Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft
File:                     shwri89IL512bSpNMlmO6Uv2Zaw.mft (raw, json)
Hash identifier:          /QnRDKOkW57NhhI1RanWc1I0naKp+OpQDWqD2rHh1Jo=
Subject key identifier:   E4:96:E6:0D:CE:6A:A5:38:9A:C4:41:25:E5:2D:67:9F:A7:CA:82:95
Authority key identifier: B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC
Certificate issuer:       /CN=A911A7D2/serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC
Certificate serial:       0108
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft
Manifest number:          0104
Signing time:             Mon 27 Jul 2026 08:13:37 +0000
Manifest this update:     Mon 27 Jul 2026 08:13:37 +0000
Manifest next update:     Mon 03 Aug 2026 08:13:37 +0000
Files and hashes:         1: shwri89IL512bSpNMlmO6Uv2Zaw.crl (hash: Xvz+yzx7mlrmy7Tavw0NR83XGY5q6wZSQlYh3Wz8Pug=)
                          2: C7FAB578FEEC11EFB40D667FC4F9AE02.roa (hash: KytT7CwlQe11jWfAsLPRMxvbGLLkhLmlX/I5QLbz6lk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl
                          rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:13:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A7D2, serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC
        Validity
            Not Before: Jul 27 08:13:37 2026 GMT
            Not After : Aug  3 08:13:37 2026 GMT
        Subject: CN=6a671331-b8e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a5:82:09:78:b8:a7:99:42:c7:b9:ca:6f:86:
                    a5:ba:d7:70:be:bd:66:a6:24:29:09:bb:af:e5:a0:
                    bf:9d:4d:94:9a:73:0e:59:89:dd:57:20:d4:15:77:
                    35:cd:85:ef:8c:91:23:db:f9:2b:15:dc:6a:8d:d1:
                    06:82:5a:e5:10:96:d3:90:fa:f4:d6:df:f8:74:35:
                    28:51:e4:f3:e5:97:31:b2:19:39:12:36:12:05:42:
                    f9:df:24:43:c3:5e:c3:c1:25:a1:f3:f3:cd:66:3b:
                    38:58:97:a8:66:51:7d:50:0e:a7:8a:a6:ed:77:26:
                    5d:11:5e:9b:ac:8a:fd:4c:c9:68:44:c6:dc:bf:36:
                    93:95:c3:7e:cb:aa:bf:33:3e:d8:54:bf:00:53:e7:
                    46:f1:c3:c1:ed:5f:f1:8f:fe:de:37:b2:92:89:48:
                    3b:93:ae:71:ee:bc:12:95:a3:08:9d:73:59:a6:c4:
                    d3:a1:8c:50:74:b4:83:df:c0:0b:38:71:bd:63:af:
                    eb:35:2e:99:e3:d5:84:df:fb:80:c5:7c:d2:c9:d3:
                    3d:eb:8f:64:32:d1:df:ca:b6:9e:01:3a:c2:b7:29:
                    ab:32:4f:a6:3a:ce:18:f3:15:08:33:a0:58:6f:3f:
                    4c:30:32:d8:41:f4:37:da:4c:45:69:fc:89:5e:ca:
                    b5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:96:E6:0D:CE:6A:A5:38:9A:C4:41:25:E5:2D:67:9F:A7:CA:82:95
            X509v3 Authority Key Identifier:
                keyid:B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:4d:30:ea:1d:34:3d:58:87:36:9e:65:08:d5:6a:f7:4e:30:
         db:32:82:52:ed:f5:05:5d:20:35:b7:6b:76:52:3b:63:ea:b7:
         96:ea:84:49:78:8f:b9:af:16:7f:69:82:9b:fb:5b:b1:92:b5:
         db:16:12:40:c3:5a:3a:69:ab:5b:f3:60:2c:d3:66:91:89:94:
         f3:69:49:bf:36:b1:a9:e1:bf:f7:6b:85:14:99:f8:a3:c4:76:
         c3:2f:56:ed:77:02:51:cb:dc:fc:ee:9c:e5:6a:e1:e8:f4:18:
         49:e8:ec:36:38:36:7d:a0:e6:ea:fd:30:34:d2:39:45:21:ef:
         a1:31:d8:6c:c2:c3:1f:f5:70:ec:49:57:e9:a5:7c:8e:5f:e3:
         5c:b8:27:94:7a:a5:d9:3c:20:e6:18:8a:25:d6:1f:30:c5:36:
         f0:9f:55:f8:b9:a1:b5:8d:32:8b:cb:7c:15:bc:c4:ca:63:48:
         1d:ae:d3:00:de:18:d6:0c:5d:06:f2:d8:15:fb:bb:2a:51:18:
         57:ac:f4:7e:de:8c:0c:64:d5:51:31:66:88:29:48:67:08:ed:
         f8:8c:56:6a:fa:fd:f8:75:e4:32:0d:49:3f:c7:29:d1:77:e3:
         9e:fc:ea:e1:76:7f:24:e7:d0:69:f8:37:a8:c0:19:76:6a:fd:
         1f:b9:25:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:05:46 2026 by rpki-client