Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.mft
File:                     wipR7M5tlu_1Mou8JblTGLTB2i4.mft (raw, json)
Hash identifier:          w/L01VcABoh9xQ8rNopJWNitYVBbDp8CUfrDlHo1S30=
Subject key identifier:   68:0E:BC:CE:3D:43:B4:F1:9F:4E:FD:2E:A3:64:C0:C6:CE:99:B6:3A
Authority key identifier: C2:2A:51:EC:CE:6D:96:EF:F5:32:8B:BC:25:B9:53:18:B4:C1:DA:2E
Certificate issuer:       /CN=A91D74A6/serialNumber=C22A51ECCE6D96EFF5328BBC25B95318B4C1DA2E
Certificate serial:       0131
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wipR7M5tlu_1Mou8JblTGLTB2i4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.mft
Manifest number:          0129
Signing time:             Mon 27 Jul 2026 07:47:23 +0000
Manifest this update:     Mon 27 Jul 2026 07:47:22 +0000
Manifest next update:     Mon 03 Aug 2026 07:47:22 +0000
Files and hashes:         1: wipR7M5tlu_1Mou8JblTGLTB2i4.crl (hash: ngN2gtAE7BfEPVM1qWcqmjGkiK1poQ0vrDvpy1F/k/4=)
                          2: 048B6F32D19D11EFB536C03DC4F9AE02.roa (hash: WUFEXmKNIL3inky9xMfKCw+Qw+yh/+IZZQUCVmvnj88=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.crl
                          rsync://rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wipR7M5tlu_1Mou8JblTGLTB2i4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D74A6, serialNumber=C22A51ECCE6D96EFF5328BBC25B95318B4C1DA2E
        Validity
            Not Before: Jul 27 07:47:22 2026 GMT
            Not After : Aug  3 07:47:22 2026 GMT
        Subject: CN=6a670d0b-30bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:65:45:e4:91:e1:2b:05:52:c4:5f:e1:de:27:
                    0a:6a:53:e8:ec:95:47:52:12:b0:5f:23:70:bf:3d:
                    22:e2:b2:17:bb:cd:1e:6f:ee:18:cf:40:bb:c0:66:
                    a9:bb:44:99:20:8e:b1:79:53:76:03:44:38:b4:37:
                    02:6b:87:42:ac:35:f9:a2:9f:cb:6c:e5:28:b4:70:
                    e1:90:8e:59:56:8f:14:9c:74:5e:e4:c9:ac:62:9c:
                    d8:4c:47:be:4f:db:6b:24:0c:0a:bc:c6:a9:f4:05:
                    3e:ea:d6:72:0d:05:37:8d:8f:a0:b7:54:91:33:d0:
                    0e:bf:26:79:51:df:e0:89:1f:02:c1:68:2c:10:d4:
                    47:98:15:1f:ee:86:86:ab:93:cd:18:38:d5:0b:87:
                    a2:b5:8d:32:f2:3a:75:5a:e1:21:fb:dd:00:f3:df:
                    6c:26:1e:e7:d6:83:ed:d7:3f:82:ae:26:84:f2:a5:
                    8d:ea:6a:01:ed:63:b8:e3:42:93:26:03:b6:ad:25:
                    8a:55:0a:f0:a4:ae:98:d4:db:63:46:e2:26:fb:cc:
                    8f:d0:8c:83:a6:9f:df:bf:20:9b:da:12:e3:b1:53:
                    0d:2c:22:e6:64:00:c6:1f:fe:77:1c:6a:52:13:46:
                    61:92:6c:6f:0f:23:9e:cb:ca:69:4f:1d:2d:a1:b6:
                    66:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0E:BC:CE:3D:43:B4:F1:9F:4E:FD:2E:A3:64:C0:C6:CE:99:B6:3A
            X509v3 Authority Key Identifier:
                keyid:C2:2A:51:EC:CE:6D:96:EF:F5:32:8B:BC:25:B9:53:18:B4:C1:DA:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wipR7M5tlu_1Mou8JblTGLTB2i4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:68:5e:e4:5c:6a:24:df:34:ea:00:45:6f:3d:a5:c3:4a:f9:
         f2:97:af:ce:56:fa:c0:bc:a1:15:86:cc:7c:95:5b:d7:a8:28:
         d3:01:13:d7:78:47:e2:8c:16:7f:bf:a2:bf:ca:0f:48:55:ff:
         69:be:e9:c7:bb:98:50:57:5c:f4:59:f7:40:38:54:77:76:13:
         cd:23:d9:91:b1:e5:29:8d:f5:0f:76:09:17:dd:80:d6:9c:b0:
         ba:1b:44:ad:5b:ab:00:d5:0e:3a:00:43:a6:e8:c3:f8:54:b5:
         b4:84:bb:b8:be:63:cc:b0:19:e6:bc:a8:22:c8:fd:b3:58:13:
         ef:c1:79:ea:5c:da:91:89:e1:22:de:ed:98:fb:61:e0:37:02:
         8b:e7:7f:84:f9:4c:5f:61:77:07:51:4f:cf:69:d8:b7:3d:0d:
         d0:e4:c2:b0:c6:bd:7b:08:bc:cd:57:29:b2:28:6e:b4:ed:7c:
         d4:63:bf:42:1c:0e:66:a1:ff:bd:7f:b9:45:72:68:db:a6:e6:
         31:9e:47:bf:81:e7:c5:87:d0:cf:aa:17:fc:aa:d6:e7:0c:8e:
         21:42:8a:0a:aa:c5:28:57:53:1a:23:dd:9d:df:b7:67:4d:1c:
         42:78:07:44:09:bc:ac:b3:6e:77:1e:dc:4f:02:2c:9a:02:29:
         1e:f8:41:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDc0QTYxMTAvBgNVBAUTKEMyMkE1MUVDQ0U2RDk2RUZGNTMyOEJCQzI1Qjk1MzE4
QjRDMURBMkUwHhcNMjYwNzI3MDc0NzIyWhcNMjYwODAzMDc0NzIyWjAYMRYwFAYD
VQQDEw02YTY3MGQwYi0zMGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4mVF5JHhKwVSxF/h3icKalPo7JVHUhKwXyNwvz0i4rIXu80eb+4Yz0C7wGap
u0SZII6xeVN2A0Q4tDcCa4dCrDX5op/LbOUotHDhkI5ZVo8UnHRe5MmsYpzYTEe+
T9trJAwKvMap9AU+6tZyDQU3jY+gt1SRM9AOvyZ5Ud/giR8CwWgsENRHmBUf7oaG
q5PNGDjVC4eitY0y8jp1WuEh+90A899sJh7n1oPt1z+CriaE8qWN6moB7WO440KT
JgO2rSWKVQrwpK6Y1NtjRuIm+8yP0IyDpp/fvyCb2hLjsVMNLCLmZADGH/53HGpS
E0ZhkmxvDyOey8ppTx0tobZmNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGgOvM49
Q7Txn079LqNkwMbOmbY6MB8GA1UdIwQYMBaAFMIqUezObZbv9TKLvCW5Uxi0wdou
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzRBNi83OTdFOUE4NkQx
OUMxMUVGODNDRUFEM0NDNEY5QUUwMi93aXBSN001dGx1XzFNb3U4SmJsVEdMVEIy
aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dpcFI3TTV0bHVfMU1vdThKYmxUR0xUQjJpNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NzRBNi83OTdFOUE4NkQxOUMxMUVGODNDRUFEM0NDNEY5QUUwMi93aXBSN001dGx1
XzFNb3U4SmJsVEdMVEIyaTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdWhe5FxqJN806gBFbz2lw0r58pevzlb6wLyhFYbMfJVb16go0wET13hH4owW
f7+iv8oPSFX/ab7px7uYUFdc9Fn3QDhUd3YTzSPZkbHlKY31D3YJF92A1pywuhtE
rVurANUOOgBDpujD+FS1tIS7uL5jzLAZ5ryoIsj9s1gT78F56lzakYnhIt7tmPth
4DcCi+d/hPlMX2F3B1FPz2nYtz0N0OTCsMa9ewi8zVcpsihutO181GO/QhwOZqH/
vX+5RXJo26bmMZ5Hv4HnxYfQz6oX/KrW5wyOIUKKCqrFKFdTGiPdnd+3Z00cQngH
RAm8rLNudx7cTwIsmgIpHvhBEA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:42 2026 by rpki-client