Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft
File:                     MayWR8f4cKZrot54hUTNjDJr3_k.mft (raw, json)
Hash identifier:          a75EC5e/LJ/Ho7It/KJH47EJVOvvJfJExhoz/e4DNTg=
Subject key identifier:   7C:1C:DF:F4:2C:84:CD:92:24:A4:8F:9C:A7:89:B2:4D:C3:44:89:BB
Authority key identifier: 31:AC:96:47:C7:F8:70:A6:6B:A2:DE:78:85:44:CD:8C:32:6B:DF:F9
Certificate issuer:       /CN=A91218BB/serialNumber=31AC9647C7F870A66BA2DE788544CD8C326BDFF9
Certificate serial:       012E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft
Manifest number:          012A
Signing time:             Wed 29 Jul 2026 07:01:35 +0000
Manifest this update:     Wed 29 Jul 2026 07:01:35 +0000
Manifest next update:     Wed 05 Aug 2026 07:01:35 +0000
Files and hashes:         1: MayWR8f4cKZrot54hUTNjDJr3_k.crl (hash: GeqV4/mor+h7Dv6gPvgxGRFKGUnfQxMHKMrFNWQMSuE=)
                          2: 4DD6D628C8D211EF9F1BE312C4F9AE02.roa (hash: Q2Qdv0ZpyDXIc6w4oc2ztFa/mTiFE2ozOR+lXjgvebo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.crl
                          rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 07:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91218BB, serialNumber=31AC9647C7F870A66BA2DE788544CD8C326BDFF9
        Validity
            Not Before: Jul 29 07:01:35 2026 GMT
            Not After : Aug  5 07:01:35 2026 GMT
        Subject: CN=6a69a54f-173f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a7:a6:7a:e7:54:a7:90:8c:33:73:0a:47:cf:
                    77:e4:40:99:1f:b5:ec:b2:b9:74:70:5a:b1:44:20:
                    ff:fd:a5:35:45:08:a3:83:5e:78:e9:37:ea:9d:5d:
                    f4:f5:ad:8e:1a:fb:98:95:d8:7e:bc:f2:e8:a0:d2:
                    b9:ab:c1:46:ca:76:e3:dd:d4:f5:8e:ac:c1:42:ce:
                    0d:03:a6:05:93:60:9d:c8:2d:65:3c:53:18:47:f2:
                    75:b3:90:9c:d9:47:52:6b:ab:1f:b4:a0:6b:22:b4:
                    bf:c8:51:f4:b5:0f:d1:09:9f:82:46:03:9a:f6:d1:
                    a8:e5:90:7b:64:76:f8:13:78:26:5c:37:ff:01:a4:
                    47:eb:c7:1a:7d:4f:c3:7a:0c:fc:7c:5f:27:79:31:
                    97:5e:62:e0:c6:46:3b:a8:ad:0c:1c:06:95:7d:53:
                    0d:ee:e8:fc:4c:cf:e5:aa:8e:7c:b7:4e:a0:b1:da:
                    13:09:a7:f6:c8:76:4f:05:35:4d:cd:fc:d6:5d:30:
                    cf:ad:32:d5:72:54:47:9b:16:c1:1d:9f:a9:1d:7b:
                    eb:e2:9e:21:30:c8:e5:c3:b1:3b:a0:d2:da:7e:a0:
                    e3:51:14:65:d4:8f:f7:ad:22:18:1b:8d:b9:27:d8:
                    80:45:b4:1e:67:4f:ff:eb:0a:91:27:fb:5b:76:f0:
                    03:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1C:DF:F4:2C:84:CD:92:24:A4:8F:9C:A7:89:B2:4D:C3:44:89:BB
            X509v3 Authority Key Identifier:
                keyid:31:AC:96:47:C7:F8:70:A6:6B:A2:DE:78:85:44:CD:8C:32:6B:DF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:a3:d4:ba:02:22:bc:34:06:48:ea:31:82:3d:29:4d:5e:16:
         76:61:6c:f1:65:5f:b8:96:bc:cf:e5:eb:7e:3d:68:db:f2:21:
         18:4d:cb:28:3f:0c:27:1b:69:ea:a8:17:cb:29:c7:e0:6f:01:
         92:7e:73:e1:bd:88:d0:aa:31:82:71:c4:8d:2a:9d:42:6e:1c:
         57:86:1e:2b:97:12:71:57:74:62:ab:90:25:61:47:c9:74:05:
         29:8f:0e:f4:5a:a6:82:a0:51:aa:9d:7d:93:cf:ba:82:75:e7:
         e5:72:19:22:0f:bd:b6:dd:f7:af:93:32:18:ff:90:1b:0e:5b:
         2d:f2:74:91:f9:f1:51:34:ef:8c:be:8f:3d:ba:4b:e4:30:64:
         c7:60:c8:5d:bb:6d:a0:0b:c0:9d:bf:28:fe:1d:d9:d5:39:27:
         23:98:f2:50:c5:c0:51:e3:34:a6:7c:af:1d:87:ed:8e:ee:c6:
         6b:86:d8:31:2f:e3:36:9a:65:30:d4:03:01:f3:0c:f9:18:41:
         4d:5b:2c:2d:90:30:b3:0f:1b:72:d7:9a:e5:1f:32:10:ba:ee:
         47:09:7e:3d:67:c0:f8:d9:c4:a5:9a:e4:2f:25:40:77:bf:b3:
         e6:5f:3f:6d:75:43:69:ab:16:99:29:69:a3:e0:cc:14:d3:d3:
         df:f2:b8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:58:36 2026 by rpki-client