Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
File:                     wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft (raw, json)
Hash identifier:          5VJ53YUoFFiHIqr3s2+I9qbOeKEHAOiCTCJ5/ylrCgs=
Subject key identifier:   06:CB:6B:2E:F0:B7:3A:93:9C:96:65:B8:D2:FB:18:3B:C4:53:10:DD
Authority key identifier: C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D
Certificate issuer:       /CN=A91EF24F/serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D
Certificate serial:       088E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
Manifest number:          0885
Signing time:             Sun 26 Jul 2026 21:19:20 +0000
Manifest this update:     Sun 26 Jul 2026 21:19:20 +0000
Manifest next update:     Sun 02 Aug 2026 21:19:20 +0000
Files and hashes:         1: wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl (hash: DbeskZ5XRWih9XGg0PYnUZxgn7sVNAo4zdrWrfRJPb0=)
                          2: 47D255C8572811ECBE150619C4F9AE02.roa (hash: uWkp09s7yGSzXGuY3Dy3+U0rw2K9bYSVVtki+9GQvL0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl
                          rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 21:19:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2190 (0x88e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF24F, serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D
        Validity
            Not Before: Jul 26 21:19:20 2026 GMT
            Not After : Aug  2 21:19:20 2026 GMT
        Subject: CN=6a6679d8-c77a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:82:85:95:c4:92:06:ac:9e:9b:59:c3:aa:67:
                    b4:4d:26:69:c5:b0:e3:85:ca:2f:a6:ee:e5:e7:be:
                    0d:09:54:d9:61:22:5d:f0:3b:24:c7:b3:f8:9c:74:
                    f9:59:39:68:6c:4e:aa:0f:9e:75:d1:73:c2:f1:a3:
                    e1:70:c3:03:be:02:12:05:b7:f4:81:73:f6:14:99:
                    a1:e8:be:1e:ad:07:62:a6:44:08:d7:bb:98:60:22:
                    72:ba:d0:e1:c9:c1:0d:b2:ae:f9:ca:ac:c8:6b:46:
                    24:2c:7c:09:95:02:a2:a6:6e:17:a7:06:02:a1:de:
                    da:4d:c7:d9:d3:87:87:42:83:8d:d6:82:84:3d:d9:
                    0e:13:cd:fc:a9:0f:57:05:fb:19:f5:7e:8f:ea:04:
                    1f:74:56:97:08:e3:9e:4f:74:3e:60:83:00:ef:1c:
                    a5:9f:d6:8c:57:5c:8b:37:a3:d6:b6:6b:67:8e:77:
                    80:d1:73:1b:8c:79:d7:94:09:bc:9a:03:ad:37:82:
                    ed:3c:6c:52:11:8d:6f:67:60:f1:0c:08:de:0e:ff:
                    9e:51:33:e0:dd:59:11:36:24:a3:14:bc:f6:4c:fc:
                    39:a2:39:d8:e1:bc:6c:33:28:12:ec:5d:03:e9:10:
                    0b:89:3f:7a:35:3e:f9:2d:f5:4f:53:67:f4:ee:1d:
                    f8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CB:6B:2E:F0:B7:3A:93:9C:96:65:B8:D2:FB:18:3B:C4:53:10:DD
            X509v3 Authority Key Identifier:
                keyid:C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ed:96:bb:8e:45:81:4d:47:c4:a7:56:5e:1d:29:e7:47:ee:
         a0:c7:27:c6:a9:33:d5:d8:64:b3:f5:30:46:6b:7d:bf:f2:d1:
         57:64:2b:c1:31:f9:b3:a3:4d:4d:20:d8:1d:71:50:0b:ed:d2:
         f4:e6:b5:03:fb:ce:ae:f4:bf:fc:ec:60:43:22:be:11:eb:bf:
         c6:fd:f2:d4:38:8f:b9:4c:3e:4e:de:51:c6:5a:db:72:e8:0e:
         9b:5e:f4:07:ab:e5:61:81:e8:42:4b:f1:05:8f:13:e6:e0:8d:
         d4:5c:92:20:3a:36:67:d3:18:74:04:f0:f2:a8:54:44:a9:94:
         45:5d:4d:c5:ea:c9:34:35:dd:92:fe:3b:7e:20:f5:d7:a0:5a:
         38:ee:48:49:bc:50:3f:c9:a2:f2:54:9d:9b:a6:9b:fb:9d:a4:
         04:72:c7:57:e5:87:14:b9:fe:3b:c6:a7:eb:86:23:26:7e:4e:
         6b:c2:9e:5b:63:dc:25:9b:a7:fe:18:36:4e:9b:8a:38:7d:bd:
         f7:9e:5b:77:f9:b8:5d:f3:b1:2c:0d:d2:76:95:5a:8f:7e:e3:
         8e:1a:31:19:2c:ec:c7:4b:70:65:cf:52:c2:80:60:61:24:6d:
         c3:26:93:eb:78:f0:8e:6b:8b:1d:35:32:a4:06:55:c5:e5:99:
         d2:70:73:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:57:07 2026 by rpki-client