Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
File:                     0wlAzG8MECS4QLu309gBJjYGylk.mft (raw, json)
Hash identifier:          UZOmaAlB/YpbdQQ6pFKoKffOlHDwTO0Dl0Mar8qSDyk=
Subject key identifier:   2E:21:D2:E6:31:51:27:FC:B4:69:EF:AA:E2:DB:6A:98:94:2D:BB:5F
Authority key identifier: D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59
Certificate issuer:       /CN=A91412BC/serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59
Certificate serial:       EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
Manifest number:          E4
Signing time:             Sun 19 Jul 2026 07:40:26 +0000
Manifest this update:     Sun 19 Jul 2026 07:40:25 +0000
Manifest next update:     Sun 26 Jul 2026 07:40:25 +0000
Files and hashes:         1: 0wlAzG8MECS4QLu309gBJjYGylk.crl (hash: YvzBoW7M3QxVQwEemmP84/IBwSBFHOlUu1p29cy59bU=)
                          2: 92F3063C248A11F0AD4B1179C4F9AE02.roa (hash: snLyJB1mtilsonSg8bolW4tfoO6cxLckhLrYHgEKQiQ=)
                          3: 936B147E248A11F0AD4B1179C4F9AE02.roa (hash: LyQfyLurnqqH+WScrTsxG9TtblSEPenqHyPotX69udU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl
                          rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Jul 2026 07:40:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91412BC, serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59
        Validity
            Not Before: Jul 19 07:40:25 2026 GMT
            Not After : Jul 26 07:40:25 2026 GMT
        Subject: CN=6a5c7f6a-bf94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a7:a7:17:49:c0:76:12:82:b0:61:89:5d:5c:
                    4e:cf:73:41:71:82:d7:ff:f7:f1:89:2f:70:0f:29:
                    ce:74:2e:67:1e:a3:cc:64:6b:cd:27:26:11:aa:97:
                    d5:43:4b:e1:1f:5b:ca:04:29:79:20:a6:8c:23:78:
                    1f:3e:f4:62:3f:1a:d6:63:61:17:ae:23:0e:d2:cf:
                    22:c4:bc:9a:ff:0f:fa:96:eb:b7:d9:90:4b:bc:0c:
                    fb:7d:c4:8c:a1:16:bb:21:01:82:4a:eb:26:b5:3e:
                    93:9f:06:77:ef:0e:b9:f8:86:cb:36:55:46:af:0c:
                    86:f4:ff:17:f8:82:c9:ef:23:3d:6c:e9:c5:77:79:
                    23:bd:4e:14:66:53:38:a2:f9:f0:60:32:3e:72:b4:
                    24:4b:bd:e8:c9:b5:9c:20:ca:85:7a:aa:b0:9a:10:
                    43:a0:db:6a:9a:d3:da:51:3e:46:a2:a9:4c:41:f5:
                    63:51:c7:4e:b7:6a:54:0e:45:0a:b4:4c:a4:36:de:
                    91:78:5d:70:2b:57:5d:f0:5b:10:df:ff:39:24:37:
                    01:a0:c9:ca:e0:e4:5d:c2:1b:74:8b:35:82:a0:d3:
                    e3:40:a5:0a:e3:7d:44:2a:07:fe:70:9e:b0:88:ef:
                    26:1d:5f:13:d6:a6:9e:19:81:ab:82:e2:52:42:70:
                    96:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:21:D2:E6:31:51:27:FC:B4:69:EF:AA:E2:DB:6A:98:94:2D:BB:5F
            X509v3 Authority Key Identifier:
                keyid:D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:d3:de:3a:02:ab:f6:da:84:a9:00:fe:fa:f4:67:22:e9:06:
         75:38:ce:cb:7c:a7:e9:ff:42:32:37:fa:47:cd:76:ab:59:13:
         0a:d9:30:5a:9b:5f:8a:cc:08:db:88:4d:3b:ea:b9:7a:be:46:
         ed:79:02:94:71:3a:91:0e:18:f0:95:b4:c4:a2:74:53:de:3a:
         01:37:d2:c0:3c:93:9e:c0:15:39:70:67:f6:21:ed:cb:86:9b:
         09:5a:cd:01:db:70:45:9d:a2:6b:0d:6b:ea:72:02:8b:d9:e8:
         59:a4:95:9f:0c:81:4c:c9:01:a0:d3:8f:17:c6:81:cb:b2:df:
         8d:2b:45:2a:0a:90:c6:55:9c:b5:5c:5e:ef:a9:dc:42:97:a6:
         d7:63:7c:4c:b9:9c:fa:04:e4:15:41:45:5f:6a:3c:e0:bb:e1:
         23:97:84:3c:c6:e9:f2:84:46:d2:6f:a5:12:ab:8a:38:2e:a9:
         47:f8:f9:00:38:f1:1d:cb:6c:c4:da:de:ea:85:2d:bd:89:ba:
         e8:7b:03:08:4c:d6:6c:58:78:43:7e:bd:8c:aa:b6:23:76:f5:
         25:ff:24:6c:60:48:e5:5e:01:63:c4:8a:0e:44:46:b3:36:5a:
         c1:55:ac:10:18:18:0f:a7:47:99:9a:d8:6f:88:19:f6:41:48:
         60:5c:42:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:06:11 2026 by rpki-client