Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft
File:                     WWtkT4ORAfVZi9Egyt6VSFGgzko.mft (raw, json)
Hash identifier:          ZptYuu5uuXGVfSmnbqfIXJWg9VLCnGHV7axUQesN+Yw=
Subject key identifier:   F6:B0:CC:5F:28:39:C4:06:6B:65:C3:06:53:31:93:5F:31:C0:18:C0
Authority key identifier: 59:6B:64:4F:83:91:01:F5:59:8B:D1:20:CA:DE:95:48:51:A0:CE:4A
Certificate issuer:       /CN=A91AC1CF/serialNumber=596B644F839101F5598BD120CADE954851A0CE4A
Certificate serial:       48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWtkT4ORAfVZi9Egyt6VSFGgzko.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft
Manifest number:          47
Signing time:             Mon 27 Jul 2026 10:43:33 +0000
Manifest this update:     Mon 27 Jul 2026 10:43:33 +0000
Manifest next update:     Mon 03 Aug 2026 10:43:33 +0000
Files and hashes:         1: WWtkT4ORAfVZi9Egyt6VSFGgzko.crl (hash: IDqIuz2olQf1WjDHLGKO74S5Yun2BOO7W5hB9VDVM/Q=)
                          2: 840FB8CC1DAE11F1AA3EBAC03D3D8C67.roa (hash: r5BB+japYC6seEdkVZLK22Dexuxs6mCJDX2FzRf3yv4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.crl
                          rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWtkT4ORAfVZi9Egyt6VSFGgzko.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:43:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC1CF, serialNumber=596B644F839101F5598BD120CADE954851A0CE4A
        Validity
            Not Before: Jul 27 10:43:33 2026 GMT
            Not After : Aug  3 10:43:33 2026 GMT
        Subject: CN=6a673655-b278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:80:83:55:b4:d3:aa:39:10:28:24:a3:5a:31:
                    c6:74:2a:e3:c3:51:52:9b:ba:77:8c:e6:fa:f4:de:
                    e7:63:c8:6f:04:c0:98:6e:07:7f:65:84:6f:65:96:
                    5a:88:ac:24:68:51:18:d2:8e:bc:19:15:f9:71:29:
                    57:73:37:cb:8e:68:64:d2:d0:f8:88:be:45:2e:e4:
                    aa:8e:d2:b1:f7:d8:71:ba:6c:3c:16:84:64:48:f9:
                    34:ed:2e:c7:79:e0:81:0d:41:6a:91:a7:8e:ad:c3:
                    e8:36:8e:88:c9:10:11:3b:ae:57:7c:e0:d0:c0:0a:
                    5b:c7:81:4d:90:70:c0:29:e8:e6:c0:ee:54:7f:f6:
                    14:d0:2d:0a:cd:0d:e6:a0:3f:c9:ab:d1:e3:87:a0:
                    37:79:7c:a2:37:76:93:42:f2:b3:c0:c1:e1:27:9b:
                    0e:e7:1a:94:82:1f:4a:42:c0:0d:95:c7:de:7a:fe:
                    43:57:23:a3:9a:9b:0e:df:27:92:12:a9:06:ae:cb:
                    7d:0e:1d:df:28:46:18:32:42:6b:42:7f:f4:8f:7a:
                    65:5e:ab:25:f9:d4:e1:1f:be:a4:80:50:43:a4:c2:
                    42:8d:0e:20:60:fd:0f:83:37:75:50:43:c3:1f:7c:
                    29:6b:0c:a4:15:d5:fb:28:45:b2:81:39:43:ba:7d:
                    b6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B0:CC:5F:28:39:C4:06:6B:65:C3:06:53:31:93:5F:31:C0:18:C0
            X509v3 Authority Key Identifier:
                keyid:59:6B:64:4F:83:91:01:F5:59:8B:D1:20:CA:DE:95:48:51:A0:CE:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWtkT4ORAfVZi9Egyt6VSFGgzko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:5e:80:63:e9:ff:af:97:d9:fb:4c:a5:fe:cf:cc:f1:0e:0c:
         46:16:20:18:2e:3b:ae:86:9c:4f:6d:6c:c8:f7:81:d3:2f:38:
         50:b8:6f:f7:cc:fe:27:bb:05:a5:08:46:bd:77:bd:41:cd:c7:
         22:3e:ef:9b:52:f4:41:0b:96:ad:82:3d:5b:1d:d8:eb:42:cc:
         9f:98:5b:75:96:bf:ea:b1:60:8f:d3:73:a3:47:1f:ed:58:54:
         39:aa:83:db:18:86:87:ca:d9:b1:d2:c7:99:a4:cc:c8:fd:56:
         47:89:a5:44:38:b1:5e:10:0a:93:9d:cd:6c:a2:12:55:17:88:
         dd:5b:6f:c0:c4:b8:e1:b3:37:1f:5c:b8:88:c0:8e:9b:c5:56:
         9f:72:4c:59:af:9f:4d:7b:33:39:47:36:ea:b5:c3:f8:85:f1:
         bf:50:28:b8:15:12:3b:94:14:9f:d0:1b:93:29:bf:46:94:d1:
         05:cc:d9:4a:cc:24:34:d3:af:82:09:d8:80:3a:f6:75:5a:54:
         91:91:16:7f:28:7b:1b:b1:e5:aa:ff:8c:69:85:b7:4a:70:3e:
         9c:16:b2:4f:42:16:0d:2c:cf:17:3d:88:60:0f:a4:3d:96:11:
         b0:71:49:58:bc:68:37:44:a4:b8:ae:f6:1a:9d:03:97:93:7c:
         46:6c:81:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:30:54 2026 by rpki-client