Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F429/0B0011E6371911F1A66BD9F8C6833773/oWI3sYMM0kApiKoLMKpnZDD2XCQ.mft
File:                     oWI3sYMM0kApiKoLMKpnZDD2XCQ.mft (raw, json)
Hash identifier:          Xk39z/cM//16B3X5EWGYcN/DSMqAhQKnpr9C6WlfF2w=
Subject key identifier:   54:4A:DB:4A:6D:E1:2B:A7:C4:58:63:46:2E:14:7D:30:A8:E7:E4:CB
Authority key identifier: A1:62:37:B1:83:0C:D2:40:29:88:AA:0B:30:AA:67:64:30:F6:5C:24
Certificate issuer:       /CN=A917F429/serialNumber=A16237B1830CD2402988AA0B30AA676430F65C24
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWI3sYMM0kApiKoLMKpnZDD2XCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F429/0B0011E6371911F1A66BD9F8C6833773/oWI3sYMM0kApiKoLMKpnZDD2XCQ.mft
Manifest number:          36
Signing time:             Mon 27 Jul 2026 10:56:09 +0000
Manifest this update:     Mon 27 Jul 2026 10:56:08 +0000
Manifest next update:     Mon 03 Aug 2026 10:56:08 +0000
Files and hashes:         1: oWI3sYMM0kApiKoLMKpnZDD2XCQ.crl (hash: pEI/YA5QwDAj0lHjRWA+QvVvhAHNoaT+7wC1qdbvk78=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F429/0B0011E6371911F1A66BD9F8C6833773/oWI3sYMM0kApiKoLMKpnZDD2XCQ.crl
                          rsync://rpki.apnic.net/member_repository/A917F429/0B0011E6371911F1A66BD9F8C6833773/oWI3sYMM0kApiKoLMKpnZDD2XCQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWI3sYMM0kApiKoLMKpnZDD2XCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:56:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F429, serialNumber=A16237B1830CD2402988AA0B30AA676430F65C24
        Validity
            Not Before: Jul 27 10:56:08 2026 GMT
            Not After : Aug  3 10:56:08 2026 GMT
        Subject: CN=6a673948-df90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c1:6d:d4:d3:45:67:18:76:fa:3b:7c:5f:41:
                    07:28:72:03:bc:be:ac:e7:bb:f6:ae:a8:0f:d1:1b:
                    ac:c0:4a:cd:29:7f:27:c7:55:93:c7:52:ca:9f:6e:
                    d8:fb:aa:a9:7c:fa:36:f9:e1:01:7a:eb:b6:18:b0:
                    b0:0e:d3:fd:c0:b3:f7:72:a1:c5:b4:c0:7b:b4:76:
                    d6:32:54:27:0e:6c:35:b7:4c:02:99:8c:55:8f:ff:
                    78:32:80:e7:b6:f8:ed:ee:6e:93:e5:22:42:1f:ca:
                    aa:c1:cc:c3:8a:d8:65:0f:8d:fe:6d:86:c1:5a:7a:
                    fc:61:3b:d0:5d:6f:85:ec:80:a5:8c:d5:62:88:42:
                    98:f1:bd:35:ba:f8:af:ca:1d:39:e4:ce:7d:96:dd:
                    90:5e:11:00:94:5a:d8:ec:7c:24:af:8f:2e:80:6e:
                    b0:b1:32:02:b0:e0:ce:71:13:96:23:c8:bb:34:f8:
                    fb:a6:2b:e8:b2:2e:f5:72:1b:31:3d:e7:37:ac:dc:
                    ae:15:fa:4e:93:90:de:f3:82:f6:56:91:ce:ba:99:
                    28:70:3c:9d:39:51:7b:14:3a:d6:fc:cb:cd:65:ec:
                    29:5d:c1:8b:ba:48:bf:79:da:ff:7c:3d:4f:9a:25:
                    ce:11:72:d1:34:88:3b:07:8e:b2:e5:50:9d:38:22:
                    b3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4A:DB:4A:6D:E1:2B:A7:C4:58:63:46:2E:14:7D:30:A8:E7:E4:CB
            X509v3 Authority Key Identifier:
                keyid:A1:62:37:B1:83:0C:D2:40:29:88:AA:0B:30:AA:67:64:30:F6:5C:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F429/0B0011E6371911F1A66BD9F8C6833773/oWI3sYMM0kApiKoLMKpnZDD2XCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWI3sYMM0kApiKoLMKpnZDD2XCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F429/0B0011E6371911F1A66BD9F8C6833773/oWI3sYMM0kApiKoLMKpnZDD2XCQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:6c:6a:82:9b:de:ce:3e:fc:e8:2a:11:53:5f:f3:b9:a6:57:
         c3:7f:f8:f9:61:96:ef:31:d3:27:bb:4a:72:e0:4b:3b:79:88:
         7c:c7:a5:50:29:f0:b6:5f:fe:7b:ae:0f:e4:f8:7f:a7:ec:91:
         05:fe:20:de:c3:2b:b9:5e:8d:71:ff:a2:49:94:22:64:f9:19:
         95:2b:f7:e8:dc:82:78:25:6e:3e:d0:37:1d:72:0c:35:f2:89:
         0e:6f:5e:53:df:e5:8d:41:ca:c0:83:83:74:57:64:2d:f1:a3:
         02:7a:28:3d:7f:b3:74:28:b1:55:4d:fb:01:be:01:57:4e:f0:
         ce:19:a3:a1:9a:70:02:e6:80:20:77:44:7e:a3:22:d5:96:be:
         2f:85:fb:ce:c6:e8:2b:66:a5:4c:55:1d:80:3a:53:c6:4a:90:
         4d:48:f2:de:f9:c0:6e:2c:93:8d:5e:f4:ee:7b:18:88:18:0d:
         d5:a0:71:89:b7:cc:b7:59:b5:c8:47:55:fc:28:bb:e5:02:e7:
         ec:42:e3:5c:35:98:b3:54:ca:b7:f8:52:a7:31:1c:be:8b:00:
         f5:d5:b9:c0:20:4c:92:cb:89:1e:48:6b:0d:66:49:48:f4:8c:
         b2:0e:f2:e6:2d:e3:e5:cf:aa:22:5f:ea:d6:2b:2a:32:de:61:
         5f:a9:7b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:31:16 2026 by rpki-client