Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
File:                     WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft (raw, json)
Hash identifier:          5NNfNFVbqMgOAnQkVkTK3nmvPzUWxWJpcwc2J3Mfftc=
Subject key identifier:   ED:AB:0E:73:3C:DF:DD:2D:36:A8:8B:C9:96:E5:73:F6:A9:BF:5B:04
Authority key identifier: 5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04
Certificate issuer:       /CN=A9137843/serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804
Certificate serial:       063B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
Manifest number:          0633
Signing time:             Wed 22 Jul 2026 23:28:20 +0000
Manifest this update:     Wed 22 Jul 2026 23:28:20 +0000
Manifest next update:     Wed 29 Jul 2026 23:28:20 +0000
Files and hashes:         1: WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl (hash: oGRPcJmiyUYei2/H0+142HWvl49gfEWEz+3oz5w4wDc=)
                          2: F2DDD4EEFB3211EB967B1759C4F9AE02.roa (hash: QnCIfaBwZolfnjhgtwAliuHrR1tHCV7ZzJ1Dz2+uA9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl
                          rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1595 (0x63b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137843, serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804
        Validity
            Not Before: Jul 22 23:28:20 2026 GMT
            Not After : Jul 29 23:28:20 2026 GMT
        Subject: CN=6a615214-871d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:58:c1:94:6f:4d:a3:47:f6:8b:10:4c:4c:4d:
                    06:0d:b8:9d:96:73:98:5d:80:04:ed:63:0b:88:ba:
                    8b:e0:cf:67:be:62:fc:14:39:7e:ac:9e:7c:e3:f0:
                    7d:1e:ea:f4:46:42:b6:13:1d:ee:ef:2a:a1:0e:84:
                    35:d7:c6:cc:9c:61:06:c7:5e:7f:b1:b3:9b:e1:67:
                    99:b6:96:b9:3d:3c:70:56:b7:97:bf:68:de:8e:53:
                    ae:e2:41:60:6c:3f:f3:4f:65:bf:f5:74:cc:45:23:
                    14:04:a8:47:ac:ff:50:86:33:d3:91:df:06:fb:3b:
                    d2:d5:20:e5:21:5c:2b:66:a1:00:f4:27:77:fd:03:
                    a4:9e:c0:fd:25:de:65:c4:d3:cc:61:b5:25:10:3e:
                    b9:2a:d9:93:bc:e7:6c:81:71:37:b7:57:ff:0e:52:
                    63:d3:7e:83:fd:5f:0c:09:24:4a:83:83:6c:c5:26:
                    38:1e:c1:a1:e8:9c:34:5c:c2:4b:0c:1d:52:0e:be:
                    91:66:ca:90:4b:df:c3:f9:b3:1d:83:58:f8:5e:5b:
                    01:19:e4:27:b9:47:93:40:94:eb:0e:5d:7a:02:28:
                    4d:a2:e6:d9:3f:c3:75:4d:9d:36:95:f5:2b:e6:c8:
                    d9:22:c9:bd:e6:d7:2e:ed:e3:2a:32:49:61:1d:c3:
                    6e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AB:0E:73:3C:DF:DD:2D:36:A8:8B:C9:96:E5:73:F6:A9:BF:5B:04
            X509v3 Authority Key Identifier:
                keyid:5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:6f:35:9d:83:f6:6c:fb:1d:77:6b:87:d2:16:ea:23:7a:a7:
         5f:fd:5f:d6:0b:42:53:17:75:71:36:08:ce:ba:ff:2c:38:e4:
         f0:9d:46:1d:89:6f:0a:3f:fa:21:98:dd:c3:92:ea:e2:ae:5b:
         f3:ae:c9:4e:30:c1:28:be:6d:ea:c2:3e:8b:c0:66:a9:aa:da:
         5d:d8:0c:ce:b0:37:e8:8b:61:8f:a6:11:f4:17:23:f5:dc:99:
         b8:6e:99:2b:6a:4e:88:23:78:90:7c:76:db:d1:94:5d:99:bf:
         7d:a8:88:c8:73:69:6e:fd:ef:f9:d0:0e:f8:60:ec:1e:94:3b:
         e1:84:76:38:67:8a:a8:11:d8:63:42:b4:4e:c3:af:8e:08:08:
         5f:e4:3c:11:44:10:6b:88:13:1b:98:cd:ba:3a:b2:f8:fe:27:
         ba:8b:af:e9:2c:13:8e:8c:87:52:a7:82:b7:10:18:b0:c3:d9:
         b3:a6:11:6f:9c:e2:3c:96:27:1b:97:94:53:85:74:0b:60:4c:
         4c:89:9b:75:7d:cc:e7:71:be:7d:62:70:db:08:a1:76:2e:20:
         40:42:f9:4b:bd:01:63:46:7e:83:d1:c8:eb:9d:e5:4e:bc:74:
         a0:c1:d3:35:d0:cd:d6:f5:a5:37:f3:ea:c5:fb:29:3e:2f:03:
         dd:70:b2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:18:01 2026 by rpki-client