Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft
File:                     MayWR8f4cKZrot54hUTNjDJr3_k.mft (raw, json)
Hash identifier:          KVYRrJIMsW8/MWhGneDbzxZzGAM71LgjS5urnxpfQJU=
Subject key identifier:   7F:17:CE:38:42:E2:33:40:BA:93:7E:45:00:F9:4E:8E:87:04:60:20
Authority key identifier: 31:AC:96:47:C7:F8:70:A6:6B:A2:DE:78:85:44:CD:8C:32:6B:DF:F9
Certificate issuer:       /CN=A91218BB/serialNumber=31AC9647C7F870A66BA2DE788544CD8C326BDFF9
Certificate serial:       012B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft
Manifest number:          0127
Signing time:             Thu 23 Jul 2026 07:23:12 +0000
Manifest this update:     Thu 23 Jul 2026 07:23:11 +0000
Manifest next update:     Thu 30 Jul 2026 07:23:11 +0000
Files and hashes:         1: MayWR8f4cKZrot54hUTNjDJr3_k.crl (hash: cywBR55/q8mX8pC9vYfWYAo9ujk6B13J69ZaW4zESgg=)
                          2: 4DD6D628C8D211EF9F1BE312C4F9AE02.roa (hash: Q2Qdv0ZpyDXIc6w4oc2ztFa/mTiFE2ozOR+lXjgvebo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.crl
                          rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91218BB, serialNumber=31AC9647C7F870A66BA2DE788544CD8C326BDFF9
        Validity
            Not Before: Jul 23 07:23:11 2026 GMT
            Not After : Jul 30 07:23:11 2026 GMT
        Subject: CN=6a61c160-6162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:af:8b:48:80:6c:94:e8:e4:a1:98:09:00:e8:
                    13:87:0d:d9:2c:b4:94:b4:10:cb:f4:be:90:ab:24:
                    bf:77:fc:f8:d6:48:55:25:af:50:f7:55:06:b2:d4:
                    a1:d2:79:21:a3:cf:c4:f0:1c:fa:a8:f8:e2:83:0f:
                    f7:91:bd:59:40:ce:0c:2a:fb:b5:fb:4c:72:c7:e3:
                    91:28:49:f7:40:12:f0:62:89:5f:de:24:33:60:3c:
                    a3:a0:71:af:a3:66:ef:96:07:a1:4d:1b:b0:0f:2e:
                    fd:ef:bf:b1:a7:42:32:33:b8:75:a2:bd:1e:3c:bc:
                    11:d7:05:7d:09:b9:a5:e8:d4:3a:16:05:eb:0a:3f:
                    d1:be:ae:8f:91:d8:6f:2d:10:73:fe:93:fa:c5:8a:
                    4b:d1:10:02:d2:3f:b8:dd:50:c3:3f:bd:d8:e3:55:
                    a8:df:18:2d:28:a4:47:3e:3c:c7:98:60:54:8b:a5:
                    b7:b9:17:0f:97:d6:4b:0b:cd:44:01:b7:24:d3:45:
                    cb:4f:ea:c4:77:cf:3d:73:19:29:cb:e5:da:b3:0b:
                    64:3a:18:2b:6d:ea:2d:10:9d:97:70:ad:88:2c:36:
                    83:93:bd:ef:11:08:d0:ec:4a:88:b0:19:98:a0:82:
                    dc:b9:38:20:0c:ae:17:6e:af:38:11:be:04:27:dc:
                    82:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:17:CE:38:42:E2:33:40:BA:93:7E:45:00:F9:4E:8E:87:04:60:20
            X509v3 Authority Key Identifier:
                keyid:31:AC:96:47:C7:F8:70:A6:6B:A2:DE:78:85:44:CD:8C:32:6B:DF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:e9:de:56:40:d9:62:85:54:b3:37:5a:ca:cc:8a:ed:27:7c:
         c1:7f:84:e8:10:e9:bf:db:7a:be:87:e8:51:16:f7:d0:fe:0e:
         35:1c:3d:d0:ce:92:f8:ed:36:f4:dc:50:0c:a5:03:a7:f9:31:
         b7:20:2b:23:49:78:73:ed:e1:c7:ed:e8:a6:47:7c:c0:42:dc:
         e4:74:b6:26:51:6a:95:67:85:64:50:a2:39:6c:2d:45:32:88:
         42:91:b6:a3:5d:33:04:4a:74:0a:79:66:e1:7e:df:e9:5c:c7:
         33:e3:7a:fc:2e:79:70:83:df:3a:a7:5c:3c:6b:4b:18:67:83:
         3c:5a:43:98:85:1f:23:42:43:bd:62:f1:c2:d1:26:ed:8e:ba:
         d7:f6:b0:1a:7b:1c:fa:5d:1d:e7:c9:9a:13:3a:df:fa:ae:f5:
         27:26:14:44:df:16:b1:8c:bf:72:f1:49:c5:a3:ff:1f:ab:2d:
         9e:63:de:79:02:cd:0d:40:64:3a:99:4e:9d:f3:e2:f2:0b:17:
         92:06:70:d7:82:d7:fd:45:91:86:12:e8:05:b2:9f:84:de:02:
         95:01:4d:42:e0:ef:2c:1a:12:92:fe:c7:71:ab:78:c1:02:dc:
         fc:6c:cc:1b:d8:16:d8:b9:8a:23:7f:9b:a0:9e:ca:4f:32:97:
         48:23:65:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:48:04 2026 by rpki-client