Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
File:                     fWozDw0BJJQnx_yd3dz0qCh2CwY.mft (raw, json)
Hash identifier:          Pa9FJ5dSguy/hM4rOI6q3nt9CpqIrP22GYBVtO9WUHU=
Subject key identifier:   1C:E2:15:1C:E4:FC:64:71:E7:B2:3B:F7:6C:C8:FC:B0:DA:9E:6E:9F
Authority key identifier: 7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06
Certificate issuer:       /CN=A9145519/serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06
Certificate serial:       1D2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
Manifest number:          1D18
Signing time:             Tue 28 Jul 2026 16:14:00 +0000
Manifest this update:     Tue 28 Jul 2026 16:14:00 +0000
Manifest next update:     Tue 04 Aug 2026 16:14:00 +0000
Files and hashes:         1: fWozDw0BJJQnx_yd3dz0qCh2CwY.crl (hash: iO+ShClry6MltxU3wZ09isKcwgZWCEmPT+gNGfe7n7Y=)
                          2: 78D1DAC8E45E11E681F82341C4F9AE02.roa (hash: 1+3PiyURCQ1dCtokVNGr5D8JpB6WOiYHI8MxHAWll5Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl
                          rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:13:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7468 (0x1d2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145519, serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06
        Validity
            Not Before: Jul 28 16:14:00 2026 GMT
            Not After : Aug  4 16:14:00 2026 GMT
        Subject: CN=6a68d548-acfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ac:2a:e0:a4:b2:80:02:1d:ef:1a:f3:15:d1:
                    db:cc:ba:bd:f9:c2:9f:3e:5e:23:5a:af:bc:dd:a4:
                    c8:29:0c:9c:65:27:79:b4:b3:ed:c1:0e:1b:6e:4b:
                    90:36:5a:e5:f4:fa:f5:cf:19:78:d7:4d:59:c3:c6:
                    a0:ea:16:55:47:17:8a:99:c9:f0:b0:85:36:be:c3:
                    79:0d:01:9a:73:8b:0d:48:10:98:c5:56:6a:dc:41:
                    b1:81:5e:87:f2:fb:02:88:68:83:f4:60:c0:98:2d:
                    e2:7e:0f:42:52:e9:c8:d0:a1:2d:ab:7b:1a:40:d8:
                    48:2a:69:98:b6:02:9f:fd:74:6b:1a:a6:75:e8:2a:
                    db:eb:0d:8d:7c:3e:2c:d2:da:fd:77:3c:68:4b:ae:
                    3d:a3:cb:d5:2e:43:84:16:a8:97:5b:af:21:fe:f6:
                    81:a0:3a:17:7d:c0:a2:ca:5a:9a:b4:16:9e:37:83:
                    7c:31:8e:f1:a0:0f:fb:7a:c3:81:ed:eb:ec:d7:8f:
                    eb:22:fb:2f:f1:44:fd:50:e9:3b:d3:95:2f:2e:6d:
                    58:22:1c:4f:a8:6b:fa:5e:40:7a:a4:2e:bf:50:eb:
                    f9:a0:a4:2c:c4:64:8a:ba:9e:d2:49:30:e7:63:5f:
                    0b:4a:ef:8a:8c:d4:87:9d:94:ac:11:eb:0d:c5:10:
                    ea:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E2:15:1C:E4:FC:64:71:E7:B2:3B:F7:6C:C8:FC:B0:DA:9E:6E:9F
            X509v3 Authority Key Identifier:
                keyid:7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:b9:67:4e:8a:55:d9:a8:3e:16:57:70:b1:01:5a:03:da:28:
         30:f7:41:c6:f6:21:ff:8b:9d:33:a4:4c:48:51:5e:e8:78:df:
         d0:4d:f7:e8:42:fe:3e:a4:53:c3:5d:b2:d1:94:95:67:f1:24:
         f3:52:17:9e:7c:69:c8:c4:ce:c3:e1:4c:ce:14:ae:f5:d7:8b:
         ad:a4:cd:b2:23:7c:6e:4f:a1:3b:7d:77:3f:c8:91:40:ef:04:
         0a:0f:c2:98:8a:8d:4b:09:ef:82:35:b5:4a:9a:87:cf:dd:ba:
         57:91:4e:a5:97:11:18:13:b1:6f:2a:39:a8:93:50:ed:c2:cd:
         90:0a:16:2f:ea:70:09:64:fb:a1:a3:84:42:9f:30:fb:f5:4e:
         2e:92:8b:0a:5c:85:e1:a2:e5:5d:57:84:94:c2:be:2c:4f:8c:
         de:87:27:d4:c6:07:b3:82:8c:a3:1b:da:22:13:5e:6a:93:c6:
         61:8a:34:c7:d5:cc:7a:3b:6f:0a:4a:ad:e9:29:d8:92:4a:aa:
         54:78:be:33:71:d4:bb:ce:8b:13:5c:f5:bb:94:7d:9d:c7:8e:
         b6:6c:e0:52:ca:0e:2e:fe:31:0f:65:05:39:4c:12:7a:ae:50:
         64:de:d4:46:e4:34:b8:c9:ee:7d:64:bf:01:94:8b:e1:75:0b:
         52:1f:31:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:47:23 2026 by rpki-client