Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
File:                     WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft (raw, json)
Hash identifier:          /PGKXPl3NNOWD0QE2ZCQ/FA9WJQ4ZtZEB7Gt2NWFsSg=
Subject key identifier:   CB:41:35:E1:05:18:03:A2:52:DA:99:E1:20:D5:F3:A6:F8:42:00:46
Authority key identifier: 58:EE:E5:2D:2A:E0:92:EC:55:86:E0:70:E6:46:2C:36:35:0F:A6:E1
Certificate issuer:       /CN=A914A75A/serialNumber=58EEE52D2AE092EC5586E070E6462C36350FA6E1
Certificate serial:       F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
Manifest number:          F2
Signing time:             Sat 13 Jun 2026 06:25:16 +0000
Manifest this update:     Sat 13 Jun 2026 06:25:16 +0000
Manifest next update:     Sat 20 Jun 2026 06:25:16 +0000
Files and hashes:         1: WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl (hash: cecHJ4x8BjGg31GorGJ8LEbXe7ogn5C1aOwuBoxVrBw=)
                          2: D56D67B0F48711EFBB2D9D73C4F9AE02.roa (hash: csaBSpZzq59GMLhCxwkq41kKwaXSwMxp+Vf9tiYrdrg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl
                          rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:25:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A75A, serialNumber=58EEE52D2AE092EC5586E070E6462C36350FA6E1
        Validity
            Not Before: Jun 13 06:25:16 2026 GMT
            Not After : Jun 20 06:25:16 2026 GMT
        Subject: CN=6a2cf7cc-6e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d1:d4:c0:1f:a6:35:89:0c:cc:f4:a1:2d:6b:
                    bd:32:ee:03:d4:59:fb:b2:99:91:ec:71:8f:d7:e7:
                    73:da:6f:78:72:28:d4:01:f5:4a:3c:f5:5f:7c:57:
                    40:f7:51:02:f4:29:cc:57:eb:52:20:57:de:94:76:
                    31:01:ac:5c:90:3a:cc:b7:30:1e:61:1d:f1:7f:b8:
                    e0:c5:64:1c:7d:7d:ff:f1:a0:0a:d6:ed:6b:e3:d7:
                    32:72:37:9f:e9:9f:17:cb:6f:f2:e3:91:08:4c:4b:
                    18:2e:6a:6b:0b:47:51:2a:03:e7:5d:d4:c6:c0:d6:
                    dc:d3:b0:06:8a:a6:0d:78:96:f9:18:b2:62:7f:78:
                    0b:cf:ea:10:45:6d:a3:53:a2:0d:9e:a6:7d:1f:8c:
                    cc:25:35:82:62:cf:7c:cd:dc:90:09:7f:c7:bd:b4:
                    59:b8:e2:e8:0f:58:0f:76:cb:24:64:00:c6:ca:97:
                    6c:a7:a8:60:44:2d:0b:8b:20:05:67:3a:41:7d:bb:
                    1c:87:77:17:05:98:c4:c4:63:30:83:77:ff:65:cf:
                    f8:89:1b:b8:e2:d1:b6:d0:92:7f:c4:13:08:4d:3c:
                    a7:1b:53:e9:ba:f9:7d:e3:ab:25:82:21:1c:f3:4e:
                    aa:9e:48:30:5f:d1:e8:16:28:94:df:16:ad:cf:3c:
                    0d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:41:35:E1:05:18:03:A2:52:DA:99:E1:20:D5:F3:A6:F8:42:00:46
            X509v3 Authority Key Identifier:
                keyid:58:EE:E5:2D:2A:E0:92:EC:55:86:E0:70:E6:46:2C:36:35:0F:A6:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:70:8e:ed:a3:82:31:7b:e2:e1:78:9e:83:27:e2:42:96:08:
         22:30:21:79:da:d7:22:8a:35:f9:30:48:76:1b:b6:60:a7:2d:
         23:94:e5:06:d2:9f:8b:de:51:d1:b5:01:e4:33:e7:5f:40:d3:
         c6:5d:79:fc:d0:0d:ef:01:99:b6:9b:cf:6f:85:ad:28:9b:b5:
         3b:ad:10:23:15:41:13:b6:f6:06:85:0d:c1:c8:cf:12:9a:36:
         d7:3b:56:e9:93:e1:e9:eb:2a:d1:70:dd:a1:ad:98:ec:43:10:
         58:e6:a3:95:c4:e3:f0:92:5f:65:83:46:f7:76:f0:c3:8e:8c:
         6f:ab:ef:08:9d:14:fe:29:1b:bc:aa:02:a3:66:62:b7:75:9d:
         ed:73:ea:3a:ce:33:1d:d1:f5:b2:a3:29:7c:5b:3e:69:05:c1:
         1a:6d:8b:07:b1:5e:1d:44:76:ca:e7:ab:2f:16:d8:4d:09:b9:
         d3:01:f8:af:86:1a:e8:d0:33:33:7a:e8:48:5d:ee:77:69:e3:
         49:ed:85:a2:91:72:ed:0e:70:3c:f8:8e:dd:42:f0:89:35:09:
         9e:bd:09:b6:0d:67:94:c5:05:62:1e:50:01:8d:8e:62:ed:0a:
         85:78:09:15:a1:0e:7f:11:22:06:d2:fc:5f:85:08:ff:21:1d:
         27:4d:98:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:23:18 2026 by rpki-client