Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft
File:                     CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft (raw, json)
Hash identifier:          /bc8sQ2FmSphTnTdCwY+mnuU+wWcanZDgx/LY6kDjEY=
Subject key identifier:   A3:75:A4:A5:2A:61:CA:01:48:04:D4:EA:50:16:EC:05:75:AF:D9:4C
Authority key identifier: 0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22
Certificate issuer:       /CN=A91D890E/serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822
Certificate serial:       0A07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft
Manifest number:          09FD
Signing time:             Wed 22 Jul 2026 20:13:56 +0000
Manifest this update:     Wed 22 Jul 2026 20:13:55 +0000
Manifest next update:     Wed 29 Jul 2026 20:13:55 +0000
Files and hashes:         1: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl (hash: eQPNA/hH2+s4mIF9rH8Cv+uc937PCMql8boX6H3T/ks=)
                          2: FDAEEFB0A12A11EAB063A548C4F9AE02.roa (hash: F2o3bVfdgibRTgDe0DxEdoAWCoUl7F1g3jf5bWQpITQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl
                          rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:13:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2567 (0xa07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D890E, serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822
        Validity
            Not Before: Jul 22 20:13:55 2026 GMT
            Not After : Jul 29 20:13:55 2026 GMT
        Subject: CN=6a612484-444f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6d:98:60:a7:4a:b6:76:89:a1:8f:42:30:af:
                    89:a0:27:6f:29:d7:6a:f5:fb:2a:a0:87:6e:77:16:
                    ce:9c:b7:2e:94:e5:ef:db:f5:e0:1d:3f:3a:d9:84:
                    4a:51:d9:6e:e2:89:3b:6e:57:7a:64:3c:6d:a8:e3:
                    05:a1:92:c2:ed:71:1d:43:91:10:47:76:ea:8d:89:
                    bb:06:90:69:8d:b5:56:ff:14:14:dd:f2:94:e6:50:
                    27:4c:5a:09:02:e4:56:72:1c:b0:82:4d:4d:cb:72:
                    ba:b6:8d:f9:e8:73:16:86:d1:95:df:71:05:25:a2:
                    fa:b0:fb:f7:2e:43:7e:c8:de:a0:a0:53:a4:76:d4:
                    5d:ba:a5:75:04:00:11:9d:20:3d:f3:c1:bc:df:bf:
                    2e:5e:ed:6e:ce:a1:c7:c2:f6:bf:04:53:0e:cd:18:
                    92:a8:28:7c:74:d0:63:12:2d:c0:a2:5b:85:65:f4:
                    4c:fb:7d:c4:da:4a:3a:32:e4:c9:2c:a6:12:f1:42:
                    12:94:f0:fc:3a:ea:40:3a:ca:dc:89:8f:ac:fc:f7:
                    ea:b6:05:ac:73:74:c8:ff:d2:46:5d:91:68:31:b8:
                    3e:59:98:75:26:a6:6b:a5:c7:8b:1c:b6:89:43:e5:
                    c8:fb:c8:a3:ef:26:7c:53:39:e9:5f:18:51:4b:cc:
                    78:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:75:A4:A5:2A:61:CA:01:48:04:D4:EA:50:16:EC:05:75:AF:D9:4C
            X509v3 Authority Key Identifier:
                keyid:0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:e3:9a:5a:8c:a6:21:c5:1b:3c:be:0c:e8:cf:7f:f1:07:76:
         9a:80:f6:08:5d:de:62:2a:cc:87:b9:18:c2:e0:5b:ad:7f:7e:
         11:c5:11:6d:c5:13:29:f2:eb:27:8a:46:7c:2a:b7:b2:f7:e8:
         43:c8:2a:68:29:46:15:ad:25:de:2a:f1:13:1d:e1:1d:98:b1:
         d0:0b:fd:65:a7:9a:0d:7f:51:2f:0f:41:ed:4d:11:c3:06:01:
         d9:2e:f4:f7:b6:20:ea:3a:a0:29:76:fa:cf:32:fc:b1:58:ef:
         88:5f:35:28:7c:e0:25:13:b1:02:b0:0c:a0:fe:b0:52:98:d3:
         97:22:65:b1:4b:ce:9a:74:fc:6d:58:af:6e:29:ac:61:9f:86:
         17:dc:08:da:33:20:e9:70:7f:16:ee:b7:bd:33:db:33:4c:ee:
         27:a7:2e:87:30:f6:99:c4:67:0f:0e:eb:f5:87:74:91:83:1c:
         2c:02:05:83:19:f8:d1:bd:1f:88:07:f3:62:95:52:19:b0:ad:
         69:ce:13:61:4d:33:97:6f:65:40:77:af:70:34:f8:ef:ce:10:
         48:c3:af:9e:2b:3d:1b:35:7a:f3:b1:73:16:6c:7a:bd:7d:c2:
         7b:8d:54:f0:3d:29:98:47:9d:c3:fd:d8:af:fa:92:65:13:b3:
         c5:33:a7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:37:04 2026 by rpki-client