Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
File:                     WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft (raw, json)
Hash identifier:          wR9YYwSoA3bDciqC9SBD19ta6+zkHU8SZBtblrJyZCw=
Subject key identifier:   10:5F:07:D1:22:25:66:0D:DD:2C:C6:EE:DD:5F:DC:52:ED:C4:5B:EF
Authority key identifier: 5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04
Certificate issuer:       /CN=A9137843/serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804
Certificate serial:       063A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
Manifest number:          0632
Signing time:             Mon 20 Jul 2026 23:28:26 +0000
Manifest this update:     Mon 20 Jul 2026 23:28:25 +0000
Manifest next update:     Mon 27 Jul 2026 23:28:25 +0000
Files and hashes:         1: WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl (hash: EWF6qdl/snOZoZEpgE2aS4BcLH5fskS02ppzznvUY0A=)
                          2: F2DDD4EEFB3211EB967B1759C4F9AE02.roa (hash: QnCIfaBwZolfnjhgtwAliuHrR1tHCV7ZzJ1Dz2+uA9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl
                          rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 23:28:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1594 (0x63a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137843, serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804
        Validity
            Not Before: Jul 20 23:28:25 2026 GMT
            Not After : Jul 27 23:28:25 2026 GMT
        Subject: CN=6a5eaf1a-ac39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:be:54:e9:a6:00:7d:c6:63:13:db:7e:e8:4b:
                    22:31:d0:08:cd:d1:0f:79:db:69:97:c6:ec:4e:cb:
                    cc:a6:db:5d:c7:55:68:c4:f0:a1:6f:3b:ab:ea:68:
                    09:24:bc:2b:f9:9e:0b:40:4e:27:9d:0d:28:5a:5c:
                    3a:aa:a4:c3:64:ca:d1:66:d1:7b:1a:b4:e1:0e:7e:
                    2c:8b:97:8c:22:5e:b5:f7:84:d9:06:89:f8:9d:83:
                    a3:7d:1d:c7:b0:c4:aa:cb:61:a0:02:7c:5d:0b:91:
                    ff:e6:a4:0a:bb:6e:cf:0e:b1:17:40:d1:21:cb:62:
                    f8:e6:86:31:ac:33:d3:9f:76:b4:73:0c:9c:6f:1c:
                    a0:d4:5b:df:d2:54:c7:ae:6f:7a:dd:da:e1:e0:20:
                    16:fe:a9:86:85:a2:72:6b:1d:68:93:aa:2c:47:66:
                    00:39:44:a8:c1:7d:d9:bf:0c:1f:db:fa:04:cb:c8:
                    0f:b9:06:8e:d3:26:5e:9c:0a:63:5c:f7:24:f0:fe:
                    bd:72:7b:62:55:f5:2e:08:7c:88:98:58:48:74:67:
                    87:62:4f:fa:2b:60:ec:8d:5a:a7:06:8d:01:31:ea:
                    5d:e2:44:1b:59:6b:32:92:46:c4:6c:b2:c9:c9:a4:
                    53:41:8b:fe:60:08:c2:d6:05:0e:6f:12:61:0a:3e:
                    49:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5F:07:D1:22:25:66:0D:DD:2C:C6:EE:DD:5F:DC:52:ED:C4:5B:EF
            X509v3 Authority Key Identifier:
                keyid:5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:de:05:49:5a:34:8f:95:c1:77:f3:59:3f:fc:a1:ed:bf:c3:
         f7:0d:e4:23:67:88:21:e9:a6:54:8c:af:3c:f0:e9:bd:fa:5f:
         c3:0b:75:37:77:06:78:1a:ff:fe:fd:d6:1a:72:cd:e9:6f:42:
         bd:78:41:ec:87:94:bc:62:54:3b:d9:00:72:1a:de:04:e5:b9:
         f9:53:97:9b:ac:d9:67:7b:b2:23:5c:06:e7:95:a6:a8:a7:65:
         fc:3b:1e:38:b6:d8:aa:f9:ec:98:63:07:84:c6:13:85:1b:19:
         1c:f5:8e:f4:f7:9a:f7:bc:60:e1:2b:29:a9:8f:c4:5a:eb:e8:
         f9:58:d8:c2:56:5f:23:5d:0a:76:c4:4a:cd:a1:c5:e9:3f:5e:
         9d:82:72:77:0c:75:45:0f:21:1a:40:a3:3c:f9:84:c9:54:7e:
         eb:50:19:6f:09:bd:9e:84:c0:57:6c:88:84:c3:fb:df:76:34:
         62:ff:e8:7c:1c:f8:88:72:02:47:fd:ff:49:62:56:98:1c:d7:
         cf:30:98:e0:15:64:b0:6d:a5:52:74:c6:f7:14:a2:64:2a:31:
         eb:59:78:a4:27:74:fe:ef:a7:0d:6c:2a:6c:cf:23:29:9c:97:
         aa:f2:2b:9d:e5:46:61:a5:bf:61:9c:dd:88:a9:bb:95:d2:62:
         5c:88:e8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:31:03 2026 by rpki-client