Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
File:                     wS8PVy2jONITRB7wfKUR0anIm20.mft (raw, json)
Hash identifier:          uVe29QDzK9Mu7KUBJChqI7sFKEyHV0OzcaBexc+PYGs=
Subject key identifier:   08:F9:79:BC:F4:35:62:4F:7C:4F:20:1B:E9:53:52:F7:A4:F7:19:76
Authority key identifier: C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D
Certificate issuer:       /CN=A916CA70/serialNumber=C12F0F572DA338D213441EF07CA511D1A9C89B6D
Certificate serial:       088A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
Manifest number:          0881
Signing time:             Tue 28 Jul 2026 21:07:14 +0000
Manifest this update:     Tue 28 Jul 2026 21:07:13 +0000
Manifest next update:     Tue 04 Aug 2026 21:07:13 +0000
Files and hashes:         1: wS8PVy2jONITRB7wfKUR0anIm20.crl (hash: KsYXI8hItoXhPKvONAdmO2T/9htR1z6uoyQDqS7OK3s=)
                          2: 1E4394CC03AC11EBBA025F2BC4F9AE02.roa (hash: BMSY5fq6KZKrb45yJ074fWZzYymnjf99nujloWmOdaU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.crl
                          rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2186 (0x88a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CA70, serialNumber=C12F0F572DA338D213441EF07CA511D1A9C89B6D
        Validity
            Not Before: Jul 28 21:07:13 2026 GMT
            Not After : Aug  4 21:07:13 2026 GMT
        Subject: CN=6a691a01-5bf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3b:bc:21:06:de:bd:19:72:b1:ae:b9:f0:03:
                    d2:0e:86:43:fb:aa:5c:fd:52:6f:29:66:38:d9:35:
                    1f:dd:4a:61:ea:54:3b:bd:4c:ba:36:8e:33:f2:d0:
                    77:31:42:0e:6a:6f:22:89:63:be:b5:df:21:75:0b:
                    17:6e:cb:e4:38:20:60:d9:6c:7f:4d:b0:66:9e:d2:
                    a4:9e:05:06:13:d3:ee:52:05:1c:81:5e:9d:3a:f7:
                    ee:a4:7d:c1:a7:36:95:9f:52:74:df:e5:0d:35:6e:
                    90:e2:f4:95:db:8b:e1:a6:c9:0b:f5:d7:f9:6b:cb:
                    0c:f4:2f:51:39:9b:3b:96:19:d9:67:cc:86:0d:8b:
                    a1:5c:cb:2a:58:b5:a7:d6:73:80:9f:2b:64:c0:a3:
                    5c:57:0c:01:bb:08:4c:d4:17:6c:ec:0e:3e:c8:cf:
                    60:11:f0:a0:b8:6d:58:de:63:60:2d:9a:ec:19:20:
                    73:61:95:3c:8c:aa:4d:42:f4:e6:1a:0b:ff:6c:88:
                    05:d6:70:e4:c2:0c:0a:14:73:d8:c4:a3:6c:94:c2:
                    68:41:09:18:67:96:be:02:c9:2e:94:a5:6b:2d:5e:
                    94:63:9d:2e:4e:19:ec:2e:77:c0:54:5d:db:45:96:
                    4d:3a:b8:0c:e9:23:c0:5a:9b:0c:44:e5:21:d0:eb:
                    2f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F9:79:BC:F4:35:62:4F:7C:4F:20:1B:E9:53:52:F7:A4:F7:19:76
            X509v3 Authority Key Identifier:
                keyid:C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:af:86:c3:c6:72:38:f5:38:58:dc:60:6b:31:33:9f:e5:50:
         01:f3:b7:89:6d:44:44:44:7c:4f:b8:88:eb:05:b1:9d:a8:e7:
         2d:f2:0d:40:c9:05:36:95:ef:3a:a7:5f:01:22:9a:3d:41:82:
         39:ad:70:9d:0b:d3:a2:92:a5:88:88:e9:ee:65:a6:ee:7d:89:
         b4:e5:5d:2a:c0:c7:d5:9f:a6:0a:60:76:d6:88:d5:7f:18:51:
         a3:75:35:75:38:8c:44:9c:a4:31:8d:6e:58:41:e8:cf:e2:6f:
         8a:47:87:55:f5:37:c2:d1:4e:91:16:31:75:55:70:b8:24:88:
         cd:04:4a:8c:4b:ed:e5:a8:82:cf:9c:08:a6:5b:95:84:6d:8b:
         60:3f:83:e0:47:2f:b6:c7:01:69:92:9f:81:db:c9:36:93:e9:
         8e:4f:06:3e:1e:2d:a5:77:18:fe:91:c2:65:d9:d7:a2:0b:e3:
         04:2b:03:3c:60:e2:f9:11:4a:db:91:a4:26:ef:5b:60:9f:1f:
         da:2e:a3:06:00:8f:26:f8:aa:36:ff:52:1d:da:4a:bc:18:78:
         52:24:98:58:a4:3c:a6:a7:15:41:ad:4c:e7:5b:0c:96:6a:56:
         a8:36:ce:63:6b:6c:36:e8:0f:c2:49:b8:ed:19:e5:8e:c5:9d:
         10:31:48:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:14:49 2026 by rpki-client