Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft
File:                     WatjEmbskGVhP9Z3y9tP8TvvZEE.mft (raw, json)
Hash identifier:          mMZdY/kBi3yqZTHTrIqED09UcNi+XS3wTL3pMNrGrO0=
Subject key identifier:   42:2D:6A:A3:16:DC:74:F5:E5:B2:80:08:C8:21:47:BF:33:40:E6:EE
Authority key identifier: 59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41
Certificate issuer:       /CN=A9191010/serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441
Certificate serial:       1FE9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft
Manifest number:          1FE9
Signing time:             Tue 28 Jul 2026 16:04:07 +0000
Manifest this update:     Tue 28 Jul 2026 16:04:06 +0000
Manifest next update:     Tue 04 Aug 2026 16:04:06 +0000
Files and hashes:         1: WatjEmbskGVhP9Z3y9tP8TvvZEE.crl (hash: FAZTkXxlpX4GfiOpPGjD4VKcRr+eq7Etx+nWD03LfAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.crl
                          rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8169 (0x1fe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191010, serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441
        Validity
            Not Before: Jul 28 16:04:06 2026 GMT
            Not After : Aug  4 16:04:06 2026 GMT
        Subject: CN=6a68d2f6-902d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7a:af:63:24:d8:b9:0d:82:77:f6:42:c9:3f:
                    7a:a6:c2:d2:83:e9:fa:92:33:7b:1b:a8:2d:fd:6e:
                    b1:3f:d8:40:d2:c8:a3:2d:96:30:e6:18:30:25:06:
                    22:95:0a:ca:91:8c:84:92:a7:08:c7:1c:44:10:b0:
                    f5:d9:43:12:ca:cb:d8:23:6b:75:ed:55:21:b6:b4:
                    e0:50:9b:fc:a2:8b:23:f3:93:2e:44:19:9c:8c:5a:
                    ea:93:4c:f6:5c:bf:29:14:85:cb:45:72:d7:5f:ca:
                    7a:f6:36:6d:c1:f7:6e:cb:c1:bd:45:46:de:0b:30:
                    41:58:8e:1c:a9:11:79:32:a2:7f:1d:a4:11:9f:21:
                    dd:32:1f:46:f1:93:9a:24:5a:e4:9f:21:86:12:a6:
                    4e:b6:be:2e:03:27:51:62:c4:a9:74:66:76:17:67:
                    48:28:c9:e8:99:19:4f:a9:be:e1:da:ae:44:34:2c:
                    42:32:ff:f6:b9:09:4a:de:e8:15:e7:0f:35:f4:bd:
                    53:05:c9:69:00:b7:8a:3d:56:08:13:10:92:b7:57:
                    e6:78:85:76:0c:c0:10:f6:14:a5:cc:f2:d2:e1:e9:
                    92:09:33:42:05:62:09:cb:7b:35:03:33:07:51:12:
                    cb:7c:5f:aa:18:c1:33:02:a0:50:bb:07:16:dd:2a:
                    32:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:2D:6A:A3:16:DC:74:F5:E5:B2:80:08:C8:21:47:BF:33:40:E6:EE
            X509v3 Authority Key Identifier:
                keyid:59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a9:84:69:80:11:44:f8:d4:55:7c:00:6a:00:7f:e2:2f:2a:
         1a:17:04:dc:6c:76:a7:b5:18:b9:60:01:dc:df:80:1b:c5:62:
         40:24:de:9a:6e:d6:00:50:21:b9:32:47:f3:ba:46:68:d9:78:
         cb:04:aa:1b:1b:fd:cf:47:a1:06:28:43:b3:a5:27:98:c3:3f:
         bd:2c:68:16:21:06:11:64:a4:e8:b5:e2:5b:cc:1e:43:a6:90:
         1b:e9:d1:77:19:f1:48:55:c0:a7:a5:23:f2:35:b2:0d:92:e6:
         de:20:88:fc:a3:38:80:21:de:4c:81:93:cd:04:bf:0f:e8:39:
         c9:b3:8a:1c:df:24:77:3c:0b:d4:b0:61:7d:09:0d:36:25:1c:
         c7:7b:15:c2:31:a0:05:5a:3f:4c:c7:ad:ab:98:c5:71:67:c9:
         12:f5:a3:5b:d7:b4:4c:51:f1:14:67:ba:9f:e4:b4:00:d1:da:
         d3:f5:33:0e:be:d4:55:3d:7e:98:56:f0:0a:1c:63:bb:91:2b:
         14:91:5e:98:4a:a5:90:4c:2a:72:11:d0:5d:f2:46:f3:f5:a1:
         a2:08:4e:78:cc:8f:e8:a7:98:be:eb:d6:03:ff:56:3e:02:97:
         f2:22:8a:07:89:bd:d4:d0:3d:dd:0c:fd:7c:12:cd:be:f0:03:
         93:f4:d5:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICH+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTEwMTAxMTAvBgNVBAUTKDU5QUI2MzEyNjZFQzkwNjU2MTNGRDY3N0NCREI0RkYx
M0JFRjY0NDEwHhcNMjYwNzI4MTYwNDA2WhcNMjYwODA0MTYwNDA2WjAYMRYwFAYD
VQQDEw02YTY4ZDJmNi05MDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtXqvYyTYuQ2Cd/ZCyT96psLSg+n6kjN7G6gt/W6xP9hA0sijLZYw5hgwJQYi
lQrKkYyEkqcIxxxEELD12UMSysvYI2t17VUhtrTgUJv8oosj85MuRBmcjFrqk0z2
XL8pFIXLRXLXX8p69jZtwfduy8G9RUbeCzBBWI4cqRF5MqJ/HaQRnyHdMh9G8ZOa
JFrknyGGEqZOtr4uAydRYsSpdGZ2F2dIKMnomRlPqb7h2q5ENCxCMv/2uQlK3ugV
5w819L1TBclpALeKPVYIExCSt1fmeIV2DMAQ9hSlzPLS4emSCTNCBWIJy3s1AzMH
URLLfF+qGMEzAqBQuwcW3SoyGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEItaqMW
3HT15bKACMghR78zQObuMB8GA1UdIwQYMBaAFFmrYxJm7JBlYT/Wd8vbT/E772RB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAxMC8wOUU1Nzc0NDU1
NjgxMUU2QjMzMjk4NTVDNEY5QUUwMi9XYXRqRW1ic2tHVmhQOVozeTl0UDhUdnZa
RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dhdGpFbWJza0dWaFA5WjN5OXRQOFR2dlpFRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MTAxMC8wOUU1Nzc0NDU1NjgxMUU2QjMzMjk4NTVDNEY5QUUwMi9XYXRqRW1ic2tH
VmhQOVozeTl0UDhUdnZaRUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUKmEaYARRPjUVXwAagB/4i8qGhcE3Gx2p7UYuWAB3N+AG8ViQCTemm7WAFAh
uTJH87pGaNl4ywSqGxv9z0ehBihDs6UnmMM/vSxoFiEGEWSk6LXiW8weQ6aQG+nR
dxnxSFXAp6Uj8jWyDZLm3iCI/KM4gCHeTIGTzQS/D+g5ybOKHN8kdzwL1LBhfQkN
NiUcx3sVwjGgBVo/TMetq5jFcWfJEvWjW9e0TFHxFGe6n+S0ANHa0/UzDr7UVT1+
mFbwChxju5ErFJFemEqlkEwqchHQXfJG8/WhoghOeMyP6KeYvuvWA/9WPgKX8iKK
B4m91NA93Qz9fBLNvvADk/TVXg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:47:30 2026 by rpki-client