Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft
File:                     MayWR8f4cKZrot54hUTNjDJr3_k.mft (raw, json)
Hash identifier:          cb/3EIT0Irt3M7fJWEkDEcMS8OI8oCIaoxkSDYU+HSA=
Subject key identifier:   F4:B3:31:9A:70:77:15:4B:25:83:E1:9C:4C:D9:57:15:4A:80:22:AC
Authority key identifier: 31:AC:96:47:C7:F8:70:A6:6B:A2:DE:78:85:44:CD:8C:32:6B:DF:F9
Certificate issuer:       /CN=A91218BB/serialNumber=31AC9647C7F870A66BA2DE788544CD8C326BDFF9
Certificate serial:       0128
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft
Manifest number:          0124
Signing time:             Fri 17 Jul 2026 06:54:10 +0000
Manifest this update:     Fri 17 Jul 2026 06:54:10 +0000
Manifest next update:     Fri 24 Jul 2026 06:54:10 +0000
Files and hashes:         1: MayWR8f4cKZrot54hUTNjDJr3_k.crl (hash: 5Mu/OyADqL8p535PGX/a9kja/rrcH/E/9bwAxt+2K2g=)
                          2: 4DD6D628C8D211EF9F1BE312C4F9AE02.roa (hash: Q2Qdv0ZpyDXIc6w4oc2ztFa/mTiFE2ozOR+lXjgvebo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.crl
                          rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 06:54:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91218BB, serialNumber=31AC9647C7F870A66BA2DE788544CD8C326BDFF9
        Validity
            Not Before: Jul 17 06:54:10 2026 GMT
            Not After : Jul 24 06:54:10 2026 GMT
        Subject: CN=6a59d192-6b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:32:f5:f5:f6:65:e5:dd:b3:98:9c:07:a5:76:
                    9c:19:05:75:2e:6b:a1:db:46:73:aa:95:c4:a7:90:
                    b2:9b:ab:99:15:9a:56:4b:c8:1f:b6:2c:da:24:26:
                    1d:23:d1:54:f7:ff:fb:2e:53:5f:84:27:85:9d:43:
                    5f:53:a9:59:a8:af:1f:f6:e2:56:b1:a0:c7:f9:1a:
                    89:7f:32:52:67:37:20:d2:82:b3:a0:ff:98:fa:bd:
                    5d:e7:b8:4b:18:9e:a2:a2:a9:19:09:1d:f5:be:68:
                    c2:17:73:07:bf:13:f2:bc:9a:eb:50:1d:a3:27:ff:
                    e4:c3:ca:a4:ab:2a:2f:76:35:0e:af:85:f5:d4:61:
                    0d:81:7a:71:31:75:d5:b5:99:75:6e:24:b1:4a:9e:
                    72:c9:2a:0b:fb:aa:85:72:77:fb:da:fd:be:92:02:
                    44:54:5a:a2:1f:12:16:c4:38:c1:29:f5:65:70:27:
                    45:2c:30:d0:45:09:de:5a:35:ad:8a:97:ec:d6:7c:
                    38:2f:09:3f:15:c6:5e:ea:7e:5a:15:e4:b0:79:32:
                    5f:d2:b7:f7:e8:be:59:8b:74:cc:24:c2:94:33:1b:
                    ed:75:6d:5b:52:8f:82:f2:ef:4e:7d:8d:c2:0e:62:
                    77:c9:7d:c3:28:b2:5c:b5:a7:a5:29:f8:68:08:2a:
                    e4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B3:31:9A:70:77:15:4B:25:83:E1:9C:4C:D9:57:15:4A:80:22:AC
            X509v3 Authority Key Identifier:
                keyid:31:AC:96:47:C7:F8:70:A6:6B:A2:DE:78:85:44:CD:8C:32:6B:DF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:9d:a6:b4:9f:ea:a9:d5:4d:77:cd:67:95:f0:7e:64:5a:11:
         0c:b7:4e:96:75:6a:50:bd:58:d7:2d:b2:36:b2:cd:ca:bb:24:
         d6:e6:0a:49:e9:22:9a:03:1e:60:70:9f:9b:26:5d:e4:92:73:
         9e:97:db:3d:03:07:44:1d:20:5a:62:dd:8f:5e:ac:91:c1:91:
         dc:64:83:47:3c:3f:df:8b:ab:ed:27:d4:94:59:48:ba:61:f5:
         f6:1b:90:07:1f:dc:e4:80:55:d5:64:42:23:b0:35:7b:25:4d:
         a9:d1:f8:15:a8:39:b1:70:3d:bc:04:2e:46:4f:4d:01:d3:f0:
         0b:71:b8:cc:8f:ee:d6:41:9e:d3:28:62:e8:8a:82:93:29:53:
         8d:f1:1f:3e:3e:33:d2:23:65:2b:4d:f2:e9:c6:df:9d:a9:f6:
         62:ad:13:3a:70:f5:0e:b8:6a:81:41:f4:e4:96:98:ee:17:67:
         e7:7c:1b:f3:d4:a2:5a:67:75:e8:36:ba:c2:66:61:f9:c6:8b:
         b8:55:44:61:4b:e7:85:dc:04:11:e4:a8:84:dc:72:db:0f:ca:
         53:e4:8c:37:6d:9f:38:51:7a:06:b8:a7:2f:64:95:3c:7c:cf:
         bf:c3:f1:83:70:22:75:e9:7a:39:33:34:88:5a:45:d7:74:65:
         55:56:c9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:24:13 2026 by rpki-client