Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
File:                     MfW8lHJxAkr0efYTZGbay_FDhsI.mft (raw, json)
Hash identifier:          HUN3yBAEzG9CysFrd8irDdF5teJosqzz4Cp+Rl1OjIo=
Subject key identifier:   95:18:46:F8:3B:08:3C:53:70:C9:AA:B0:A4:A6:90:4B:BA:BB:1F:0F
Authority key identifier: 31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2
Certificate issuer:       /CN=A914F4AA/serialNumber=31F5BC947271024AF479F6136466DACBF14386C2
Certificate serial:       3561
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
Manifest number:          3561
Signing time:             Wed 22 Jul 2026 14:36:00 +0000
Manifest this update:     Wed 22 Jul 2026 14:35:59 +0000
Manifest next update:     Wed 29 Jul 2026 14:35:59 +0000
Files and hashes:         1: MfW8lHJxAkr0efYTZGbay_FDhsI.crl (hash: 3qyhefmNvzIkjYDZ6nFNQWol3NsbK2a86OXb5g/C0Ck=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl
                          rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:35:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13665 (0x3561)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F4AA, serialNumber=31F5BC947271024AF479F6136466DACBF14386C2
        Validity
            Not Before: Jul 22 14:35:59 2026 GMT
            Not After : Jul 29 14:35:59 2026 GMT
        Subject: CN=6a60d54f-e4dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:49:4e:90:79:27:b3:6f:73:f3:3b:75:bd:c5:
                    6d:fd:76:66:21:99:1b:be:65:05:28:b0:fe:b6:1d:
                    97:ee:9f:17:79:15:fb:b6:a6:c6:6e:b1:ad:e9:99:
                    37:46:a8:ba:a4:78:61:58:65:7a:c0:55:16:9a:f2:
                    96:73:bd:d0:eb:6b:2d:d7:b3:d3:16:6d:82:6f:45:
                    7b:88:ef:2c:d5:5c:1e:2d:1c:b6:46:03:8b:05:5d:
                    52:7d:e8:a6:56:cd:c6:d5:b0:ec:d5:35:66:43:b6:
                    ac:f3:07:82:bc:81:ba:c8:75:76:55:a6:e8:42:a5:
                    11:c1:4d:f7:fe:30:89:47:38:90:ac:9d:bc:61:44:
                    6a:23:d3:06:9d:d3:19:a3:06:09:b9:47:6d:91:e5:
                    b7:2a:09:67:27:79:f5:0f:49:1f:86:98:24:7b:3d:
                    94:18:00:68:85:61:36:0f:98:44:7f:67:cb:f3:8b:
                    52:7d:b8:47:e3:0e:06:0e:7d:7e:24:f7:ec:d4:90:
                    e0:1c:fa:56:1e:4c:01:92:89:46:86:c7:ef:c8:77:
                    21:b5:1c:2e:aa:1a:02:cc:3f:38:00:7a:9b:e7:9a:
                    b5:0c:d9:08:0f:31:f4:eb:3c:54:f6:74:9f:30:a1:
                    91:16:43:54:ba:13:7c:20:db:f4:3d:2e:18:e8:51:
                    8b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:18:46:F8:3B:08:3C:53:70:C9:AA:B0:A4:A6:90:4B:BA:BB:1F:0F
            X509v3 Authority Key Identifier:
                keyid:31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:12:0b:9c:9c:96:88:37:ae:03:ab:ba:3d:f3:42:11:b6:57:
         65:b8:1f:27:a3:91:44:df:4d:fe:f1:d2:1a:1c:ac:34:89:dc:
         b4:0d:a4:cd:d5:65:2b:31:42:14:22:0c:6c:c3:64:e3:cb:6f:
         cd:8b:20:77:10:f2:95:42:88:2d:67:87:c4:c2:a0:25:96:91:
         4a:93:41:cf:4e:b2:6d:88:eb:e2:cc:41:00:3b:c2:63:3c:58:
         59:8a:4d:13:1a:22:a5:64:2e:70:8e:a4:48:8d:bd:aa:55:78:
         ce:ab:e5:be:69:21:3e:56:75:5e:17:7a:aa:9d:b8:dc:f1:c9:
         f6:54:ff:4e:ae:01:2f:26:e0:09:56:99:c7:ce:83:62:21:d5:
         7e:82:7d:27:cd:ce:46:44:63:ca:bb:d2:27:74:1a:73:10:b7:
         78:7b:2c:14:dc:67:54:16:da:6f:51:c8:13:54:8a:6a:54:3f:
         23:31:ae:cd:5c:a9:6e:56:6e:e7:77:72:0c:55:f4:ae:5f:9d:
         81:b1:20:6d:19:c5:1b:59:ed:17:02:6f:e7:02:63:e9:23:84:
         a6:bb:56:52:d3:46:e4:be:b8:5d:41:fe:53:6e:78:4d:4d:9c:
         ca:b7:da:02:3c:99:ec:4f:d6:41:ea:d7:52:b3:c2:22:68:47:
         c2:24:b1:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEY0QUExMTAvBgNVBAUTKDMxRjVCQzk0NzI3MTAyNEFGNDc5RjYxMzY0NjZEQUNC
RjE0Mzg2QzIwHhcNMjYwNzIyMTQzNTU5WhcNMjYwNzI5MTQzNTU5WjAYMRYwFAYD
VQQDEw02YTYwZDU0Zi1lNGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv0lOkHkns29z8zt1vcVt/XZmIZkbvmUFKLD+th2X7p8XeRX7tqbGbrGt6Zk3
Rqi6pHhhWGV6wFUWmvKWc73Q62st17PTFm2Cb0V7iO8s1VweLRy2RgOLBV1Sfeim
Vs3G1bDs1TVmQ7as8weCvIG6yHV2VaboQqURwU33/jCJRziQrJ28YURqI9MGndMZ
owYJuUdtkeW3KglnJ3n1D0kfhpgkez2UGABohWE2D5hEf2fL84tSfbhH4w4GDn1+
JPfs1JDgHPpWHkwBkolGhsfvyHchtRwuqhoCzD84AHqb55q1DNkIDzH06zxU9nSf
MKGRFkNUuhN8INv0PS4Y6FGLqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJUYRvg7
CDxTcMmqsKSmkEu6ux8PMB8GA1UdIwQYMBaAFDH1vJRycQJK9Hn2E2Rm2svxQ4bC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjRBQS9FOUYyQ0E0MDFE
OEExMUUyODM0RDNFRTUwOEIwMkNEMi9NZlc4bEhKeEFrcjBlZllUWkdiYXlfRkRo
c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01mVzhsSEp4QWtyMGVmWVRaR2JheV9GRGhzSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RjRBQS9FOUYyQ0E0MDFEOEExMUUyODM0RDNFRTUwOEIwMkNEMi9NZlc4bEhKeEFr
cjBlZllUWkdiYXlfRkRoc0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA3BILnJyWiDeuA6u6PfNCEbZXZbgfJ6ORRN9N/vHSGhysNInctA2kzdVlKzFC
FCIMbMNk48tvzYsgdxDylUKILWeHxMKgJZaRSpNBz06ybYjr4sxBADvCYzxYWYpN
ExoipWQucI6kSI29qlV4zqvlvmkhPlZ1Xhd6qp243PHJ9lT/Tq4BLybgCVaZx86D
YiHVfoJ9J83ORkRjyrvSJ3QacxC3eHssFNxnVBbab1HIE1SKalQ/IzGuzVypblZu
53dyDFX0rl+dgbEgbRnFG1ntFwJv5wJj6SOEprtWUtNG5L64XUH+U254TU2cyrfa
AjyZ7E/WQerXUrPCImhHwiSxwQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:32:34 2026 by rpki-client