Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft
File:                     WuNh62BrXTFvDpWX3WjN25xvYAU.mft (raw, json)
Hash identifier:          8T+3BzXY0bYYBxqIwLRrp9kkBnzMnof9WmaljzZk5ss=
Subject key identifier:   97:31:B6:76:38:A1:81:44:5A:B8:C3:55:55:F3:23:34:02:B3:78:7D
Authority key identifier: 5A:E3:61:EB:60:6B:5D:31:6F:0E:95:97:DD:68:CD:DB:9C:6F:60:05
Certificate issuer:       /CN=A91A6990/serialNumber=5AE361EB606B5D316F0E9597DD68CDDB9C6F6005
Certificate serial:       0C05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft
Manifest number:          0BFC
Signing time:             Tue 28 Jul 2026 19:06:24 +0000
Manifest this update:     Tue 28 Jul 2026 19:06:23 +0000
Manifest next update:     Tue 04 Aug 2026 19:06:23 +0000
Files and hashes:         1: WuNh62BrXTFvDpWX3WjN25xvYAU.crl (hash: xcwCLn1A0OuFrL7FCVJdqbrtDxwZU7Kts/1gFHcdK2I=)
                          2: BFE023663DD911EA89EB0782C4F9AE02.roa (hash: 6hhPHJexloDHzFBESaZia1WZAHeeNFdTRkPewv7zBtc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.crl
                          rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3077 (0xc05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6990, serialNumber=5AE361EB606B5D316F0E9597DD68CDDB9C6F6005
        Validity
            Not Before: Jul 28 19:06:23 2026 GMT
            Not After : Aug  4 19:06:23 2026 GMT
        Subject: CN=6a68fdb0-a606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:93:9f:d7:1f:78:10:43:03:1f:fb:9d:78:7b:
                    d7:70:86:09:38:9e:64:91:eb:53:1f:e5:da:c2:3b:
                    b6:10:b2:93:b4:2a:68:07:97:2c:fc:0a:85:cb:ca:
                    72:13:24:14:7a:ff:1e:84:46:cc:1f:f4:94:d7:77:
                    8e:41:6f:25:ac:54:27:ff:0e:d9:7e:20:91:4e:46:
                    ec:58:65:5f:13:ca:40:95:4c:71:40:79:d7:07:0e:
                    62:7d:7e:4c:de:64:dd:fc:d3:b4:33:eb:0d:24:7b:
                    d0:fb:60:0f:14:b5:81:37:fb:04:45:6f:d0:d9:39:
                    88:84:94:5b:40:90:c2:12:a4:d3:87:62:72:22:6e:
                    56:a8:e3:b1:ba:19:9e:59:bf:25:ca:86:70:ab:57:
                    1c:2e:de:f4:fe:95:42:e2:f1:d5:0b:26:70:e1:e8:
                    10:c9:08:a4:b1:e5:a0:bf:97:d6:d7:a1:72:64:1b:
                    9a:ab:b3:a0:c0:9e:6e:30:fb:09:64:f3:49:17:66:
                    76:7f:57:b4:b5:eb:72:4b:73:ee:ea:fa:d1:e3:2d:
                    03:c5:6c:11:59:94:96:e9:22:22:0c:7d:fb:f0:17:
                    e6:9e:6e:8a:53:6f:18:87:d8:bd:37:79:96:ed:77:
                    43:7c:4a:ba:7f:6c:ca:d3:5e:6a:dd:aa:f5:b2:90:
                    5e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:31:B6:76:38:A1:81:44:5A:B8:C3:55:55:F3:23:34:02:B3:78:7D
            X509v3 Authority Key Identifier:
                keyid:5A:E3:61:EB:60:6B:5D:31:6F:0E:95:97:DD:68:CD:DB:9C:6F:60:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:94:81:62:91:e0:90:2b:d3:66:0e:94:e3:af:c3:8a:e7:0b:
         c7:4e:13:2e:83:82:46:1d:9e:7c:89:e0:44:c2:0c:e6:3e:8a:
         92:d8:4e:a5:5e:71:a9:a1:43:2b:b1:90:c0:d4:cf:56:53:83:
         b3:6f:63:5e:94:1a:da:d9:26:3b:78:03:0e:7e:97:a4:6f:af:
         ec:55:de:12:32:45:40:42:63:10:5e:13:f9:8e:e0:ff:d3:8a:
         df:9a:78:b3:bf:29:4f:a9:64:b5:57:5a:ae:c1:2b:9c:2a:61:
         c5:98:1f:43:23:9a:3f:94:9a:e0:ce:77:4e:6c:2e:76:9b:6d:
         ea:0f:9e:10:3e:f9:69:63:81:b8:9d:73:5d:09:9d:8f:5c:5d:
         1c:30:a7:46:96:54:09:62:4e:14:8f:ae:0c:02:57:83:c6:ba:
         a9:71:a2:6f:a9:51:d0:ab:ce:88:6c:f8:d0:d1:b5:8e:8e:2f:
         12:60:7f:51:8d:98:cf:5f:f4:fe:1e:9c:f3:99:27:57:25:9c:
         72:26:c7:c1:e1:87:ac:31:99:93:6c:2f:a5:b1:86:a6:38:dd:
         a9:5e:47:7a:54:ff:f1:d5:26:f1:f5:a2:03:5f:3e:e5:c7:e0:
         ce:80:86:e9:61:26:86:3b:ec:23:e2:2e:2e:46:2a:9d:8d:cc:
         33:8d:6f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:19:27 2026 by rpki-client