Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
File:                     waLHH9itWCWJ8EkC3a-DmIXf0zc.mft (raw, json)
Hash identifier:          i+1LXJ7E2oE6lz2epN76PklmTIx0OFoZw5y2Hx2lelA=
Subject key identifier:   D2:3C:B1:A6:CD:D0:38:87:35:8E:F3:93:0D:E3:F5:3B:18:6E:A1:EE
Authority key identifier: C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37
Certificate issuer:       /CN=A91A87AB/serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337
Certificate serial:       063C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
Manifest number:          0633
Signing time:             Fri 12 Jun 2026 22:48:50 +0000
Manifest this update:     Fri 12 Jun 2026 22:48:50 +0000
Manifest next update:     Fri 19 Jun 2026 22:48:50 +0000
Files and hashes:         1: waLHH9itWCWJ8EkC3a-DmIXf0zc.crl (hash: KR8YzJtJ5U16e5CodPsxwjzPwvdgnAZdrFSpiKeVfsA=)
                          2: 9C3424A08F7F11F09A0D9529C4F9AE02.roa (hash: hM4BPVux9YYhFTFUn31M+wA3pgU5Mg1/NkcXZA6rsfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl
                          rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:48:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1596 (0x63c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A87AB, serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337
        Validity
            Not Before: Jun 12 22:48:50 2026 GMT
            Not After : Jun 19 22:48:50 2026 GMT
        Subject: CN=6a2c8cd2-fdf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0e:c8:ac:80:75:80:30:f4:91:21:e7:7e:04:
                    f5:e9:96:bf:98:8f:1d:bb:07:b6:bb:e0:ef:50:a3:
                    cb:9a:af:0e:ab:67:da:7f:03:c3:8b:2b:d6:b1:a4:
                    19:9e:13:82:59:22:15:37:c9:90:ce:b7:f3:a5:26:
                    ca:50:be:3c:e9:e0:89:76:1a:8e:2c:5d:52:f1:51:
                    7b:75:53:a0:c8:90:f0:93:aa:2d:1e:57:7f:d2:97:
                    db:bc:73:bd:d7:38:37:78:a6:bb:aa:2a:d0:2d:45:
                    a9:9a:51:dc:d5:82:f3:eb:d0:9f:55:c9:8e:bc:5b:
                    54:80:05:de:c7:d0:e8:44:7e:df:db:24:81:8c:b4:
                    6d:5f:a3:52:68:a0:2a:90:0f:95:22:85:a2:95:bb:
                    21:dc:1a:cd:44:0d:a8:a5:20:97:21:47:e0:0a:54:
                    8e:8f:3b:e3:56:57:02:96:b9:3b:f9:dd:9f:a1:76:
                    aa:17:7e:0a:05:6a:cd:57:bb:f6:a3:3a:00:a6:fc:
                    f0:fb:b1:fa:29:6c:5d:8a:59:25:37:59:ad:67:e9:
                    ba:c9:d3:86:80:fe:fd:2f:00:60:f7:75:b1:5e:37:
                    4b:29:01:e1:be:8b:45:70:e2:cc:d9:47:a3:ce:d6:
                    2b:75:fc:3f:eb:51:14:9a:e1:cc:39:5f:8c:74:fa:
                    4d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:3C:B1:A6:CD:D0:38:87:35:8E:F3:93:0D:E3:F5:3B:18:6E:A1:EE
            X509v3 Authority Key Identifier:
                keyid:C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:0d:fe:51:42:36:ea:a2:51:88:dc:5a:63:13:14:30:87:9e:
         5c:19:ec:77:96:c9:06:54:98:df:10:33:f4:cd:50:43:38:35:
         7d:14:a7:ff:f7:ca:d7:80:11:58:6c:08:c7:15:38:ad:0a:dc:
         ec:70:a7:41:82:93:d6:78:6b:0d:97:e8:6b:c3:91:ca:8f:1e:
         58:f7:1d:51:23:f6:5c:6a:f9:76:5c:14:45:84:21:3f:83:52:
         44:11:f5:47:49:07:47:b3:a2:df:fc:38:6c:73:f7:9c:f9:73:
         26:03:4e:11:f7:b5:d0:c8:b1:e0:c8:0b:8e:f0:61:c1:8e:66:
         c9:93:69:38:9a:50:ae:b6:1f:03:f3:b4:01:fc:3c:d1:3f:37:
         00:bb:1f:92:20:61:94:c4:0f:b3:8a:8d:81:2f:06:44:e2:f4:
         29:d4:66:07:00:7c:94:ba:75:9f:22:e6:9b:11:8c:29:0e:84:
         f1:52:a9:a3:ab:5d:03:73:e5:c5:ea:b1:0d:ed:a8:21:68:b4:
         82:e6:c5:39:9b:e2:a4:de:70:49:90:c6:6d:ee:8c:fb:ea:4c:
         3f:14:42:34:75:0d:9f:b8:f1:32:99:b7:aa:6c:37:5e:94:7f:
         0d:3e:9e:31:e2:0d:2d:73:3b:5a:a2:73:4e:b2:35:9f:69:5b:
         89:27:f7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:59:32 2026 by rpki-client