Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
File:                     weInZRraO_vBh3GuyLYAJnI7YK0.mft (raw, json)
Hash identifier:          /HMjxELttGam3c0xEWCCD/ume+ZI6HJFYb5EnfwT+JU=
Subject key identifier:   20:6A:B9:E7:61:51:AD:57:68:84:45:34:A4:A7:49:6D:C5:25:07:1A
Authority key identifier: C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD
Certificate issuer:       /CN=A9112707/serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
Certificate serial:       29ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
Manifest number:          29B1
Signing time:             Wed 22 Jul 2026 15:39:26 +0000
Manifest this update:     Wed 22 Jul 2026 15:39:25 +0000
Manifest next update:     Wed 29 Jul 2026 15:39:25 +0000
Files and hashes:         1: weInZRraO_vBh3GuyLYAJnI7YK0.crl (hash: oylwslqW0+rPBA81yGTUsho3MaHyhIIOopiTdaO/bOo=)
                          2: 3AB3F80E578611EA8CC3B124C4F9AE02.roa (hash: C5FmIwbgprkig61fqNmKWaJWuBinr8tfV+3G1uObZOs=)
                          3: C3876BD8589D11EC9CF19A41C4F9AE02.roa (hash: er4abjooP2pzYLbFn4zXYhItU6fj/FaQ5TH/f8stFqc=)
                          4: 39932724578611EA8CC3B124C4F9AE02.roa (hash: 5xVxyBLTVv6TTJwr4d6CRZOAj/oOkKXh9D4XacOHsAU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl
                          rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:39:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10733 (0x29ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112707, serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
        Validity
            Not Before: Jul 22 15:39:25 2026 GMT
            Not After : Jul 29 15:39:25 2026 GMT
        Subject: CN=6a60e42d-8faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2b:88:ee:33:80:90:18:a8:e5:19:ee:79:1d:
                    2e:88:cb:0e:89:f4:b8:d8:d3:db:c5:2a:28:2a:21:
                    f6:28:9b:e3:8d:53:4b:43:96:ab:98:ee:24:3d:09:
                    a8:09:ca:82:1d:51:c0:39:8d:c6:ac:9a:66:41:8e:
                    b1:71:e6:77:0b:04:84:6f:0c:78:bd:2a:1d:48:f7:
                    58:5c:80:56:1a:12:d5:d5:3b:ca:2e:d5:32:5f:54:
                    b0:d2:1d:38:c8:90:d5:0e:8a:4e:d5:43:2c:d4:ce:
                    7c:22:66:f5:a3:53:be:03:7b:79:a5:fd:26:1a:f9:
                    e6:ed:33:05:49:1a:9f:b5:aa:26:e2:6b:97:a2:94:
                    33:37:2f:20:5c:b6:8d:00:a6:cb:b7:ec:57:3d:d7:
                    77:e5:86:ef:5a:9d:f8:4c:a2:08:4b:0c:68:07:e2:
                    32:ef:8f:9c:3c:71:6d:d1:66:39:22:73:36:bc:c5:
                    22:84:24:09:ef:97:a4:01:74:ac:96:39:0b:63:d3:
                    38:82:03:fd:df:40:1c:0c:e7:8f:aa:b5:b0:6e:08:
                    cd:f2:ce:fd:aa:4b:25:c3:e2:27:0d:68:b2:ff:14:
                    a0:68:34:a2:f3:9a:05:fe:b8:4d:24:71:17:3e:b9:
                    43:13:0e:fc:87:1b:68:83:51:f8:09:99:cc:99:2b:
                    e9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6A:B9:E7:61:51:AD:57:68:84:45:34:A4:A7:49:6D:C5:25:07:1A
            X509v3 Authority Key Identifier:
                keyid:C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:63:f2:98:d7:4c:1a:50:a5:10:43:6f:8d:50:a5:c3:b9:4f:
         e2:31:0c:29:ac:0c:2e:b4:95:df:8d:72:6f:6c:aa:91:80:df:
         d6:42:74:7c:ef:3a:42:b9:9b:c9:4a:1b:b4:72:2d:a4:3c:81:
         eb:ba:f0:e4:16:f1:7b:d7:64:21:e5:fd:a3:27:69:18:61:dd:
         fb:4a:0e:f0:6b:a4:78:59:bd:29:e7:a4:03:eb:ac:53:49:b4:
         57:d3:b0:68:e8:91:2e:6e:57:e3:5c:25:c5:82:e3:a6:11:98:
         3e:cd:8d:b8:4b:2a:82:dc:1e:35:45:12:4a:89:c7:5d:a9:52:
         a8:3c:a2:cb:35:97:64:ff:f4:59:60:30:e2:b9:f0:c8:11:7d:
         ec:3f:9a:5a:e3:c6:0e:6e:ff:cd:28:13:d2:ad:6d:b0:64:bd:
         5c:39:fe:2a:c5:54:84:ad:59:1e:d5:1f:bf:84:74:1a:d1:ec:
         9a:29:39:58:33:55:84:43:39:57:10:c7:73:4c:99:f6:73:aa:
         ff:f1:41:db:e8:a2:d4:2b:5b:f7:46:56:63:8d:80:2e:7d:50:
         14:ce:f4:53:f5:a8:86:16:1a:3a:4b:39:05:b3:ad:39:51:9c:
         3d:71:18:55:ec:3d:fb:e8:1c:6d:5b:41:31:91:63:49:fa:f8:
         e3:05:13:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:06:18 2026 by rpki-client