Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft
File:                     W2pwDO4aU9VRnlolxk0a0ro3zac.mft (raw, json)
Hash identifier:          ViY3GPmWV361KYQsgeVFwWN/z5qJtD4ESNKVTkklvCU=
Subject key identifier:   60:10:1F:8E:92:BA:32:A5:98:E4:5E:93:83:10:41:81:1E:E9:F3:C5
Authority key identifier: 5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7
Certificate issuer:       /CN=A91AAB94/serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7
Certificate serial:       033F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft
Manifest number:          0338
Signing time:             Thu 23 Jul 2026 01:59:22 +0000
Manifest this update:     Thu 23 Jul 2026 01:59:22 +0000
Manifest next update:     Thu 30 Jul 2026 01:59:22 +0000
Files and hashes:         1: W2pwDO4aU9VRnlolxk0a0ro3zac.crl (hash: xqeEe6OrfyNytY7mDQ/9iAI/UwIJp9omLMDeoqeG5ak=)
                          2: 53AA673C16A911ED88058C80C4F9AE02.roa (hash: TnwXtb5MfhCK20XeLeq1l+qvHKIr2uVnJlZNM+FxEW4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl
                          rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:59:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 831 (0x33f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAB94, serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7
        Validity
            Not Before: Jul 23 01:59:22 2026 GMT
            Not After : Jul 30 01:59:22 2026 GMT
        Subject: CN=6a61757a-fce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a2:18:99:f4:42:37:a4:f0:1b:a4:e5:69:89:
                    8a:55:e8:94:9b:5b:22:07:5e:b7:30:60:a7:70:f3:
                    40:ef:37:d2:97:e8:25:d6:f5:25:5a:55:c6:32:6f:
                    96:09:7d:16:50:5d:9c:65:02:79:d2:be:c6:97:39:
                    ee:65:cb:3b:7a:ff:fd:52:d6:43:6c:cb:ab:21:56:
                    e7:42:a4:b8:17:39:21:a7:82:8c:c5:c4:9a:cc:87:
                    34:82:29:51:ca:79:d6:ab:30:09:94:2c:3e:c2:e8:
                    ec:7e:cb:c4:cd:ca:3f:cb:9d:9f:e6:48:65:20:ad:
                    ff:2f:db:5d:6c:c6:6f:42:2b:b4:c4:30:eb:2f:2b:
                    43:2a:d6:02:c5:92:1e:32:21:b4:ae:f0:0e:13:6c:
                    b2:99:d4:20:47:f7:8b:fe:38:35:fa:97:c5:ab:2a:
                    81:02:6e:ea:50:9e:1e:29:94:9d:d1:06:3f:a0:c5:
                    a1:4b:9c:64:d4:52:57:98:aa:7a:e4:7b:c0:ea:df:
                    3b:5a:7d:f3:84:72:5e:1a:29:ca:cf:3a:f9:1e:82:
                    3d:79:21:d2:c3:08:20:6d:53:1c:cf:83:01:52:5e:
                    7c:7d:23:6f:0d:3d:d8:08:c5:0f:2c:3d:65:58:8e:
                    d0:90:78:36:39:75:72:ed:40:63:2a:0b:84:69:9a:
                    02:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:10:1F:8E:92:BA:32:A5:98:E4:5E:93:83:10:41:81:1E:E9:F3:C5
            X509v3 Authority Key Identifier:
                keyid:5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:bf:58:75:79:da:4c:24:1d:e9:48:b1:87:a5:5d:e8:88:3d:
         6b:f0:95:2e:3b:55:11:cf:c6:02:a2:85:cf:69:9f:fb:65:d4:
         c6:d1:0b:6c:fa:f7:a7:c4:fc:f3:59:9b:b1:f9:68:6b:06:08:
         1e:0c:81:cd:05:25:d5:7d:c6:01:a4:d7:78:b7:7b:5a:9e:6c:
         2e:6d:6c:11:28:02:b3:f8:4c:40:04:61:62:5d:ad:f4:89:a8:
         4c:38:c9:98:78:f1:86:f8:50:91:3a:4a:3c:c7:fa:1f:e8:9f:
         1e:37:e2:3d:2d:28:25:93:01:e6:95:9e:b2:41:52:6a:9d:19:
         f5:18:46:3b:b9:df:1d:9f:df:39:ba:29:77:03:a1:59:ea:66:
         5f:c4:33:f6:5b:77:37:48:96:e1:31:22:22:b6:b2:0d:a4:60:
         d8:e2:be:a6:75:fd:1d:b6:37:40:1b:eb:99:0e:7f:38:25:5a:
         31:bc:0d:91:0f:e8:4b:f0:d9:1c:60:74:46:f7:91:59:a1:86:
         73:76:d4:a8:2b:57:d6:9e:71:94:93:83:79:a9:41:46:ce:2e:
         bf:c6:ac:03:82:b6:85:41:ef:80:20:fb:ff:4e:fb:82:f1:2c:
         c2:ef:26:6b:46:0b:d9:eb:9e:53:42:b7:13:5e:d0:f2:bd:81:
         89:29:6d:9c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFCOTQxMTAvBgNVBAUTKDVCNkE3MDBDRUUxQTUzRDU1MTlFNUEyNUM2NEQxQUQy
QkEzN0NEQTcwHhcNMjYwNzIzMDE1OTIyWhcNMjYwNzMwMDE1OTIyWjAYMRYwFAYD
VQQDEw02YTYxNzU3YS1mY2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArqIYmfRCN6TwG6TlaYmKVeiUm1siB163MGCncPNA7zfSl+gl1vUlWlXGMm+W
CX0WUF2cZQJ50r7GlznuZcs7ev/9UtZDbMurIVbnQqS4Fzkhp4KMxcSazIc0gilR
ynnWqzAJlCw+wujsfsvEzco/y52f5khlIK3/L9tdbMZvQiu0xDDrLytDKtYCxZIe
MiG0rvAOE2yymdQgR/eL/jg1+pfFqyqBAm7qUJ4eKZSd0QY/oMWhS5xk1FJXmKp6
5HvA6t87Wn3zhHJeGinKzzr5HoI9eSHSwwggbVMcz4MBUl58fSNvDT3YCMUPLD1l
WI7QkHg2OXVy7UBjKguEaZoC3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGAQH46S
ujKlmORek4MQQYEe6fPFMB8GA1UdIwQYMBaAFFtqcAzuGlPVUZ5aJcZNGtK6N82n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUI5NC83MDcwMjNGQTE2
QTYxMUVEQUMzQ0ExN0RDNEY5QUUwMi9XMnB3RE80YVU5VlJubG9seGswYTBybzN6
YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1cycHdETzRhVTlWUm5sb2x4azBhMHJvM3phYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QUI5NC83MDcwMjNGQTE2QTYxMUVEQUMzQ0ExN0RDNEY5QUUwMi9XMnB3RE80YVU5
VlJubG9seGswYTBybzN6YWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAq79YdXnaTCQd6Uixh6Vd6Ig9a/CVLjtVEc/GAqKFz2mf+2XUxtELbPr3p8T8
81mbsfloawYIHgyBzQUl1X3GAaTXeLd7Wp5sLm1sESgCs/hMQARhYl2t9ImoTDjJ
mHjxhvhQkTpKPMf6H+ifHjfiPS0oJZMB5pWeskFSap0Z9RhGO7nfHZ/fObopdwOh
WepmX8Qz9lt3N0iW4TEiIrayDaRg2OK+pnX9HbY3QBvrmQ5/OCVaMbwNkQ/oS/DZ
HGB0RveRWaGGc3bUqCtX1p5xlJODealBRs4uv8asA4K2hUHvgCD7/077gvEswu8m
a0YL2eueU0K3E17Q8r2BiSltnA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:27:57 2026 by rpki-client