Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft
File:                     pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft (raw, json)
Hash identifier:          ZYXkCXltWwNXd/az72AoWZD3jASVTLcaa10k17koMVc=
Subject key identifier:   CF:8A:2B:B5:F5:7B:EE:D6:23:B8:FD:37:06:B9:8B:C4:B4:D4:05:23
Authority key identifier: A5:6A:E7:2C:66:A6:4E:62:79:C8:CC:9C:0E:FE:4F:36:36:90:27:80
Certificate issuer:       /CN=A912A471/serialNumber=A56AE72C66A64E6279C8CC9C0EFE4F3636902780
Certificate serial:       01F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft
Manifest number:          01F0
Signing time:             Mon 27 Jul 2026 04:55:50 +0000
Manifest this update:     Mon 27 Jul 2026 04:55:50 +0000
Manifest next update:     Mon 03 Aug 2026 04:55:50 +0000
Files and hashes:         1: pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl (hash: +TvbVy/ZwKQrDmkzW22KOkWY7rcG1/WUkrq/rtpCIMw=)
                          2: AC21E1E8924411EE96AA9544C4F9AE02.roa (hash: zEJDvN9ybbZp1LhscTj5sdCfbt2mJ3L379v4/X6XCSM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl
                          rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:55:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502 (0x1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A471, serialNumber=A56AE72C66A64E6279C8CC9C0EFE4F3636902780
        Validity
            Not Before: Jul 27 04:55:50 2026 GMT
            Not After : Aug  3 04:55:50 2026 GMT
        Subject: CN=6a66e4d6-a8c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:32:fc:1d:a9:da:bb:6a:2d:f0:7c:bc:e0:40:
                    88:d4:91:7b:f9:86:4f:b7:f7:c6:37:fa:08:7e:6f:
                    23:2a:96:47:cc:e6:88:4f:23:3d:8b:01:b1:9e:5a:
                    f1:da:46:2b:52:98:8f:8a:6a:19:89:36:b1:8a:df:
                    c4:ff:37:9f:57:de:75:7a:91:48:8e:6c:66:47:61:
                    35:04:5a:29:4f:b0:c4:06:d0:bc:fa:1b:59:5c:e0:
                    7f:d6:f3:ab:d4:aa:dd:81:e5:fa:28:21:8c:81:fa:
                    09:58:6e:33:24:8d:ad:cb:a3:6a:3c:1f:2f:8a:36:
                    56:a3:bd:3b:d9:a3:7b:90:0d:50:68:0c:1b:2e:cb:
                    ab:6e:15:80:bf:d9:da:2d:4e:5e:6f:b1:2c:b0:49:
                    9f:3b:f7:7e:da:3b:e1:96:82:87:49:3b:d5:29:56:
                    c4:a3:a1:5f:65:49:14:c2:5c:49:c6:e1:47:f5:03:
                    be:c7:4d:1a:21:ef:8c:81:1c:6b:a8:fc:7b:b9:ed:
                    03:ad:58:e0:21:1b:0d:5d:98:be:b3:35:3b:71:2e:
                    47:b2:fa:48:54:9b:0f:e8:1c:2a:59:19:da:6a:ee:
                    fc:31:40:f5:dc:eb:f3:0e:e3:c8:56:1e:9d:64:c3:
                    32:aa:61:62:2f:52:4a:fb:a1:46:12:f8:f3:c9:0c:
                    40:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8A:2B:B5:F5:7B:EE:D6:23:B8:FD:37:06:B9:8B:C4:B4:D4:05:23
            X509v3 Authority Key Identifier:
                keyid:A5:6A:E7:2C:66:A6:4E:62:79:C8:CC:9C:0E:FE:4F:36:36:90:27:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:40:54:49:47:ec:d1:24:13:42:ac:bb:61:3e:37:81:02:2a:
         b8:36:02:85:89:a9:f6:83:25:29:90:1e:c4:90:5d:0c:52:48:
         b6:32:39:c2:b2:e1:f1:e6:e8:41:58:ad:70:59:4a:f9:24:58:
         c6:3a:57:96:5e:4e:3e:22:56:dc:eb:aa:ea:bf:22:30:18:00:
         7a:8e:d0:a5:32:87:d1:bd:87:07:a8:bb:ee:b2:4b:e7:a3:6d:
         a3:dc:be:18:a1:36:67:64:9a:87:60:aa:ce:a8:90:1b:a7:33:
         d1:91:43:99:07:fb:7f:02:a7:d4:34:40:77:40:1e:56:65:a1:
         f2:36:00:df:f2:4e:28:a0:12:86:db:4a:e2:99:8e:98:a5:7b:
         28:1d:bc:ed:2d:2d:d0:d0:f5:76:0f:9d:51:6c:4a:ce:3c:a3:
         e8:c2:d3:e7:2d:06:fb:53:19:66:92:4b:b8:ec:15:41:68:42:
         7b:81:a0:7c:ea:62:6f:c7:63:00:25:d4:36:41:06:e6:29:9d:
         ad:09:b8:f8:30:fe:8a:9f:56:e3:95:cc:e8:4f:94:40:44:e0:
         db:07:5a:d8:2a:dd:0d:ef:ef:ef:2e:4b:40:c0:b0:92:31:da:
         fd:f6:84:db:cc:5f:37:72:1b:de:c6:0b:50:82:a1:4e:4f:6f:
         76:dc:91:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:28:43 2026 by rpki-client