Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.mft
File:                     W7mo4aQGCswvO_oh78rSwwZujok.mft (raw, json)
Hash identifier:          APm6vi8gg5BKbVGeKqqZXsSy56pWZnxO8RnztluK56g=
Subject key identifier:   58:46:36:7B:01:A2:7B:38:9E:11:E3:97:0F:FB:04:A0:4F:5D:5E:48
Authority key identifier: 5B:B9:A8:E1:A4:06:0A:CC:2F:3B:FA:21:EF:CA:D2:C3:06:6E:8E:89
Certificate issuer:       /CN=A914699C/serialNumber=5BB9A8E1A4060ACC2F3BFA21EFCAD2C3066E8E89
Certificate serial:       2A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W7mo4aQGCswvO_oh78rSwwZujok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.mft
Manifest number:          21
Signing time:             Mon 01 Jun 2026 09:49:09 +0000
Manifest this update:     Mon 01 Jun 2026 09:49:08 +0000
Manifest next update:     Mon 08 Jun 2026 09:49:08 +0000
Files and hashes:         1: W7mo4aQGCswvO_oh78rSwwZujok.crl (hash: mun+Utdtx1CldoNdcuo/LB5L7C/N0dn03GZ4XSfghYs=)
                          2: 787214AE502D11F1B0D3D52AC9833773.roa (hash: wrle5esD5kunfyi/rtL/mG9W39WCBeUw3VOv/boPy9I=)
                          3: B241C102502D11F1A5FC1C3EC9833773.roa (hash: pXNb9fqL8rNJsyMIH/TKizTjSzJWlaSb0X5J6/gFCyQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.crl
                          rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W7mo4aQGCswvO_oh78rSwwZujok.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 09:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914699C, serialNumber=5BB9A8E1A4060ACC2F3BFA21EFCAD2C3066E8E89
        Validity
            Not Before: Jun  1 09:49:08 2026 GMT
            Not After : Jun  8 09:49:08 2026 GMT
        Subject: CN=6a1d5594-5b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:aa:43:db:56:33:d7:8d:7c:a5:27:0d:e9:94:
                    a3:ca:a4:01:17:45:ee:3a:45:69:93:e8:32:57:3a:
                    44:57:e9:96:0d:83:dd:57:2d:05:bc:f6:98:70:ea:
                    60:4b:b0:0d:53:f5:1c:d3:d9:bc:72:33:44:70:ad:
                    99:40:25:17:0d:7a:a1:77:1c:43:6d:16:ac:2c:69:
                    4b:07:e0:1b:e7:2c:4e:d9:ac:d1:7b:7e:e0:14:91:
                    f0:fe:d4:37:e7:4b:53:3c:90:7e:9c:57:41:ff:37:
                    b8:fd:ae:13:4f:65:63:f5:ce:a0:15:01:13:34:27:
                    79:95:58:dc:fc:82:fb:bf:f3:de:53:d5:a1:d2:0a:
                    32:a5:60:21:70:33:bf:54:eb:8d:71:30:ca:95:00:
                    73:ea:b2:31:d3:66:34:9a:1f:e1:25:cb:4d:1c:78:
                    a9:f1:64:4a:3d:52:24:69:7d:89:7b:f0:47:a8:71:
                    4f:0f:ef:36:a7:53:7e:0e:21:41:99:f0:27:73:af:
                    73:56:5e:03:5a:2f:d0:e6:fc:8d:28:a0:4c:dd:6c:
                    9f:9f:90:ac:2e:4f:57:95:21:ae:e7:25:63:2f:2b:
                    30:f0:8d:b4:16:e8:e0:53:2f:4a:79:f4:a5:9a:04:
                    e8:3b:ac:c8:31:20:c3:b0:8f:dc:fa:82:c9:e5:25:
                    53:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:46:36:7B:01:A2:7B:38:9E:11:E3:97:0F:FB:04:A0:4F:5D:5E:48
            X509v3 Authority Key Identifier:
                keyid:5B:B9:A8:E1:A4:06:0A:CC:2F:3B:FA:21:EF:CA:D2:C3:06:6E:8E:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W7mo4aQGCswvO_oh78rSwwZujok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:3d:1e:10:52:79:e1:43:57:1d:89:02:b8:e0:aa:42:e1:b9:
         55:14:97:ae:db:99:ec:29:9b:91:e8:dc:c7:07:96:a3:69:d6:
         7c:65:c6:04:98:c6:da:e5:30:c4:ea:7f:24:5c:17:66:42:c8:
         b3:26:41:6d:31:26:43:fd:e5:05:3a:cd:44:48:49:6c:ad:b6:
         e7:a8:b7:25:3c:f9:17:38:a2:66:e3:a1:93:f0:55:f0:31:e1:
         8d:e7:60:e7:b6:16:17:64:0d:5c:16:12:93:9d:7b:a2:14:da:
         11:7f:76:ce:bc:4c:03:44:30:e9:3b:45:33:0f:39:67:a2:78:
         c3:cb:b8:88:7c:bd:e0:46:a1:35:ff:83:73:fd:70:8a:ee:bd:
         d5:e8:d2:b5:85:18:3b:31:33:31:44:30:53:91:f7:ce:c3:98:
         86:7d:77:8d:36:88:ee:4e:ab:06:c9:a7:25:31:cf:7b:fc:31:
         46:4b:d4:a1:79:a7:ae:b9:8c:32:f1:7d:eb:71:89:83:10:d8:
         82:18:89:4b:d0:a1:43:2c:b5:19:a8:85:8c:9b:c9:21:f1:36:
         5d:cb:de:b6:95:80:7f:0e:5b:66:d7:59:bc:79:ef:8f:7b:84:
         a2:1b:4a:a6:7a:5d:0a:f7:fe:ae:7c:9f:b5:11:71:5c:96:ff:
         c1:15:f1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:17:43 2026 by rpki-client