Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft
File:                     4xZnlgSAzwfjwi15DeTiAe9wQNs.mft (raw, json)
Hash identifier:          SX37e+SD/y2DZ0Xh8jcfKFFWAG/7BVngA2ufKWJpgqo=
Subject key identifier:   12:79:6F:9C:C6:E4:E0:22:3D:FC:CB:26:3F:2C:00:1B:D5:86:7D:FB
Authority key identifier: E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB
Certificate issuer:       /CN=A911B310/serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB
Certificate serial:       029D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft
Manifest number:          028D
Signing time:             Mon 27 Jul 2026 03:11:39 +0000
Manifest this update:     Mon 27 Jul 2026 03:11:38 +0000
Manifest next update:     Mon 03 Aug 2026 03:11:38 +0000
Files and hashes:         1: 4xZnlgSAzwfjwi15DeTiAe9wQNs.crl (hash: 6qbRO9FU+FNQoVV20Zyay/RQpRZNs36FnK5kj5bHDpA=)
                          2: 0ADA583C5DB911F0A54D4C6FC4F9AE02.roa (hash: vtHqwtSvpKd0UZw+IVp/WFTlhLrYLk265RmDqE6z7KQ=)
                          3: 0BBC997C5DB911F0A54D4C6FC4F9AE02.roa (hash: wtwpRqnqeYQSTF5tuYeTMKBYPSpu+aJ0HfsSDYw4/oQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl
                          rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:11:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 669 (0x29d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B310, serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB
        Validity
            Not Before: Jul 27 03:11:38 2026 GMT
            Not After : Aug  3 03:11:38 2026 GMT
        Subject: CN=6a66cc6a-fc53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ae:c2:2b:0b:94:8a:c1:9d:76:29:81:ff:50:
                    b3:e6:2c:4b:dd:73:a1:94:80:eb:af:fc:d1:ba:39:
                    3d:db:b9:ae:1a:37:19:86:df:d1:43:f4:6e:ae:cc:
                    3a:57:f5:53:87:59:62:af:e6:d2:dd:25:ab:48:88:
                    38:0d:8f:78:05:5f:10:7f:1d:f5:f1:8c:d7:a0:be:
                    6f:14:e7:fc:17:7e:17:5e:c7:6f:01:41:fe:a1:31:
                    97:8f:e7:8a:06:66:42:d2:05:fb:0b:2b:da:d5:46:
                    51:f9:f4:9b:db:9c:42:94:74:c2:e3:62:98:9f:b3:
                    20:35:b4:fe:a6:bd:ec:91:37:27:e1:49:b4:72:bb:
                    41:cf:07:3e:bb:5b:77:67:e5:24:f2:f5:19:34:ad:
                    1c:67:b9:4c:90:6d:3f:61:52:71:9a:5e:e9:d2:01:
                    6f:7d:a5:2d:ff:38:43:91:2d:f4:f3:5b:99:21:19:
                    f8:98:d6:ac:ca:4f:e5:8e:ef:58:8e:2b:e1:f5:65:
                    7f:ac:b3:fd:87:33:2d:7b:dd:0d:59:aa:0f:eb:b8:
                    87:aa:08:9a:bd:d2:c5:41:d3:f2:5d:52:86:26:e0:
                    e7:e4:f5:2b:62:4d:e6:f5:0a:75:80:f1:d3:75:e0:
                    07:6c:d4:56:c8:35:f6:d9:a2:83:2b:12:07:98:d9:
                    ec:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:79:6F:9C:C6:E4:E0:22:3D:FC:CB:26:3F:2C:00:1B:D5:86:7D:FB
            X509v3 Authority Key Identifier:
                keyid:E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:d0:7d:17:21:7c:17:21:05:6b:b3:8a:ff:fa:dd:96:d6:e2:
         8e:9e:f5:72:66:96:60:11:d2:c4:cb:45:8c:23:4a:37:2d:89:
         ee:90:bf:11:e5:3b:69:dd:3e:11:df:56:d1:78:ad:c7:19:bd:
         cc:a9:d4:8d:af:5f:cf:af:4f:eb:38:e6:f1:ce:c4:f2:57:28:
         a6:79:9b:ad:b6:64:a4:bf:d7:6e:df:9b:6a:50:bb:2b:1d:2d:
         db:7d:22:70:9e:14:79:bd:1f:ae:37:0b:c1:d3:3f:b1:e7:c5:
         59:19:72:38:e9:27:04:c2:f6:3b:eb:49:56:a3:31:5d:fd:da:
         0d:bb:94:4f:07:0a:00:9c:07:98:58:10:79:71:0a:65:d0:f2:
         44:eb:49:6f:d2:20:1c:ce:fb:1f:0f:c7:3a:2b:65:b6:4b:8e:
         84:c4:fd:6f:ad:1d:d9:4d:e8:cf:c4:2f:41:f9:0e:73:f8:83:
         ce:35:d7:ff:53:82:16:2b:70:82:b1:f0:20:de:67:76:d8:60:
         30:ab:71:58:f7:bf:b5:48:50:37:ee:1e:9b:9a:38:6c:10:e0:
         c0:7b:8c:21:40:a7:fa:a0:2e:5a:ff:bd:5a:8a:c8:13:34:a2:
         d5:97:fa:c1:3e:c9:86:8b:cb:ee:e3:ac:25:f7:a4:7d:40:db:
         0c:71:12:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUIzMTAxMTAvBgNVBAUTKEUzMTY2Nzk2MDQ4MENGMDdFM0MyMkQ3OTBERTRFMjAx
RUY3MDQwREIwHhcNMjYwNzI3MDMxMTM4WhcNMjYwODAzMDMxMTM4WjAYMRYwFAYD
VQQDEw02YTY2Y2M2YS1mYzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxK7CKwuUisGddimB/1Cz5ixL3XOhlIDrr/zRujk927muGjcZht/RQ/Rursw6
V/VTh1lir+bS3SWrSIg4DY94BV8Qfx318YzXoL5vFOf8F34XXsdvAUH+oTGXj+eK
BmZC0gX7Cyva1UZR+fSb25xClHTC42KYn7MgNbT+pr3skTcn4Um0crtBzwc+u1t3
Z+Uk8vUZNK0cZ7lMkG0/YVJxml7p0gFvfaUt/zhDkS3081uZIRn4mNasyk/lju9Y
jivh9WV/rLP9hzMte90NWaoP67iHqgiavdLFQdPyXVKGJuDn5PUrYk3m9Qp1gPHT
deAHbNRWyDX22aKDKxIHmNns9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBJ5b5zG
5OAiPfzLJj8sABvVhn37MB8GA1UdIwQYMBaAFOMWZ5YEgM8H48IteQ3k4gHvcEDb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjMxMC8zRUJEMTdDMkFE
MTAxMUVEODU0QTNFMURDNEY5QUUwMi80eFpubGdTQXp3Zmp3aTE1RGVUaUFlOXdR
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzR4Wm5sZ1NBendmandpMTVEZVRpQWU5d1FOcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QjMxMC8zRUJEMTdDMkFEMTAxMUVEODU0QTNFMURDNEY5QUUwMi80eFpubGdTQXp3
Zmp3aTE1RGVUaUFlOXdRTnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALdB9FyF8FyEFa7OK//rdltbijp71cmaWYBHSxMtFjCNKNy2J7pC/EeU7ad0+
Ed9W0Xitxxm9zKnUja9fz69P6zjm8c7E8lcopnmbrbZkpL/Xbt+balC7Kx0t230i
cJ4Ueb0frjcLwdM/sefFWRlyOOknBML2O+tJVqMxXf3aDbuUTwcKAJwHmFgQeXEK
ZdDyROtJb9IgHM77Hw/HOitltkuOhMT9b60d2U3oz8QvQfkOc/iDzjXX/1OCFitw
grHwIN5ndthgMKtxWPe/tUhQN+4em5o4bBDgwHuMIUCn+qAuWv+9WorIEzSi1Zf6
wT7JhovL7uOsJfekfUDbDHESHQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:19:06 2026 by rpki-client