key identifier:   70:A9:5F:1B:D3:46:BB:3F:28:4E:29:C7:4C:8A:7B:40:9F:5A:81:9D
Authority key identifier: A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7
Certificate issuer:       /CN=A91536E1/serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7
Certificate serial:       086B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft
Manifest number:          0862
Signing time:             Tue 28 Jul 2026 21:16:13 +0000
Manifest this update:     Tue 28 Jul 2026 21:16:12 +0000
Manifest next update:     Tue 04 Aug 2026 21:16:12 +0000
Files and hashes:         1: qWaisn_hSTe-NtJ9tfTXaICEfdc.crl (hash: BGWI4G3o3i9dGMAynlRDfzxiXx3UOvFwr4lBx1Vn4gA=)
                          2: 41C97D600EA811EB8E9A770CC4F9AE02.roa (hash: DBVP47MzkA4zExAYz5BkJLhWa09IKcrwIj4PmXTVqgE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl
                          rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:16:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2155 (0x86b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91536E1, serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7
        Validity
            Not Before: Jul 28 21:16:12 2026 GMT
            Not After : Aug  4 21:16:12 2026 GMT
        Subject: CN=6a691c1d-c5fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:05:b6:e2:c2:66:77:71:78:15:b0:f9:46:ac:
                    b4:2c:29:21:9b:00:e6:9b:59:1a:1d:d7:2b:ee:ce:
                    7b:3d:ba:1b:14:cb:c2:9e:a8:84:ef:a1:c2:c7:9b:
                    78:b8:79:9e:b1:49:ac:03:0b:82:37:84:08:ec:cc:
                    68:6e:57:cb:5f:83:79:b1:92:7c:47:4e:6d:e0:11:
                    ae:99:84:90:b3:ca:6d:a5:b2:dd:94:68:c6:83:7e:
                    ea:e5:3c:79:ce:66:f9:8f:62:8a:fc:27:a4:e7:3b:
                    c7:55:9a:ae:bd:a8:87:7f:8e:73:ed:2f:33:65:20:
                    6a:df:49:21:06:f6:a2:42:bc:66:cf:2e:65:38:11:
                    d3:ab:b4:f9:c0:8a:19:36:e5:e0:d4:51:7c:9a:af:
                    8e:4d:c4:f7:52:60:d4:55:47:ff:9b:4f:de:19:c7:
                    9f:4a:b7:be:10:37:fc:88:66:7f:d3:0e:61:a3:b8:
                    28:e0:7e:ef:2f:8d:cd:e2:74:2d:aa:a4:fa:40:f3:
                    19:d7:8b:01:6e:10:69:03:7f:31:44:a9:b1:e7:18:
                    21:31:f5:de:1a:4f:50:7c:44:5d:6f:11:36:a1:5f:
                    0b:40:8b:86:66:08:6f:8b:79:68:68:cf:8f:dd:f8:
                    ee:fd:6c:71:a4:ae:90:e6:57:8d:74:29:d2:6f:10:
                    2d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A9:5F:1B:D3:46:BB:3F:28:4E:29:C7:4C:8A:7B:40:9F:5A:81:9D
            X509v3 Authority Key Identifier:
                keyid:A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:1e:02:17:03:a9:64:45:a0:4d:b1:07:52:15:c7:07:76:3a:
         b3:01:09:6f:0d:0a:6b:c0:4e:34:90:6d:55:04:35:71:5a:ca:
         e8:f8:81:6c:8b:c3:22:82:56:5a:e5:85:ec:4d:2e:69:03:3b:
         65:b1:a7:09:33:a7:23:10:5d:d1:d2:48:87:6b:e0:43:4b:8a:
         bc:db:f7:00:8c:ee:d2:f5:a2:15:fa:03:0d:76:e7:74:1b:06:
         c6:19:a2:a0:3b:51:e4:1e:33:08:c7:b6:01:47:a9:e6:ca:c2:
         13:11:c2:95:c7:03:d9:c7:b9:87:a5:6c:ca:c2:65:1a:e7:a3:
         8c:42:42:ff:19:40:90:f4:b3:44:35:45:c7:32:1c:85:d5:c5:
         4d:68:a6:43:b8:b3:bd:86:09:6b:40:cf:c1:73:e3:dc:80:0a:
         bb:52:53:a9:2f:3a:30:42:f7:69:21:03:df:ea:02:92:81:c9:
         45:37:a3:9b:96:f5:75:f2:b3:15:86:cf:66:fd:bf:31:4c:01:
         13:f2:ce:ce:ab:3f:31:f7:80:23:4a:8c:10:7a:9a:05:0d:50:
         96:da:7e:a0:2f:ff:e8:cd:62:67:86:66:e4:11:0d:8e:57:16:
         8a:07:fe:3f:24:8c:85:46:6a:34:c9:f2:a0:be:0a:4f:da:93:
         9b:f4:cb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:36:47 2026 by rpki-client