Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
File:                     rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft (raw, json)
Hash identifier:          wirPI8imkVuMtyRQg5k+zhxkfKCHqHtBplNkjVGVxO4=
Subject key identifier:   9E:1F:AC:11:13:41:39:70:D6:5E:3B:2F:4D:1F:CC:AF:0D:D8:36:92
Authority key identifier: AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45
Certificate issuer:       /CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145
Certificate serial:       114E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
Manifest number:          113C
Signing time:             Tue 28 Jul 2026 17:21:29 +0000
Manifest this update:     Tue 28 Jul 2026 17:21:29 +0000
Manifest next update:     Tue 04 Aug 2026 17:21:29 +0000
Files and hashes:         1: rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl (hash: OQjJ03UairX7vXKj4kiPSBqICNpBwjL7FCwSX0Bwpe4=)
                          2: 6B1B75BC756311EFB6C7E64CC4F9AE02.roa (hash: rroDeUW2w+byoF7eEZG3cyaaxjR2htn3+GDZHhSrHjg=)
                          3: CBAED530FE6A11ECAB640344C4F9AE02.roa (hash: xEpgs9EW6VJ0cW2siZLFxIERKuNtIAPU67VQP3joc6Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl
                          rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4430 (0x114e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120974, serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145
        Validity
            Not Before: Jul 28 17:21:29 2026 GMT
            Not After : Aug  4 17:21:29 2026 GMT
        Subject: CN=6a68e519-4ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6b:fd:af:93:a4:6b:b0:97:59:d6:3d:e4:1c:
                    d4:52:4f:03:27:be:1c:51:8f:37:0d:cf:67:e5:11:
                    74:b3:d0:54:54:bd:10:2f:85:9f:80:81:be:91:a1:
                    74:87:25:2b:6e:8e:47:8b:b9:82:98:b1:b2:f8:22:
                    ec:08:2f:27:0d:86:56:f1:2c:19:de:a3:39:be:80:
                    02:90:14:be:34:57:51:8e:37:22:b8:2c:ed:f5:d1:
                    02:8c:98:fc:ea:2c:e4:a5:65:36:e8:3d:71:a1:38:
                    a0:88:c9:f8:2c:91:b7:d1:d0:2a:8c:49:ff:05:a9:
                    bb:59:82:36:8e:e5:fc:ff:20:ad:93:12:a4:c5:19:
                    d9:70:5b:ea:ad:ab:f2:10:3e:63:dc:45:88:29:9d:
                    f0:69:39:1b:b5:31:96:97:c2:ed:2e:a0:80:02:5a:
                    8f:6f:1e:b8:aa:67:30:65:f7:f9:de:39:22:22:3e:
                    02:77:ff:63:d9:ef:94:83:62:3a:36:e1:4b:3b:c8:
                    a4:75:b4:98:07:13:a8:66:cb:a0:62:7e:40:1f:64:
                    c4:a9:b1:8f:37:88:e6:a5:a3:bb:05:5c:ba:f9:32:
                    3c:1a:a2:69:4a:5d:e0:1e:e7:1f:8b:66:8c:f7:64:
                    54:b6:29:90:0f:60:2f:52:0a:e8:06:24:bd:90:4e:
                    25:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1F:AC:11:13:41:39:70:D6:5E:3B:2F:4D:1F:CC:AF:0D:D8:36:92
            X509v3 Authority Key Identifier:
                keyid:AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f3:1c:ec:72:e5:e9:29:f2:a5:a3:0e:33:71:1b:af:56:19:
         2b:41:4f:f1:66:74:4c:77:e6:3c:4e:0f:3d:9c:65:91:49:d3:
         d6:6b:bc:87:e6:8a:c0:b4:cd:23:3e:5d:59:5f:ce:ea:2d:11:
         39:24:5c:c5:8a:17:32:d6:d4:8a:7f:6e:3e:a3:3e:78:29:b6:
         ce:37:26:4f:a4:98:60:43:aa:36:8b:a7:2e:9c:71:e7:cf:15:
         b5:2e:c2:d1:42:77:f2:e5:0e:c4:17:64:f8:d6:d6:14:f2:87:
         49:3c:b4:86:e2:09:96:61:24:3f:d8:7c:ab:1a:9b:94:7b:8b:
         27:99:4e:6d:e6:fa:b2:c1:60:ec:e5:09:75:5d:69:30:ab:79:
         c0:00:0b:68:7d:18:83:05:f0:10:79:6a:5e:f5:0e:64:47:0c:
         77:13:91:e4:04:7a:d8:8b:37:6d:c6:00:02:93:56:7a:e5:1d:
         64:72:29:44:69:e4:cd:db:5d:b7:80:c5:ee:b9:db:d1:8d:62:
         2b:4e:a1:ee:da:f1:78:70:03:69:bc:61:f0:52:56:81:ff:f7:
         35:12:f7:81:7c:29:83:6d:b9:b6:8d:90:fd:47:85:7f:02:4a:
         1a:b9:f5:c8:ac:c5:22:3a:77:7c:ba:e9:8b:c5:67:bb:9b:c5:
         0d:25:1d:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjA5NzQxMTAvBgNVBAUTKEFDODg2NDI2MzgyNEVERTM2NTVCOTk3NDJERkIzOUU4
ODNCQjkxNDUwHhcNMjYwNzI4MTcyMTI5WhcNMjYwODA0MTcyMTI5WjAYMRYwFAYD
VQQDEw02YTY4ZTUxOS00ZWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzGv9r5Oka7CXWdY95BzUUk8DJ74cUY83Dc9n5RF0s9BUVL0QL4WfgIG+kaF0
hyUrbo5Hi7mCmLGy+CLsCC8nDYZW8SwZ3qM5voACkBS+NFdRjjciuCzt9dECjJj8
6izkpWU26D1xoTigiMn4LJG30dAqjEn/Bam7WYI2juX8/yCtkxKkxRnZcFvqravy
ED5j3EWIKZ3waTkbtTGWl8LtLqCAAlqPbx64qmcwZff53jkiIj4Cd/9j2e+Ug2I6
NuFLO8ikdbSYBxOoZsugYn5AH2TEqbGPN4jmpaO7BVy6+TI8GqJpSl3gHucfi2aM
92RUtimQD2AvUgroBiS9kE4lEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ4frBET
QTlw1l47L00fzK8N2DaSMB8GA1UdIwQYMBaAFKyIZCY4JO3jZVuZdC37OeiDu5FF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9FMTA1QjNCQTNB
NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdlTmxXNWwwTGZzNTZJTzdr
VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3JJaGtKamdrN2VObFc1bDBMZnM1NklPN2tVVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MDk3NC9FMTA1QjNCQTNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdl
TmxXNWwwTGZzNTZJTzdrVVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAk/Mc7HLl6SnypaMOM3Ebr1YZK0FP8WZ0THfmPE4PPZxlkUnT1mu8h+aKwLTN
Iz5dWV/O6i0ROSRcxYoXMtbUin9uPqM+eCm2zjcmT6SYYEOqNounLpxx588VtS7C
0UJ38uUOxBdk+NbWFPKHSTy0huIJlmEkP9h8qxqblHuLJ5lObeb6ssFg7OUJdV1p
MKt5wAALaH0YgwXwEHlqXvUOZEcMdxOR5AR62Is3bcYAApNWeuUdZHIpRGnkzdtd
t4DF7rnb0Y1iK06h7trxeHADabxh8FJWgf/3NRL3gXwpg225to2Q/UeFfwJKGrn1
yKzFIjp3fLrpi8Vnu5vFDSUdMQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:13:13 2026 by rpki-client