Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft
File:                     wA8Frg-ptoCpG1bw0yHFGIwecSw.mft (raw, json)
Hash identifier:          l8xCzjEGHWCVZgVNvOwPTjPgyfIYaANuVVS/F5GT8BQ=
Subject key identifier:   AC:B5:4D:CC:97:F4:3B:41:5F:DF:C4:D0:E1:67:BC:B2:6C:16:97:AB
Authority key identifier: C0:0F:05:AE:0F:A9:B6:80:A9:1B:56:F0:D3:21:C5:18:8C:1E:71:2C
Certificate issuer:       /CN=A914F937/serialNumber=C00F05AE0FA9B680A91B56F0D321C5188C1E712C
Certificate serial:       0200
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft
Manifest number:          0200
Signing time:             Tue 23 Jun 2026 03:15:20 +0000
Manifest this update:     Tue 23 Jun 2026 03:15:20 +0000
Manifest next update:     Tue 30 Jun 2026 03:15:20 +0000
Files and hashes:         1: wA8Frg-ptoCpG1bw0yHFGIwecSw.crl (hash: 7Exg2VyfnWSk6Ix5W/G+AaUIvXo8ZaaoMF4kb4YmlGk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.crl
                          rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 03:15:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512 (0x200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F937, serialNumber=C00F05AE0FA9B680A91B56F0D321C5188C1E712C
        Validity
            Not Before: Jun 23 03:15:20 2026 GMT
            Not After : Jun 30 03:15:20 2026 GMT
        Subject: CN=6a39fa48-e417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:44:c5:73:39:98:46:28:84:e4:0a:cd:f6:21:
                    50:eb:8a:9f:e0:6d:79:49:48:f7:ca:f6:38:7a:e5:
                    76:2b:ac:73:4d:e0:4a:88:b1:53:fc:73:20:df:72:
                    ca:95:af:f9:66:7e:39:85:3b:79:0f:16:a5:62:ad:
                    ee:fb:9e:ba:57:9e:a6:9b:ca:98:e0:bf:4b:47:6e:
                    db:37:b7:b0:d3:d9:5c:44:40:6c:e2:5f:4a:80:cb:
                    31:66:8b:0c:d3:3f:3a:1f:d1:c3:37:96:7a:b4:c7:
                    0a:25:0d:ab:5e:8f:e6:81:37:32:a7:ac:5c:ea:bf:
                    f2:2d:d7:5e:59:cc:ff:46:f9:4f:57:74:cf:49:df:
                    15:f3:e5:90:32:d8:52:28:0c:d5:02:dc:ed:71:cf:
                    44:95:c5:27:ff:e2:64:68:77:fe:c8:e2:a8:5a:81:
                    9f:1c:67:14:69:ff:65:bd:cc:75:1c:77:d5:cc:f0:
                    81:d7:93:79:2a:37:e7:3c:94:a2:03:6f:e3:89:3e:
                    99:07:73:05:d3:fa:2a:00:ea:76:11:e1:af:91:b3:
                    a5:41:66:88:bb:19:24:c6:ff:0a:53:07:9f:6b:06:
                    2f:f4:ad:35:09:2f:66:01:1b:24:9f:8c:70:1f:11:
                    ec:f5:90:c0:72:27:f0:67:e2:ce:5d:55:f3:be:32:
                    a9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B5:4D:CC:97:F4:3B:41:5F:DF:C4:D0:E1:67:BC:B2:6C:16:97:AB
            X509v3 Authority Key Identifier:
                keyid:C0:0F:05:AE:0F:A9:B6:80:A9:1B:56:F0:D3:21:C5:18:8C:1E:71:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:8a:48:e2:7c:34:72:09:d2:91:04:8b:d2:70:42:3c:bd:b8:
         15:e5:06:37:7c:e5:35:c9:fe:07:ff:46:e6:15:56:fa:11:db:
         b6:7f:db:04:8b:ae:23:c1:74:06:58:52:52:01:a8:95:7e:db:
         27:90:28:7f:39:63:0c:85:1f:af:10:ac:5c:ce:59:86:5b:d7:
         aa:fd:ea:e2:8e:1b:26:94:1f:bf:17:8a:12:da:0b:62:f9:f3:
         6d:65:99:71:22:41:e7:59:d6:d2:99:37:6f:3b:ec:6e:e9:93:
         3c:90:16:25:26:e2:cf:95:1e:8f:bc:e6:fa:ee:ea:3d:e2:db:
         13:97:5b:e8:bf:39:ba:af:0c:4b:0f:18:05:cf:17:72:16:4f:
         fa:82:b8:36:c3:a7:fb:ee:a4:df:69:92:02:88:09:46:4b:07:
         ca:ea:f8:5b:18:7a:d5:44:e6:31:14:b0:52:5a:fb:6a:9b:21:
         9e:00:db:65:8b:c8:b2:7e:9d:4c:be:3f:c5:18:9f:21:b9:db:
         a0:b0:72:22:b3:4e:a3:81:4b:61:b1:9c:60:2d:93:66:ec:4d:
         e8:cf:1d:8f:25:90:24:fe:29:ad:3a:62:7f:b7:8a:c2:16:59:
         e7:c0:e4:d3:81:d4:8b:05:14:72:a5:ac:aa:4b:4c:7f:5a:2b:
         58:7f:de:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:17:11 2026 by rpki-client