Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft
File:                     trtjZLzkhc7AbTOZSRWHpIJZHLw.mft (raw, json)
Hash identifier:          SSDomNDRZiw3Arq/FswJZKTSridfajFMkRYHqhOiI0s=
Subject key identifier:   B6:43:DC:30:48:71:07:EE:B1:67:45:2C:1A:99:E4:AC:C7:A4:3A:0D
Authority key identifier: B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC
Certificate issuer:       /CN=A9123B8B/serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC
Certificate serial:       0A3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft
Manifest number:          0A2C
Signing time:             Tue 28 Jul 2026 20:05:41 +0000
Manifest this update:     Tue 28 Jul 2026 20:05:40 +0000
Manifest next update:     Tue 04 Aug 2026 20:05:40 +0000
Files and hashes:         1: trtjZLzkhc7AbTOZSRWHpIJZHLw.crl (hash: 5T7kvrlOcetSfZFq6gZA3I63TAE9rv6Ml1eGSXR9BiU=)
                          2: 64E818222EA711F1ABA05366B9833773.roa (hash: uaKJtLoXq/ZZ1+UmqCEv0S8y+GtylUFLwrIrTLfP6zM=)
                          3: 63EF8E3C2EA711F1ABA05366B9833773.roa (hash: TaPyl/iXeZ9rNTtgrZn2/CMrZ6ZTV/1ABox1PHZOxkE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl
                          rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2621 (0xa3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123B8B, serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC
        Validity
            Not Before: Jul 28 20:05:40 2026 GMT
            Not After : Aug  4 20:05:40 2026 GMT
        Subject: CN=6a690b95-e6e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7e:1f:a2:85:9a:7a:66:1b:3a:6f:78:5d:62:
                    88:a1:00:a5:ff:2e:84:ee:9f:aa:ff:64:e6:f0:cf:
                    f3:17:3d:ee:3c:07:88:9c:ca:3d:a6:1c:ab:0b:57:
                    ad:80:80:af:e7:14:82:d6:3d:3b:53:59:71:bc:2a:
                    9b:ac:6b:50:bf:60:44:13:60:03:d0:c2:bc:b9:f9:
                    c0:c2:3a:30:6a:69:30:f1:18:25:48:66:19:80:9f:
                    26:7f:b6:f3:30:c8:b4:25:cc:9f:37:4f:b0:77:75:
                    e2:60:24:bf:70:cf:ce:74:f7:3b:97:4a:ea:79:69:
                    9b:59:69:44:ac:cc:8e:d9:a2:0d:d3:b5:8c:9b:e3:
                    0b:61:97:f9:d4:9c:25:70:2c:29:0e:3b:86:06:44:
                    f2:d7:a1:44:f4:82:e8:fc:73:ac:5d:d5:21:b5:d5:
                    69:e5:37:e8:e4:42:3e:16:85:c0:36:d5:9a:f2:b1:
                    d0:e1:f2:ab:6f:63:b2:88:99:ca:83:65:5a:f7:eb:
                    58:a5:49:2a:2d:78:0e:b2:62:35:eb:df:3a:34:43:
                    76:e6:b4:5a:25:e3:61:ec:63:00:da:90:48:45:46:
                    77:34:1f:77:2b:23:51:f8:84:78:b5:f5:4c:21:8c:
                    4e:ec:5f:3a:81:0c:be:7f:fb:e0:26:70:e1:82:55:
                    03:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:43:DC:30:48:71:07:EE:B1:67:45:2C:1A:99:E4:AC:C7:A4:3A:0D
            X509v3 Authority Key Identifier:
                keyid:B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:8a:59:d5:04:66:87:6f:3b:f3:9b:b0:2b:55:0e:16:f1:c5:
         65:32:df:58:4b:dc:c5:82:b9:8a:16:eb:25:66:eb:21:f0:4f:
         c5:50:dd:47:a1:04:88:19:3e:27:cc:55:b6:a0:38:6c:06:fa:
         9c:4c:cc:9b:f3:7b:ba:21:aa:9a:52:05:41:48:73:4f:05:81:
         e8:cb:41:75:36:a2:68:60:62:ae:31:96:8f:c0:2c:39:47:b3:
         10:3d:ff:15:47:e3:6a:b1:08:57:f8:15:ac:23:5c:18:9c:b2:
         ab:5d:b7:b3:7b:e1:7a:c8:9f:4e:57:d8:e5:14:60:66:c6:e2:
         b3:17:e8:89:ae:92:b8:e1:ed:30:2e:b5:da:f7:59:ed:1d:55:
         7e:f9:81:ab:1c:54:8c:2a:33:87:e3:47:d8:83:36:3f:0e:ad:
         bd:3c:b8:5d:36:3b:9d:35:9c:18:ea:2a:bf:cc:5f:fb:06:24:
         0e:f9:26:83:d1:fb:79:25:fd:18:73:3c:db:30:c8:d3:d9:4a:
         5b:c2:56:10:57:af:eb:b2:f5:34:6f:78:20:64:59:63:7d:9b:
         f5:8e:fa:52:7b:1c:2b:85:40:16:4e:1f:78:e0:a5:6f:27:11:
         90:9e:f6:c4:44:77:0f:85:ce:3f:93:c5:0d:34:6d:53:6e:08:
         51:4b:c9:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjNCOEIxMTAvBgNVBAUTKEI2QkI2MzY0QkNFNDg1Q0VDMDZEMzM5OTQ5MTU4N0E0
ODI1OTFDQkMwHhcNMjYwNzI4MjAwNTQwWhcNMjYwODA0MjAwNTQwWjAYMRYwFAYD
VQQDEw02YTY5MGI5NS1lNmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlX4fooWaemYbOm94XWKIoQCl/y6E7p+q/2Tm8M/zFz3uPAeInMo9phyrC1et
gICv5xSC1j07U1lxvCqbrGtQv2BEE2AD0MK8ufnAwjowamkw8RglSGYZgJ8mf7bz
MMi0JcyfN0+wd3XiYCS/cM/OdPc7l0rqeWmbWWlErMyO2aIN07WMm+MLYZf51Jwl
cCwpDjuGBkTy16FE9ILo/HOsXdUhtdVp5Tfo5EI+FoXANtWa8rHQ4fKrb2OyiJnK
g2Va9+tYpUkqLXgOsmI16986NEN25rRaJeNh7GMA2pBIRUZ3NB93KyNR+IR4tfVM
IYxO7F86gQy+f/vgJnDhglUDMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLZD3DBI
cQfusWdFLBqZ5KzHpDoNMB8GA1UdIwQYMBaAFLa7Y2S85IXOwG0zmUkVh6SCWRy8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0I4Qi83QUNDQ0I0MDlD
NkYxMUVBOEM2NTlCM0ZDNEY5QUUwMi90cnRqWkx6a2hjN0FiVE9aU1JXSHBJSlpI
THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RydGpaTHpraGM3QWJUT1pTUldIcElKWkhMdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
M0I4Qi83QUNDQ0I0MDlDNkYxMUVBOEM2NTlCM0ZDNEY5QUUwMi90cnRqWkx6a2hj
N0FiVE9aU1JXSHBJSlpITHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAY4pZ1QRmh28785uwK1UOFvHFZTLfWEvcxYK5ihbrJWbrIfBPxVDdR6EEiBk+
J8xVtqA4bAb6nEzMm/N7uiGqmlIFQUhzTwWB6MtBdTaiaGBirjGWj8AsOUezED3/
FUfjarEIV/gVrCNcGJyyq123s3vhesifTlfY5RRgZsbisxfoia6SuOHtMC612vdZ
7R1VfvmBqxxUjCozh+NH2IM2Pw6tvTy4XTY7nTWcGOoqv8xf+wYkDvkmg9H7eSX9
GHM82zDI09lKW8JWEFev67L1NG94IGRZY32b9Y76UnscK4VAFk4feOClbycRkJ72
xER3D4XOP5PFDTRtU24IUUvJag==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:29:15 2026 by rpki-client