Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
File:                     23zlI-hAt3_J4Zb1jxSXas5BVL4.mft (raw, json)
Hash identifier:          ItEplMY1Qzxp+VucaE1R0L6J25DTpNgsb7Baw68Ilg0=
Subject key identifier:   8B:1D:BC:38:53:D1:68:E5:45:F6:90:43:78:70:79:DA:D3:A6:53:C5
Authority key identifier: DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE
Certificate issuer:       /CN=A912542C/serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE
Certificate serial:       075C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
Manifest number:          0739
Signing time:             Sun 26 Jul 2026 22:44:11 +0000
Manifest this update:     Sun 26 Jul 2026 22:44:10 +0000
Manifest next update:     Sun 02 Aug 2026 22:44:10 +0000
Files and hashes:         1: 23zlI-hAt3_J4Zb1jxSXas5BVL4.crl (hash: Zlwmky7SBZD3ourYvQ9xtoNKKfMNPF+tt/GD9CjEx7c=)
                          2: 1E9D1268B3E011ED98356A75C4F9AE02.roa (hash: 5lB4KJ1dE9BAQX/uKgJe1+lnx+W9PJrFHNnppiXGz5M=)
                          3: F0FFCBCCF9C911EDAF704E7FC4F9AE02.roa (hash: y3IxwzZcVIyvXDTK0dR4pibIdUtU+ExL4IB+J5qtwjE=)
                          4: 36A82D708CAA11EB9ED48C70C4F9AE02.roa (hash: Yp5vZ4wNCCpx+gdrt1JNNzRzB8+x9ZIjyyfZWtoHuOw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl
                          rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 22:44:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1884 (0x75c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912542C, serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE
        Validity
            Not Before: Jul 26 22:44:10 2026 GMT
            Not After : Aug  2 22:44:10 2026 GMT
        Subject: CN=6a668dbb-f21c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f9:98:8f:67:3d:46:8c:dd:5b:e5:ff:6f:63:
                    21:43:55:2a:02:de:4f:79:43:8f:1a:67:e7:99:b7:
                    d2:e7:3f:61:5c:1d:56:70:13:63:64:43:71:12:c4:
                    f3:cf:f7:b2:64:2c:cc:91:a3:2b:74:45:ad:93:f9:
                    44:e7:3a:f8:5c:9e:a3:5e:1f:fe:ed:a2:b2:e1:07:
                    83:05:8c:68:ab:1e:1c:93:52:9d:9e:84:50:0b:4f:
                    8d:f2:5b:5a:be:1a:02:17:e3:80:d3:f7:65:f7:e8:
                    ac:3f:b5:1c:6d:e3:05:43:30:d8:ae:41:36:ba:93:
                    e5:11:e3:8a:2a:e8:eb:66:f8:c7:c6:16:f9:6e:e4:
                    91:b5:55:99:6e:a0:97:23:c8:df:2d:49:d1:03:14:
                    aa:b1:f0:12:0a:9f:a8:f8:d1:e1:a6:fc:ef:2e:e4:
                    2d:98:67:a5:4d:61:45:88:96:c0:eb:62:44:a3:a2:
                    6d:07:94:05:e4:bc:25:6b:5d:27:27:fb:51:ac:2f:
                    ab:fb:07:6b:55:26:9f:09:4c:64:0c:33:08:eb:f6:
                    6e:b1:11:71:79:05:bd:ef:37:30:40:aa:46:00:e2:
                    eb:21:64:12:fa:10:72:88:2b:ff:6d:83:a4:05:8d:
                    49:c4:51:61:dd:80:83:90:58:98:64:4e:07:14:f0:
                    97:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1D:BC:38:53:D1:68:E5:45:F6:90:43:78:70:79:DA:D3:A6:53:C5
            X509v3 Authority Key Identifier:
                keyid:DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:3f:bc:f0:36:95:5b:7c:81:ce:b7:66:47:17:c8:7a:5e:86:
         38:28:c1:20:4f:5f:ab:ba:2e:9b:90:9d:d6:33:a2:22:17:dd:
         30:8a:a9:71:1b:69:cc:c2:75:74:58:4b:0f:a7:5f:87:46:6e:
         20:2f:cd:1f:2e:19:68:a8:8f:c1:a4:02:2f:16:40:f6:d9:09:
         0e:46:fb:9f:db:bd:f3:d1:b2:54:3a:53:20:d7:97:ca:7c:ef:
         23:4d:c6:8f:65:02:aa:ea:3b:e5:3b:09:e9:de:e3:6e:5c:8e:
         3f:70:fa:a7:61:4e:a3:c9:34:4d:e6:19:79:9f:57:88:21:95:
         8c:3f:7b:35:c1:10:10:08:a3:0f:69:93:98:7c:f3:ef:5e:4d:
         1a:3a:15:d0:d1:5e:29:2b:c4:5b:1d:e5:c9:f6:d2:f2:e1:65:
         d9:2f:36:7d:fa:18:e1:56:e5:99:72:8a:29:06:79:ef:76:a7:
         36:0e:93:1f:52:c1:19:63:b3:6a:e0:20:20:86:c7:6d:a8:f0:
         e4:0a:47:1e:6f:c5:b0:9d:1f:cc:26:99:8e:ea:78:11:0f:36:
         37:5d:cb:af:b7:09:72:4b:09:c7:67:86:08:8a:b1:58:1e:7e:
         c3:ec:9e:b4:2b:5b:9f:92:75:04:14:69:3a:a4:62:83:59:ed:
         92:dc:c5:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjU0MkMxMTAvBgNVBAUTKERCN0NFNTIzRTg0MEI3N0ZDOUUxOTZGNThGMTQ5NzZB
Q0U0MTU0QkUwHhcNMjYwNzI2MjI0NDEwWhcNMjYwODAyMjI0NDEwWjAYMRYwFAYD
VQQDEw02YTY2OGRiYi1mMjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6vmYj2c9RozdW+X/b2MhQ1UqAt5PeUOPGmfnmbfS5z9hXB1WcBNjZENxEsTz
z/eyZCzMkaMrdEWtk/lE5zr4XJ6jXh/+7aKy4QeDBYxoqx4ck1KdnoRQC0+N8lta
vhoCF+OA0/dl9+isP7UcbeMFQzDYrkE2upPlEeOKKujrZvjHxhb5buSRtVWZbqCX
I8jfLUnRAxSqsfASCp+o+NHhpvzvLuQtmGelTWFFiJbA62JEo6JtB5QF5Lwla10n
J/tRrC+r+wdrVSafCUxkDDMI6/ZusRFxeQW97zcwQKpGAOLrIWQS+hByiCv/bYOk
BY1JxFFh3YCDkFiYZE4HFPCXPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIsdvDhT
0WjlRfaQQ3hwedrTplPFMB8GA1UdIwQYMBaAFNt85SPoQLd/yeGW9Y8Ul2rOQVS+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQyQy8xQjYzNDY2RThD
QTgxMUVCQTJCRDBBNkJDNEY5QUUwMi8yM3psSS1oQXQzX0o0WmIxanhTWGFzNUJW
TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzIzemxJLWhBdDNfSjRaYjFqeFNYYXM1QlZMNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTQyQy8xQjYzNDY2RThDQTgxMUVCQTJCRDBBNkJDNEY5QUUwMi8yM3psSS1oQXQz
X0o0WmIxanhTWGFzNUJWTDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAj+88DaVW3yBzrdmRxfIel6GOCjBIE9fq7oum5Cd1jOiIhfdMIqpcRtpzMJ1
dFhLD6dfh0ZuIC/NHy4ZaKiPwaQCLxZA9tkJDkb7n9u989GyVDpTINeXynzvI03G
j2UCquo75TsJ6d7jblyOP3D6p2FOo8k0TeYZeZ9XiCGVjD97NcEQEAijD2mTmHzz
715NGjoV0NFeKSvEWx3lyfbS8uFl2S82ffoY4VblmXKKKQZ573anNg6TH1LBGWOz
auAgIIbHbajw5ApHHm/FsJ0fzCaZjup4EQ82N13Lr7cJcksJx2eGCIqxWB5+w+ye
tCtbn5J1BBRpOqRig1ntktzFtg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:30:52 2026 by rpki-client