Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.mft
File:                     jwhmaAoC5LoOvh6PIljuKBzUPv4.mft (raw, json)
Hash identifier:          9ODEAw7uf8IV/dXtN23XLfly0vv1os5nRfFEHG+qyTg=
Subject key identifier:   BC:01:1E:23:1E:E4:56:21:C8:69:36:C5:03:5F:FD:5F:1B:ED:B2:BF
Authority key identifier: 8F:08:66:68:0A:02:E4:BA:0E:BE:1E:8F:22:58:EE:28:1C:D4:3E:FE
Certificate issuer:       /CN=A913B510/serialNumber=8F0866680A02E4BA0EBE1E8F2258EE281CD43EFE
Certificate serial:       CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwhmaAoC5LoOvh6PIljuKBzUPv4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.mft
Manifest number:          C7
Signing time:             Mon 27 Jul 2026 08:59:52 +0000
Manifest this update:     Mon 27 Jul 2026 08:59:51 +0000
Manifest next update:     Mon 03 Aug 2026 08:59:51 +0000
Files and hashes:         1: jwhmaAoC5LoOvh6PIljuKBzUPv4.crl (hash: OUUalT4QY3QUHLn2ygUwE0sGQcJBPdHOSNK/D36KrZA=)
                          2: 9D1CBEB65D8111F0A04DD550C4F9AE02.roa (hash: xYR/SYc7/uXieauINdZkifHH1K0sJh33XcTHArEcA5U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.crl
                          rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwhmaAoC5LoOvh6PIljuKBzUPv4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:59:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B510, serialNumber=8F0866680A02E4BA0EBE1E8F2258EE281CD43EFE
        Validity
            Not Before: Jul 27 08:59:51 2026 GMT
            Not After : Aug  3 08:59:51 2026 GMT
        Subject: CN=6a671e08-b822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2d:d1:dd:b6:6b:e0:03:ad:f4:82:0a:26:f2:
                    cc:8a:0d:b9:49:47:45:c7:43:7d:7b:f5:a0:6b:00:
                    5a:67:92:5d:48:b9:da:d6:03:f2:b6:64:6f:77:80:
                    03:a7:e5:e7:5f:7b:aa:77:c7:89:f1:15:bf:95:78:
                    35:ed:b3:1d:f2:52:be:b9:59:8e:c1:44:c0:6e:c8:
                    77:6b:c3:74:fa:ac:ae:cd:f3:6d:69:9d:0d:71:97:
                    cf:20:44:29:c0:64:01:e3:83:88:0a:84:dd:03:22:
                    55:5e:9c:ca:77:a5:b4:cb:07:01:8d:75:9d:5e:a7:
                    cd:22:6a:37:b3:3b:f6:b9:66:84:7c:d7:25:cc:4f:
                    41:f2:84:b9:41:6a:7e:59:2a:af:98:68:bb:4a:b9:
                    bf:a0:9c:52:de:13:a9:14:1e:8c:83:10:88:08:04:
                    f2:5c:d6:68:df:bd:72:6a:8a:de:e5:34:a0:6d:99:
                    eb:4a:47:17:ac:1f:6d:da:45:ea:bb:b0:75:92:cd:
                    20:df:c7:9b:5a:e1:c1:25:13:ab:d0:2d:49:56:8b:
                    d6:78:39:8d:cc:49:ec:1f:60:ae:ea:dd:fe:1b:8b:
                    5d:ae:3b:ce:a7:44:f2:ee:49:9a:af:0a:51:93:ed:
                    fd:d4:cc:f6:29:8c:3c:21:4f:4c:a2:aa:d6:ca:ab:
                    18:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:01:1E:23:1E:E4:56:21:C8:69:36:C5:03:5F:FD:5F:1B:ED:B2:BF
            X509v3 Authority Key Identifier:
                keyid:8F:08:66:68:0A:02:E4:BA:0E:BE:1E:8F:22:58:EE:28:1C:D4:3E:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwhmaAoC5LoOvh6PIljuKBzUPv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:8a:51:52:51:e4:61:25:14:86:49:0a:4f:ef:a9:92:76:ab:
         14:5f:36:53:c3:f9:9d:02:bb:2d:2a:62:3a:56:db:14:32:8b:
         ca:b6:39:ed:7f:da:43:e1:e8:d1:d5:fd:45:c8:d5:98:b8:f2:
         1f:42:23:79:a8:d9:6c:f8:d9:ec:0f:03:a6:42:56:b5:28:82:
         e2:4b:90:cd:d9:39:91:a9:16:d8:e8:e9:05:a2:ce:74:57:4d:
         b2:be:5c:44:9a:c0:9c:94:70:3b:d2:94:9b:b0:c9:87:70:9b:
         71:99:60:e5:69:bb:47:8b:d9:48:e9:41:7d:ba:f3:33:e5:15:
         9d:71:65:ea:38:cb:2f:6f:e8:f4:36:8c:70:41:82:47:f1:3f:
         ca:f2:d0:97:3f:09:87:92:c2:56:eb:7f:b8:8d:88:7f:32:d5:
         77:7b:c5:d6:00:ad:e1:d0:eb:6b:a3:c9:dd:0a:4e:84:69:34:
         d1:fe:fb:fe:14:28:06:e6:c2:88:6c:74:34:57:8d:41:e9:e5:
         5b:6d:70:27:47:25:e1:bf:94:34:0e:f4:e6:dd:5c:eb:50:f1:
         f5:76:c5:0a:48:aa:53:b3:55:d6:1e:82:6f:d6:8f:8b:07:87:
         34:23:b0:8e:28:68:2a:a7:10:d1:91:8b:88:6f:39:b8:bd:84:
         1a:bc:fe:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:47:57 2026 by rpki-client