Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft
File:                     iNHJlOgQj8ClM99LuOLOjRxLnxc.mft (raw, json)
Hash identifier:          WwzDihl3G0M3LoNCZdESZJW7UmrswsZWjlCghjL30xU=
Subject key identifier:   BE:7F:DD:1B:6D:DA:B1:4F:3F:B7:EB:F6:73:84:43:DE:DB:33:8C:AC
Authority key identifier: 88:D1:C9:94:E8:10:8F:C0:A5:33:DF:4B:B8:E2:CE:8D:1C:4B:9F:17
Certificate issuer:       /CN=A911A702/serialNumber=88D1C994E8108FC0A533DF4BB8E2CE8D1C4B9F17
Certificate serial:       0732
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft
Manifest number:          0726
Signing time:             Sun 26 Jul 2026 22:45:22 +0000
Manifest this update:     Sun 26 Jul 2026 22:45:22 +0000
Manifest next update:     Sun 02 Aug 2026 22:45:22 +0000
Files and hashes:         1: iNHJlOgQj8ClM99LuOLOjRxLnxc.crl (hash: bphRZFQBRBQ0GAdRCxeekPRQxLT4ukd6KB4Bv4t9aE4=)
                          2: 6339493A516311ED90F04711C4F9AE02.roa (hash: IBX1v2b0T0V0Ud5osnlgdtt3fPLXZpBblbdSLyRReN8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.crl
                          rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 22:45:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1842 (0x732)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A702, serialNumber=88D1C994E8108FC0A533DF4BB8E2CE8D1C4B9F17
        Validity
            Not Before: Jul 26 22:45:22 2026 GMT
            Not After : Aug  2 22:45:22 2026 GMT
        Subject: CN=6a668e02-2f66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8f:83:03:54:c5:be:23:5b:ef:af:6a:69:f2:
                    58:0f:be:90:c1:fd:bd:0c:46:4d:90:05:40:33:d8:
                    00:b7:91:68:2e:b1:82:77:03:68:4f:bb:2d:3c:a6:
                    cb:b8:28:b4:75:90:f7:5d:ab:e6:34:3e:c0:69:2f:
                    af:24:10:ce:b0:10:76:e9:0e:4c:d6:7e:79:7e:d3:
                    f7:d7:a0:bc:04:cf:e4:d3:ea:e6:ed:94:16:48:9c:
                    2c:30:c2:76:e5:51:af:e6:90:b0:87:ca:5e:5b:53:
                    ee:14:5d:ac:b0:49:8d:fb:c9:72:6c:2d:8f:55:e0:
                    08:62:c9:83:7c:34:e4:d5:a1:63:8c:66:82:70:07:
                    89:1c:bf:24:2d:3b:95:60:47:0d:59:b2:33:4a:14:
                    66:9d:52:ce:5c:c2:fa:3a:b5:03:dd:13:b9:13:2b:
                    ea:e3:1f:a7:d9:a2:45:5b:e7:bf:12:0b:8e:89:a1:
                    c5:e3:65:79:67:45:38:24:4b:ae:63:db:9f:b4:56:
                    6a:a6:8a:01:8a:5e:a9:09:0b:4c:db:f7:b4:ec:ef:
                    05:10:3f:62:e3:6c:50:9e:73:e0:0c:17:03:79:0e:
                    cf:ba:26:29:27:28:b8:2e:02:42:04:40:bf:6b:c5:
                    7d:81:f6:3b:92:ee:60:c2:09:e4:ee:0e:e5:93:4c:
                    5f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7F:DD:1B:6D:DA:B1:4F:3F:B7:EB:F6:73:84:43:DE:DB:33:8C:AC
            X509v3 Authority Key Identifier:
                keyid:88:D1:C9:94:E8:10:8F:C0:A5:33:DF:4B:B8:E2:CE:8D:1C:4B:9F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:c9:8b:6b:57:f0:da:4e:46:66:42:2b:a1:ad:85:03:75:5d:
         bc:88:be:b3:b7:61:09:ae:c5:ca:aa:6e:8a:9a:4c:f3:7b:da:
         3f:e1:e7:d2:97:44:26:ff:ca:76:93:8b:dd:1e:7a:45:82:51:
         15:64:40:8a:8c:08:13:0b:20:0c:d6:e4:e0:b5:fd:98:ab:de:
         0b:ad:29:1b:82:30:28:7e:9e:c4:65:a2:26:d3:22:16:ed:87:
         e1:40:1c:aa:04:f5:91:13:97:2a:7f:f1:17:9d:be:35:f8:c5:
         49:5e:55:46:36:f8:de:b0:2c:a0:82:3a:19:16:81:fc:4c:6e:
         28:35:13:91:9a:7e:af:fc:75:ab:52:ad:16:83:f4:c3:80:84:
         4b:5c:39:22:81:72:3c:cc:ef:62:e6:63:41:e0:e6:33:dd:ae:
         bb:fd:b5:e4:83:6d:c3:6e:60:1e:65:0b:b0:f9:16:50:ed:70:
         19:a1:aa:90:b1:c4:b2:71:cb:64:19:1e:b8:c0:50:bb:c7:d2:
         c7:ce:9e:92:b3:2f:66:99:2d:7c:62:6b:f4:04:8d:44:f2:2e:
         a7:95:5f:6b:27:dc:cf:d6:01:bd:0d:bf:69:5a:cb:28:c0:9f:
         62:1b:ff:f1:5e:fc:eb:f1:76:c8:29:e8:3a:f8:1f:53:d7:53:
         25:64:96:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUE3MDIxMTAvBgNVBAUTKDg4RDFDOTk0RTgxMDhGQzBBNTMzREY0QkI4RTJDRThE
MUM0QjlGMTcwHhcNMjYwNzI2MjI0NTIyWhcNMjYwODAyMjI0NTIyWjAYMRYwFAYD
VQQDEw02YTY2OGUwMi0yZjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvo+DA1TFviNb769qafJYD76Qwf29DEZNkAVAM9gAt5FoLrGCdwNoT7stPKbL
uCi0dZD3XavmND7AaS+vJBDOsBB26Q5M1n55ftP316C8BM/k0+rm7ZQWSJwsMMJ2
5VGv5pCwh8peW1PuFF2ssEmN+8lybC2PVeAIYsmDfDTk1aFjjGaCcAeJHL8kLTuV
YEcNWbIzShRmnVLOXML6OrUD3RO5Eyvq4x+n2aJFW+e/EguOiaHF42V5Z0U4JEuu
Y9uftFZqpooBil6pCQtM2/e07O8FED9i42xQnnPgDBcDeQ7PuiYpJyi4LgJCBEC/
a8V9gfY7ku5gwgnk7g7lk0xfqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL5/3Rtt
2rFPP7fr9nOEQ97bM4ysMB8GA1UdIwQYMBaAFIjRyZToEI/ApTPfS7jizo0cS58X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTcwMi85MzlDQUUyQzhE
RDkxMUVCOEVGQjQxNThDNEY5QUUwMi9pTkhKbE9nUWo4Q2xNOTlMdU9MT2pSeExu
eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lOSEpsT2dRajhDbE05OUx1T0xPalJ4TG54Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QTcwMi85MzlDQUUyQzhERDkxMUVCOEVGQjQxNThDNEY5QUUwMi9pTkhKbE9nUWo4
Q2xNOTlMdU9MT2pSeExueGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWMmLa1fw2k5GZkIroa2FA3VdvIi+s7dhCa7FyqpuippM83vaP+Hn0pdEJv/K
dpOL3R56RYJRFWRAiowIEwsgDNbk4LX9mKveC60pG4IwKH6exGWiJtMiFu2H4UAc
qgT1kROXKn/xF52+NfjFSV5VRjb43rAsoII6GRaB/ExuKDUTkZp+r/x1q1KtFoP0
w4CES1w5IoFyPMzvYuZjQeDmM92uu/215INtw25gHmULsPkWUO1wGaGqkLHEsnHL
ZBkeuMBQu8fSx86ekrMvZpktfGJr9ASNRPIup5Vfayfcz9YBvQ2/aVrLKMCfYhv/
8V786/F2yCnoOvgfU9dTJWSWWA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:17 2026 by rpki-client