Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft
File:                     Wr4zfmXAC-qEfODSWciH5P2zuSE.mft (raw, json)
Hash identifier:          iCustXVfEGhLvwpezl5wUVOXQD4BQn7SYIxHa3O5vqc=
Subject key identifier:   C1:79:55:A8:9D:BB:1C:43:AE:06:18:21:77:EE:83:C5:B8:86:41:C2
Authority key identifier: 5A:BE:33:7E:65:C0:0B:EA:84:7C:E0:D2:59:C8:87:E4:FD:B3:B9:21
Certificate issuer:       /CN=A9173CDD/serialNumber=5ABE337E65C00BEA847CE0D259C887E4FDB3B921
Certificate serial:       0103
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft
Manifest number:          0103
Signing time:             Thu 23 Jul 2026 07:54:25 +0000
Manifest this update:     Thu 23 Jul 2026 07:54:25 +0000
Manifest next update:     Thu 30 Jul 2026 07:54:25 +0000
Files and hashes:         1: Wr4zfmXAC-qEfODSWciH5P2zuSE.crl (hash: r8LJQ924wYpPOe+ZtYSTskQ/dwjLRoXCvFLu05uzI+Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.crl
                          rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173CDD, serialNumber=5ABE337E65C00BEA847CE0D259C887E4FDB3B921
        Validity
            Not Before: Jul 23 07:54:25 2026 GMT
            Not After : Jul 30 07:54:25 2026 GMT
        Subject: CN=6a61c8b1-8ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:da:65:ca:e0:db:78:5d:ab:af:bd:9b:93:5c:
                    dd:a6:55:f0:e5:e2:28:a9:fc:27:43:b4:2b:e1:24:
                    0a:15:ba:0b:43:be:6b:35:0a:9c:6f:8f:7c:1e:7a:
                    64:13:7c:86:b7:71:69:1a:a8:92:e6:15:1b:aa:43:
                    19:70:39:c8:21:66:a7:6c:5f:6c:0b:1e:71:44:6a:
                    51:42:9f:d6:ec:91:2a:53:a1:68:11:20:3c:e2:1b:
                    47:4e:2d:ea:23:ba:40:3a:e5:27:8b:54:cc:b0:cb:
                    a8:36:5b:e4:61:9f:42:e6:b3:16:4d:bd:8c:41:ca:
                    81:17:3f:78:67:fd:8d:dc:0d:c7:98:be:89:a1:3f:
                    90:94:0c:69:aa:58:03:bf:fc:f1:95:46:70:f4:97:
                    f7:1c:96:61:98:dd:cd:53:54:d2:7d:22:10:57:3a:
                    14:85:24:db:3b:c2:3f:08:85:2f:49:21:aa:6b:f3:
                    c1:65:67:db:5a:a3:ba:0c:31:71:f8:7e:47:37:e6:
                    1f:ad:4c:75:0d:96:f6:98:56:e4:21:f4:95:23:55:
                    41:58:a5:ef:5f:4f:2c:6d:18:80:4b:0a:74:52:a9:
                    71:11:f6:1f:59:cd:46:e6:78:ef:9d:14:0b:4e:92:
                    b0:c3:5a:86:a7:a3:5e:7b:e8:56:82:86:c4:be:7a:
                    2b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:79:55:A8:9D:BB:1C:43:AE:06:18:21:77:EE:83:C5:B8:86:41:C2
            X509v3 Authority Key Identifier:
                keyid:5A:BE:33:7E:65:C0:0B:EA:84:7C:E0:D2:59:C8:87:E4:FD:B3:B9:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d5:d6:ff:1f:b7:f4:19:e6:d3:69:ea:fd:84:21:24:03:10:
         26:78:83:92:f3:aa:c2:26:6f:98:81:39:0b:de:36:ad:de:fb:
         c3:60:fa:d4:cd:a4:df:3d:b0:e0:67:f7:98:c4:7e:2e:7b:32:
         17:dd:0e:26:a2:0a:12:96:25:6c:61:8d:b6:2e:d1:8e:93:df:
         66:6d:1c:98:d7:d2:5a:4d:c2:32:45:e7:ae:96:88:f4:72:05:
         ef:a1:e3:3c:a5:7f:8e:ef:ff:8e:7b:32:86:3b:52:2c:3d:54:
         0b:62:32:49:70:04:5a:c6:75:3b:53:c8:7b:40:f4:59:14:6f:
         9d:63:49:06:98:6c:87:62:d7:e8:a8:0f:02:42:5d:12:bf:53:
         f5:27:03:73:19:56:e3:94:64:0e:4f:b6:bd:76:69:f8:10:06:
         76:2c:df:e3:10:b7:a8:90:32:63:5f:41:a8:2a:5d:7a:24:7d:
         bd:8a:41:7d:79:68:5c:3f:cf:e1:25:22:b1:9d:38:de:bb:e8:
         2d:8d:03:d9:b0:8d:55:93:1d:61:f9:77:e1:e3:2c:99:94:d5:
         16:5e:ed:3b:d0:71:16:14:57:de:be:43:f1:fd:7f:ea:59:6f:
         73:ae:2c:1f:bb:db:89:ec:1c:08:ec:90:b9:26:b0:67:35:75:
         55:99:34:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:44:45 2026 by rpki-client