Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.mft
File:                     0wgKgo1JiJFRAHUPx-oGAu7_ZVc.mft (raw, json)
Hash identifier:          uRiEIjP3KddkZzjQGn1o2us9nXgwqyCAKHLtMb/NQEM=
Subject key identifier:   DC:EB:7D:08:7D:F4:E7:57:2A:13:F0:41:97:7C:72:37:04:19:67:EB
Authority key identifier: D3:08:0A:82:8D:49:88:91:51:00:75:0F:C7:EA:06:02:EE:FF:65:57
Certificate issuer:       /CN=A912C2EB/serialNumber=D3080A828D4988915100750FC7EA0602EEFF6557
Certificate serial:       0E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.mft
Manifest number:          0D
Signing time:             Thu 23 Jul 2026 11:12:27 +0000
Manifest this update:     Thu 23 Jul 2026 11:12:26 +0000
Manifest next update:     Thu 30 Jul 2026 11:12:26 +0000
Files and hashes:         1: 0wgKgo1JiJFRAHUPx-oGAu7_ZVc.crl (hash: 9a2+pU1WayFEBCV0M+L9zLCna4zQE35EJAInJiE8N0E=)
                          2: A23E3D0C738811F19D7E75576EA30FBC.roa (hash: Fyk5hZ//GUDjOAuj1FtKLhXAlqi5WwxZ3QEQgW3X2tI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.crl
                          rsync://rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:12:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C2EB, serialNumber=D3080A828D4988915100750FC7EA0602EEFF6557
        Validity
            Not Before: Jul 23 11:12:26 2026 GMT
            Not After : Jul 30 11:12:26 2026 GMT
        Subject: CN=6a61f71b-18f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f6:c9:f1:47:f9:f8:55:cc:7c:76:51:f5:db:
                    69:bb:fa:c7:45:ac:14:3d:f0:3e:87:3c:57:36:84:
                    65:f7:c8:ae:7e:28:12:17:5d:00:9d:2b:4f:24:6f:
                    b9:95:d7:99:0f:45:9c:c1:0d:a7:43:dc:75:ed:c7:
                    f8:69:e3:b3:cc:ef:a5:99:72:b8:56:ea:7b:71:86:
                    28:d4:ca:48:d1:b4:4f:f2:e1:c9:ff:36:41:39:8e:
                    14:a9:f9:f9:51:27:2f:13:07:71:7f:86:4f:61:d3:
                    97:ad:84:15:af:b5:5a:62:86:f5:2f:8e:e2:45:49:
                    e7:4e:32:9f:2c:b0:b3:bc:08:c5:14:6f:7d:99:b3:
                    9a:67:1c:7b:8e:59:5f:87:76:77:40:8e:58:48:e3:
                    a8:99:50:fc:08:dc:82:9d:04:ff:d0:90:af:63:9c:
                    41:89:0d:06:0d:70:d9:29:06:aa:e5:27:41:17:4a:
                    fc:11:8c:53:00:67:8a:45:32:c3:61:41:5b:85:b1:
                    57:9f:f2:b5:ee:df:41:1d:26:7e:93:bd:68:2f:40:
                    45:6c:7b:05:3e:6e:12:db:3c:64:3f:8c:7d:2f:83:
                    7c:2f:54:ae:56:91:86:a6:18:9a:44:c9:4b:0f:b3:
                    3d:4a:48:f4:95:f7:8f:46:b8:4a:40:f6:ca:d0:a9:
                    4b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EB:7D:08:7D:F4:E7:57:2A:13:F0:41:97:7C:72:37:04:19:67:EB
            X509v3 Authority Key Identifier:
                keyid:D3:08:0A:82:8D:49:88:91:51:00:75:0F:C7:EA:06:02:EE:FF:65:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:97:39:26:9a:97:de:9d:4e:f6:07:97:e7:fc:ba:2a:fb:34:
         24:86:ce:f0:f2:10:df:34:ee:68:11:64:64:25:66:85:d5:00:
         90:e4:06:fc:7b:69:c6:50:83:72:a7:54:a0:9e:60:e7:9e:0a:
         95:81:30:22:79:e7:2b:62:10:fa:ca:6e:4c:91:89:91:d4:ef:
         1f:08:5a:e1:79:cd:38:cb:10:93:33:c1:68:b0:a6:93:1b:43:
         31:3e:15:6d:5d:52:e3:22:54:77:b5:27:ca:26:3c:5f:4c:1a:
         d2:3a:85:2e:be:75:e8:a8:c1:d1:3a:8f:9f:f8:6a:97:f6:5d:
         db:fb:7e:14:95:e2:57:66:18:1e:34:fe:27:01:e3:7c:c3:a8:
         f1:ce:5b:13:12:75:84:05:dd:78:f6:96:8a:5a:35:aa:4b:65:
         73:a0:dd:18:0c:ae:d2:5d:89:72:1c:b3:e3:4b:b1:41:14:1a:
         3f:01:fa:9c:63:ca:89:8f:23:90:07:cd:23:83:31:4d:f0:98:
         70:b1:42:c7:e2:22:11:c3:6a:6e:5c:f0:4b:11:b9:9c:1e:6a:
         da:10:01:c4:50:0c:36:db:54:b1:ff:4e:45:d3:25:7b:b8:8f:
         21:5a:b8:c8:1a:92:cd:8f:31:f3:89:92:c0:d2:a1:e8:ad:a1:
         78:d2:63:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:00:57 2026 by rpki-client