Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft
File:                     WFcZh2wfmiD9644Ew9aTelrKpXw.mft (raw, json)
Hash identifier:          8LZ5umsKkOZDMKnTh5PxvHbiuJOfL1/O0LqM1L9R90U=
Subject key identifier:   68:1A:7F:EF:A4:EE:F3:45:09:61:9E:6C:19:BF:DD:96:72:02:90:FC
Authority key identifier: 58:57:19:87:6C:1F:9A:20:FD:EB:8E:04:C3:D6:93:7A:5A:CA:A5:7C
Certificate issuer:       /CN=A916F1C6/serialNumber=585719876C1F9A20FDEB8E04C3D6937A5ACAA57C
Certificate serial:       355D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft
Manifest number:          355D
Signing time:             Tue 28 Jul 2026 15:08:02 +0000
Manifest this update:     Tue 28 Jul 2026 15:08:01 +0000
Manifest next update:     Tue 04 Aug 2026 15:08:01 +0000
Files and hashes:         1: WFcZh2wfmiD9644Ew9aTelrKpXw.crl (hash: P6kvzE/uGT3WOnO3h+H7T74X8xIveKkaWZHfSTqS0ko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.crl
                          rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13661 (0x355d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916F1C6, serialNumber=585719876C1F9A20FDEB8E04C3D6937A5ACAA57C
        Validity
            Not Before: Jul 28 15:08:01 2026 GMT
            Not After : Aug  4 15:08:01 2026 GMT
        Subject: CN=6a68c5d1-936f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6d:e1:96:34:6c:12:9e:93:9e:88:37:5b:38:
                    df:90:40:4b:b9:23:c9:48:9f:e0:5e:d3:d5:5f:02:
                    2c:f4:0c:83:f8:21:fe:37:3c:f2:12:3c:5e:7f:8c:
                    96:d1:73:b2:70:9f:21:54:1c:db:bb:71:31:21:de:
                    76:82:2d:4c:cc:8e:6a:ab:f6:4f:2b:16:5a:4f:f8:
                    a0:7f:93:db:b7:dc:5b:5c:1c:85:72:53:4d:2a:0f:
                    f2:2c:61:fd:5d:a2:5d:53:02:7f:15:4c:67:b7:71:
                    e9:c5:41:a4:6f:0d:0b:8b:03:d3:52:6a:03:15:75:
                    25:f3:29:86:8b:67:a0:eb:0a:c4:20:32:c3:c4:31:
                    b1:45:f9:dd:bf:9e:33:31:23:74:c0:bd:ed:ba:08:
                    fd:b4:0d:bd:52:be:f4:0b:44:f6:b7:3e:1e:3a:37:
                    06:21:42:8b:2a:be:8b:af:5c:5c:24:41:64:2e:51:
                    f8:09:eb:4d:09:6b:46:86:76:d3:68:d9:2a:ff:21:
                    3b:cc:48:5b:95:29:0a:aa:66:0e:4e:90:6c:86:08:
                    6c:e5:e4:0c:8f:25:bd:a8:57:8c:bd:37:f3:3a:cb:
                    00:2f:b9:c5:21:ea:db:16:74:dd:b4:b8:d2:cf:e7:
                    08:c5:4b:7c:7c:fa:c3:d5:39:4d:0f:01:3c:56:22:
                    64:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:1A:7F:EF:A4:EE:F3:45:09:61:9E:6C:19:BF:DD:96:72:02:90:FC
            X509v3 Authority Key Identifier:
                keyid:58:57:19:87:6C:1F:9A:20:FD:EB:8E:04:C3:D6:93:7A:5A:CA:A5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:f5:59:24:17:e8:44:e5:aa:90:69:e8:c5:68:04:6f:9b:51:
         05:02:88:63:b5:39:a6:bf:58:db:88:6f:cb:41:53:30:e3:12:
         90:f7:4a:d3:f5:2a:1a:06:41:6e:3b:20:f4:f6:4f:61:70:d6:
         f2:dc:56:09:61:22:3c:d0:6d:35:a2:3a:19:fa:79:44:38:48:
         b4:77:2c:c4:b9:01:6a:bf:ec:cc:22:d3:8c:79:c1:85:0c:80:
         50:aa:17:84:c9:5f:b3:fa:ed:7c:48:18:4b:09:e6:a4:7e:e2:
         ce:0e:7a:65:92:4d:2c:7f:1e:da:64:51:92:84:bb:53:a3:65:
         0c:c1:82:48:b0:8e:fc:ab:67:a4:8f:c9:07:cc:1a:30:a0:70:
         82:db:52:98:66:ed:26:2f:b9:80:3d:57:6f:5c:bc:ed:44:68:
         d5:ae:db:c0:90:2b:8e:61:06:ad:3b:34:e4:84:01:d1:28:f9:
         17:39:0a:31:ad:d6:ea:72:71:b9:39:a7:03:52:c9:45:73:16:
         67:66:7d:72:f7:6a:d4:02:00:f8:6b:1e:8f:b2:c8:bb:d8:37:
         61:04:c3:7b:07:27:36:e1:59:66:50:66:66:4b:54:73:1f:fe:
         f9:bf:d1:81:54:df:4e:83:26:b6:85:20:fa:66:c0:e2:65:03:
         30:04:b1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:09:43 2026 by rpki-client