Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft
File:                     WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft (raw, json)
Hash identifier:          BalxkaXlilBisqPUV0eZsBSw9SC97EcUVNkI1PjcIQ4=
Subject key identifier:   A8:9E:33:2E:16:E9:14:C9:C8:3B:EC:08:EA:0C:32:09:62:97:C7:A5
Authority key identifier: 59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2
Certificate issuer:       /CN=A917C909/serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2
Certificate serial:       013F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft
Manifest number:          0136
Signing time:             Mon 27 Jul 2026 07:38:00 +0000
Manifest this update:     Mon 27 Jul 2026 07:38:00 +0000
Manifest next update:     Mon 03 Aug 2026 07:38:00 +0000
Files and hashes:         1: WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl (hash: iR2Da9DS8wGHmirzz7ak0rFlqXRSIT7RxqeY0coHX88=)
                          2: 46C0C4E0770311F09B9D387BC4F9AE02.roa (hash: seNWkSzPB+y0QnMqGd7lzmRBQ9fM1nYcZLpQ+T55VyE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl
                          rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C909, serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2
        Validity
            Not Before: Jul 27 07:38:00 2026 GMT
            Not After : Aug  3 07:38:00 2026 GMT
        Subject: CN=6a670ad8-10ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a9:00:06:2d:c3:a2:cb:62:88:f4:81:11:54:
                    26:c9:ee:19:5f:ee:cb:78:74:31:3f:e0:66:5e:25:
                    24:8b:06:ed:52:99:6d:cb:a6:07:8c:55:5a:79:de:
                    84:28:0e:3e:4a:40:ad:24:45:42:da:97:3e:19:8f:
                    27:0f:13:c2:84:63:33:01:95:ec:de:04:6a:63:ad:
                    fe:07:6e:58:19:16:b1:d1:c3:f8:90:8f:5c:42:17:
                    e0:0e:50:9c:c9:bd:97:4d:10:3e:de:38:b2:ea:0d:
                    7f:97:69:c9:75:99:45:bb:84:8b:70:32:0d:bf:b5:
                    e8:59:27:93:06:d8:e8:e6:d2:76:19:bb:ed:69:76:
                    db:69:4b:a6:ae:36:14:65:67:34:56:48:ca:9c:cd:
                    45:37:cd:f3:80:35:d9:f0:d3:37:5f:3b:5b:5e:00:
                    86:23:9a:f4:bc:46:c4:d8:f9:90:72:7e:5b:1c:73:
                    f4:6f:c3:fa:28:50:e2:71:b5:6f:ef:cc:b2:2d:d6:
                    46:af:71:7b:8b:14:ec:0c:da:bf:6f:34:4b:c9:35:
                    5a:18:81:f6:8e:7f:90:71:54:af:ee:35:b2:ea:da:
                    22:98:3c:4e:fe:cd:87:a3:ff:df:79:69:a9:b1:7d:
                    7e:65:56:60:2d:0f:2d:e2:e7:bf:83:14:db:8a:8d:
                    01:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9E:33:2E:16:E9:14:C9:C8:3B:EC:08:EA:0C:32:09:62:97:C7:A5
            X509v3 Authority Key Identifier:
                keyid:59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ca:53:a6:26:cb:d2:f8:55:62:a9:7f:cb:f3:a2:07:47:14:
         f5:90:4a:d2:88:0e:8a:c5:49:8d:f9:16:38:ea:41:36:36:ae:
         5d:6f:b9:85:a7:36:b9:88:90:22:5f:f0:28:16:4e:ff:98:e8:
         f0:e8:9f:e5:41:c7:63:3e:71:29:27:00:0a:7d:4c:59:84:25:
         2d:92:82:cf:6c:d0:77:a3:c9:f4:c4:2e:f3:19:b1:ac:ce:dd:
         57:18:d2:40:33:07:41:2d:a0:25:c7:22:06:4f:fa:f9:53:7e:
         54:6f:76:8a:17:5d:9a:a3:5f:ca:9e:7b:1c:c9:73:0d:9d:5e:
         ae:89:d4:42:59:6f:c4:88:0f:e9:e7:34:1c:b7:92:0f:d6:94:
         50:c3:78:52:4a:4f:2d:97:67:51:c7:86:74:ad:06:5f:13:a5:
         32:34:e9:41:8a:7b:c9:7a:35:cf:fb:cf:08:70:1c:04:36:97:
         3d:e2:3e:1b:c1:42:98:3e:c8:ec:6b:10:14:33:da:da:ca:a8:
         c0:c9:4d:19:d0:ed:55:d8:84:76:58:0a:f8:74:be:cc:1b:d8:
         58:cd:3a:72:cb:bc:58:e0:25:2d:59:a9:ca:db:d2:cd:17:50:
         06:90:e9:8e:ab:cd:2a:31:b3:0e:4d:72:5e:ad:13:71:58:2a:
         82:22:99:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:22:36 2026 by rpki-client