Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
File:                     pWEUadKee9PIXTGAtycy6qt6-5Y.mft (raw, json)
Hash identifier:          Kv5kZ75WCYSfo5lxX2KzQNp3/ZS6vQDO15BfYBjwqV4=
Subject key identifier:   B8:7D:CB:1E:4C:C9:0F:A7:06:52:C0:8E:65:43:4B:23:D7:30:F1:91
Authority key identifier: A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96
Certificate issuer:       /CN=A9146BA1/serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96
Certificate serial:       049C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
Manifest number:          0494
Signing time:             Mon 27 Jul 2026 01:01:33 +0000
Manifest this update:     Mon 27 Jul 2026 01:01:33 +0000
Manifest next update:     Mon 03 Aug 2026 01:01:33 +0000
Files and hashes:         1: pWEUadKee9PIXTGAtycy6qt6-5Y.crl (hash: dL/IElw9c6+GG6tyUmvwRhxRD9kJYfKQtoVb0kZn9Rw=)
                          2: F67BB6E890AB11ECAB81252FC4F9AE02.roa (hash: 8pQQGYfUUBzCIciN0c19QppTw2ZQOUtkh3E6ZoV8hjY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl
                          rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1180 (0x49c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146BA1, serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96
        Validity
            Not Before: Jul 27 01:01:33 2026 GMT
            Not After : Aug  3 01:01:33 2026 GMT
        Subject: CN=6a66aded-a2e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cf:e1:3a:a2:26:b6:1b:59:bd:1b:66:65:d9:
                    55:8c:b6:86:f5:47:86:de:a9:48:00:0e:e6:5f:c9:
                    30:33:42:62:ab:eb:6a:0a:e1:b6:d6:8b:7a:60:8e:
                    e0:9a:e3:96:d2:fb:47:61:45:c3:07:23:e1:15:5a:
                    35:b8:e9:d9:5f:66:ff:21:02:b0:58:27:70:3a:ba:
                    6e:79:8b:4b:c8:db:fd:1e:97:07:6d:9d:34:8f:28:
                    87:b5:ef:76:74:b3:10:83:c9:ac:ae:ad:39:ff:e8:
                    e1:32:2e:87:a7:a6:70:be:15:ed:ff:e0:37:26:93:
                    99:7e:b7:41:4f:fc:b8:fb:1d:c9:25:cf:23:ae:4d:
                    02:f7:76:f0:39:97:a7:ce:f1:cb:2e:22:03:e7:b6:
                    2e:85:dd:43:af:9e:ad:43:d4:3c:c4:3b:e0:05:c1:
                    58:e3:7d:c6:04:63:49:16:f5:0c:74:22:7e:42:06:
                    dd:cd:f2:be:af:66:4c:e5:29:43:22:cf:2d:43:70:
                    b2:93:fa:40:35:a5:e4:33:d5:0c:1c:e3:cd:3e:b5:
                    d9:f6:6d:97:14:20:e9:d8:1e:2d:89:e9:2c:7e:6f:
                    10:b0:25:22:9b:d2:0d:a9:56:48:6e:0c:3a:58:d8:
                    56:18:82:c7:c5:42:9f:a0:8d:5e:1e:40:10:ba:8b:
                    ad:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7D:CB:1E:4C:C9:0F:A7:06:52:C0:8E:65:43:4B:23:D7:30:F1:91
            X509v3 Authority Key Identifier:
                keyid:A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:65:91:5c:82:67:91:38:fb:ea:92:fd:5a:92:19:a1:04:5f:
         40:b8:be:47:7e:ce:2d:99:82:e2:27:c0:da:6e:02:c7:d0:08:
         3c:53:09:e8:ab:74:1f:75:ed:7a:69:fe:7b:fd:ca:28:a5:02:
         3f:e3:48:1c:5c:8f:31:37:9a:14:95:6e:4f:46:de:6a:44:8c:
         4b:c8:15:cc:cb:d5:02:f6:09:c1:e0:e2:78:af:92:63:2f:18:
         57:89:33:33:00:21:6b:a3:6f:35:f7:be:30:9a:84:02:69:59:
         ed:d9:ce:89:60:e4:06:13:63:ed:78:1d:53:63:de:38:d5:73:
         cc:bc:42:05:68:21:00:ea:6e:f0:0a:3c:99:50:c0:26:0b:07:
         ed:84:28:1e:db:30:ce:52:f7:04:5d:a8:e8:14:3c:4d:c7:bc:
         da:c2:48:15:77:87:16:6f:50:32:b1:9a:62:bd:3d:2a:b5:1b:
         20:e4:40:50:99:ba:74:c5:fa:89:97:26:f3:25:45:67:2a:fa:
         3c:15:4b:56:6e:db:55:de:dd:ea:26:1e:12:02:be:2b:f0:95:
         63:00:30:ca:ea:85:c0:1c:d0:2f:ad:59:b4:e3:b1:ee:58:2c:
         6d:89:3f:48:06:db:ad:85:a6:1c:19:36:a6:ec:32:ff:a1:e8:
         28:ef:a3:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZCQTExMTAvBgNVBAUTKEE1NjExNDY5RDI5RTdCRDNDODVEMzE4MEI3MjczMkVB
QUI3QUZCOTYwHhcNMjYwNzI3MDEwMTMzWhcNMjYwODAzMDEwMTMzWjAYMRYwFAYD
VQQDEw02YTY2YWRlZC1hMmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAts/hOqImthtZvRtmZdlVjLaG9UeG3qlIAA7mX8kwM0Jiq+tqCuG21ot6YI7g
muOW0vtHYUXDByPhFVo1uOnZX2b/IQKwWCdwOrpueYtLyNv9HpcHbZ00jyiHte92
dLMQg8msrq05/+jhMi6Hp6ZwvhXt/+A3JpOZfrdBT/y4+x3JJc8jrk0C93bwOZen
zvHLLiID57Yuhd1Dr56tQ9Q8xDvgBcFY433GBGNJFvUMdCJ+QgbdzfK+r2ZM5SlD
Is8tQ3Cyk/pANaXkM9UMHOPNPrXZ9m2XFCDp2B4tieksfm8QsCUim9INqVZIbgw6
WNhWGILHxUKfoI1eHkAQuoutZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLh9yx5M
yQ+nBlLAjmVDSyPXMPGRMB8GA1UdIwQYMBaAFKVhFGnSnnvTyF0xgLcnMuqrevuW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkJBMS82M0I0RUE5ODkw
QTkxMUVDOTc2NUIyMkRDNEY5QUUwMi9wV0VVYWRLZWU5UElYVEdBdHljeTZxdDYt
NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BXRVVhZEtlZTlQSVhUR0F0eWN5NnF0Ni01WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NkJBMS82M0I0RUE5ODkwQTkxMUVDOTc2NUIyMkRDNEY5QUUwMi9wV0VVYWRLZWU5
UElYVEdBdHljeTZxdDYtNVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABGWRXIJnkTj76pL9WpIZoQRfQLi+R37OLZmC4ifA2m4Cx9AIPFMJ6Kt0H3Xt
emn+e/3KKKUCP+NIHFyPMTeaFJVuT0beakSMS8gVzMvVAvYJweDieK+SYy8YV4kz
MwAha6NvNfe+MJqEAmlZ7dnOiWDkBhNj7XgdU2PeONVzzLxCBWghAOpu8Ao8mVDA
JgsH7YQoHtswzlL3BF2o6BQ8Tce82sJIFXeHFm9QMrGaYr09KrUbIORAUJm6dMX6
iZcm8yVFZyr6PBVLVm7bVd7d6iYeEgK+K/CVYwAwyuqFwBzQL61ZtOOx7lgsbYk/
SAbbrYWmHBk2puwy/6HoKO+j0Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:42:53 2026 by rpki-client