Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.mft
File:                     W7mo4aQGCswvO_oh78rSwwZujok.mft (raw, json)
Hash identifier:          DyxpheK8imHjCLMrdNQUwibmbjM5+DArk5SjSnX2bC8=
Subject key identifier:   4C:4C:01:2B:8F:B4:44:B4:60:70:5B:48:7D:CF:72:B5:29:AC:E7:82
Authority key identifier: 5B:B9:A8:E1:A4:06:0A:CC:2F:3B:FA:21:EF:CA:D2:C3:06:6E:8E:89
Certificate issuer:       /CN=A914699C/serialNumber=5BB9A8E1A4060ACC2F3BFA21EFCAD2C3066E8E89
Certificate serial:       42
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W7mo4aQGCswvO_oh78rSwwZujok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.mft
Manifest number:          39
Signing time:             Thu 23 Jul 2026 10:46:05 +0000
Manifest this update:     Thu 23 Jul 2026 10:46:04 +0000
Manifest next update:     Thu 30 Jul 2026 10:46:04 +0000
Files and hashes:         1: W7mo4aQGCswvO_oh78rSwwZujok.crl (hash: SE3oFDLnQYzjmj8VhDNkmXv6m3VkBD2K6DXIIPjjReY=)
                          2: 787214AE502D11F1B0D3D52AC9833773.roa (hash: wrle5esD5kunfyi/rtL/mG9W39WCBeUw3VOv/boPy9I=)
                          3: B241C102502D11F1A5FC1C3EC9833773.roa (hash: pXNb9fqL8rNJsyMIH/TKizTjSzJWlaSb0X5J6/gFCyQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.crl
                          rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W7mo4aQGCswvO_oh78rSwwZujok.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:46:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914699C, serialNumber=5BB9A8E1A4060ACC2F3BFA21EFCAD2C3066E8E89
        Validity
            Not Before: Jul 23 10:46:04 2026 GMT
            Not After : Jul 30 10:46:04 2026 GMT
        Subject: CN=6a61f0ed-6eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3d:24:7f:3b:ea:f1:44:15:53:b1:62:e9:0a:
                    9f:73:e8:ba:db:96:f3:f3:72:8d:6b:13:5f:02:0d:
                    a3:07:50:88:74:47:65:79:32:d8:bf:42:63:5e:35:
                    31:42:1a:41:8f:f6:5e:c4:9f:ba:7e:be:9d:65:80:
                    0d:af:43:82:e1:6b:b1:db:31:d3:7f:f7:78:0e:fb:
                    8e:13:e4:8c:d7:28:26:bd:8b:6d:ea:52:97:31:c5:
                    9b:f2:8b:f4:d5:fc:fb:67:fe:d2:57:62:d7:6a:90:
                    dc:4c:7b:e2:0d:3a:4a:43:52:aa:b8:0b:c6:36:6c:
                    52:62:1b:01:ea:4e:6e:a2:d2:77:25:f8:cb:5d:e3:
                    da:b7:af:ea:7c:88:28:23:83:fe:62:d3:56:77:9f:
                    0e:ae:0c:8c:df:14:36:10:9e:bd:57:5c:b2:96:08:
                    0e:cb:43:28:2f:12:48:72:19:2f:02:72:0c:13:f0:
                    a7:60:cd:55:93:b1:bf:5e:f1:df:43:e7:d4:16:63:
                    45:fd:7d:eb:3c:e1:a0:30:8f:8c:37:75:49:f4:6f:
                    1a:bc:49:bb:10:bd:14:79:7b:84:c7:29:63:38:14:
                    da:25:e4:f9:3d:9a:dc:ad:a2:9c:ed:52:e7:70:b1:
                    b2:03:ef:c1:89:dd:49:1c:d3:9b:7d:48:58:63:3c:
                    15:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4C:01:2B:8F:B4:44:B4:60:70:5B:48:7D:CF:72:B5:29:AC:E7:82
            X509v3 Authority Key Identifier:
                keyid:5B:B9:A8:E1:A4:06:0A:CC:2F:3B:FA:21:EF:CA:D2:C3:06:6E:8E:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W7mo4aQGCswvO_oh78rSwwZujok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:38:a5:1a:1f:e3:b8:41:93:a4:ce:78:8d:ab:1d:a8:ca:5d:
         0c:21:31:07:58:22:bf:84:73:64:2a:64:e1:19:00:1b:4e:f6:
         53:69:ca:4e:34:5b:b8:18:42:01:ea:3f:01:30:35:02:ec:1a:
         0d:72:c1:fb:78:8d:c0:ed:62:02:0e:f7:c3:01:ed:a2:6b:2b:
         2f:20:02:b2:02:a6:bb:43:62:fc:aa:32:a2:d7:7e:07:d8:6d:
         49:47:8e:d5:08:4a:5d:52:20:b9:b3:7a:3c:ad:e3:33:5a:5a:
         fe:96:db:99:e4:4e:57:75:35:ef:0b:5a:78:91:d5:cf:48:ff:
         a8:d7:df:ae:c3:8b:e5:93:b6:b5:72:3c:1b:e1:29:ba:23:71:
         98:6d:31:31:e5:b0:ec:bc:3b:92:11:2e:44:d1:dd:0f:20:ca:
         d2:fe:7d:fa:5c:94:19:93:6b:06:4e:08:75:f9:72:a0:3e:ce:
         f3:77:d8:af:c2:a8:e9:c5:6b:51:5f:f1:c0:b9:c0:94:75:6a:
         55:38:d5:b6:2d:5f:03:87:7f:8a:f0:52:95:01:45:ae:3f:8c:
         2e:95:19:cc:63:09:58:ce:e6:d8:57:29:63:24:1b:0c:c7:15:
         5a:db:37:a6:69:e5:70:ec:81:6b:7c:be:49:91:bb:e3:de:85:
         97:cf:ca:94
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
Njk5QzExMC8GA1UEBRMoNUJCOUE4RTFBNDA2MEFDQzJGM0JGQTIxRUZDQUQyQzMw
NjZFOEU4OTAeFw0yNjA3MjMxMDQ2MDRaFw0yNjA3MzAxMDQ2MDRaMBgxFjAUBgNV
BAMTDTZhNjFmMGVkLTZlZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvPSR/O+rxRBVTsWLpCp9z6LrblvPzco1rE18CDaMHUIh0R2V5Mti/QmNeNTFC
GkGP9l7En7p+vp1lgA2vQ4Lha7HbMdN/93gO+44T5IzXKCa9i23qUpcxxZvyi/TV
/Ptn/tJXYtdqkNxMe+INOkpDUqq4C8Y2bFJiGwHqTm6i0ncl+Mtd49q3r+p8iCgj
g/5i01Z3nw6uDIzfFDYQnr1XXLKWCA7LQygvEkhyGS8CcgwT8KdgzVWTsb9e8d9D
59QWY0X9fes84aAwj4w3dUn0bxq8SbsQvRR5e4THKWM4FNol5Pk9mtytopztUudw
sbID78GJ3Ukc05t9SFhjPBXzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUTEwBK4+0
RLRgcFtIfc9ytSms54IwHwYDVR0jBBgwFoAUW7mo4aQGCswvO/oh78rSwwZujokw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2OTlDLzlCOURDQTMyNDFG
OTExRjFBN0FBQTAzM0JGODMzNzczL1c3bW80YVFHQ3N3dk9fb2g3OHJTd3dadWpv
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvVzdtbzRhUUdDc3d2T19vaDc4clN3d1p1am9rLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2
OTlDLzlCOURDQTMyNDFGOTExRjFBN0FBQTAzM0JGODMzNzczL1c3bW80YVFHQ3N3
dk9fb2g3OHJTd3dadWpvay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBcOKUaH+O4QZOkzniNqx2oyl0MITEHWCK/hHNkKmThGQAbTvZTacpONFu4GEIB
6j8BMDUC7BoNcsH7eI3A7WICDvfDAe2iaysvIAKyAqa7Q2L8qjKi134H2G1JR47V
CEpdUiC5s3o8reMzWlr+ltuZ5E5XdTXvC1p4kdXPSP+o19+uw4vlk7a1cjwb4Sm6
I3GYbTEx5bDsvDuSES5E0d0PIMrS/n36XJQZk2sGTgh1+XKgPs7zd9ivwqjpxWtR
X/HAucCUdWpVONW2LV8Dh3+K8FKVAUWuP4wulRnMYwlYzubYVyljJBsMxxVa2zem
aeVw7IFrfL5Jkbvj3oWXz8qU
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:27:17 2026 by rpki-client