Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
File:                     1gwwsan1nJWa1JZ_L21XKst1KZw.mft (raw, json)
Hash identifier:          WvlQv6ohpLRQQvzgM+JnfFLgK0ZcQCCxhDNDWDazYWQ=
Subject key identifier:   74:C1:75:CC:52:15:B5:D4:72:ED:D7:63:27:24:3C:A8:94:F1:54:46
Authority key identifier: D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C
Certificate issuer:       /CN=A91E5EEA/serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C
Certificate serial:       0136
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
Manifest number:          0123
Signing time:             Thu 23 Jul 2026 07:32:41 +0000
Manifest this update:     Thu 23 Jul 2026 07:32:40 +0000
Manifest next update:     Thu 30 Jul 2026 07:32:40 +0000
Files and hashes:         1: 1gwwsan1nJWa1JZ_L21XKst1KZw.crl (hash: ThLsvGktQZO+VoROK4eC7ihOHSmuSTzK2yv/Z5vYqvQ=)
                          2: 2B6A4C480CDC11F0BAA65183C4F9AE02.roa (hash: GqBmWG7cp4InXGzH112fZPiBHKzEQ6yteA8i5t3EwNk=)
                          3: A7C0D96E0CDD11F0A8463D28C4F9AE02.roa (hash: WbcHkuV1KGZpUWsgSLnvoF/j0nloKO7jZjWyz2sKLc4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl
                          rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:32:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5EEA, serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C
        Validity
            Not Before: Jul 23 07:32:40 2026 GMT
            Not After : Jul 30 07:32:40 2026 GMT
        Subject: CN=6a61c399-ec81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4e:bb:a5:93:b3:e5:a5:c8:bc:80:fe:c5:d5:
                    57:6f:11:bf:85:e6:d9:e7:26:ad:8d:91:d1:1d:58:
                    04:50:99:09:1f:6c:3d:61:7c:d9:41:95:77:6d:54:
                    d1:ff:33:c6:07:67:20:0d:b6:14:b0:01:4c:99:e9:
                    3a:19:bf:9e:af:1d:cc:12:aa:32:ed:61:a0:8e:c7:
                    1c:59:ff:88:db:78:53:8c:6f:f4:b5:9e:71:b8:a3:
                    c2:21:ec:a4:8a:46:fc:ae:4e:f6:5e:b8:94:1d:71:
                    41:3a:c9:02:8f:61:5d:66:da:34:8e:27:01:79:64:
                    20:36:0a:63:a6:7b:4e:98:fb:e2:65:33:f1:54:19:
                    66:84:be:01:36:41:ec:ac:01:77:01:3a:b8:71:51:
                    bf:eb:37:87:d0:27:a2:1e:82:fd:dc:c9:09:42:c5:
                    5f:be:de:12:20:61:4f:c2:43:dd:cb:13:b0:09:d4:
                    97:60:2b:3b:fc:65:4b:60:c8:14:49:f2:f6:6d:e9:
                    20:10:d6:1d:58:9d:a7:ba:57:c5:eb:25:3b:64:4c:
                    75:b5:d4:21:dd:cf:48:e9:f1:a2:db:aa:11:80:44:
                    36:7c:68:d7:ae:f7:6f:c9:4c:cd:9e:bd:ff:8d:7b:
                    45:9e:2b:fd:a0:76:15:25:92:d1:e7:57:7f:10:40:
                    16:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C1:75:CC:52:15:B5:D4:72:ED:D7:63:27:24:3C:A8:94:F1:54:46
            X509v3 Authority Key Identifier:
                keyid:D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:46:b7:34:44:d1:dc:93:c2:b2:a4:db:e1:4d:b5:a9:76:bb:
         04:c9:7c:7a:1e:cd:ab:0e:8e:d2:1d:f5:ee:65:7a:bf:b4:c7:
         cd:ab:b4:6e:92:29:c1:76:01:e6:20:bc:9c:53:40:38:1f:eb:
         a4:32:69:f4:11:50:1d:6c:5b:58:f1:d7:7c:70:b1:ee:c2:c0:
         2a:1c:b5:43:4b:b1:1b:9a:ab:54:2c:86:35:f4:59:cd:5e:aa:
         7e:b8:d8:3d:77:02:70:14:c4:25:cc:b9:b7:49:1e:fc:cc:e6:
         1b:0a:16:c7:b1:cd:7a:75:25:0f:41:10:71:57:82:c2:25:b2:
         20:1d:0a:62:2a:a4:9d:c7:fc:c4:ca:36:1d:a0:f0:da:23:b1:
         2d:75:82:e0:5d:42:fc:9b:59:0d:02:ff:36:44:9c:78:55:be:
         4b:a5:45:19:37:a1:48:65:5f:01:7e:20:4b:75:b2:70:94:40:
         35:88:1b:40:ac:d4:7f:04:00:48:3b:86:ba:37:af:a9:54:fc:
         97:7c:d9:45:c1:63:94:80:38:89:66:9e:a5:d7:79:e8:c9:55:
         8c:a5:92:e6:07:90:8b:d9:eb:ce:27:21:ec:f2:ac:14:6a:67:
         32:cb:5c:83:0f:cc:86:ae:d6:6c:bb:ad:e1:20:6e:c1:63:09:
         bc:c6:a6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:45:48 2026 by rpki-client