Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft
File:                     CWjN62Rstqq8D0IyziOx3OVMrSA.mft (raw, json)
Hash identifier:          OeRHiVlf+eD4THsBzx6zbtmPC8gHbMVOrcivqf+g7/s=
Subject key identifier:   83:C0:F1:F0:46:01:2B:E2:B3:63:62:79:AC:4F:36:01:07:28:53:25
Authority key identifier: 09:68:CD:EB:64:6C:B6:AA:BC:0F:42:32:CE:23:B1:DC:E5:4C:AD:20
Certificate issuer:       /CN=A9187CB1/serialNumber=0968CDEB646CB6AABC0F4232CE23B1DCE54CAD20
Certificate serial:       96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft
Manifest number:          94
Signing time:             Thu 23 Jul 2026 09:16:53 +0000
Manifest this update:     Thu 23 Jul 2026 09:16:52 +0000
Manifest next update:     Thu 30 Jul 2026 09:16:52 +0000
Files and hashes:         1: CWjN62Rstqq8D0IyziOx3OVMrSA.crl (hash: wY54C6l7yVVX2ys2upxe5FrUdItKXBODmO2FqgAlXTs=)
                          2: C4FE3638A4D711F0A8D1DB3CC4F9AE02.roa (hash: bPau6Z6P+AYKpvnSxKbqaqw77/l2J2Yx/cJ0pxXB/hA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.crl
                          rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:16:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187CB1, serialNumber=0968CDEB646CB6AABC0F4232CE23B1DCE54CAD20
        Validity
            Not Before: Jul 23 09:16:52 2026 GMT
            Not After : Jul 30 09:16:52 2026 GMT
        Subject: CN=6a61dc05-81c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ed:2c:4c:72:8a:4a:ca:a3:35:a7:8b:75:c2:
                    e9:f1:bf:6e:f1:f7:66:13:42:bf:04:0d:c3:cf:fb:
                    35:9c:11:fe:11:77:8c:c9:66:ac:44:da:92:b0:26:
                    95:09:8c:3c:cf:20:a2:74:dc:bc:f1:1a:de:86:e0:
                    f0:6a:bd:4a:30:1e:f7:35:f8:e1:57:c8:3d:12:bf:
                    3f:e5:b3:6f:79:20:1f:67:14:ec:27:72:0b:5c:23:
                    22:c2:07:fd:75:c5:b9:15:97:48:bb:96:5a:97:55:
                    b3:10:82:89:fd:38:c9:0e:a4:3e:19:1b:0a:a4:8b:
                    33:ac:be:0a:00:d4:18:b8:d2:a7:7f:4e:f2:3a:08:
                    19:eb:b0:29:70:07:f7:36:6c:1f:a0:d6:70:43:56:
                    b3:99:41:a1:ea:c0:f3:bf:c8:3b:af:0a:b7:24:89:
                    d3:1c:6d:6c:88:b8:08:bb:04:e3:d4:f8:f6:a3:8f:
                    90:8c:ca:74:28:6b:8b:ba:06:3e:9d:06:9b:b8:b3:
                    7c:30:9a:90:02:4c:f5:59:27:bd:27:06:66:49:56:
                    61:36:57:12:5b:1e:d4:3c:f5:23:33:1e:2c:f0:22:
                    6d:64:8b:10:29:b5:e8:b8:e0:0b:34:4a:71:5b:01:
                    74:9e:4f:93:ed:1a:5a:e2:02:b3:fc:42:de:a6:a6:
                    53:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C0:F1:F0:46:01:2B:E2:B3:63:62:79:AC:4F:36:01:07:28:53:25
            X509v3 Authority Key Identifier:
                keyid:09:68:CD:EB:64:6C:B6:AA:BC:0F:42:32:CE:23:B1:DC:E5:4C:AD:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:83:a5:65:73:5e:58:19:bd:5a:e5:3a:dd:30:ca:1f:ca:38:
         91:11:41:99:53:cc:f1:b1:6b:33:9d:f1:3c:b9:7b:a4:86:51:
         0f:41:78:bd:d4:cb:45:12:43:39:9e:12:a9:e9:27:1b:ba:8b:
         1d:8f:23:17:50:73:1c:d4:69:7a:54:20:47:ca:88:b1:0f:22:
         bd:32:57:0e:d4:2b:a0:c6:84:cb:ad:51:70:3e:0f:fb:88:bd:
         2f:69:7a:76:5e:67:99:fb:7e:94:ed:95:cb:5a:27:a8:5c:04:
         2a:86:49:8c:e5:57:70:c4:bd:dd:bc:ad:1b:d8:bf:58:d4:21:
         99:32:10:9b:9b:ed:5c:4d:ce:0a:56:a8:e0:e2:ff:36:2a:32:
         01:c0:48:da:10:57:3a:8b:8b:15:24:01:12:72:85:0f:b1:d8:
         db:9a:ad:fb:c5:3a:f7:f7:1e:62:6d:66:59:d1:d9:54:3c:ce:
         19:14:12:83:5f:2d:0d:9a:c5:e6:0c:c7:cd:48:e1:06:9d:e2:
         95:a9:8b:00:da:6c:5d:76:92:91:fe:b4:bb:b1:f2:1f:97:21:
         0d:db:8e:63:6f:74:71:a3:93:1c:49:c8:1e:ea:13:c4:a7:1f:
         1b:5c:95:a0:31:4e:fc:6c:91:e8:33:a5:cf:d6:f9:73:41:7e:
         67:7c:68:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODdDQjExMTAvBgNVBAUTKDA5NjhDREVCNjQ2Q0I2QUFCQzBGNDIzMkNFMjNCMURD
RTU0Q0FEMjAwHhcNMjYwNzIzMDkxNjUyWhcNMjYwNzMwMDkxNjUyWjAYMRYwFAYD
VQQDEw02YTYxZGMwNS04MWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0u0sTHKKSsqjNaeLdcLp8b9u8fdmE0K/BA3Dz/s1nBH+EXeMyWasRNqSsCaV
CYw8zyCidNy88RrehuDwar1KMB73NfjhV8g9Er8/5bNveSAfZxTsJ3ILXCMiwgf9
dcW5FZdIu5Zal1WzEIKJ/TjJDqQ+GRsKpIszrL4KANQYuNKnf07yOggZ67ApcAf3
NmwfoNZwQ1azmUGh6sDzv8g7rwq3JInTHG1siLgIuwTj1Pj2o4+QjMp0KGuLugY+
nQabuLN8MJqQAkz1WSe9JwZmSVZhNlcSWx7UPPUjMx4s8CJtZIsQKbXouOALNEpx
WwF0nk+T7Rpa4gKz/ELepqZTqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIPA8fBG
ASvis2NieaxPNgEHKFMlMB8GA1UdIwQYMBaAFAlozetkbLaqvA9CMs4jsdzlTK0g
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0NCMS8xQzg5NDBBNkE0
RDcxMUYwQjM0MEZDODFDNEY5QUUwMi9DV2pONjJSc3RxcThEMEl5emlPeDNPVk1y
U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NXak42MlJzdHFxOEQwSXl6aU94M09WTXJTQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
N0NCMS8xQzg5NDBBNkE0RDcxMUYwQjM0MEZDODFDNEY5QUUwMi9DV2pONjJSc3Rx
cThEMEl5emlPeDNPVk1yU0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmIOlZXNeWBm9WuU63TDKH8o4kRFBmVPM8bFrM53xPLl7pIZRD0F4vdTLRRJD
OZ4SqeknG7qLHY8jF1BzHNRpelQgR8qIsQ8ivTJXDtQroMaEy61RcD4P+4i9L2l6
dl5nmft+lO2Vy1onqFwEKoZJjOVXcMS93bytG9i/WNQhmTIQm5vtXE3OClao4OL/
NioyAcBI2hBXOouLFSQBEnKFD7HY25qt+8U69/ceYm1mWdHZVDzOGRQSg18tDZrF
5gzHzUjhBp3ilamLANpsXXaSkf60u7HyH5chDduOY290caOTHEnIHuoTxKcfG1yV
oDFO/GyR6DOlz9b5c0F+Z3xomg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:19:57 2026 by rpki-client