Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft
File:                     vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft (raw, json)
Hash identifier:          Dc2hFA8GLgOKennR6v8VAM3BCUeXBCwbCYwbgJaefb8=
Subject key identifier:   DA:06:32:F6:D8:DC:70:2D:61:D7:EF:76:6C:FD:8A:BA:FF:63:B1:C6
Authority key identifier: BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6
Certificate issuer:       /CN=A91B03C3/serialNumber=BD609663E39632E2E7B74FDCD372A7DCC5F029A6
Certificate serial:       097B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft
Manifest number:          0971
Signing time:             Tue 28 Jul 2026 20:26:01 +0000
Manifest this update:     Tue 28 Jul 2026 20:26:00 +0000
Manifest next update:     Tue 04 Aug 2026 20:26:00 +0000
Files and hashes:         1: vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl (hash: Y8qkItUMk7WacfBxYmzd6Dbdmlr5BAPkQRSvN/z25Lc=)
                          2: 1D0E6A7027FC11EDB69DF17AC4F9AE02.roa (hash: L0sYWPo+9IUvL/Wn9f+p+luxm7X2c3QL9dFRe3ip7Y4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl
                          rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:25:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2427 (0x97b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B03C3, serialNumber=BD609663E39632E2E7B74FDCD372A7DCC5F029A6
        Validity
            Not Before: Jul 28 20:26:00 2026 GMT
            Not After : Aug  4 20:26:00 2026 GMT
        Subject: CN=6a691058-69c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:af:8f:ef:a9:f9:e2:9a:e9:12:4d:73:40:96:
                    18:4c:d4:bf:d2:a8:63:8a:91:ec:45:fb:f2:d8:65:
                    71:ac:cf:24:70:91:bf:95:a8:fd:bf:ec:64:36:16:
                    ec:33:05:d2:44:a0:87:51:60:eb:ad:ea:39:40:58:
                    fd:a2:ba:56:03:0c:6b:59:e9:18:c4:be:e0:fd:2c:
                    ee:4d:40:2b:2f:27:d7:fe:99:af:c2:41:3a:8f:b7:
                    94:dc:dc:cb:b8:f0:12:b9:0f:7c:c1:af:73:97:76:
                    09:10:3e:3d:8f:c3:08:f2:70:46:05:d8:0b:40:31:
                    1c:07:61:ef:39:7b:16:7c:0f:37:af:a2:cf:8e:b7:
                    23:28:35:44:78:45:fe:3c:0e:8d:74:74:ba:16:16:
                    3f:ee:fc:ee:aa:a5:73:5e:78:4b:da:50:55:80:68:
                    62:f7:55:96:68:82:a7:60:9e:32:cf:95:5c:8a:f5:
                    5a:12:fe:d3:9b:8a:5d:55:7a:8e:0a:2f:78:98:bc:
                    96:7f:cd:7d:2d:4d:c5:d7:f6:e5:4d:95:a2:ca:b3:
                    28:5e:62:1b:e5:34:6d:d9:80:d3:9a:bd:cb:3d:88:
                    fb:04:c4:92:c4:be:eb:2e:be:d1:30:0f:7b:6d:d2:
                    dc:1b:cb:8e:b7:39:ec:81:09:af:b7:c9:20:e2:d7:
                    7c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:06:32:F6:D8:DC:70:2D:61:D7:EF:76:6C:FD:8A:BA:FF:63:B1:C6
            X509v3 Authority Key Identifier:
                keyid:BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:e1:1b:f4:f4:7c:03:af:07:f4:34:36:da:fe:33:55:b1:b6:
         08:33:35:e8:56:d4:4f:06:ed:aa:df:84:5e:b1:19:b1:96:4d:
         ad:c5:b7:75:6e:4f:03:ca:b3:a5:57:93:56:c7:25:93:18:fc:
         b3:be:18:9d:7b:32:76:38:68:8a:d8:58:51:54:05:f5:03:29:
         d2:ce:cb:99:fb:c0:31:12:80:9a:17:91:99:f0:34:9c:1d:8d:
         1a:0e:ea:85:5a:74:73:d4:65:22:ed:23:c0:b6:c1:58:da:d3:
         e0:50:5c:ce:46:48:1d:0c:a1:bc:84:93:68:f0:34:47:5c:f5:
         ca:c7:2e:59:44:57:6a:3c:b5:9b:8a:5a:3a:34:a8:b1:50:51:
         a1:cd:ae:33:fc:d5:c4:a7:bd:55:eb:41:8a:7d:37:cb:2a:e8:
         96:21:b4:76:51:04:43:3f:98:55:84:e9:90:46:bc:7a:a0:8f:
         34:87:dc:aa:87:fe:a8:23:1f:bb:07:bd:e6:0e:65:ce:09:c3:
         43:15:25:ea:46:9a:c5:f8:1d:9b:ba:14:94:24:77:94:3b:b9:
         be:b5:fb:58:f3:47:be:22:01:c4:af:43:da:a4:bc:90:bb:68:
         b8:a2:f4:ea:eb:6c:fc:30:3c:e8:95:57:3b:b2:69:d5:4d:6c:
         63:8b:32:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:47:30 2026 by rpki-client