Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1EC0/F1E166306DE411F1A62A903C5BA30FBC/iWAvTEQ-2KQOCJEYmHawJXdMdow.mft
File:                     iWAvTEQ-2KQOCJEYmHawJXdMdow.mft (raw, json)
Hash identifier:          KMx7LggtLvSfPylO55GGCZMP6ZKDpO1cir/VzqKDhB8=
Subject key identifier:   3B:B5:8F:20:8F:BC:1A:C7:65:00:F6:45:30:2F:21:6A:40:29:56:80
Authority key identifier: 89:60:2F:4C:44:3E:D8:A4:0E:08:91:18:98:76:B0:25:77:4C:76:8C
Certificate issuer:       /CN=A91E1EC0/serialNumber=89602F4C443ED8A40E0891189876B025774C768C
Certificate serial:       11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWAvTEQ-2KQOCJEYmHawJXdMdow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1EC0/F1E166306DE411F1A62A903C5BA30FBC/iWAvTEQ-2KQOCJEYmHawJXdMdow.mft
Manifest number:          11
Signing time:             Thu 23 Jul 2026 11:08:58 +0000
Manifest this update:     Thu 23 Jul 2026 11:08:58 +0000
Manifest next update:     Thu 30 Jul 2026 11:08:58 +0000
Files and hashes:         1: iWAvTEQ-2KQOCJEYmHawJXdMdow.crl (hash: 30KIlNOLv5Bxjk3pDKvJU/cL9pUzl9NmWnzPeDjzO4k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1EC0/F1E166306DE411F1A62A903C5BA30FBC/iWAvTEQ-2KQOCJEYmHawJXdMdow.crl
                          rsync://rpki.apnic.net/member_repository/A91E1EC0/F1E166306DE411F1A62A903C5BA30FBC/iWAvTEQ-2KQOCJEYmHawJXdMdow.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWAvTEQ-2KQOCJEYmHawJXdMdow.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:08:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1EC0, serialNumber=89602F4C443ED8A40E0891189876B025774C768C
        Validity
            Not Before: Jul 23 11:08:58 2026 GMT
            Not After : Jul 30 11:08:58 2026 GMT
        Subject: CN=6a61f64a-4795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:99:bd:e7:49:2f:83:f5:21:97:2c:5a:92:b5:
                    64:a9:f1:eb:db:94:a4:58:6b:15:41:7c:b1:ee:96:
                    4d:c9:16:c1:27:b5:4f:b0:95:56:d3:9c:ba:a7:f0:
                    47:28:e2:c5:ad:b7:89:1f:75:d4:1d:57:28:67:19:
                    b5:58:7f:ba:7e:f2:fa:dd:da:d6:f7:69:f0:e2:6d:
                    7b:b6:39:05:85:3a:cf:55:6c:94:9e:b7:22:bb:61:
                    44:d7:a5:c3:b4:2e:34:38:75:aa:f4:71:c1:1b:38:
                    55:e1:a8:3f:df:04:71:88:72:7e:10:1a:77:85:47:
                    bf:95:ae:e1:8a:fc:f4:52:37:aa:13:93:f1:62:92:
                    d5:41:22:c6:a7:63:ff:c4:ca:47:bd:33:59:cf:52:
                    94:44:d8:0b:0d:e5:17:9d:22:d9:29:dd:cb:46:75:
                    9c:ce:20:8f:42:d1:c5:93:95:80:e2:e3:a7:28:c1:
                    c5:f7:f2:ed:24:b0:45:a0:09:14:b0:ff:e6:f5:06:
                    7a:36:36:bf:4c:ee:c6:0a:97:22:97:8e:a0:79:c5:
                    2b:7a:18:8d:e2:a1:05:db:a5:a2:44:9c:7a:d2:72:
                    18:56:c4:d2:61:6d:bb:46:ab:f0:5b:6b:92:d3:05:
                    5d:c4:8b:45:f2:7a:21:06:ec:2f:00:0f:0a:da:70:
                    86:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B5:8F:20:8F:BC:1A:C7:65:00:F6:45:30:2F:21:6A:40:29:56:80
            X509v3 Authority Key Identifier:
                keyid:89:60:2F:4C:44:3E:D8:A4:0E:08:91:18:98:76:B0:25:77:4C:76:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1EC0/F1E166306DE411F1A62A903C5BA30FBC/iWAvTEQ-2KQOCJEYmHawJXdMdow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWAvTEQ-2KQOCJEYmHawJXdMdow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1EC0/F1E166306DE411F1A62A903C5BA30FBC/iWAvTEQ-2KQOCJEYmHawJXdMdow.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:a6:82:2b:07:5d:c8:ab:b2:b4:d6:7b:a3:c1:a9:96:bc:dc:
         50:60:3e:34:3d:5b:f6:47:04:a1:d8:07:a6:82:0a:52:64:68:
         0c:4c:a1:b6:d0:ee:8b:43:e0:c3:cb:54:f9:0d:76:2a:95:8c:
         49:89:64:3e:e0:af:39:5e:0a:de:0f:d0:f3:85:11:0e:ca:04:
         0a:8a:73:f1:2b:b4:05:d0:ae:cd:79:90:6e:0d:c8:7e:55:80:
         96:03:8d:d0:16:bd:d8:37:59:ab:cd:56:dd:57:e1:ab:9f:95:
         75:41:e7:2a:91:e5:0a:0f:7d:7f:fb:ce:65:72:08:ef:36:89:
         dd:46:20:5b:d9:e5:0e:ce:ae:25:fb:2c:e0:79:67:d5:18:de:
         90:1d:6c:95:b8:bd:7c:91:41:3f:3c:f1:bc:46:00:7c:4a:08:
         7f:b2:c2:ec:c7:71:48:95:91:c3:14:81:a9:96:43:61:f1:db:
         27:ce:ec:4f:56:d5:f8:5d:e5:8e:de:7d:30:27:d7:67:77:e0:
         2c:74:11:bf:50:8e:53:59:97:c5:c2:17:91:67:cb:66:01:75:
         de:c2:bb:7a:45:98:f2:ef:b2:0c:d6:d2:eb:90:e6:fa:5f:ac:
         03:ed:1d:81:c6:21:11:c3:21:be:3a:0e:d8:65:b8:b2:e3:7f:
         26:45:1b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:49:14 2026 by rpki-client