Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF92B/DED15A084B5E11F1A31B6DE9AF833773/-w7kjrCDajqH89uEyQ0NmXQYO7w.mft
File:                     -w7kjrCDajqH89uEyQ0NmXQYO7w.mft (raw, json)
Hash identifier:          r9NZ0zCCnk4xx5XFdAg6kt/iSWc13E1VBeGqMc6fQOo=
Subject key identifier:   87:D3:4A:B5:8B:41:8F:11:CB:EA:69:C0:C6:64:77:7C:4A:B2:3F:53
Authority key identifier: FB:0E:E4:8E:B0:83:6A:3A:87:F3:DB:84:C9:0D:0D:99:74:18:3B:BC
Certificate issuer:       /CN=A91DF92B/serialNumber=FB0EE48EB0836A3A87F3DB84C90D0D9974183BBC
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-w7kjrCDajqH89uEyQ0NmXQYO7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF92B/DED15A084B5E11F1A31B6DE9AF833773/-w7kjrCDajqH89uEyQ0NmXQYO7w.mft
Manifest number:          14
Signing time:             Mon 15 Jun 2026 09:07:56 +0000
Manifest this update:     Mon 15 Jun 2026 09:07:56 +0000
Manifest next update:     Mon 22 Jun 2026 09:07:56 +0000
Files and hashes:         1: -w7kjrCDajqH89uEyQ0NmXQYO7w.crl (hash: 4/R9YiBWcPSqoQApdzeziGpphhtsArwq0o94tOA7z+c=)
                          2: 4B7CEF5A4B5F11F19135E42BB0833773.roa (hash: j9oLKt21URlcYaAs/2+sCC08EJUvzOERXy2T9IPR3BM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF92B/DED15A084B5E11F1A31B6DE9AF833773/-w7kjrCDajqH89uEyQ0NmXQYO7w.crl
                          rsync://rpki.apnic.net/member_repository/A91DF92B/DED15A084B5E11F1A31B6DE9AF833773/-w7kjrCDajqH89uEyQ0NmXQYO7w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-w7kjrCDajqH89uEyQ0NmXQYO7w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF92B, serialNumber=FB0EE48EB0836A3A87F3DB84C90D0D9974183BBC
        Validity
            Not Before: Jun 15 09:07:56 2026 GMT
            Not After : Jun 22 09:07:56 2026 GMT
        Subject: CN=6a2fc0ec-0ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:da:51:95:57:cd:fb:88:04:9e:bd:af:11:bb:
                    d2:3a:17:ac:16:30:42:e6:d1:33:ab:39:58:6d:81:
                    30:60:fd:55:83:e7:b3:4a:ca:cd:3b:1a:a1:c1:b5:
                    fb:3a:67:ff:3a:93:41:b3:1e:94:08:55:4f:24:90:
                    b8:98:71:8b:96:45:0e:a4:d1:9a:e4:27:0e:e2:92:
                    3d:6c:8e:c4:31:88:ff:e4:53:44:10:40:3a:4a:a7:
                    6a:f3:4a:00:e5:db:13:29:5a:b4:56:23:16:35:99:
                    cd:11:c1:72:e2:99:fc:f7:c5:e1:2b:9d:91:7a:1c:
                    bb:0a:b0:88:20:d6:34:f9:60:0e:8c:30:aa:07:0c:
                    2b:e0:3b:1d:45:21:57:6f:41:a9:d4:f0:97:02:b6:
                    c3:54:47:16:f9:9f:b4:d1:4c:bc:c3:e7:9b:db:5b:
                    fc:5b:51:af:2e:1b:a5:a2:cd:5c:c6:51:c1:21:74:
                    54:06:e8:eb:d2:d9:23:94:56:f0:59:df:1c:f4:fb:
                    6d:4e:2c:d8:5d:87:d2:86:5a:1d:4d:e7:d4:db:e4:
                    ef:10:32:17:8d:97:a8:5b:02:ef:c9:36:e8:30:c7:
                    8a:41:f9:58:fc:9e:31:95:f3:85:33:b5:fa:70:22:
                    10:a3:c2:4b:83:31:e4:67:7b:9b:ff:1f:95:9f:cb:
                    66:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D3:4A:B5:8B:41:8F:11:CB:EA:69:C0:C6:64:77:7C:4A:B2:3F:53
            X509v3 Authority Key Identifier:
                keyid:FB:0E:E4:8E:B0:83:6A:3A:87:F3:DB:84:C9:0D:0D:99:74:18:3B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF92B/DED15A084B5E11F1A31B6DE9AF833773/-w7kjrCDajqH89uEyQ0NmXQYO7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-w7kjrCDajqH89uEyQ0NmXQYO7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF92B/DED15A084B5E11F1A31B6DE9AF833773/-w7kjrCDajqH89uEyQ0NmXQYO7w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:a7:99:c6:8f:d7:cd:58:76:e9:af:87:63:62:27:eb:f2:34:
         11:6c:4e:e7:fa:46:51:e6:7e:c8:8c:3e:ca:d0:79:fd:0b:16:
         b2:29:34:88:b4:90:9e:0c:67:86:00:03:24:39:1e:2c:ff:8d:
         fe:f8:32:22:8f:d6:4a:89:f5:be:b8:a2:35:8b:09:20:b5:7d:
         4e:a2:65:56:1e:8f:a2:fb:19:46:a7:62:de:d6:fc:ea:c0:5b:
         1b:ef:a9:dc:e8:5a:bf:a5:a6:42:8b:cb:26:00:9c:72:3f:1f:
         cd:82:99:2c:2f:26:8c:46:7f:8c:6b:85:86:5f:e0:e9:c7:d9:
         5e:ff:69:d1:f0:51:7a:6b:b7:10:3f:88:04:75:fd:fd:aa:60:
         20:1b:37:73:4e:3f:bb:f1:45:b0:2e:c8:78:55:bb:a3:3f:21:
         f3:0c:b7:35:c8:14:db:d5:85:9b:2f:ce:82:6f:14:48:aa:9e:
         f1:1f:57:8a:0a:61:d1:5f:d2:91:e6:d1:12:d5:e5:e5:e0:a0:
         9b:1b:4a:35:3d:fc:35:47:06:8b:8b:03:8f:09:49:73:27:50:
         2b:6a:72:16:d2:a2:5c:f5:fd:d4:92:0f:4b:c4:76:bb:f7:6d:
         42:8c:ec:c2:96:2a:fa:ce:96:41:dc:16:12:4f:be:09:09:60:
         83:05:e9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:04:25 2026 by rpki-client