Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
File:                     WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft (raw, json)
Hash identifier:          npMYUXHRgXDVZVEjtOnV0MDwFnTMCE+lrZXfvNo4p4Y=
Subject key identifier:   98:DD:68:C2:6E:73:A9:44:8D:02:FD:26:BF:E2:FA:D0:86:67:F1:D0
Authority key identifier: 59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6
Certificate issuer:       /CN=A91C7AB9/serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
Certificate serial:       01EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
Manifest number:          01E0
Signing time:             Sat 13 Jun 2026 03:38:52 +0000
Manifest this update:     Sat 13 Jun 2026 03:38:52 +0000
Manifest next update:     Sat 20 Jun 2026 03:38:52 +0000
Files and hashes:         1: WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl (hash: 2rUBeUr4ZVmzT/Dxau3TuC5kmfZZDGrTFJbDDkcdhyM=)
                          2: EAAE802834B911F1B8589B72BC833773.roa (hash: hYHnbi70DEeeHLUAwomrQxmvt6OsQN+4vZ8kSWKcIq4=)
                          3: 321296E212E711F1ABE68E4F0D3D8C67.roa (hash: fLV89AyiqIKtRsF5UkgoIwTy20rGQz1nx0VUvYpw5g0=)
                          4: 5CB841E69B1411EEA456FE83C4F9AE02.roa (hash: vuhGbAXmdFyZHU5zcn6qI6D4hSXtuQyTQbfw33B7PYM=)
                          5: 7CF0A45404DF11F0B877A115C4F9AE02.roa (hash: 3zvmMVyOd3Cbubn7cAeWSSyiDSHBJieehrUFUeq/rLk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl
                          rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494 (0x1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7AB9, serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
        Validity
            Not Before: Jun 13 03:38:52 2026 GMT
            Not After : Jun 20 03:38:52 2026 GMT
        Subject: CN=6a2cd0cc-f231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e1:65:bc:fb:0b:3b:84:ed:0f:b8:e8:dc:95:
                    1d:cf:d4:8b:8f:a0:8a:8a:b2:d7:c7:05:34:29:77:
                    23:0e:a0:9d:ce:e2:03:0d:9e:71:f1:53:b8:8b:f6:
                    5f:9f:13:04:44:87:35:58:68:62:df:01:ff:50:d5:
                    d7:fa:f0:1f:96:4a:73:c5:ef:e8:2e:21:df:96:a8:
                    24:bb:3e:81:8e:b9:f4:46:81:4d:f6:0e:a0:e1:35:
                    30:d1:98:86:44:c0:20:df:31:ed:e7:64:93:b5:fb:
                    e1:b9:c7:5b:c4:dc:95:a6:94:22:0d:ab:ef:77:df:
                    48:a3:3f:43:ee:9e:bc:00:e8:a1:3e:82:3a:fc:34:
                    6c:07:80:6b:02:37:a4:3a:18:8b:52:46:b0:99:d4:
                    09:59:97:ca:35:cf:69:48:44:8a:dd:4d:cd:70:7b:
                    a3:23:f2:b3:67:c5:ba:11:de:9f:72:60:2d:6e:56:
                    fd:e8:19:23:2e:04:3a:7a:0d:48:8e:71:88:41:8b:
                    04:57:73:7b:0f:df:8f:0a:93:71:ad:4c:7e:d4:fb:
                    9d:e5:34:91:7d:0a:f4:e4:28:6e:09:d9:5b:a7:d1:
                    fc:6c:b0:59:6a:ae:ca:2e:1d:2a:b1:ab:8b:fa:1b:
                    a4:84:97:79:63:4d:77:ed:55:b1:bf:4d:36:05:d4:
                    3a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DD:68:C2:6E:73:A9:44:8D:02:FD:26:BF:E2:FA:D0:86:67:F1:D0
            X509v3 Authority Key Identifier:
                keyid:59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:34:c2:cc:d8:b9:84:7c:a6:1d:98:93:06:89:95:87:3e:56:
         10:d8:00:27:a2:e7:8c:cf:3b:6a:39:60:ac:c3:f5:04:ef:b3:
         d5:3f:9a:a7:10:43:2c:4f:65:50:d8:79:3e:87:f1:46:98:eb:
         73:58:1a:d8:dd:97:1a:34:37:6c:c1:ef:0f:ec:e5:97:11:97:
         17:d9:ab:d6:25:1c:f3:d1:ef:17:0c:5c:9a:b3:b3:a7:62:8e:
         8e:52:95:d3:6b:61:77:7b:b0:32:95:15:3b:fc:e7:0f:a0:84:
         e5:89:59:f7:32:b9:b4:8d:c2:26:77:e6:5e:3d:fc:2f:33:74:
         44:55:7c:ce:84:4f:86:30:e6:0d:56:33:ca:9c:ee:7b:3c:86:
         67:ce:ad:58:96:de:56:b7:4e:54:0f:b7:a5:3e:a3:72:26:1d:
         ac:15:0e:92:8d:e6:c0:bb:d5:b5:3a:92:09:fd:97:f1:39:78:
         c5:d0:1e:78:50:bc:c0:ec:46:f3:9b:d1:8d:5e:46:97:e0:64:
         e3:09:1b:63:c6:cc:85:c7:3b:f6:95:52:38:ec:3c:4e:37:c7:
         de:2f:6e:db:24:9b:f8:08:eb:3b:45:66:2d:d7:92:7d:00:4e:
         e4:a2:98:28:f9:75:8d:b0:d5:09:ff:f9:49:b1:4c:a1:cf:58:
         0d:01:57:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:20:55 2026 by rpki-client