Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
File:                     ecf8XRpe7wspjgByMmq3Noa9_ng.mft (raw, json)
Hash identifier:          uf5KICu1t8N8HgfswV4HiQ8rxj6n+ZF7QCklErDQ1HQ=
Subject key identifier:   F4:43:61:63:DD:6A:56:DB:D0:80:66:3D:27:6F:57:0B:34:32:0F:61
Authority key identifier: 79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78
Certificate issuer:       /CN=A9123918/serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78
Certificate serial:       0141
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
Manifest number:          0137
Signing time:             Mon 27 Jul 2026 07:33:34 +0000
Manifest this update:     Mon 27 Jul 2026 07:33:33 +0000
Manifest next update:     Mon 03 Aug 2026 07:33:33 +0000
Files and hashes:         1: ecf8XRpe7wspjgByMmq3Noa9_ng.crl (hash: L6ShuLh23w5h7XBsMKOTQxarzb42Oam6Zj3uUtJcO90=)
                          2: 345F7BDCF80C11EF831DA737C4F9AE02.roa (hash: j5AEAb8kY5M3sbYrBrlhwU1t8O30/erdyML6Xz5HVZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl
                          rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:33:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321 (0x141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123918, serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78
        Validity
            Not Before: Jul 27 07:33:33 2026 GMT
            Not After : Aug  3 07:33:33 2026 GMT
        Subject: CN=6a6709ce-35ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f3:16:07:45:17:b9:1b:67:13:c5:a4:8c:c9:
                    53:10:08:a2:c8:9b:27:af:a5:43:ed:c0:4f:4e:1b:
                    eb:ab:8a:1d:9a:50:98:bc:81:5d:a4:7b:82:07:16:
                    f8:b7:e2:09:4f:0b:d5:f3:f3:ea:7b:48:11:f9:d6:
                    0f:52:f5:e2:24:a4:7b:3c:fd:45:c2:97:90:f5:75:
                    9f:d9:ee:70:c1:29:6f:53:67:17:36:c7:b3:7d:5c:
                    c4:e9:25:72:10:9e:e4:5a:c9:08:6d:26:27:8a:99:
                    e2:3c:ce:e4:20:df:8b:dc:d9:c1:39:83:22:80:a8:
                    8b:68:f1:65:4a:2b:59:81:2d:67:a5:0d:27:31:b3:
                    a8:a3:84:8d:b6:5d:db:7b:df:b0:20:67:2b:56:ca:
                    5f:21:9a:4d:07:96:28:07:c3:83:2b:29:1e:cd:0a:
                    08:02:48:5a:0f:3d:2d:c0:18:3d:aa:a6:51:64:51:
                    af:a9:8d:7c:22:1f:40:ef:88:92:be:96:81:51:4f:
                    d1:e2:3d:00:b1:6d:0c:21:fc:67:11:a4:39:5b:2a:
                    23:77:d0:1a:fa:d2:ec:38:fb:f8:92:c1:4f:91:32:
                    98:f4:2c:29:cb:cf:b8:f5:de:05:63:e1:ff:6c:48:
                    ad:72:ca:a6:e3:14:0a:5f:16:f8:3f:c6:ff:9d:ae:
                    10:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:43:61:63:DD:6A:56:DB:D0:80:66:3D:27:6F:57:0B:34:32:0F:61
            X509v3 Authority Key Identifier:
                keyid:79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:60:38:23:c8:4d:ba:0a:33:59:d1:50:b4:c0:91:29:fa:4d:
         97:de:40:0f:36:94:01:be:65:5e:79:20:6b:e7:04:f2:11:d9:
         f4:5d:e6:8e:e9:ca:9d:56:40:67:ec:12:27:cf:81:46:17:41:
         72:79:37:af:65:3c:90:6b:94:85:6a:17:90:a3:18:d3:cb:62:
         75:57:bd:ef:93:ea:37:b7:48:b0:e3:31:c6:eb:4e:df:d5:b0:
         d2:d1:69:59:ee:c8:cd:6c:5a:64:41:5a:10:7e:a1:4d:97:d0:
         27:5e:83:b3:57:f0:40:11:fd:5b:1f:ed:49:77:5c:6a:8f:17:
         c2:4a:2a:b7:49:d6:f5:fd:48:f5:a5:30:90:0a:c7:57:3e:31:
         8d:4f:b4:4b:00:c5:fd:48:8e:52:b5:e6:0c:b3:2d:d2:5c:50:
         6f:d4:b6:34:9d:f9:88:0f:15:9e:94:3a:9d:2c:41:d3:22:8a:
         eb:1c:9e:45:59:0a:54:d4:a9:ee:7a:49:9a:82:88:10:b1:07:
         62:cb:35:53:0f:08:c8:fa:3c:ef:c1:c6:6a:36:b4:4f:5e:50:
         a0:8e:4e:ad:4b:ee:e7:64:91:e3:1a:f8:fd:e7:78:e4:89:b4:
         e1:b6:43:fe:ea:ed:63:54:c3:06:88:38:35:b0:0a:78:b1:02:
         3f:7e:50:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjM5MTgxMTAvBgNVBAUTKDc5QzdGQzVEMUE1RUVGMEIyOThFMDA3MjMyNkFCNzM2
ODZCREZFNzgwHhcNMjYwNzI3MDczMzMzWhcNMjYwODAzMDczMzMzWjAYMRYwFAYD
VQQDEw02YTY3MDljZS0zNWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmvMWB0UXuRtnE8WkjMlTEAiiyJsnr6VD7cBPThvrq4odmlCYvIFdpHuCBxb4
t+IJTwvV8/Pqe0gR+dYPUvXiJKR7PP1FwpeQ9XWf2e5wwSlvU2cXNsezfVzE6SVy
EJ7kWskIbSYnipniPM7kIN+L3NnBOYMigKiLaPFlSitZgS1npQ0nMbOoo4SNtl3b
e9+wIGcrVspfIZpNB5YoB8ODKykezQoIAkhaDz0twBg9qqZRZFGvqY18Ih9A74iS
vpaBUU/R4j0AsW0MIfxnEaQ5Wyojd9Aa+tLsOPv4ksFPkTKY9Cwpy8+49d4FY+H/
bEitcsqm4xQKXxb4P8b/na4Q0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPRDYWPd
albb0IBmPSdvVws0Mg9hMB8GA1UdIwQYMBaAFHnH/F0aXu8LKY4AcjJqtzaGvf54
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzkxOC84RUU3MTQ4NkI2
QzQxMUVGQjEwRURFNThDNEY5QUUwMi9lY2Y4WFJwZTd3c3BqZ0J5TW1xM05vYTlf
bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VjZjhYUnBlN3dzcGpnQnlNbXEzTm9hOV9uZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MzkxOC84RUU3MTQ4NkI2QzQxMUVGQjEwRURFNThDNEY5QUUwMi9lY2Y4WFJwZTd3
c3BqZ0J5TW1xM05vYTlfbmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAamA4I8hNugozWdFQtMCRKfpNl95ADzaUAb5lXnkga+cE8hHZ9F3mjunKnVZA
Z+wSJ8+BRhdBcnk3r2U8kGuUhWoXkKMY08tidVe975PqN7dIsOMxxutO39Ww0tFp
We7IzWxaZEFaEH6hTZfQJ16Ds1fwQBH9Wx/tSXdcao8Xwkoqt0nW9f1I9aUwkArH
Vz4xjU+0SwDF/UiOUrXmDLMt0lxQb9S2NJ35iA8VnpQ6nSxB0yKK6xyeRVkKVNSp
7npJmoKIELEHYss1Uw8IyPo878HGaja0T15QoI5OrUvu52SR4xr4/ed45Im04bZD
/urtY1TDBog4NbAKeLECP35Qbg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:42:18 2026 by rpki-client