Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
File:                     w7rY8KXaBY6fklA30EqnHJKLoXM.mft (raw, json)
Hash identifier:          Q4GNfO0LPGC4hnYMzkuNDEAeGC84D9LZMNn+GimV4fw=
Subject key identifier:   61:FA:4B:C4:15:8F:77:55:CE:E2:FA:16:00:15:E6:1C:EA:F9:B9:E5
Authority key identifier: C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73
Certificate issuer:       /CN=A9189265/serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173
Certificate serial:       1A6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
Manifest number:          1A60
Signing time:             Thu 16 Apr 2026 16:17:15 +0000
Manifest this update:     Thu 16 Apr 2026 16:17:15 +0000
Manifest next update:     Thu 23 Apr 2026 16:17:15 +0000
Files and hashes:         1: w7rY8KXaBY6fklA30EqnHJKLoXM.crl (hash: ZXMlUJm0/CqF4Dw3rXvaZP6ZyZjpEUEQ8O7JA5pu9CA=)
                          2: 885DA760AA8811E799348329C4F9AE02.roa (hash: OgMqHQ2yVMx+7d3BSt5zC2aY7l1q21WR4K+bA1B1tR4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl
                          rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6764 (0x1a6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189265, serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173
        Validity
            Not Before: Apr 16 16:17:15 2026 GMT
            Not After : Apr 23 16:17:15 2026 GMT
        Subject: CN=69e10b8b-4278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0a:69:6f:b6:7c:8e:97:88:d9:a0:af:46:3e:
                    f1:6f:63:f0:29:cd:f3:6e:d5:60:1a:85:9a:93:49:
                    2c:38:a5:0d:7d:77:5d:be:2e:2f:6e:ab:a0:f2:ab:
                    f1:47:1b:ec:90:f2:9a:33:da:36:1e:e0:ec:e0:24:
                    95:2a:c2:bb:2f:1d:5a:97:66:0c:08:42:fa:67:6b:
                    29:bd:a3:8b:a8:c9:26:20:74:c8:9c:72:bd:d9:9e:
                    07:0d:d2:2d:13:d4:10:36:34:0e:fc:19:ef:8e:74:
                    66:00:36:90:47:f9:ea:e8:f8:61:df:a1:70:9c:92:
                    d2:af:1d:19:a8:2d:65:5a:aa:f0:04:91:68:53:60:
                    67:0b:38:43:59:d9:a2:04:f8:fa:ec:99:46:38:d3:
                    78:c1:e3:62:a4:f4:0e:bd:db:b1:24:ec:03:ef:ef:
                    b6:d6:30:9c:02:45:d3:2a:62:7b:4f:7b:1f:68:88:
                    c8:46:ed:ed:d7:4a:a4:1a:ba:d6:2a:04:9f:4b:32:
                    64:6a:02:ba:46:04:4d:da:29:dd:29:9d:35:02:8f:
                    1b:7f:ef:cb:75:29:0b:50:cc:15:e0:4f:54:f0:2d:
                    cd:77:66:fa:7a:4c:4b:66:26:d2:b7:cb:4c:d7:b8:
                    85:56:a0:9f:5d:4c:ee:ba:f0:cd:8e:89:3f:09:a1:
                    fe:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FA:4B:C4:15:8F:77:55:CE:E2:FA:16:00:15:E6:1C:EA:F9:B9:E5
            X509v3 Authority Key Identifier:
                keyid:C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:21:a4:48:9e:1c:3f:a8:70:3f:6d:00:3a:59:bc:43:63:f8:
         24:4b:89:b7:0a:2d:b5:62:1d:fa:0f:2d:58:09:5a:95:c0:2c:
         5e:53:55:b7:a3:9b:d4:b8:14:99:bd:e5:e5:30:68:0a:50:f7:
         2c:81:70:23:04:71:ac:c6:98:ce:08:95:6d:2c:dd:2d:40:c8:
         ab:1b:a7:aa:88:6e:56:0a:7c:03:7d:4e:1e:fb:cc:ef:e5:60:
         32:a6:16:bb:73:ba:a7:44:22:a9:b1:de:89:17:0c:bc:11:67:
         bc:9b:18:28:2d:96:3c:9c:b3:c0:56:ae:9d:89:cc:4b:06:29:
         4b:bf:a2:58:e2:87:4a:09:e8:f5:ac:31:18:66:56:95:49:62:
         f9:63:8d:36:47:1e:16:09:3c:4d:cd:54:aa:18:2f:61:64:8f:
         c6:8b:1f:7e:fd:58:fc:a1:ae:3f:a1:fb:b0:3d:43:30:81:5a:
         c0:13:03:55:62:6f:db:f8:03:b0:75:28:d4:93:56:e7:0d:01:
         99:08:f1:2e:91:07:9e:04:92:af:d4:81:e8:17:ef:c9:5a:3d:
         f1:18:86:1d:18:11:9f:5d:8f:a9:fd:d1:04:58:d4:3c:ae:1b:
         03:19:43:09:0e:a2:64:b0:d0:6a:a2:00:9c:a0:74:45:7d:2b:
         53:e1:40:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:31:19 2026 by rpki-client