Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
File:                     WRGN11PwUw7cK4w74mO-2wzOvA4.mft (raw, json)
Hash identifier:          p9daLIA68ydPAGkTONUmegyXfDMfdWk6suFgT3QiThM=
Subject key identifier:   B3:DE:16:C6:95:CC:CB:C4:38:A7:3A:12:03:43:4A:73:2C:8D:72:0A
Authority key identifier: 59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E
Certificate issuer:       /CN=A91B12FB/serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E
Certificate serial:       03C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
Manifest number:          03AD
Signing time:             Wed 29 Jul 2026 01:25:50 +0000
Manifest this update:     Wed 29 Jul 2026 01:25:50 +0000
Manifest next update:     Wed 05 Aug 2026 01:25:50 +0000
Files and hashes:         1: WRGN11PwUw7cK4w74mO-2wzOvA4.crl (hash: Pew/IuM8ONzDV6U4XCwNWASeJxDLpOwi8AfZT2lEPWI=)
                          2: 6967C1F494F711EF905E5F13C4F9AE02.roa (hash: pAZV68jGjWuKWqhQJP5ckwM2V0tQYdqN4ZXDEqElElc=)
                          3: E15780AA32E111EFB163924BC4F9AE02.roa (hash: YJWEr2nrAdnP2NutE9Ms8r6Gtbwk3PCYEKG8MqYno4Y=)
                          4: 8409527078B011EE8D737723C4F9AE02.roa (hash: S/EE8dzEnvlxDFYWVTl3pTW1+xiF5BVX2thc9vnDMAU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl
                          rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 01:25:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 962 (0x3c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B12FB, serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E
        Validity
            Not Before: Jul 29 01:25:50 2026 GMT
            Not After : Aug  5 01:25:50 2026 GMT
        Subject: CN=6a69569e-5fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:46:5e:08:9c:b7:f0:67:8c:07:57:51:63:b0:
                    aa:fc:75:02:db:1e:b2:db:e0:c5:b0:ed:3f:d4:11:
                    c3:4f:e3:98:5f:f3:a6:0a:33:74:f3:88:10:47:44:
                    11:b8:c6:ee:62:ce:a7:b3:bd:48:f1:97:35:61:c3:
                    b6:05:87:c7:f8:10:8e:3e:6e:96:48:a6:f6:55:98:
                    33:63:2a:66:c6:3d:cc:b6:5b:c9:cb:66:8f:97:c7:
                    89:a2:60:a8:06:44:2f:6c:ae:e0:bd:05:0c:bb:6e:
                    bc:eb:dc:89:c4:fd:68:66:f3:23:02:c7:ef:26:d3:
                    74:d4:e4:bf:5c:c0:86:c5:27:19:be:a5:32:b8:69:
                    8c:9a:19:e0:02:78:1b:99:18:b3:e0:95:cd:cd:78:
                    c3:74:61:bb:d5:d8:73:3d:35:fe:2f:e5:73:d1:11:
                    2b:3e:b3:83:54:91:b9:9e:c5:74:1f:b4:67:fd:0c:
                    fe:c0:1f:82:b7:12:bb:06:97:9a:a8:c7:aa:ac:15:
                    09:5c:eb:1b:fe:c5:f7:9a:fa:bf:84:77:13:73:4f:
                    da:d5:1c:67:e1:3e:cc:8d:2b:8b:a3:35:e4:fd:90:
                    06:7e:69:dc:d1:0f:86:c4:2a:88:0d:5a:d2:4e:6a:
                    f3:8a:d6:bf:31:d4:a1:19:59:1c:bc:9d:95:2b:13:
                    fa:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DE:16:C6:95:CC:CB:C4:38:A7:3A:12:03:43:4A:73:2C:8D:72:0A
            X509v3 Authority Key Identifier:
                keyid:59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:b0:4b:0c:4b:71:65:b1:48:a2:24:81:ac:c1:06:cf:9c:79:
         6d:21:f1:ec:96:eb:4a:17:05:4e:5e:66:47:ce:1a:87:59:b0:
         ef:f8:de:c9:c6:a9:89:d0:f2:07:d5:6e:82:de:eb:4c:a6:24:
         37:fb:d7:ae:e0:32:e1:45:57:3d:ac:31:3e:09:1f:66:b3:88:
         43:a0:85:46:ae:0f:ea:c1:f9:89:25:d0:20:1b:77:1e:90:d9:
         23:b2:82:7a:67:34:26:32:81:38:5b:98:5f:7c:52:6c:58:04:
         82:3b:e0:83:7e:82:c0:08:3e:be:06:34:8b:50:79:e7:a2:db:
         b9:3b:74:23:fa:ee:1c:7a:ec:2a:a9:72:cc:63:25:56:9f:25:
         c7:98:ac:2a:62:54:25:50:82:fc:d1:d6:ad:63:11:20:db:82:
         3a:84:ac:03:1e:d0:33:32:86:73:03:d0:be:60:67:a7:5f:ff:
         22:26:14:d1:81:20:df:e2:55:a7:b1:32:9c:14:e8:df:b7:90:
         af:9b:02:88:5c:ac:41:92:e1:62:3d:81:dd:60:98:2a:97:5b:
         58:8e:4b:fb:7f:a9:78:44:f3:31:8a:bb:e1:ba:13:16:a4:dd:
         8f:5c:fe:e9:58:be:38:e8:d3:37:18:5b:5c:33:f6:98:01:7d:
         db:b1:73:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjEyRkIxMTAvBgNVBAUTKDU5MTE4REQ3NTNGMDUzMEVEQzJCOEMzQkUyNjNCRURC
MENDRUJDMEUwHhcNMjYwNzI5MDEyNTUwWhcNMjYwODA1MDEyNTUwWjAYMRYwFAYD
VQQDEw02YTY5NTY5ZS01ZmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArEZeCJy38GeMB1dRY7Cq/HUC2x6y2+DFsO0/1BHDT+OYX/OmCjN084gQR0QR
uMbuYs6ns71I8Zc1YcO2BYfH+BCOPm6WSKb2VZgzYypmxj3MtlvJy2aPl8eJomCo
BkQvbK7gvQUMu26869yJxP1oZvMjAsfvJtN01OS/XMCGxScZvqUyuGmMmhngAngb
mRiz4JXNzXjDdGG71dhzPTX+L+Vz0RErPrODVJG5nsV0H7Rn/Qz+wB+CtxK7Bpea
qMeqrBUJXOsb/sX3mvq/hHcTc0/a1Rxn4T7MjSuLozXk/ZAGfmnc0Q+GxCqIDVrS
Tmrzita/MdShGVkcvJ2VKxP6QwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLPeFsaV
zMvEOKc6EgNDSnMsjXIKMB8GA1UdIwQYMBaAFFkRjddT8FMO3CuMO+JjvtsMzrwO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTJGQi9FMEQ2NDUxNEVE
MUQxMUVDQjVGRjJCMjRDNEY5QUUwMi9XUkdOMTFQd1V3N2NLNHc3NG1PLTJ3ek92
QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dSR04xMVB3VXc3Y0s0dzc0bU8tMnd6T3ZBNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MTJGQi9FMEQ2NDUxNEVEMUQxMUVDQjVGRjJCMjRDNEY5QUUwMi9XUkdOMTFQd1V3
N2NLNHc3NG1PLTJ3ek92QTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWrBLDEtxZbFIoiSBrMEGz5x5bSHx7JbrShcFTl5mR84ah1mw7/jeycapidDy
B9Vugt7rTKYkN/vXruAy4UVXPawxPgkfZrOIQ6CFRq4P6sH5iSXQIBt3HpDZI7KC
emc0JjKBOFuYX3xSbFgEgjvgg36CwAg+vgY0i1B556LbuTt0I/ruHHrsKqlyzGMl
Vp8lx5isKmJUJVCC/NHWrWMRINuCOoSsAx7QMzKGcwPQvmBnp1//IiYU0YEg3+JV
p7EynBTo37eQr5sCiFysQZLhYj2B3WCYKpdbWI5L+3+peETzMYq74boTFqTdj1z+
6Vi+OOjTNxhbXDP2mAF927FzQA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:28:24 2026 by rpki-client