Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
File:                     wj3utHnnD2DvynyIRiuVudwiydA.mft (raw, json)
Hash identifier:          6HSP2b0P++50xYRC2WxJOsW76wsqU+tGBED0WRQ9h7Y=
Subject key identifier:   FE:3A:A1:29:2A:21:F5:63:A6:85:E9:73:56:CA:7F:05:CD:ED:1F:D2
Authority key identifier: C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0
Certificate issuer:       /CN=A9142A22/serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
Certificate serial:       C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
Manifest number:          B7
Signing time:             Sun 05 Jul 2026 07:46:36 +0000
Manifest this update:     Sun 05 Jul 2026 07:46:36 +0000
Manifest next update:     Sun 12 Jul 2026 07:46:36 +0000
Files and hashes:         1: wj3utHnnD2DvynyIRiuVudwiydA.crl (hash: muCFNZqU0QdqYuqfgwNK1Xp2zjRwp2I1FBzpVseiDgU=)
                          2: 9F685E60678511F0999A252DC4F9AE02.roa (hash: F0BVTAtasd/U+5Pd7iq4lB4rkiv9dNM8GMlahH5MNTA=)
                          3: 9EE7FBDA678511F0999A252DC4F9AE02.roa (hash: Iu+MvNjXylPZy283mB/J6+7AiPxESlN4SHOf0/N0qug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl
                          rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 07:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A22, serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
        Validity
            Not Before: Jul  5 07:46:36 2026 GMT
            Not After : Jul 12 07:46:36 2026 GMT
        Subject: CN=6a4a0bdc-4e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c6:1b:34:84:e0:aa:ca:7f:09:27:48:af:96:
                    50:32:2f:eb:25:af:31:4f:82:0c:f3:c2:f1:69:67:
                    2f:e3:df:31:84:ab:7b:de:80:c6:7f:7d:04:bd:23:
                    84:05:9c:63:f5:a6:08:45:11:6a:45:e0:59:ea:43:
                    29:2a:a7:b5:48:b5:a9:c9:9b:f4:22:f5:88:17:67:
                    b0:79:0c:9b:f9:90:9f:23:f3:df:40:6b:ab:e2:28:
                    c4:e9:67:e0:ba:01:cc:23:cb:84:c2:b8:0a:bb:c3:
                    ad:1b:16:28:d0:1a:a9:25:5d:40:a3:85:7a:02:8c:
                    6f:01:ce:f8:3d:cf:68:38:34:6c:f2:f1:5f:b4:38:
                    7d:25:9d:86:84:ce:06:de:5e:26:08:a7:c3:ae:c0:
                    4f:69:f6:31:88:be:36:2a:8a:85:b7:a0:5a:58:40:
                    0c:99:8d:c9:b6:ef:d6:c8:be:ed:8d:58:d4:81:1f:
                    66:20:f8:dd:57:a9:a3:aa:72:28:0e:7a:1d:be:60:
                    27:90:9a:be:0a:7c:8d:15:7a:f7:07:64:71:4d:28:
                    ff:57:10:93:c0:70:6f:76:d5:cb:1a:3f:42:f5:41:
                    84:8f:49:74:5e:2a:6e:4d:ca:d5:fc:08:74:91:8b:
                    8d:7f:66:6d:d5:9e:e1:b4:46:66:7b:50:b5:cf:9b:
                    65:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3A:A1:29:2A:21:F5:63:A6:85:E9:73:56:CA:7F:05:CD:ED:1F:D2
            X509v3 Authority Key Identifier:
                keyid:C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:53:52:7a:12:23:b1:c0:7c:03:3f:12:f4:8b:e5:ff:3d:51:
         d6:70:9e:65:f3:03:e6:51:91:be:a4:67:bd:e4:7f:2f:45:f5:
         df:2e:22:62:57:f8:ff:83:ed:84:0d:59:be:66:c0:26:2b:1a:
         51:68:3f:d8:c4:73:2d:5a:ee:8b:46:33:78:86:97:f0:cf:0b:
         70:2d:5f:a7:92:7e:bf:cf:42:3c:bd:d5:4f:13:8a:31:64:08:
         1a:e1:54:79:c6:fe:b1:06:dc:4f:e4:fd:26:80:11:ed:fe:78:
         7e:8b:f5:ba:8d:0f:4a:33:35:c0:05:b0:56:fe:76:3b:b4:d3:
         66:ed:8e:9c:2b:16:e8:48:30:a3:ad:6c:1b:3c:f9:df:a1:38:
         5c:31:4b:83:fb:33:39:0c:38:41:1d:2c:7b:73:b3:ff:08:d6:
         e6:24:92:91:66:8e:01:0f:04:ea:46:f9:68:c2:a7:12:0d:2c:
         6c:01:42:dd:4e:a6:3e:ee:06:78:ac:72:9c:28:43:6f:79:34:
         4f:18:0c:f0:d8:a5:c2:04:a5:60:ed:1a:54:68:4f:90:af:35:
         3b:d7:f9:93:ca:08:89:dc:a7:9c:01:9a:f9:f2:d2:4f:c9:c4:
         26:3c:44:c1:96:bc:1e:8e:89:6d:27:9c:ef:d8:45:44:ec:06:
         ad:3a:61:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 21:10:51 2026 by rpki-client