Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
File:                     wvKOnRiEOcT-afY6TKptpCSWKR0.mft (raw, json)
Hash identifier:          6haoBY2JwIlgqk8hp9MMM32D/jeKXzc5Dr1MszRbif8=
Subject key identifier:   FE:11:FD:A8:EA:A8:14:9D:62:3A:EE:71:0E:88:6D:77:73:84:AB:11
Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
Certificate issuer:       /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Certificate serial:       0675
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
Manifest number:          0629
Signing time:             Sun 26 Jul 2026 23:52:35 +0000
Manifest this update:     Sun 26 Jul 2026 23:52:35 +0000
Manifest next update:     Sun 02 Aug 2026 23:52:35 +0000
Files and hashes:         1: wvKOnRiEOcT-afY6TKptpCSWKR0.crl (hash: qPRiNzKKxMtRlrTxy7KtGtpwxq1/PFkLmOMKOnd/x28=)
                          2: 131FA4B092AD11F0AF4F4C85C4F9AE02.roa (hash: ipyTnc82ut8pZyRx4sDro4mSJHvZJZYQ7p6XZ0S5TUo=)
                          3: C08B939607D911EDA41A0B25C4F9AE02.roa (hash: 5mOXYDCuxkdq/XEQwoY69lXUcjkoAmJ8AwIjsdZITME=)
                          4: 35A768B8563B11EC94608B5BC4F9AE02.roa (hash: l7BnLnchZpy3V0jQTXDCx9KU7qJONYm3aNxaqwd5cQs=)
                          5: DE6603CAEBD711F092381BAE6B6F56BC.roa (hash: 7MSjFuhWPk6nWpPHBFrMgveqrJSXQoiVW5E6LTrh718=)
                          6: BFFF6C4A07D911EDA41A0B25C4F9AE02.roa (hash: hGESD+bTFhyy/XzxOz7JzM12GktK/1TWm0cZpyKC/pU=)
                          7: 85B13C3299CE11F087D1450FC4F9AE02.roa (hash: x1M/zagdNVIvwZQzDJ/coWbKF0sT48jPU3tB0Z3LiO8=)
                          8: 2379396E35DA11F08BAAE414C4F9AE02.roa (hash: wqvssZr8KniDppUjZkMFtJ/Vcm4eodrzwIwq5W5awEw=)
                          9: 0E33CCCADB0911F0A26F2FDC81D3641D.roa (hash: wRUqj1U1lm/c7GaruMVl1h/KaQXgprhVdKwDeDAwvxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
                          rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:52:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1653 (0x675)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
        Validity
            Not Before: Jul 26 23:52:35 2026 GMT
            Not After : Aug  2 23:52:35 2026 GMT
        Subject: CN=6a669dc3-0022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:95:0d:e0:1b:de:7f:d1:1a:d2:06:66:a0:38:
                    fb:2d:68:c5:63:1a:97:f1:57:61:79:ae:64:cb:83:
                    54:63:5b:8c:f4:ae:a7:de:bd:79:6d:f1:99:42:67:
                    26:dc:6a:41:27:45:22:48:c9:5b:2e:65:22:16:7c:
                    4b:cd:41:f0:c7:ea:40:3a:c3:5f:2a:08:05:e9:79:
                    a9:72:a2:e3:62:4e:f5:92:aa:45:74:24:7b:54:03:
                    80:77:5a:3d:33:cc:40:a6:77:9b:13:55:df:dc:67:
                    dc:7e:05:1c:eb:a8:84:8b:af:c0:45:5d:ca:e1:69:
                    ac:7b:2c:3c:97:c4:a4:9b:57:9a:36:0f:6e:f8:9d:
                    0a:a6:05:38:cd:5f:d0:27:9a:dd:c5:0d:58:ce:03:
                    1d:1c:22:73:f5:d6:39:14:97:62:c4:07:a2:b1:46:
                    85:c6:9d:44:7b:bb:1b:fa:0d:d5:aa:a8:3b:b8:c1:
                    f0:0d:b3:3a:a0:43:db:55:3d:a3:e8:97:58:07:83:
                    e5:cd:12:50:96:a8:11:cd:d7:49:fb:f4:cb:54:60:
                    d4:69:b8:5d:ea:fa:af:ab:61:96:11:82:da:c2:8e:
                    34:6c:c6:0d:4a:c2:25:3f:72:37:6d:b0:ed:90:ec:
                    74:b6:ad:a3:a9:18:13:e9:83:08:f0:1b:c9:c3:bb:
                    9c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:11:FD:A8:EA:A8:14:9D:62:3A:EE:71:0E:88:6D:77:73:84:AB:11
            X509v3 Authority Key Identifier:
                keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d3:d2:b2:86:21:46:9e:8d:ad:00:d8:28:da:2b:93:8c:16:
         6e:85:af:e8:e2:7a:69:da:be:73:fc:e1:28:51:f8:60:df:38:
         d0:a1:e2:fe:ae:a3:ef:9e:62:e2:5a:f7:f4:44:d5:d7:44:d6:
         1f:7a:85:56:18:0e:6c:03:a7:bb:87:fe:20:ab:6a:56:a6:12:
         03:a5:3a:ec:02:d9:53:fa:95:02:52:93:11:02:66:08:5e:f5:
         d3:16:07:d8:cf:3c:a6:e6:0e:31:4a:f9:3b:4e:4f:f0:d7:9c:
         fc:14:4b:68:f6:13:bd:37:4a:c7:0d:a2:b3:55:a1:64:e8:25:
         74:6f:db:6d:11:0a:c5:cf:61:d2:7b:dc:ed:10:dd:4b:cd:ee:
         95:4d:11:52:78:6a:aa:e0:6a:f5:8c:46:be:4a:9c:46:da:40:
         92:cb:a4:bb:b7:3f:f5:f4:cc:4a:c5:d9:be:c3:ac:29:af:5b:
         ae:30:21:f0:ac:25:0d:3b:8b:b9:e5:94:86:22:88:46:02:ae:
         45:ec:c4:e7:a7:f8:a6:a7:2c:b2:7a:7e:3a:80:d8:29:73:27:
         0a:a0:14:e8:d0:ff:b2:38:b6:29:8e:7e:2e:50:6f:8a:37:f5:
         82:ce:c4:2c:1d:a5:94:e5:49:63:4a:e2:7c:63:e3:60:10:ed:
         c1:65:c7:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0
MjQ5NjI5MUQwHhcNMjYwNzI2MjM1MjM1WhcNMjYwODAyMjM1MjM1WjAYMRYwFAYD
VQQDEw02YTY2OWRjMy0wMDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx5UN4Bvef9Ea0gZmoDj7LWjFYxqX8Vdhea5ky4NUY1uM9K6n3r15bfGZQmcm
3GpBJ0UiSMlbLmUiFnxLzUHwx+pAOsNfKggF6XmpcqLjYk71kqpFdCR7VAOAd1o9
M8xApnebE1Xf3GfcfgUc66iEi6/ARV3K4Wmseyw8l8Skm1eaNg9u+J0KpgU4zV/Q
J5rdxQ1YzgMdHCJz9dY5FJdixAeisUaFxp1Ee7sb+g3Vqqg7uMHwDbM6oEPbVT2j
6JdYB4PlzRJQlqgRzddJ+/TLVGDUabhd6vqvq2GWEYLawo40bMYNSsIlP3I3bbDt
kOx0tq2jqRgT6YMI8BvJw7ucfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP4R/ajq
qBSdYjrucQ6IbXdzhKsRMB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC
RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL
UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NUQyNS82N0YyQjBEODBCRDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9j
VC1hZlk2VEtwdHBDU1dLUjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACtPSsoYhRp6NrQDYKNork4wWboWv6OJ6adq+c/zhKFH4YN840KHi/q6j755i
4lr39ETV10TWH3qFVhgObAOnu4f+IKtqVqYSA6U67ALZU/qVAlKTEQJmCF710xYH
2M88puYOMUr5O05P8Nec/BRLaPYTvTdKxw2is1WhZOgldG/bbREKxc9h0nvc7RDd
S83ulU0RUnhqquBq9YxGvkqcRtpAksuku7c/9fTMSsXZvsOsKa9brjAh8KwlDTuL
ueWUhiKIRgKuRezE56f4pqcssnp+OoDYKXMnCqAU6ND/sji2KY5+LlBvijf1gs7E
LB2llOVJY0rifGPjYBDtwWXHFw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:10:45 2026 by rpki-client