Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft
File:                     WWtkT4ORAfVZi9Egyt6VSFGgzko.mft (raw, json)
Hash identifier:          JagnzwXlXOq9bOD0Uwk/H0WwukKHLAkEa27VHJmJN3Y=
Subject key identifier:   E7:7B:4B:67:69:FC:33:A1:32:D2:09:30:89:2A:18:7C:20:60:10:62
Authority key identifier: 59:6B:64:4F:83:91:01:F5:59:8B:D1:20:CA:DE:95:48:51:A0:CE:4A
Certificate issuer:       /CN=A91AC1CF/serialNumber=596B644F839101F5598BD120CADE954851A0CE4A
Certificate serial:       31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWtkT4ORAfVZi9Egyt6VSFGgzko.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft
Manifest number:          30
Signing time:             Thu 11 Jun 2026 11:00:44 +0000
Manifest this update:     Thu 11 Jun 2026 11:00:44 +0000
Manifest next update:     Thu 18 Jun 2026 11:00:44 +0000
Files and hashes:         1: WWtkT4ORAfVZi9Egyt6VSFGgzko.crl (hash: r9CiiYEV2qjbsZ+/T0y3KNezD/c/o7NnE/ESxr2FyAw=)
                          2: 840FB8CC1DAE11F1AA3EBAC03D3D8C67.roa (hash: r5BB+japYC6seEdkVZLK22Dexuxs6mCJDX2FzRf3yv4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.crl
                          rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWtkT4ORAfVZi9Egyt6VSFGgzko.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 11:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC1CF, serialNumber=596B644F839101F5598BD120CADE954851A0CE4A
        Validity
            Not Before: Jun 11 11:00:44 2026 GMT
            Not After : Jun 18 11:00:44 2026 GMT
        Subject: CN=6a2a955c-ed70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:95:dd:cc:f8:1f:11:13:c2:15:fa:ff:05:c6:
                    f3:18:60:42:9e:7c:4b:22:40:15:02:b7:ba:72:29:
                    9f:26:94:8c:e0:05:d2:8f:44:d5:ea:ca:22:f7:24:
                    61:39:53:0a:9c:af:f3:39:87:f2:8b:8e:b7:fe:b2:
                    c0:4b:37:c2:ac:c7:32:e1:7e:c2:60:49:6b:58:8e:
                    4b:ec:ae:f6:d1:4b:9c:a0:68:dd:b3:6c:7e:c1:4d:
                    91:65:fd:08:8a:b5:b3:24:3a:11:0b:e4:b9:ba:ef:
                    c5:02:37:04:cc:98:77:ee:76:f6:b4:f8:96:ce:3a:
                    48:2d:4e:e9:b3:87:0d:2c:20:30:4d:fb:bf:8e:84:
                    2e:8b:34:2f:63:cc:36:ae:ef:41:38:c3:00:03:ea:
                    0d:69:eb:b7:af:e3:db:f0:04:bb:a0:ec:a7:72:ec:
                    cc:5f:5c:7e:cb:30:d3:e6:de:63:06:37:a9:2d:aa:
                    b7:4a:f0:f4:6e:76:66:83:fb:b0:90:05:0f:2e:1d:
                    70:78:8b:f0:c2:21:d2:d0:cd:99:3c:ae:ed:27:c2:
                    fa:69:22:8e:75:f7:78:bd:04:37:0b:51:43:bc:5b:
                    e5:fa:12:c9:8a:47:c1:58:37:34:9e:35:de:02:93:
                    d7:41:44:67:15:d9:09:ce:32:6e:1c:0b:a5:92:e6:
                    3b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:7B:4B:67:69:FC:33:A1:32:D2:09:30:89:2A:18:7C:20:60:10:62
            X509v3 Authority Key Identifier:
                keyid:59:6B:64:4F:83:91:01:F5:59:8B:D1:20:CA:DE:95:48:51:A0:CE:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWtkT4ORAfVZi9Egyt6VSFGgzko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:27:8e:71:10:59:1f:de:79:bc:c2:6a:7d:52:85:fc:32:64:
         93:37:42:94:1a:65:7f:a7:6c:7c:7d:ab:b5:c6:b4:90:b2:6c:
         33:18:35:46:41:ff:ea:c7:9e:89:b6:ac:ae:d5:10:d9:13:4a:
         3e:2c:33:10:fd:a8:3d:d1:35:3c:e3:99:bf:7f:3d:55:f4:52:
         41:0f:07:7a:2a:4c:ca:86:49:b8:29:18:37:78:91:98:1a:22:
         6d:90:04:f0:cf:52:ca:c7:1f:09:be:91:66:56:cf:aa:54:72:
         e3:b9:7c:47:65:9f:db:b3:49:db:9e:09:0c:c3:99:48:82:ae:
         a1:eb:b8:ad:a0:ad:fa:59:35:d5:9f:19:f5:f0:cc:8f:4d:ab:
         9d:7b:83:8c:40:d2:4f:fa:c7:46:37:ff:c4:f7:e5:93:c0:89:
         34:06:fe:1c:4d:3d:76:14:da:39:65:a4:73:3d:14:01:82:67:
         d8:00:0f:3d:c5:e6:98:47:08:08:b6:c9:79:46:00:e1:8b:9e:
         c0:f8:7c:df:86:63:b7:94:80:60:75:05:b9:88:55:e1:40:7e:
         eb:5c:66:bc:da:03:ab:15:68:87:7b:35:e2:fc:d3:7b:d1:8b:
         2b:52:6f:0a:a7:05:33:1a:e9:6b:24:e8:93:58:b0:ad:f0:ff:
         69:77:50:5b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
QzFDRjExMC8GA1UEBRMoNTk2QjY0NEY4MzkxMDFGNTU5OEJEMTIwQ0FERTk1NDg1
MUEwQ0U0QTAeFw0yNjA2MTExMTAwNDRaFw0yNjA2MTgxMTAwNDRaMBgxFjAUBgNV
BAMTDTZhMmE5NTVjLWVkNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDmld3M+B8RE8IV+v8FxvMYYEKefEsiQBUCt7pyKZ8mlIzgBdKPRNXqyiL3JGE5
Uwqcr/M5h/KLjrf+ssBLN8KsxzLhfsJgSWtYjkvsrvbRS5ygaN2zbH7BTZFl/QiK
tbMkOhEL5Lm678UCNwTMmHfudva0+JbOOkgtTumzhw0sIDBN+7+OhC6LNC9jzDau
70E4wwAD6g1p67ev49vwBLug7Kdy7MxfXH7LMNPm3mMGN6ktqrdK8PRudmaD+7CQ
BQ8uHXB4i/DCIdLQzZk8ru0nwvppIo5193i9BDcLUUO8W+X6EsmKR8FYNzSeNd4C
k9dBRGcV2QnOMm4cC6WS5jubAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU53tLZ2n8
M6Ey0gkwiSoYfCBgEGIwHwYDVR0jBBgwFoAUWWtkT4ORAfVZi9Egyt6VSFGgzkow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDMUNGL0ZBNzFCMUQ4MURB
RDExRjE4NUU0MkZCRTNEM0Q4QzY3L1dXdGtUNE9SQWZWWmk5RWd5dDZWU0ZHZ3pr
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvV1d0a1Q0T1JBZlZaaTlFZ3l0NlZTRkdnemtvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD
MUNGL0ZBNzFCMUQ4MURBRDExRjE4NUU0MkZCRTNEM0Q4QzY3L1dXdGtUNE9SQWZW
Wmk5RWd5dDZWU0ZHZ3prby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCDJ45xEFkf3nm8wmp9UoX8MmSTN0KUGmV/p2x8fau1xrSQsmwzGDVGQf/qx56J
tqyu1RDZE0o+LDMQ/ag90TU845m/fz1V9FJBDwd6KkzKhkm4KRg3eJGYGiJtkATw
z1LKxx8JvpFmVs+qVHLjuXxHZZ/bs0nbngkMw5lIgq6h67itoK36WTXVnxn18MyP
Taude4OMQNJP+sdGN//E9+WTwIk0Bv4cTT12FNo5ZaRzPRQBgmfYAA89xeaYRwgI
tsl5RgDhi57A+HzfhmO3lIBgdQW5iFXhQH7rXGa82gOrFWiHezXi/NN70YsrUm8K
pwUzGulrJOiTWLCt8P9pd1Bb
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:55:36 2026 by rpki-client