Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/w_j84WKhBVhiY3nowBlzKiQ-Y0k.mft
File:                     w_j84WKhBVhiY3nowBlzKiQ-Y0k.mft (raw, json)
Hash identifier:          qaZugFJ7dJ/7wVPwtXzaVNsAD0Ql9lOkk+VtANHd3OE=
Subject key identifier:   B3:E8:A9:29:3B:F0:F7:8B:DA:E1:D3:02:E7:68:4A:1F:EA:A3:CC:98
Authority key identifier: C3:F8:FC:E1:62:A1:05:58:62:63:79:E8:C0:19:73:2A:24:3E:63:49
Certificate issuer:       /CN=A91557F2/serialNumber=C3F8FCE162A10558626379E8C019732A243E6349
Certificate serial:       0227
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w_j84WKhBVhiY3nowBlzKiQ-Y0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/w_j84WKhBVhiY3nowBlzKiQ-Y0k.mft
Manifest number:          09E4
Signing time:             Sun 26 Jul 2026 22:06:23 +0000
Manifest this update:     Sun 26 Jul 2026 22:06:22 +0000
Manifest next update:     Sun 02 Aug 2026 22:06:22 +0000
Files and hashes:         1: w_j84WKhBVhiY3nowBlzKiQ-Y0k.crl (hash: 0PvT2ZhBbPZT3wOCL88sz24FnfFh6MIn9yARtMEiSbg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/w_j84WKhBVhiY3nowBlzKiQ-Y0k.crl
                          rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/w_j84WKhBVhiY3nowBlzKiQ-Y0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w_j84WKhBVhiY3nowBlzKiQ-Y0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 22:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 551 (0x227)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91557F2, serialNumber=C3F8FCE162A10558626379E8C019732A243E6349
        Validity
            Not Before: Jul 26 22:06:22 2026 GMT
            Not After : Aug  2 22:06:22 2026 GMT
        Subject: CN=6a6684df-6efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bb:d4:b4:d6:6b:bb:ab:59:e2:6c:f1:08:e6:
                    9f:6d:b1:0b:d6:60:54:fe:75:e7:35:1f:8d:00:8e:
                    14:53:b8:80:f4:5a:60:7b:10:a3:ce:65:27:43:6d:
                    6c:de:2f:12:89:73:5a:9f:73:b7:5f:42:33:c1:26:
                    5e:4d:71:7e:e3:bc:1b:be:c9:88:f0:77:98:2c:a9:
                    b3:65:5d:28:e9:f1:d3:dc:0f:51:87:05:a2:dd:3e:
                    ab:11:67:26:8c:a2:21:e0:34:01:9d:95:df:ed:2f:
                    b7:6e:95:6a:d5:99:fd:41:5e:4d:c9:35:02:09:14:
                    8a:60:07:f3:40:8c:80:42:0b:5f:65:a1:04:c0:4e:
                    50:5b:65:a0:58:87:0c:57:90:c5:a4:9e:1b:a7:3d:
                    b2:91:b9:dc:48:c1:29:36:53:38:c7:8a:ae:f2:a4:
                    79:0b:46:31:8f:ac:ac:23:97:7b:33:48:fb:84:c7:
                    66:55:c6:00:b6:04:67:22:12:89:58:f3:ef:99:18:
                    4d:0d:f2:e6:20:f3:6e:d1:c6:fc:e1:17:35:d4:34:
                    81:ed:b4:a0:17:e3:43:e9:3e:a6:3c:74:e1:22:65:
                    c1:8b:28:ab:d0:93:d9:ba:d6:4a:b3:3e:57:c0:89:
                    72:80:5e:b0:0f:7f:18:92:dc:7d:b4:7d:f8:4d:12:
                    93:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E8:A9:29:3B:F0:F7:8B:DA:E1:D3:02:E7:68:4A:1F:EA:A3:CC:98
            X509v3 Authority Key Identifier:
                keyid:C3:F8:FC:E1:62:A1:05:58:62:63:79:E8:C0:19:73:2A:24:3E:63:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/w_j84WKhBVhiY3nowBlzKiQ-Y0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w_j84WKhBVhiY3nowBlzKiQ-Y0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/w_j84WKhBVhiY3nowBlzKiQ-Y0k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:72:d5:cd:fb:83:eb:c0:20:30:1d:69:6b:e0:3d:25:da:41:
         0a:e2:8c:af:46:32:de:d5:c7:1f:13:1f:ca:54:e3:64:fa:56:
         df:01:df:07:70:3f:39:7b:37:d5:49:51:49:fb:07:1f:85:56:
         83:86:ae:b1:e0:bb:58:cb:63:f3:f1:9f:d9:26:8b:df:4a:9f:
         55:95:98:ae:34:93:af:08:ad:d0:0d:72:76:be:59:93:51:41:
         c0:a3:00:f0:e6:3a:fc:1e:7c:79:2f:69:eb:d2:1a:d2:a2:d9:
         f4:cd:6c:5f:45:84:ed:af:73:ad:b7:06:21:d5:31:3e:ff:d6:
         24:92:54:5f:b8:e8:68:9b:b1:11:12:8a:34:bd:76:c4:31:78:
         f9:d5:bc:26:8a:9b:91:12:24:d4:86:c0:a2:35:15:4b:64:cb:
         19:9f:ce:19:17:d6:49:16:e5:1e:b2:0d:fa:a3:10:72:a8:bd:
         04:93:8c:7d:53:f5:fe:54:de:4d:e3:a3:42:e2:f9:43:e4:f0:
         34:e5:f9:df:89:6b:f5:53:e3:31:73:89:56:cc:90:b3:59:6e:
         44:5b:3f:ea:99:2e:16:3f:3e:7e:8a:c9:ca:54:cc:01:a1:1e:
         54:05:42:76:fb:13:87:2f:89:af:56:c4:97:51:fb:ea:f8:4a:
         df:23:66:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU3RjIxMTAvBgNVBAUTKEMzRjhGQ0UxNjJBMTA1NTg2MjYzNzlFOEMwMTk3MzJB
MjQzRTYzNDkwHhcNMjYwNzI2MjIwNjIyWhcNMjYwODAyMjIwNjIyWjAYMRYwFAYD
VQQDEw02YTY2ODRkZi02ZWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxrvUtNZru6tZ4mzxCOafbbEL1mBU/nXnNR+NAI4UU7iA9FpgexCjzmUnQ21s
3i8SiXNan3O3X0IzwSZeTXF+47wbvsmI8HeYLKmzZV0o6fHT3A9RhwWi3T6rEWcm
jKIh4DQBnZXf7S+3bpVq1Zn9QV5NyTUCCRSKYAfzQIyAQgtfZaEEwE5QW2WgWIcM
V5DFpJ4bpz2ykbncSMEpNlM4x4qu8qR5C0Yxj6ysI5d7M0j7hMdmVcYAtgRnIhKJ
WPPvmRhNDfLmIPNu0cb84Rc11DSB7bSgF+ND6T6mPHThImXBiyir0JPZutZKsz5X
wIlygF6wD38Yktx9tH34TRKTZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLPoqSk7
8PeL2uHTAudoSh/qo8yYMB8GA1UdIwQYMBaAFMP4/OFioQVYYmN56MAZcyokPmNJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdGMi8yMzM1MDRBNDRG
Q0MxMUVCOURCRTdGNURDNEY5QUUwMi93X2o4NFdLaEJWaGlZM25vd0JsektpUS1Z
MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dfajg0V0toQlZoaVkzbm93Qmx6S2lRLVkway5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTdGMi8yMzM1MDRBNDRGQ0MxMUVCOURCRTdGNURDNEY5QUUwMi93X2o4NFdLaEJW
aGlZM25vd0JsektpUS1ZMGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALHLVzfuD68AgMB1pa+A9JdpBCuKMr0Yy3tXHHxMfylTjZPpW3wHfB3A/OXs3
1UlRSfsHH4VWg4auseC7WMtj8/Gf2SaL30qfVZWYrjSTrwit0A1ydr5Zk1FBwKMA
8OY6/B58eS9p69Ia0qLZ9M1sX0WE7a9zrbcGIdUxPv/WJJJUX7joaJuxERKKNL12
xDF4+dW8JoqbkRIk1IbAojUVS2TLGZ/OGRfWSRblHrIN+qMQcqi9BJOMfVP1/lTe
TeOjQuL5Q+TwNOX534lr9VPjMXOJVsyQs1luRFs/6pkuFj8+forJylTMAaEeVAVC
dvsThy+Jr1bEl1H76vhK3yNmig==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:45:07 2026 by rpki-client