Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft
File:                     pwfo7Wx0uvNh3UByccajTUQCIqw.mft (raw, json)
Hash identifier:          GvUd6bXulvSP8BIemQ5BrjS0dA7eyJ4w6ridmifvspQ=
Subject key identifier:   97:28:18:A1:E5:0C:10:05:72:2A:10:10:F1:9C:CE:46:91:EC:5B:88
Authority key identifier: A7:07:E8:ED:6C:74:BA:F3:61:DD:40:72:71:C6:A3:4D:44:02:22:AC
Certificate issuer:       /CN=A91D0C14/serialNumber=A707E8ED6C74BAF361DD407271C6A34D440222AC
Certificate serial:       02D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft
Manifest number:          02CD
Signing time:             Thu 23 Jul 2026 02:20:54 +0000
Manifest this update:     Thu 23 Jul 2026 02:20:53 +0000
Manifest next update:     Thu 30 Jul 2026 02:20:53 +0000
Files and hashes:         1: pwfo7Wx0uvNh3UByccajTUQCIqw.crl (hash: uTS76kbxDMGG0VHYsdPbXeXHgX7m8vOVUnrCJGVSIDg=)
                          2: 111C77744E1811EDADB36913C4F9AE02.roa (hash: 6hfUw9nQOdjVrwwSNnhQ1CXEFLWSCYmyZedcFdNSRgg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.crl
                          rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 725 (0x2d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0C14, serialNumber=A707E8ED6C74BAF361DD407271C6A34D440222AC
        Validity
            Not Before: Jul 23 02:20:53 2026 GMT
            Not After : Jul 30 02:20:53 2026 GMT
        Subject: CN=6a617a86-733c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:01:79:64:ad:37:65:e6:9b:b3:2c:e7:a3:b0:
                    b5:b3:90:0c:a8:19:f9:95:98:1f:f1:77:f4:e4:44:
                    ec:b2:81:66:0a:d7:cc:3a:64:6d:4b:3a:52:f2:f7:
                    9e:e4:53:60:33:e3:97:bb:ff:96:1b:0c:44:d7:d5:
                    23:e2:6d:38:be:9a:d2:1c:59:20:21:c7:6c:c4:d8:
                    75:bf:e4:db:48:c2:ae:70:37:0c:1c:38:fa:30:62:
                    96:b8:33:a2:70:a7:32:a0:50:eb:5d:bf:a2:6b:1c:
                    9f:73:23:e1:27:ae:76:38:a8:d3:dd:0f:02:d9:1a:
                    7f:f3:63:c1:ed:c0:10:62:52:c5:a2:db:eb:1a:60:
                    6c:7d:ac:00:77:72:70:3d:19:16:5c:79:2e:18:92:
                    b3:cb:ac:03:e3:95:75:89:2b:83:ab:40:06:ad:35:
                    6f:fe:aa:fc:68:37:6b:53:7e:2c:a9:ee:8c:9e:6e:
                    41:65:2e:3d:33:15:58:08:5d:35:63:14:25:a1:f7:
                    2f:2a:25:65:61:3f:64:02:fe:7d:fb:af:70:cf:44:
                    2a:b7:57:77:55:58:93:88:39:b9:ff:df:1f:95:12:
                    e1:36:a7:2a:3e:e2:fe:9a:93:e7:f5:4a:18:2b:86:
                    9f:33:73:e8:bd:fd:7e:ad:da:cb:04:eb:2b:1f:77:
                    6b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:28:18:A1:E5:0C:10:05:72:2A:10:10:F1:9C:CE:46:91:EC:5B:88
            X509v3 Authority Key Identifier:
                keyid:A7:07:E8:ED:6C:74:BA:F3:61:DD:40:72:71:C6:A3:4D:44:02:22:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:0d:d7:5d:79:56:dd:7a:a5:5e:a4:f4:cc:3a:80:5c:7c:4d:
         be:c0:25:cc:bd:9f:4c:0c:84:35:3d:71:09:cc:3b:dc:10:8f:
         ca:86:40:06:4d:b6:8b:e1:5e:04:4f:1b:2a:c5:e2:96:e0:be:
         f2:31:81:34:54:43:23:c9:4a:7d:2e:63:5a:ef:ec:79:f5:9f:
         ad:0c:11:49:2d:f0:d8:b5:15:1b:84:74:1a:3c:4a:36:84:9e:
         23:15:79:c0:14:ef:5f:a8:76:ba:b7:1f:88:9d:18:39:ea:45:
         36:3a:5e:88:d5:c4:1c:a8:cc:a7:b5:a0:1d:29:09:f8:88:29:
         19:24:06:67:a4:90:99:39:8c:a5:be:a7:93:81:a1:02:11:9b:
         5e:30:f1:29:8d:43:c7:03:64:13:b0:f3:91:96:f6:71:96:57:
         98:0d:ff:30:ce:5f:2f:0e:75:7f:9f:15:bf:3e:4a:d8:a2:3f:
         67:83:ae:f3:8f:3b:d8:96:cc:76:bd:27:7b:d5:ca:e2:2e:5a:
         82:37:4e:80:05:37:d7:92:49:3d:ab:4a:f3:f7:af:1d:10:42:
         7e:7c:9a:26:d5:78:ec:e8:b3:d0:5d:dd:65:24:04:04:e0:6b:
         16:05:a6:bb:a5:4a:6b:b5:8e:50:f1:c0:2d:3f:9a:f5:95:11:
         03:27:47:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:01:36 2026 by rpki-client