Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
File:                     wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft (raw, json)
Hash identifier:          3bSD7Pc2wBW7HYhSyhfJBUc3lmFjxWWdgJeQAOWhbak=
Subject key identifier:   AE:92:D4:DE:85:2D:D0:EB:37:E2:F3:A9:AA:36:65:0B:23:40:AD:42
Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1
Certificate issuer:       /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
Certificate serial:       0957
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
Manifest number:          0937
Signing time:             Tue 28 Jul 2026 20:36:37 +0000
Manifest this update:     Tue 28 Jul 2026 20:36:36 +0000
Manifest next update:     Tue 04 Aug 2026 20:36:36 +0000
Files and hashes:         1: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl (hash: X+Wpxajl/5YVaDr1VH3GG27AvMAYgpdAha4gudiIY7M=)
                          2: 12789D14F82E11F09E4CD127396F56BC.roa (hash: 0lQm90IuI3a5EcWOhbRW2oYdVmTwAF33dV4T2vGRc30=)
                          3: 37A30AA2157A11F1B5E2F6BC3D3D8C67.roa (hash: OKp4FrMM/70sWLoITS6ZEZdodRxEqyoRybrxPzxTh/c=)
                          4: AB4610AA7EAF11F1B80EBCC267A30FBC.roa (hash: X3ZUS5c7YNv6h1DWtLHYPdbyqcCD2SWsBkXcjr1SmB8=)
                          5: ABDC2CE87EAF11F1B80EBCC267A30FBC.roa (hash: ukUJEgX9lQ5VeOWBPATywGFlg6QgIS8tcmX0+Cesd+M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl
                          rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2391 (0x957)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
        Validity
            Not Before: Jul 28 20:36:36 2026 GMT
            Not After : Aug  4 20:36:36 2026 GMT
        Subject: CN=6a6912d5-2536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:61:b0:91:07:fc:76:2a:ce:4e:80:24:4b:9b:
                    66:21:20:58:57:a2:82:88:d7:f2:38:96:c8:2a:86:
                    2b:ae:4a:a4:8a:08:2d:50:3f:3e:44:d4:a0:c3:4b:
                    50:06:39:ec:4f:07:f8:00:c7:3c:30:4a:ab:04:fa:
                    70:bf:35:47:05:4a:e2:fa:88:88:08:66:9e:8b:8f:
                    c3:0f:48:81:5f:d9:e0:02:8b:4a:00:75:ed:bd:95:
                    e5:53:d1:18:63:67:48:6d:6f:13:4b:38:8d:3f:a1:
                    b5:21:d5:a7:02:cc:b1:ac:31:5f:90:2c:e1:75:32:
                    dc:fb:9a:9b:07:b0:a1:d2:e0:48:e4:20:fa:f0:97:
                    8e:3f:82:3a:12:de:c7:5e:2d:22:1b:aa:77:c0:77:
                    d8:26:0b:3f:26:ca:4c:c0:ab:b9:d6:2a:de:98:58:
                    9e:d7:b5:0b:c5:50:a0:30:67:ea:01:17:ee:cc:3b:
                    42:3f:ad:55:a1:11:f5:8f:2c:3b:fa:38:e2:bd:09:
                    34:c3:8e:7d:3a:79:9b:8e:f8:9c:84:66:85:12:ac:
                    de:cd:8e:b7:86:e3:76:8b:24:fe:a2:a9:87:dc:f7:
                    fd:04:99:69:6d:a4:0b:75:46:59:61:af:da:0e:e6:
                    c0:c3:7d:67:2b:d2:6b:f1:05:64:9e:f0:40:de:e0:
                    46:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:92:D4:DE:85:2D:D0:EB:37:E2:F3:A9:AA:36:65:0B:23:40:AD:42
            X509v3 Authority Key Identifier:
                keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:50:2b:9b:0a:61:d3:8a:15:20:62:31:1d:0a:07:7b:33:01:
         f0:5e:93:58:48:79:51:0e:d9:59:cc:53:23:c9:c7:78:b9:ab:
         67:a5:cb:ac:9a:0f:c4:61:07:16:65:eb:69:71:34:df:6a:04:
         a2:fc:cd:7e:12:de:fb:d3:55:68:34:21:ef:48:3a:8e:11:06:
         34:42:d0:64:0d:6a:f9:94:ad:b4:3b:21:f6:c6:9d:59:d8:93:
         76:e3:d5:13:90:e0:13:3b:5c:4f:d0:d8:c8:e4:97:02:2c:bb:
         5e:f5:15:6e:01:11:2e:d2:fa:49:e6:0a:47:5b:a5:50:b4:19:
         63:e1:49:f9:32:3e:0d:36:9b:86:af:14:71:a9:22:86:ec:77:
         2f:60:6b:f6:cd:bb:a3:d5:fb:05:9d:07:f0:97:57:ae:a8:da:
         a4:a0:13:4c:25:b8:9c:3e:ee:3b:05:38:28:7a:3a:42:15:2d:
         19:4c:bf:08:63:b9:98:db:c4:39:5c:9b:92:8f:d0:33:cf:bc:
         32:38:d7:1d:d9:fd:54:b2:13:d8:01:57:ee:c3:ab:57:cf:9e:
         e8:f2:33:f6:90:a4:ba:6e:1d:3a:11:5b:48:ee:b7:3c:32:12:
         f0:72:d0:d3:f3:f2:b7:52:1f:0e:58:01:61:09:93:37:96:37:
         11:9c:ce:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:34:45 2026 by rpki-client