Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
File:                     wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft (raw, json)
Hash identifier:          2rDP+qhjS0CG4LlPag6Nzfl6k2SPPEGCx8fSoqmWmSI=
Subject key identifier:   58:1B:E0:A1:01:BE:E7:C6:B4:E4:4E:5B:D4:CA:53:FB:F0:FB:91:2E
Authority key identifier: C1:59:71:31:EA:BC:5B:B3:32:BC:99:9D:41:6E:9D:5E:7F:CC:0A:69
Certificate issuer:       /CN=A91731AD/serialNumber=C1597131EABC5BB332BC999D416E9D5E7FCC0A69
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
Manifest number:          D1
Signing time:             Fri 17 Jul 2026 08:01:43 +0000
Manifest this update:     Fri 17 Jul 2026 08:01:42 +0000
Manifest next update:     Fri 24 Jul 2026 08:01:42 +0000
Files and hashes:         1: wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl (hash: D7ZEI8akcOcr/19ZG9NyasHJTZiWR7+apzysdPz1yYI=)
                          2: 31D77D7ED99811F0B81C7A7265D3641D.roa (hash: Jip17pxqKZC2BhkcnsPqn4RhbWqhszPQxTWPgOJM/Hc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl
                          rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 08:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91731AD, serialNumber=C1597131EABC5BB332BC999D416E9D5E7FCC0A69
        Validity
            Not Before: Jul 17 08:01:42 2026 GMT
            Not After : Jul 24 08:01:42 2026 GMT
        Subject: CN=6a59e167-eb36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2d:c5:1e:fa:1f:28:f0:f2:c0:1a:f0:06:a9:
                    47:f3:15:f9:00:86:67:25:0a:1c:8a:3e:a4:c9:90:
                    c6:98:70:db:3f:82:f8:f2:74:0c:7e:84:90:94:4d:
                    ad:91:dc:f4:c8:f4:b0:f9:d8:33:f4:52:52:a4:46:
                    24:ef:2a:9a:3e:48:f9:cb:17:e3:34:fc:23:54:bd:
                    3a:4f:2b:8d:05:fe:a0:75:66:34:3c:db:c4:f7:71:
                    d4:f3:32:85:e6:b6:2e:2c:9a:a6:bb:5e:3e:52:3a:
                    38:3c:57:d8:9e:e2:30:4e:3d:cd:96:a4:b5:47:df:
                    68:9d:b8:18:6a:a3:35:55:53:8b:f7:fd:49:9c:c1:
                    7d:8e:80:03:48:a8:13:36:e5:3b:c0:de:7f:ac:7a:
                    cd:54:61:84:e8:29:b4:9e:a5:d3:56:2f:64:46:2e:
                    d2:bd:fe:70:b3:9d:6e:18:5e:a7:9a:c8:22:15:ac:
                    34:b7:20:1a:03:f8:72:d6:97:6b:f4:f5:1a:9a:f0:
                    fb:48:e5:1c:90:b4:4b:39:20:7a:12:4a:cb:b5:5f:
                    41:b2:9f:49:3b:35:b5:19:80:7a:c3:0b:a6:7f:ad:
                    df:1f:e7:f0:c8:a6:7e:e4:d9:68:5d:21:e0:ae:ac:
                    be:b9:10:ee:93:76:9e:10:87:ba:53:97:d1:42:9e:
                    76:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1B:E0:A1:01:BE:E7:C6:B4:E4:4E:5B:D4:CA:53:FB:F0:FB:91:2E
            X509v3 Authority Key Identifier:
                keyid:C1:59:71:31:EA:BC:5B:B3:32:BC:99:9D:41:6E:9D:5E:7F:CC:0A:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:c5:ca:1d:f1:11:b6:ec:94:25:07:94:9a:94:e5:55:dc:80:
         92:a8:65:8b:57:b0:ee:f4:8f:16:5c:a0:f9:de:d5:79:38:cb:
         2e:95:3a:40:c6:2a:25:a5:0b:db:83:26:3d:3e:26:d9:6e:38:
         69:b1:6f:c0:8a:db:60:77:fe:f7:89:fb:34:90:71:f7:e2:5e:
         f3:9c:c2:07:50:6e:78:a8:9a:26:85:c0:ef:30:29:d6:a5:13:
         1f:ed:bf:26:22:27:4e:5e:e1:1a:3b:1e:67:2b:fa:a0:39:f4:
         5d:0b:47:78:e6:b0:ef:be:64:b0:02:36:93:b9:38:ff:b6:00:
         11:59:b1:a1:fe:65:ef:21:8c:76:82:6e:be:ee:e3:f6:93:51:
         a4:b9:44:7a:3e:c8:17:16:1b:50:11:75:e6:e0:2a:3d:7c:b5:
         ea:69:3b:cb:ab:50:08:c5:c5:00:68:f8:38:75:fe:47:7d:05:
         f1:7e:bb:1c:bf:a0:25:dc:34:6d:4d:99:14:f4:53:80:13:0a:
         8c:2c:5c:98:8c:72:32:38:2e:7a:11:66:1b:3e:e2:da:4a:79:
         ba:15:4e:00:6a:04:ca:96:8e:28:7a:4d:bd:d4:db:47:d7:fc:
         4a:a3:79:89:0d:6e:af:43:b9:ce:d9:a0:88:0e:3a:4b:98:3d:
         33:65:f6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:34 2026 by rpki-client