Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
File:                     wj3utHnnD2DvynyIRiuVudwiydA.mft (raw, json)
Hash identifier:          IqZIiMTV58+yQgdHN7+/8jay7kdxMcwOlr77p5yUPq4=
Subject key identifier:   97:32:01:6C:17:FC:9D:81:9C:A7:A4:99:3A:7D:00:1D:1B:05:B0:BD
Authority key identifier: C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0
Certificate issuer:       /CN=A9142A22/serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
Certificate serial:       D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
Manifest number:          C0
Signing time:             Thu 23 Jul 2026 08:49:56 +0000
Manifest this update:     Thu 23 Jul 2026 08:49:55 +0000
Manifest next update:     Thu 30 Jul 2026 08:49:55 +0000
Files and hashes:         1: wj3utHnnD2DvynyIRiuVudwiydA.crl (hash: Y+MYjYma7Yv+wRZESeY/WAhOgr1R2QOuMyw5Ia8bHUw=)
                          2: 9F685E60678511F0999A252DC4F9AE02.roa (hash: F0BVTAtasd/U+5Pd7iq4lB4rkiv9dNM8GMlahH5MNTA=)
                          3: 9EE7FBDA678511F0999A252DC4F9AE02.roa (hash: Iu+MvNjXylPZy283mB/J6+7AiPxESlN4SHOf0/N0qug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl
                          rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A22, serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
        Validity
            Not Before: Jul 23 08:49:55 2026 GMT
            Not After : Jul 30 08:49:55 2026 GMT
        Subject: CN=6a61d5b3-eeb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e5:98:6d:24:00:ce:2e:f2:a7:93:d6:af:fe:
                    de:b5:81:f8:87:ae:0b:39:73:6e:19:e6:37:c8:01:
                    e2:d5:fa:da:9e:9a:cb:e2:c4:98:b3:d7:0e:30:b6:
                    3d:f8:62:23:3d:50:b6:be:b5:ff:cb:bd:4a:48:bf:
                    9c:4b:2b:0e:2a:a5:a2:67:a6:2f:42:88:b7:53:4d:
                    a2:b1:92:d5:22:e3:12:20:a2:2e:bb:48:cd:14:1e:
                    d6:5e:af:93:61:e0:b7:e2:38:c4:a5:6d:eb:61:8f:
                    4d:e5:3e:70:f8:42:c7:01:1a:42:a9:00:5f:74:96:
                    6a:00:24:31:e9:90:74:ab:5d:f8:11:39:7a:f6:59:
                    00:57:1d:29:f2:bb:06:32:82:84:35:cc:af:d4:8f:
                    c2:78:b7:b6:28:26:21:a4:50:99:58:a5:89:b2:ca:
                    7e:d1:ab:bb:34:b6:fb:c1:81:89:b0:b5:73:9b:b0:
                    d3:06:60:15:4b:7c:a7:8f:16:57:d3:72:8e:05:40:
                    16:6c:4e:a7:e2:3f:45:82:cf:78:8a:24:0e:e7:eb:
                    6a:16:9d:26:4d:dc:44:f7:70:10:86:dd:8c:b8:c2:
                    d5:df:a7:f6:80:2a:2a:86:4c:ac:2f:f1:8b:1f:13:
                    0c:e3:1e:2c:8d:4c:cb:c9:d8:b4:22:06:57:75:d9:
                    fa:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:32:01:6C:17:FC:9D:81:9C:A7:A4:99:3A:7D:00:1D:1B:05:B0:BD
            X509v3 Authority Key Identifier:
                keyid:C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:7f:a8:19:95:9b:85:7c:62:75:f1:53:9d:2f:60:56:24:0f:
         53:c2:3c:26:58:e2:70:50:10:87:4d:ca:c9:79:7c:80:c1:27:
         d0:12:db:94:21:86:6d:b0:eb:95:d4:e1:26:64:a1:16:42:17:
         21:ee:df:92:fc:0b:2f:f8:1d:e6:cf:f1:fe:db:df:2c:b7:a5:
         72:3f:4d:4e:7d:f2:6d:05:0d:4b:8f:8c:05:df:4a:e6:e6:06:
         72:89:fd:ef:ff:ee:4b:65:bc:8d:a4:aa:34:13:58:8e:df:0c:
         07:34:89:b0:ed:7b:74:ad:ec:dd:32:ea:1b:4e:f5:8b:32:78:
         bd:70:0d:cb:c0:a6:73:04:cc:99:4b:0d:6d:29:43:ff:75:d4:
         e3:79:76:2b:d5:38:74:ca:59:67:d2:ac:07:61:46:a3:12:30:
         e6:d1:f1:4b:9f:c3:78:37:93:9c:af:64:9f:1f:16:c4:7d:ab:
         9e:bf:0f:1b:04:7d:58:85:2b:41:1e:22:84:e5:37:f8:d0:66:
         6b:c0:5e:4f:8c:a8:fc:30:cf:64:62:24:bd:8c:c4:4e:c9:5d:
         55:5c:ab:d1:39:13:d8:37:d8:18:5c:ba:bf:0d:c3:d3:b4:f2:
         2c:83:0c:64:47:d8:92:14:d2:6a:25:c5:04:fb:b1:2f:41:90:
         d2:43:fc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:13:20 2026 by rpki-client