Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF74F/CEFDDA66445611F1871EC7C98F833773/w-sFoQn-XtS7BIxvjB75koS4bE0.mft
File:                     w-sFoQn-XtS7BIxvjB75koS4bE0.mft (raw, json)
Hash identifier:          PXPVGhtaeXJ3C1Ptgzi0skSj+1ZFYGqEdWiD6Goj1S4=
Subject key identifier:   93:57:7A:12:20:9F:FD:14:8F:B6:48:51:51:07:25:EB:6A:97:DB:A2
Authority key identifier: C3:EB:05:A1:09:FE:5E:D4:BB:04:8C:6F:8C:1E:F9:92:84:B8:6C:4D
Certificate issuer:       /CN=A91CF74F/serialNumber=C3EB05A109FE5ED4BB048C6F8C1EF99284B86C4D
Certificate serial:       32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w-sFoQn-XtS7BIxvjB75koS4bE0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF74F/CEFDDA66445611F1871EC7C98F833773/w-sFoQn-XtS7BIxvjB75koS4bE0.mft
Manifest number:          30
Signing time:             Mon 27 Jul 2026 11:04:18 +0000
Manifest this update:     Mon 27 Jul 2026 11:04:17 +0000
Manifest next update:     Mon 03 Aug 2026 11:04:17 +0000
Files and hashes:         1: w-sFoQn-XtS7BIxvjB75koS4bE0.crl (hash: wsUkCbItjtGsfT8Vxvk5lUcca7wC8sqD/up1ggG7hrA=)
                          2: 7844A774446311F18F06A96D95833773.roa (hash: TMmyTZ3inwoNGf2f7LFDpw/6qSAgEhJo5L+GI4VbDtY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF74F/CEFDDA66445611F1871EC7C98F833773/w-sFoQn-XtS7BIxvjB75koS4bE0.crl
                          rsync://rpki.apnic.net/member_repository/A91CF74F/CEFDDA66445611F1871EC7C98F833773/w-sFoQn-XtS7BIxvjB75koS4bE0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w-sFoQn-XtS7BIxvjB75koS4bE0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF74F, serialNumber=C3EB05A109FE5ED4BB048C6F8C1EF99284B86C4D
        Validity
            Not Before: Jul 27 11:04:17 2026 GMT
            Not After : Aug  3 11:04:17 2026 GMT
        Subject: CN=6a673b32-79fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:52:16:ec:cc:bb:50:a7:b3:59:c5:51:60:d2:
                    70:d5:b4:9d:dc:bc:03:a1:1c:dd:8d:c1:66:40:55:
                    d1:fd:21:6c:69:e5:1d:6f:43:db:b4:aa:aa:13:68:
                    fc:d3:7f:ce:39:4e:1d:ba:4c:4c:52:6d:3a:09:e5:
                    f9:9e:36:c9:ce:22:37:96:13:20:4c:88:ea:0c:d4:
                    ce:c8:21:53:be:02:ae:69:18:47:59:2d:4d:af:93:
                    67:73:25:bd:2b:85:b7:a9:44:50:d5:92:12:23:8c:
                    60:96:bd:d4:61:f3:4d:bc:9e:fa:94:35:77:f1:1d:
                    c4:ff:b6:d0:dc:a2:f9:15:fe:49:d6:0f:1d:35:b3:
                    cc:cd:4f:be:76:12:46:ec:03:30:f2:e1:f0:82:21:
                    15:86:c8:e6:2b:66:d1:be:4c:6f:18:a1:b1:f0:7c:
                    9a:18:9b:06:b5:45:44:45:4a:19:9e:02:ec:69:d0:
                    46:c9:50:55:0b:9a:df:a3:d6:dd:49:35:99:9e:e6:
                    ca:22:57:7f:21:be:ee:bf:bc:87:8f:2a:50:cd:54:
                    27:fd:1a:fc:8d:6b:6e:25:f5:6e:63:d9:fa:5d:43:
                    b9:19:b2:11:af:a1:8c:4c:6e:26:a8:00:48:90:93:
                    a1:13:1e:d0:4e:c8:20:ad:23:00:0b:d9:c7:e5:19:
                    a0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:57:7A:12:20:9F:FD:14:8F:B6:48:51:51:07:25:EB:6A:97:DB:A2
            X509v3 Authority Key Identifier:
                keyid:C3:EB:05:A1:09:FE:5E:D4:BB:04:8C:6F:8C:1E:F9:92:84:B8:6C:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF74F/CEFDDA66445611F1871EC7C98F833773/w-sFoQn-XtS7BIxvjB75koS4bE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w-sFoQn-XtS7BIxvjB75koS4bE0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF74F/CEFDDA66445611F1871EC7C98F833773/w-sFoQn-XtS7BIxvjB75koS4bE0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:57:48:b3:16:c7:76:75:21:40:3e:0c:58:01:2b:ab:09:1f:
         bf:7d:b3:6c:2d:34:d4:93:be:69:74:d1:e7:1d:11:6d:f9:dd:
         33:b6:2c:13:76:0b:d3:37:d1:22:f3:93:9c:55:c7:e9:ec:e8:
         11:de:b6:87:19:2c:46:02:0a:41:9d:90:1b:2c:52:a5:9a:f5:
         76:6f:de:bf:5c:a8:1a:92:f4:eb:e8:87:a0:77:b8:74:5d:af:
         a5:99:f7:6c:a3:f1:b0:9c:6d:35:f9:e7:00:ec:62:9e:c7:63:
         d5:dd:de:13:5a:89:b3:7a:9c:0c:91:c7:2b:7a:eb:02:95:f3:
         a5:40:55:55:c3:50:79:fd:19:5e:4e:5c:59:4e:20:ee:2e:d5:
         76:ec:c6:4c:03:23:46:1a:d3:5c:42:73:46:b3:78:8b:22:26:
         00:37:ca:40:6d:e0:32:88:d6:3f:c4:2f:21:4b:73:1f:35:1c:
         5b:2d:e1:e0:5b:9b:1f:ef:ec:8e:e4:0a:3c:ef:8c:b0:2e:57:
         55:20:c0:0d:d2:f7:8e:fe:82:9d:13:1e:57:d4:3e:77:bd:eb:
         84:52:53:6b:40:ef:e1:d7:5a:15:e6:92:51:7e:86:8b:68:33:
         dd:74:6c:3d:c2:10:2a:e0:f9:3a:9a:00:48:c5:ac:31:87:27:
         f5:56:b8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:05:45 2026 by rpki-client