Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft
File:                     wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft (raw, json)
Hash identifier:          5B0de5Wf9MUSpwJHs+fEa6mUQS9emZbkmfcHyLcRgr8=
Subject key identifier:   F5:85:75:C1:CF:1D:83:02:01:71:2C:29:D7:8C:60:D7:32:F9:EB:A8
Authority key identifier: C2:96:3F:3A:85:4F:D6:D4:E6:10:19:9E:67:40:83:D8:AA:A1:2E:50
Certificate issuer:       /CN=A91D44BE/serialNumber=C2963F3A854FD6D4E610199E674083D8AAA12E50
Certificate serial:       0165
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft
Manifest number:          0165
Signing time:             Mon 27 Jul 2026 06:47:36 +0000
Manifest this update:     Mon 27 Jul 2026 06:47:35 +0000
Manifest next update:     Mon 03 Aug 2026 06:47:35 +0000
Files and hashes:         1: wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl (hash: QpyFq+te64dY+t0fuTGl67xsda2IzvCdXOSHDXia/Wo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl
                          rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357 (0x165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D44BE, serialNumber=C2963F3A854FD6D4E610199E674083D8AAA12E50
        Validity
            Not Before: Jul 27 06:47:35 2026 GMT
            Not After : Aug  3 06:47:35 2026 GMT
        Subject: CN=6a66ff08-f418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ce:08:f1:88:50:6e:75:a0:be:11:78:03:c7:
                    63:b1:b6:62:05:10:35:ab:0c:0b:d0:75:68:36:de:
                    2d:9d:46:8d:af:d2:13:a4:61:e1:44:e5:42:9b:3a:
                    1c:47:0e:08:ae:40:f0:22:56:c6:76:bf:cc:4b:c0:
                    55:b3:0f:14:9f:88:ef:6e:de:3b:1a:fe:6d:0c:76:
                    2a:c8:6f:9c:0a:78:6b:a3:43:f0:82:0a:57:ac:38:
                    d5:72:f4:2e:66:e1:2f:94:fe:4d:00:34:95:d1:34:
                    eb:4d:dd:9a:95:3b:46:d0:18:de:1d:b9:55:96:c8:
                    e8:e8:58:e7:6f:56:8b:7e:81:b2:bd:a6:83:58:a5:
                    6d:5d:49:46:f0:9a:34:12:41:8b:12:f2:eb:c6:51:
                    b1:ef:01:22:10:8b:75:4e:e9:b1:ed:d5:60:09:b2:
                    58:d0:23:17:8a:65:63:4c:ff:fd:55:18:48:15:24:
                    13:72:02:b3:1b:f5:b4:ec:f1:c0:6f:3e:23:ae:d4:
                    69:de:de:d9:97:46:c1:8e:06:32:19:c1:71:55:32:
                    bd:a5:fb:72:51:c4:51:c1:28:9a:00:8a:e1:62:9a:
                    75:f1:d9:5c:ff:6a:7d:34:16:81:c3:7a:ec:48:42:
                    8e:44:4d:0d:2f:41:d9:03:72:61:39:88:c0:e1:0f:
                    8b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:85:75:C1:CF:1D:83:02:01:71:2C:29:D7:8C:60:D7:32:F9:EB:A8
            X509v3 Authority Key Identifier:
                keyid:C2:96:3F:3A:85:4F:D6:D4:E6:10:19:9E:67:40:83:D8:AA:A1:2E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:c9:be:96:68:33:4a:24:c1:7b:c7:6b:5d:dd:2b:2e:6d:3e:
         a8:7a:0e:69:7a:a6:fd:a1:29:e2:a0:43:78:bc:5c:6c:0d:7a:
         d8:a5:53:c3:fb:e5:e7:a3:9f:ba:c9:04:26:4d:b3:78:f8:e5:
         a5:d9:59:89:ec:80:53:18:e6:fd:42:61:81:d3:94:b3:dd:1d:
         6e:9c:80:8b:5e:a7:f8:89:3f:83:7f:81:ab:78:54:40:30:c2:
         fd:8c:5a:b5:c7:89:32:3b:ef:37:af:bb:f5:ef:a2:ec:8e:bd:
         ee:ce:43:91:a2:74:e7:8d:b4:78:44:cd:56:d6:60:dc:fb:0b:
         de:5e:c6:b9:09:3a:33:d2:10:71:c3:3f:80:fd:43:28:68:64:
         90:94:92:a9:26:2f:9b:a2:46:a5:cf:ba:32:85:d0:cd:b4:26:
         15:38:d2:f7:a4:26:7d:8d:f9:de:78:fa:9a:38:8e:c6:b4:2f:
         cb:61:6c:19:18:65:0b:d2:05:8a:b3:4a:cf:a9:6c:b0:c8:12:
         03:8c:80:56:8f:f1:ee:c9:1b:ca:47:5a:ca:25:87:6a:6f:12:
         03:0d:96:7e:c8:16:b9:a7:ea:2a:eb:35:c0:db:22:3e:19:03:
         a5:63:15:58:36:2b:28:d0:18:fc:19:84:a1:81:ab:28:90:0e:
         17:66:a6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:23:50 2026 by rpki-client