Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
File:                     WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft (raw, json)
Hash identifier:          9IzIovmh9TDRtlyb/y/r5/RM0oovukNRltzLKsL2f78=
Subject key identifier:   2B:88:1D:00:B9:96:26:90:C7:5C:47:B0:0D:35:D4:32:8F:39:60:41
Authority key identifier: 5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D
Certificate issuer:       /CN=A91C5F25/serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
Certificate serial:       067B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
Manifest number:          0672
Signing time:             Tue 28 Jul 2026 23:10:28 +0000
Manifest this update:     Tue 28 Jul 2026 23:10:28 +0000
Manifest next update:     Tue 04 Aug 2026 23:10:28 +0000
Files and hashes:         1: WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl (hash: q1Xf+MpasmNTwsX/PUR3JpqdUbloqC0rivYEQ+E6N7Y=)
                          2: 92C1EB1E044111ECA6AF2D4BC4F9AE02.roa (hash: xX6xLmXsGMhA6ynOHDJr+09/J6zrlE/mAc8SSCuWzQ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl
                          rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 22:36:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1659 (0x67b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5F25, serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
        Validity
            Not Before: Jul 28 23:10:28 2026 GMT
            Not After : Aug  4 23:10:28 2026 GMT
        Subject: CN=6a6936e4-dec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d2:8c:1f:44:6d:78:22:c9:12:fc:ec:b1:1b:
                    71:07:b0:b9:1a:59:ee:3b:87:3d:a8:67:1b:77:1f:
                    45:de:65:52:d9:bd:3b:a3:50:c1:38:8f:fe:91:34:
                    8b:49:94:04:b2:5a:a6:7d:04:d0:5f:28:86:b6:c4:
                    86:09:1d:95:3a:f6:fc:bb:a6:d4:7c:f6:25:04:6c:
                    82:34:46:52:36:36:45:bf:45:a4:7f:d6:c0:fe:71:
                    c3:88:fa:8d:2c:7e:03:37:af:92:bf:81:bf:21:10:
                    2e:cb:f8:45:f5:e7:1e:e9:3f:59:0d:0f:65:3a:b3:
                    b4:aa:ee:9c:29:47:87:0f:67:dc:08:16:d4:76:25:
                    c7:40:51:0a:5f:e1:49:8a:62:d0:79:b9:ae:ce:d0:
                    5b:12:a0:41:c3:54:a6:fb:0e:ed:dd:e8:66:09:fe:
                    91:1d:d8:a4:19:60:14:6e:02:21:8b:19:0a:7e:33:
                    19:c2:1d:af:ae:f3:85:54:05:41:3b:3a:61:d4:e0:
                    8c:f3:d9:22:28:27:be:18:47:eb:25:2b:f6:ce:66:
                    75:c3:d8:06:cd:98:ab:f4:87:7a:6f:bb:6a:c3:78:
                    81:32:d6:9a:84:7c:1b:b3:73:8a:5d:f1:83:3c:34:
                    df:be:c2:2a:f1:04:a1:ef:ee:b4:24:8c:a1:53:a2:
                    8d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:88:1D:00:B9:96:26:90:C7:5C:47:B0:0D:35:D4:32:8F:39:60:41
            X509v3 Authority Key Identifier:
                keyid:5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c7:49:7c:b1:bd:91:b1:bc:6d:21:75:1d:47:02:c7:50:36:
         9b:88:05:cc:1f:4b:8c:c6:22:95:f5:76:6c:99:35:eb:0a:56:
         3f:eb:6f:97:cc:1b:43:08:4f:0c:5a:f2:0f:a2:71:29:cc:b9:
         f4:e9:fc:e6:de:be:67:73:98:d9:04:30:e1:3f:ef:3e:ee:a5:
         80:f7:e2:43:21:f3:67:8f:0a:c4:e9:1a:0c:09:bd:1a:04:c6:
         c7:f5:e2:27:ff:e4:0c:6c:87:75:52:93:3b:7a:50:66:0f:27:
         b9:3e:29:c4:cd:b8:0a:3e:a7:96:cf:d2:02:d7:e2:2d:5d:86:
         69:17:f0:3d:14:5e:75:7d:fb:0a:23:48:41:30:73:8b:a6:f0:
         51:88:5f:30:e9:1d:f2:cd:62:81:f4:1a:cd:a3:e5:81:69:40:
         b6:25:be:9b:cd:9f:3f:9a:e9:1a:69:f4:21:ae:18:14:72:bd:
         e3:b7:70:0a:93:8d:85:3e:81:0e:f4:1e:d3:17:51:95:65:aa:
         90:52:d5:b9:99:4a:98:c5:5a:b2:57:54:83:42:8f:63:e9:97:
         d2:17:b9:fe:4c:9a:fe:97:bd:af:46:bd:e6:25:d5:a4:4c:60:
         ad:99:c5:d2:89:39:62:bc:10:a8:86:7b:57:e8:e9:f4:c3:15:
         52:05:f3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:44:48 2026 by rpki-client