Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft
File:                     0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft (raw, json)
Hash identifier:          C3DTGJ5cD66XucZElI84YrGDcKzkwWgC2v5izSl+nvM=
Subject key identifier:   1F:D8:A7:37:43:1C:B1:84:FD:B0:83:00:C2:68:A1:17:7C:1A:73:64
Authority key identifier: D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD
Certificate issuer:       /CN=A9122219/serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD
Certificate serial:       0C14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft
Manifest number:          0C07
Signing time:             Sun 26 Jul 2026 19:13:13 +0000
Manifest this update:     Sun 26 Jul 2026 19:13:13 +0000
Manifest next update:     Sun 02 Aug 2026 19:13:13 +0000
Files and hashes:         1: 0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl (hash: wgFJJS4l1Yg7l13X9FRKRtfT0pvTCD/FzI+4Ax2K2ZQ=)
                          2: CD145D246E4E11EDBE02B065C4F9AE02.roa (hash: 5PMpMbiDvOrHyA2aZdrK2EqToeI6RWLqz3P1054gczc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl
                          rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 19:13:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3092 (0xc14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122219, serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD
        Validity
            Not Before: Jul 26 19:13:13 2026 GMT
            Not After : Aug  2 19:13:13 2026 GMT
        Subject: CN=6a665c49-ac6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2a:64:82:85:c5:9b:46:e5:66:db:ca:e3:92:
                    63:6f:e8:05:5b:ce:4e:3c:d4:ee:d8:24:d1:11:d9:
                    c2:50:a6:40:3c:cb:ac:91:9f:5a:0b:06:56:05:4b:
                    43:11:f9:4f:e7:a9:6f:39:ca:b4:a7:90:44:88:2a:
                    a8:b5:f5:39:96:83:4f:60:38:3e:da:23:7f:cc:cb:
                    e3:07:2e:94:04:77:1d:ea:37:1f:d0:14:3d:7d:58:
                    86:a1:ad:85:61:c3:6b:21:ba:5f:e4:01:ad:61:39:
                    4b:85:8f:ce:21:4f:c7:c9:13:bf:57:38:f6:86:bc:
                    a6:af:16:70:61:b8:a1:9e:97:90:1d:4c:4e:cd:9c:
                    5c:c2:1f:0a:8e:fe:b6:76:17:26:d2:76:0c:f1:e3:
                    65:55:5b:27:1a:1c:f6:75:ed:99:e6:38:43:9f:f5:
                    25:2d:62:c1:9f:61:7d:2f:1f:8f:cf:67:07:d7:5d:
                    1e:6f:e3:42:16:5b:7c:1c:4a:8c:c2:81:ef:ac:54:
                    cf:ab:2e:55:76:15:a0:b6:17:71:89:b5:6b:89:f2:
                    9a:f1:50:a6:d9:84:19:94:b3:cb:02:36:cc:96:05:
                    71:f0:fb:cd:2c:e8:e3:98:2b:54:dc:df:b5:d4:83:
                    0f:44:a4:d4:d1:94:b1:59:5d:f2:03:dd:40:93:9b:
                    6b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D8:A7:37:43:1C:B1:84:FD:B0:83:00:C2:68:A1:17:7C:1A:73:64
            X509v3 Authority Key Identifier:
                keyid:D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f5:6d:61:44:ce:bd:3b:fc:ff:c2:b7:b1:67:55:b7:11:b6:
         9c:9c:97:2e:b2:64:b2:39:2a:71:52:72:e0:b3:06:e4:3c:54:
         55:82:fb:1b:aa:e6:53:5f:02:6d:ae:0d:10:ed:b5:0c:64:42:
         f8:7e:d8:3e:4d:df:1c:cb:01:77:e2:62:09:e9:12:78:b6:35:
         50:7f:5b:a6:f8:3d:8c:85:25:bb:ac:90:4d:a0:64:0b:fe:97:
         2a:26:3c:23:fc:78:42:83:10:05:84:c0:02:c0:51:4e:5e:61:
         c1:83:23:c9:89:91:a1:51:2f:31:c1:5c:d8:bd:a0:bd:4c:6c:
         f0:2a:f9:3c:0b:d8:d8:dc:23:a1:21:0f:0f:4e:b7:ae:4e:0c:
         9f:ab:ea:8a:ef:50:04:04:ab:85:f8:07:82:84:51:d2:a0:00:
         6c:c4:e7:6e:ec:78:bb:7e:72:a6:cd:8a:00:41:33:ba:7d:8f:
         6e:f8:4f:cf:21:fe:9c:b5:d8:fd:be:ea:03:2a:16:80:ba:97:
         49:c8:fc:aa:3a:86:e0:42:01:c8:fa:62:3f:aa:0e:d7:f0:de:
         6e:aa:4e:aa:4e:a1:cc:bb:47:ee:c5:9b:a6:88:cd:be:15:f2:
         62:06:f2:95:59:6c:f2:c6:7b:fa:d9:03:f8:28:08:e5:bb:a5:
         46:1f:93:e8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjIyMTkxMTAvBgNVBAUTKEQwRDJGNDVBNDZEMjY3NjYwMTRCNzg2MDE5QTA5QTgz
MzQ4NzNEQUQwHhcNMjYwNzI2MTkxMzEzWhcNMjYwODAyMTkxMzEzWjAYMRYwFAYD
VQQDEw02YTY2NWM0OS1hYzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzypkgoXFm0blZtvK45Jjb+gFW85OPNTu2CTREdnCUKZAPMuskZ9aCwZWBUtD
EflP56lvOcq0p5BEiCqotfU5loNPYDg+2iN/zMvjBy6UBHcd6jcf0BQ9fViGoa2F
YcNrIbpf5AGtYTlLhY/OIU/HyRO/Vzj2hrymrxZwYbihnpeQHUxOzZxcwh8Kjv62
dhcm0nYM8eNlVVsnGhz2de2Z5jhDn/UlLWLBn2F9Lx+Pz2cH110eb+NCFlt8HEqM
woHvrFTPqy5VdhWgthdxibVrifKa8VCm2YQZlLPLAjbMlgVx8PvNLOjjmCtU3N+1
1IMPRKTU0ZSxWV3yA91Ak5trYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB/YpzdD
HLGE/bCDAMJooRd8GnNkMB8GA1UdIwQYMBaAFNDS9FpG0mdmAUt4YBmgmoM0hz2t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjIxOS84MkZFODlDQzND
MzcxMUVBODczRTE0NjBDNEY5QUUwMi8wTkwwV2tiU1oyWUJTM2hnR2FDYWd6U0hQ
YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBOTDBXa2JTWjJZQlMzaGdHYUNhZ3pTSFBhMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MjIxOS84MkZFODlDQzNDMzcxMUVBODczRTE0NjBDNEY5QUUwMi8wTkwwV2tiU1oy
WUJTM2hnR2FDYWd6U0hQYTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV/VtYUTOvTv8/8K3sWdVtxG2nJyXLrJksjkqcVJy4LMG5DxUVYL7G6rmU18C
ba4NEO21DGRC+H7YPk3fHMsBd+JiCekSeLY1UH9bpvg9jIUlu6yQTaBkC/6XKiY8
I/x4QoMQBYTAAsBRTl5hwYMjyYmRoVEvMcFc2L2gvUxs8Cr5PAvY2NwjoSEPD063
rk4Mn6vqiu9QBASrhfgHgoRR0qAAbMTnbux4u35yps2KAEEzun2PbvhPzyH+nLXY
/b7qAyoWgLqXScj8qjqG4EIByPpiP6oO1/DebqpOqk6hzLtH7sWbpojNvhXyYgby
lVls8sZ7+tkD+CgI5bulRh+T6A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:56:30 2026 by rpki-client