Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197B7B/3269D0E8FBE911F0912FE61C6D6F56BC/wjPS8-bItp15WL9NhpD1aLnjVPo.mft
File:                     wjPS8-bItp15WL9NhpD1aLnjVPo.mft (raw, json)
Hash identifier:          A4b+/p1FDBswofMrZ454oW71yH/Kda4TdRxh/5flMAQ=
Subject key identifier:   CA:DD:5E:24:60:CC:60:B6:D7:1A:AE:DF:C6:90:0D:2F:BB:19:C6:76
Authority key identifier: C2:33:D2:F3:E6:C8:B6:9D:79:58:BF:4D:86:90:F5:68:B9:E3:54:FA
Certificate issuer:       /CN=A9197B7B/serialNumber=C233D2F3E6C8B69D7958BF4D8690F568B9E354FA
Certificate serial:       39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wjPS8-bItp15WL9NhpD1aLnjVPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197B7B/3269D0E8FBE911F0912FE61C6D6F56BC/wjPS8-bItp15WL9NhpD1aLnjVPo.mft
Manifest number:          39
Signing time:             Mon 11 May 2026 08:43:44 +0000
Manifest this update:     Mon 11 May 2026 08:43:44 +0000
Manifest next update:     Mon 18 May 2026 08:43:44 +0000
Files and hashes:         1: wjPS8-bItp15WL9NhpD1aLnjVPo.crl (hash: u+cbPD0f65ri8k0pShSTWGAiTEobA2Ed36VNyCgAjoc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197B7B/3269D0E8FBE911F0912FE61C6D6F56BC/wjPS8-bItp15WL9NhpD1aLnjVPo.crl
                          rsync://rpki.apnic.net/member_repository/A9197B7B/3269D0E8FBE911F0912FE61C6D6F56BC/wjPS8-bItp15WL9NhpD1aLnjVPo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wjPS8-bItp15WL9NhpD1aLnjVPo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:43:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197B7B, serialNumber=C233D2F3E6C8B69D7958BF4D8690F568B9E354FA
        Validity
            Not Before: May 11 08:43:44 2026 GMT
            Not After : May 18 08:43:44 2026 GMT
        Subject: CN=6a0196c0-cee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1f:93:bf:43:6d:e1:ee:5a:95:49:21:67:35:
                    52:3c:3c:c4:bf:44:90:2a:ba:08:e2:45:d7:db:01:
                    5a:67:88:f0:0b:27:3b:f0:1d:ef:37:11:93:b1:9b:
                    c8:44:5b:11:ed:fa:a1:71:46:46:05:b3:66:c6:9a:
                    0c:cd:c2:a2:ae:c3:2c:eb:8e:e8:7c:5c:19:e8:5d:
                    e3:e6:f8:58:bf:5f:d0:4d:73:f7:e7:d3:45:35:c8:
                    77:e9:e9:03:e8:dd:32:f2:fb:75:4d:05:0d:2a:43:
                    e6:73:d6:7a:8c:92:6d:d0:30:f4:5f:b5:49:b9:f6:
                    8f:ff:4d:14:8d:72:f7:04:ce:5f:e8:b8:7d:27:d1:
                    93:52:c6:bb:5a:04:85:b1:ba:7b:d6:37:31:1a:d4:
                    c3:f4:ef:06:a8:ad:47:91:fe:c7:19:7e:5e:00:d0:
                    cf:0e:30:f9:c4:e4:97:b0:ed:73:bd:86:22:d8:13:
                    33:0f:30:cf:bf:b2:b5:36:4d:53:6a:12:08:1c:b1:
                    c7:77:ae:f5:90:4f:ea:56:79:6f:df:d2:8c:21:38:
                    50:18:12:63:f0:1c:36:ea:b2:89:6b:a4:11:71:2e:
                    d5:c6:89:77:f3:3d:0c:93:a0:b0:4f:72:c5:50:1a:
                    af:b2:80:8b:42:3c:26:5d:a9:06:24:9d:a0:aa:6f:
                    94:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DD:5E:24:60:CC:60:B6:D7:1A:AE:DF:C6:90:0D:2F:BB:19:C6:76
            X509v3 Authority Key Identifier:
                keyid:C2:33:D2:F3:E6:C8:B6:9D:79:58:BF:4D:86:90:F5:68:B9:E3:54:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197B7B/3269D0E8FBE911F0912FE61C6D6F56BC/wjPS8-bItp15WL9NhpD1aLnjVPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wjPS8-bItp15WL9NhpD1aLnjVPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197B7B/3269D0E8FBE911F0912FE61C6D6F56BC/wjPS8-bItp15WL9NhpD1aLnjVPo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:3c:72:17:ec:0d:8f:f2:b7:2b:eb:31:5e:94:00:12:78:84:
         45:83:99:1f:a6:b2:e0:f5:9b:7a:08:9b:99:52:4a:2b:6d:66:
         a8:9c:04:d0:15:65:bf:f0:7d:61:3a:66:c4:a8:93:98:d4:25:
         92:93:dd:ea:82:f4:1b:95:b2:42:7e:e6:16:eb:44:0a:db:8a:
         2d:b9:00:7b:04:d9:d1:f1:1e:db:9a:a5:42:b0:8c:e6:f2:e4:
         4b:c4:50:22:4a:84:71:da:45:97:37:2d:f2:2b:96:a3:9f:d1:
         31:8c:48:88:2b:67:77:dc:c7:af:a1:33:44:48:94:df:cb:85:
         47:6d:b9:24:60:12:43:62:61:43:80:d6:88:2d:47:96:78:ae:
         c4:cf:8a:e4:1c:fe:c5:91:69:f3:87:66:b4:c9:96:9c:a9:17:
         cf:de:f0:a4:fb:78:b6:2f:5d:26:5d:c1:04:67:4e:d1:13:55:
         d2:e4:9b:77:3a:bc:d6:db:ed:03:a6:0d:6d:00:2d:91:35:98:
         ac:59:01:9f:73:ba:b8:56:78:6d:b7:bb:eb:44:78:da:ac:77:
         c5:b0:25:46:a9:14:b6:6d:ea:39:97:1b:29:3a:89:aa:6f:ec:
         3c:bb:9f:9c:ef:a8:0a:c1:0c:35:db:26:d3:a4:16:71:cb:9c:
         b5:45:44:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:21:07 2026 by rpki-client