Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
File:                     fWozDw0BJJQnx_yd3dz0qCh2CwY.mft (raw, json)
Hash identifier:          19SzDC59kack/wLAqQY8p6NBbMm1LAs18wusL7jHOXk=
Subject key identifier:   32:BE:38:CF:D7:D1:7A:71:0D:EE:7E:69:D1:23:F7:1D:F4:DC:57:74
Authority key identifier: 7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06
Certificate issuer:       /CN=A9145519/serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06
Certificate serial:       1D29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
Manifest number:          1D15
Signing time:             Wed 22 Jul 2026 16:13:34 +0000
Manifest this update:     Wed 22 Jul 2026 16:13:34 +0000
Manifest next update:     Wed 29 Jul 2026 16:13:34 +0000
Files and hashes:         1: fWozDw0BJJQnx_yd3dz0qCh2CwY.crl (hash: Xqj14XFK7Uc9Ev4TbHgaUEObeKqy1JxqhEEG5cpIKzE=)
                          2: 78D1DAC8E45E11E681F82341C4F9AE02.roa (hash: 1+3PiyURCQ1dCtokVNGr5D8JpB6WOiYHI8MxHAWll5Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl
                          rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7465 (0x1d29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145519, serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06
        Validity
            Not Before: Jul 22 16:13:34 2026 GMT
            Not After : Jul 29 16:13:34 2026 GMT
        Subject: CN=6a60ec2e-3a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:43:a6:1c:cd:81:f4:55:f8:82:bb:87:7b:9a:
                    39:11:35:d1:26:6e:7b:5b:7d:cc:e5:a7:90:4e:2f:
                    d9:58:cc:d5:d7:f0:ff:8d:44:5f:05:7d:17:32:37:
                    96:db:61:c1:35:9a:50:05:c5:81:48:f2:e4:b0:ab:
                    ac:f6:11:bf:04:a0:02:5f:ea:23:74:b8:d4:16:52:
                    a7:f0:e7:9d:3c:e5:03:9d:99:28:20:46:4b:ac:1e:
                    0f:23:23:36:27:03:25:16:2a:23:a2:f9:db:9a:06:
                    b2:e2:f5:5f:a2:18:9d:c7:47:ad:6e:0b:15:e1:3f:
                    98:fc:c2:bd:12:25:48:80:ca:e1:f9:e5:ed:25:e1:
                    dc:d9:5c:98:7a:d0:40:49:d5:ae:f4:d2:b8:f2:88:
                    96:53:d7:a2:8a:4b:06:f3:18:66:d2:8e:cc:23:17:
                    e6:c9:28:f2:36:00:81:ce:18:db:4c:30:dc:f0:dc:
                    16:a6:d6:8d:e4:f5:e9:45:78:0f:ca:eb:0c:47:75:
                    c7:08:05:0b:e4:1e:16:24:f8:80:46:d5:43:43:bd:
                    30:0b:94:9f:5b:cc:0f:6d:6f:ef:b6:1a:81:42:12:
                    3f:b7:2a:1e:00:54:75:3f:26:c2:dc:16:0c:20:b4:
                    b0:85:1f:77:79:2b:c1:00:50:f0:42:11:88:8f:ce:
                    38:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:BE:38:CF:D7:D1:7A:71:0D:EE:7E:69:D1:23:F7:1D:F4:DC:57:74
            X509v3 Authority Key Identifier:
                keyid:7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:14:51:32:13:16:e8:f3:4a:b5:2e:71:58:e9:38:b0:4d:67:
         6c:c5:16:ea:d9:4d:7c:a1:3f:f7:9c:3f:73:e2:77:f6:97:93:
         46:81:64:95:3c:d8:04:e3:3b:9d:3e:ab:b9:74:12:c2:7e:33:
         4c:c3:72:dd:5c:cc:13:6f:83:6b:35:2e:92:21:45:42:d9:db:
         dd:e6:d7:c9:5b:73:aa:69:b5:58:9a:98:6c:89:f9:65:91:3c:
         c8:1d:9f:72:eb:33:c9:47:79:48:38:5e:aa:f2:5e:92:79:e8:
         8a:69:5b:97:9b:58:07:38:64:92:a2:4b:a7:42:d8:48:0e:ed:
         6a:a0:d0:88:60:95:10:49:7f:a3:9b:b2:b5:2f:d0:f6:63:64:
         91:6c:72:08:e3:8e:45:bc:c6:b0:f8:23:5e:54:3e:38:fa:76:
         71:26:df:85:ea:a6:6d:ad:0e:14:0a:bb:b7:b0:e8:37:b0:d6:
         df:ed:ba:43:79:a8:8c:e9:14:03:a2:c9:a2:10:41:a8:ee:3a:
         ab:60:38:05:43:f9:86:eb:51:a3:a9:e8:ad:b5:a6:65:c7:33:
         c3:1e:5e:c6:ee:d7:bd:a0:57:85:65:36:9e:34:c7:c8:61:b6:
         d0:9b:ce:86:93:72:83:47:45:2b:25:5b:b9:98:96:dd:ad:6f:
         76:19:8b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:43:34 2026 by rpki-client