Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
File:                     wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft (raw, json)
Hash identifier:          l8dWMF4FcUHjHXfUMyBYNOa7VgWLttFrsGL9Wmm0HFQ=
Subject key identifier:   E9:5A:E1:9C:5C:CD:4A:66:B2:35:18:C9:B9:0C:D4:C6:07:BA:45:2F
Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1
Certificate issuer:       /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
Certificate serial:       0956
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
Manifest number:          0936
Signing time:             Sun 26 Jul 2026 20:48:07 +0000
Manifest this update:     Sun 26 Jul 2026 20:48:06 +0000
Manifest next update:     Sun 02 Aug 2026 20:48:06 +0000
Files and hashes:         1: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl (hash: BYb6LLuCyOEEk0DYDTH+En5D+eV/0/H016B4MEhsOdM=)
                          2: ABDC2CE87EAF11F1B80EBCC267A30FBC.roa (hash: ukUJEgX9lQ5VeOWBPATywGFlg6QgIS8tcmX0+Cesd+M=)
                          3: 12789D14F82E11F09E4CD127396F56BC.roa (hash: 0lQm90IuI3a5EcWOhbRW2oYdVmTwAF33dV4T2vGRc30=)
                          4: AB4610AA7EAF11F1B80EBCC267A30FBC.roa (hash: X3ZUS5c7YNv6h1DWtLHYPdbyqcCD2SWsBkXcjr1SmB8=)
                          5: 37A30AA2157A11F1B5E2F6BC3D3D8C67.roa (hash: OKp4FrMM/70sWLoITS6ZEZdodRxEqyoRybrxPzxTh/c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl
                          rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 20:48:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2390 (0x956)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
        Validity
            Not Before: Jul 26 20:48:06 2026 GMT
            Not After : Aug  2 20:48:06 2026 GMT
        Subject: CN=6a667287-e28b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:98:92:7d:b2:80:14:c0:5f:5f:0e:cd:10:de:
                    0e:8e:7f:02:d3:11:0f:96:4e:cb:fd:a9:34:34:e1:
                    82:84:c4:3e:24:e1:e7:74:53:bf:23:62:62:e5:cc:
                    5f:b9:3e:b5:95:3b:53:13:1c:57:90:d9:4d:7e:c9:
                    82:c6:73:5d:a9:32:f2:a0:e2:1e:44:2a:ed:ab:aa:
                    5c:2c:f1:65:a5:2d:df:91:ff:b6:d6:c3:b0:5c:b5:
                    53:fd:fb:db:d1:93:a2:0a:a9:e3:a7:3a:11:28:e2:
                    30:23:1c:5a:33:ac:56:c0:64:c2:7a:8c:03:33:ea:
                    1c:f1:59:40:b8:50:64:60:ca:02:e5:1a:07:0a:66:
                    1e:4b:b3:31:0f:46:cd:b0:20:a6:ca:03:b3:6a:ff:
                    3a:ff:23:5e:60:6c:de:70:31:90:98:8a:2f:f9:77:
                    56:82:92:15:ba:9c:82:cd:46:ea:e3:2a:35:56:3f:
                    da:4c:37:7a:54:5c:2d:91:6d:45:34:2f:c6:d3:fa:
                    32:c1:7b:69:4b:6a:b0:45:ce:79:8c:e9:f5:99:4d:
                    2f:f4:f1:ec:25:07:96:23:70:42:4d:aa:5a:00:f3:
                    a2:91:be:e4:49:fc:a3:04:ea:dc:71:81:d7:a1:09:
                    ab:0f:37:70:a7:44:02:c9:80:03:a7:03:d7:fc:11:
                    29:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5A:E1:9C:5C:CD:4A:66:B2:35:18:C9:B9:0C:D4:C6:07:BA:45:2F
            X509v3 Authority Key Identifier:
                keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:21:88:f1:69:7e:ae:75:2d:72:1e:0f:a9:69:76:b3:82:ce:
         2e:7c:d6:4d:05:bb:35:e0:6d:cd:90:88:12:92:ac:3a:6f:13:
         a9:e0:7a:8b:e0:35:09:87:8d:e5:7a:59:d1:83:21:82:a2:d7:
         bd:bb:c8:99:46:70:06:2d:27:8a:a8:0d:3d:14:cd:af:3b:c2:
         f8:39:39:11:eb:f2:a6:bf:45:e1:ae:4e:2f:1c:58:6d:2b:50:
         c6:08:e2:f2:9e:75:aa:ec:c9:79:61:90:75:8e:43:ba:01:16:
         cd:c3:9a:bf:d1:de:24:a7:0b:dc:b5:07:b6:7c:fb:f8:6e:0a:
         a0:74:a2:bf:89:20:65:74:80:0d:ef:8d:7c:d6:a2:3e:a1:67:
         17:f2:eb:d0:e0:d9:cd:86:c0:a8:cc:0c:cf:30:04:cb:16:72:
         2b:f7:25:13:3d:b5:80:29:66:39:44:c1:b2:bf:91:05:85:54:
         fe:15:4e:86:47:d4:ff:9e:3c:f9:f3:58:e6:ac:0e:84:8b:b0:
         8e:d2:1e:b1:5a:f9:d0:a2:e8:07:32:70:d4:3c:34:de:6d:9f:
         a8:e8:11:6b:12:f0:fe:e9:28:6b:b9:78:8f:90:d3:07:ba:a6:
         f7:82:67:5d:42:31:44:65:3f:17:6c:04:ba:cd:c2:59:d3:58:
         4e:94:78:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:18:29 2026 by rpki-client