Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft
File:                     MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft (raw, json)
Hash identifier:          xYndi8o4zYKRD2k0od5uTPP1kWqjmL/vaNCpRDuht6Y=
Subject key identifier:   A0:1E:4A:81:CD:B6:C8:EA:A4:33:FA:13:DC:05:98:BB:0D:D0:34:CB
Authority key identifier: 31:6D:89:64:7F:0D:0C:B0:6B:37:32:07:8A:42:30:AF:11:56:53:34
Certificate issuer:       /CN=A91E3441/serialNumber=316D89647F0D0CB06B3732078A4230AF11565334
Certificate serial:       64
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft
Manifest number:          62
Signing time:             Fri 17 Jul 2026 09:19:07 +0000
Manifest this update:     Fri 17 Jul 2026 09:19:07 +0000
Manifest next update:     Fri 24 Jul 2026 09:19:07 +0000
Files and hashes:         1: MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl (hash: cp0gnRwvaGbosqGOKIWpMHxo4CdriI7dCy8/T04qDNU=)
                          2: 3954E33CEE9E11F0B32FB2E5666F56BC.roa (hash: 91UfSDMa7uQJKbxkjWHGuOg640JuLtPHQKq29mthHYM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 09:19:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3441, serialNumber=316D89647F0D0CB06B3732078A4230AF11565334
        Validity
            Not Before: Jul 17 09:19:07 2026 GMT
            Not After : Jul 24 09:19:07 2026 GMT
        Subject: CN=6a59f38b-4109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bc:49:5f:f4:68:e6:ac:a3:fe:c4:1c:da:c6:
                    af:4a:6b:9c:f3:df:09:4e:54:81:e4:67:99:47:09:
                    17:1a:6f:76:c0:61:3f:75:c8:ed:12:3a:42:fd:56:
                    aa:e7:39:01:b9:f8:55:a0:2f:3b:be:af:20:9e:46:
                    6f:61:11:ec:e1:74:19:d8:c3:ce:26:3b:13:dc:a0:
                    fa:4f:e6:bc:e1:32:32:21:b8:0e:a9:43:63:ae:c8:
                    a8:9f:77:21:f6:7e:fc:63:82:51:fb:93:78:09:c9:
                    90:73:63:48:18:d4:6d:84:da:fe:0a:82:39:95:45:
                    07:00:c5:b1:e0:df:a6:4a:1d:1b:5b:46:33:1f:0a:
                    41:4d:78:0d:97:9f:52:59:0a:f8:c7:7e:f6:fd:28:
                    46:b3:97:c7:d1:5a:b3:1e:a7:7b:92:b2:00:07:60:
                    f6:05:a4:9b:0d:dc:46:99:8b:58:92:3a:b5:64:f8:
                    56:72:8a:88:f2:77:80:6f:6f:b4:9e:fd:b9:5a:b8:
                    05:3a:98:ff:e6:03:be:6e:2c:e1:dd:d4:d1:cb:f4:
                    0c:6e:21:6f:6c:a0:5d:76:2f:d3:6b:c7:55:1d:45:
                    c1:e5:95:b1:07:d5:5d:0d:b2:2f:65:32:6d:e2:9c:
                    82:34:aa:72:0d:d3:bb:ad:32:2d:29:7d:ae:5c:6c:
                    e8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1E:4A:81:CD:B6:C8:EA:A4:33:FA:13:DC:05:98:BB:0D:D0:34:CB
            X509v3 Authority Key Identifier:
                keyid:31:6D:89:64:7F:0D:0C:B0:6B:37:32:07:8A:42:30:AF:11:56:53:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:92:82:c9:f2:7c:33:24:6d:76:d1:59:47:2c:8d:fb:10:a0:
         fd:fd:30:76:af:34:9c:83:6a:5d:73:b5:46:50:8f:a6:9f:c9:
         70:dc:aa:34:74:ef:64:16:de:0d:75:71:56:41:3d:38:b5:ff:
         3a:47:d1:21:6e:13:c7:78:48:12:19:db:c0:6c:20:89:09:74:
         ab:8f:c4:32:3d:7f:fc:c2:9d:5e:17:55:97:15:72:4d:34:22:
         b1:de:45:6f:79:e4:0f:46:d4:2c:b4:3d:59:70:36:1b:f8:61:
         df:e5:2c:44:b0:c5:fc:3b:ff:3b:a4:d2:7b:00:22:db:5c:e9:
         85:6c:94:af:bf:79:0b:f4:cc:20:d5:7e:52:a5:93:6e:f7:6b:
         64:2d:a9:52:ac:76:05:39:73:36:cb:6a:2b:8b:7a:a8:bc:39:
         d9:91:a2:35:09:fc:b8:2c:b0:f6:09:40:28:a0:02:99:13:b9:
         0c:2e:af:75:69:4b:59:9f:9c:cb:22:ec:8c:a4:19:9d:21:81:
         92:90:67:02:a4:5e:a2:72:78:35:c9:e9:d0:a2:9c:ea:66:99:
         d4:8b:09:74:57:5f:52:74:be:0c:03:2b:3a:69:04:cf:55:ab:
         a8:bd:a7:35:69:9b:53:de:7d:2c:8c:b1:13:3b:cf:90:5c:7b:
         72:f5:09:69
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
MzQ0MTExMC8GA1UEBRMoMzE2RDg5NjQ3RjBEMENCMDZCMzczMjA3OEE0MjMwQUYx
MTU2NTMzNDAeFw0yNjA3MTcwOTE5MDdaFw0yNjA3MjQwOTE5MDdaMBgxFjAUBgNV
BAMTDTZhNTlmMzhiLTQxMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDAvElf9GjmrKP+xBzaxq9Ka5zz3wlOVIHkZ5lHCRcab3bAYT91yO0SOkL9Vqrn
OQG5+FWgLzu+ryCeRm9hEezhdBnYw84mOxPcoPpP5rzhMjIhuA6pQ2OuyKifdyH2
fvxjglH7k3gJyZBzY0gY1G2E2v4KgjmVRQcAxbHg36ZKHRtbRjMfCkFNeA2Xn1JZ
CvjHfvb9KEazl8fRWrMep3uSsgAHYPYFpJsN3EaZi1iSOrVk+FZyiojyd4Bvb7Se
/blauAU6mP/mA75uLOHd1NHL9AxuIW9soF12L9Nrx1UdRcHllbEH1V0Nsi9lMm3i
nII0qnIN07utMi0pfa5cbOijAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUoB5Kgc22
yOqkM/oT3AWYuw3QNMswHwYDVR0jBBgwFoAUMW2JZH8NDLBrNzIHikIwrxFWUzQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzNDQxL0UwODFBNjBBRUU5
RDExRjBBQ0UyNUM5RDY2NkY1NkJDL01XMkpaSDhORExCck56SUhpa0l3cnhGV1V6
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvTVcySlpIOE5ETEJyTnpJSGlrSXdyeEZXVXpRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz
NDQxL0UwODFBNjBBRUU5RDExRjBBQ0UyNUM5RDY2NkY1NkJDL01XMkpaSDhORExC
ck56SUhpa0l3cnhGV1V6US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAHkoLJ8nwzJG120VlHLI37EKD9/TB2rzScg2pdc7VGUI+mn8lw3Ko0dO9kFt4N
dXFWQT04tf86R9EhbhPHeEgSGdvAbCCJCXSrj8QyPX/8wp1eF1WXFXJNNCKx3kVv
eeQPRtQstD1ZcDYb+GHf5SxEsMX8O/87pNJ7ACLbXOmFbJSvv3kL9Mwg1X5SpZNu
92tkLalSrHYFOXM2y2ori3qovDnZkaI1Cfy4LLD2CUAooAKZE7kMLq91aUtZn5zL
IuyMpBmdIYGSkGcCpF6icng1yenQopzqZpnUiwl0V19SdL4MAys6aQTPVauovac1
aZtT3n0sjLETO8+QXHty9Qlp
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:30:08 2026 by rpki-client