Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
File:                     WaZHKO4B1q40_newHohZyCCX5X8.mft (raw, json)
Hash identifier:          5bc29ZIRk/jHrqRe9ZLq+QRasGshbZE7DgXoUyWSGhY=
Subject key identifier:   1A:D7:28:53:16:9E:71:EA:25:4E:F5:F6:9B:B1:66:72:37:B1:F2:75
Authority key identifier: 59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F
Certificate issuer:       /CN=A91BF27F/serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F
Certificate serial:       222C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
Manifest number:          220A
Signing time:             Fri 12 Jun 2026 15:51:23 +0000
Manifest this update:     Fri 12 Jun 2026 15:51:23 +0000
Manifest next update:     Fri 19 Jun 2026 15:51:23 +0000
Files and hashes:         1: WaZHKO4B1q40_newHohZyCCX5X8.crl (hash: S9GzANSK1UPrEEQ21yAdMFd70/wRcIDLdHN5r9CZgxo=)
                          2: 431D19069E8211EAAD86AC51C4F9AE02.roa (hash: +kDsd0MsrUW9X5xLDAdvHx0LSDWy4PnbmaV19ILgdxk=)
                          3: 1BE0AAE6AE9A11F0B8FE6621C4F9AE02.roa (hash: qtDGFMhOJ0VDlUc12bIr/PPNosh512QuOLF2MOl6QGc=)
                          4: 9B1ABC54486111E8AA9B1B45C4F9AE02.roa (hash: PFFhqDUXgOwHYlXLP448JNGm2ge+CUxQd0U8hOPUQgY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl
                          rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8748 (0x222c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF27F, serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F
        Validity
            Not Before: Jun 12 15:51:23 2026 GMT
            Not After : Jun 19 15:51:23 2026 GMT
        Subject: CN=6a2c2afb-589b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4e:f6:f5:df:49:5e:1a:b8:06:95:10:90:ee:
                    60:03:42:28:dc:be:ec:34:b4:b3:ce:f0:60:1b:e7:
                    43:42:5f:04:8e:15:3d:fa:a9:02:44:d7:40:7e:72:
                    d9:7d:cf:59:ca:9c:da:f9:52:6e:52:bb:6e:49:c1:
                    30:ac:2b:8e:83:49:c5:05:fb:fb:62:37:24:7e:e9:
                    66:4f:4f:d5:87:28:51:c6:e5:3e:8b:82:03:7b:64:
                    96:24:07:79:e3:ed:f0:57:8d:27:2c:9a:93:eb:58:
                    93:e0:e3:cd:6d:11:a9:14:34:cf:7b:f5:61:54:f7:
                    0e:85:ba:43:38:84:12:dd:ef:33:8a:d8:02:0a:8c:
                    41:29:57:1b:57:1a:e4:59:6d:02:93:08:c0:bc:d5:
                    c5:b2:60:79:84:e6:68:2e:68:1c:6a:15:8c:be:56:
                    d0:1e:f4:8d:a9:f0:3c:16:bc:ee:02:3a:74:4a:74:
                    cf:92:5f:90:fa:6f:f3:32:f9:5a:24:3e:6b:73:85:
                    2a:de:65:7b:b0:05:75:ef:50:be:c9:76:b8:e4:b7:
                    7b:ce:c1:4e:20:eb:2b:f9:24:08:9f:cd:3a:ca:0f:
                    1f:b1:47:36:f1:c7:f7:d7:f6:f0:ba:82:c3:da:3f:
                    37:15:9b:05:59:ae:e4:d1:24:17:72:49:89:8d:af:
                    57:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D7:28:53:16:9E:71:EA:25:4E:F5:F6:9B:B1:66:72:37:B1:F2:75
            X509v3 Authority Key Identifier:
                keyid:59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a8:22:89:68:ff:4b:02:4d:a6:96:76:a6:67:92:c6:9b:7a:
         69:33:95:28:00:1c:dc:31:55:12:52:16:c4:73:b2:3b:9a:1c:
         d2:08:db:1b:4d:5b:02:4e:07:59:7d:ab:e9:1c:84:19:28:dd:
         8a:73:20:7c:6e:5e:7a:fa:b3:d8:64:96:09:98:d3:d9:d6:23:
         7b:9b:e5:dc:36:d9:12:09:73:11:fa:c3:bf:e8:1d:30:b6:b7:
         93:48:14:01:94:bb:24:32:ec:94:9c:bc:4c:ce:3f:b4:80:a2:
         3a:4c:15:42:42:dc:e3:34:26:66:d1:42:94:e6:4b:03:53:f2:
         ea:38:be:9d:45:e5:a1:15:c2:86:ca:94:02:cf:3d:73:50:8e:
         f1:47:47:4f:eb:08:c3:39:f5:71:66:00:36:2e:bd:41:46:7c:
         42:91:11:ce:6d:8b:2b:42:39:9f:76:2f:2a:ae:a5:fa:28:e3:
         e1:a2:01:7d:7f:6a:04:c4:09:aa:7e:4e:c1:f0:8c:43:b2:ad:
         b8:03:19:25:ee:1b:8c:e7:bf:18:1f:f2:f5:1c:30:9b:f3:8c:
         5f:47:f5:c1:8c:04:9c:c1:fd:c0:63:2a:29:55:26:29:af:d6:
         fc:36:f8:1f:5b:af:25:21:b2:4d:a4:62:c2:f2:00:37:bc:fd:
         20:12:47:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:48:58 2026 by rpki-client