Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
File:                     1iOjklgIuuhMJxThaoeEBOBgSNE.mft (raw, json)
Hash identifier:          Fjgg500ofnj37qLoNMm5blCo1E5FYaVlZd3GAa6NzmA=
Subject key identifier:   05:A4:74:5D:B1:B4:6D:DE:D9:3B:86:CC:D0:E3:C3:40:95:9B:71:B3
Authority key identifier: D6:23:A3:92:58:08:BA:E8:4C:27:14:E1:6A:87:84:04:E0:60:48:D1
Certificate issuer:       /CN=A912A1E7/serialNumber=D623A3925808BAE84C2714E16A878404E06048D1
Certificate serial:       0603
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
Manifest number:          05F9
Signing time:             Sun 26 Jul 2026 23:48:36 +0000
Manifest this update:     Sun 26 Jul 2026 23:48:36 +0000
Manifest next update:     Sun 02 Aug 2026 23:48:36 +0000
Files and hashes:         1: 1iOjklgIuuhMJxThaoeEBOBgSNE.crl (hash: ZYFYDXMD3RBFyVhnvR/MzgUIYh4t/S+w2q3m4ZN9Ytw=)
                          2: C3BF0EF80A5F11EC8EDB0221C4F9AE02.roa (hash: FhhQyHeWyKOZmuPQHPKmrZdEe/8rcAsfsUV6nBHHPzE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.crl
                          rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1539 (0x603)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A1E7, serialNumber=D623A3925808BAE84C2714E16A878404E06048D1
        Validity
            Not Before: Jul 26 23:48:36 2026 GMT
            Not After : Aug  2 23:48:36 2026 GMT
        Subject: CN=6a669cd4-593c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a4:cf:96:32:27:f9:f8:f9:cf:52:0b:f6:3c:
                    c5:ad:09:2e:fd:af:d6:81:81:96:33:3b:cf:a9:ef:
                    25:6c:38:ea:ed:e1:59:d1:2c:14:b0:3c:02:5c:8b:
                    f2:ce:17:1b:5b:b4:a1:a6:de:4b:0b:d1:4e:d2:7f:
                    23:58:ae:20:0a:f1:cb:ed:3f:b5:5f:0f:23:aa:43:
                    d0:06:65:87:dc:78:8a:c6:50:db:82:1b:8c:b4:5b:
                    b4:b8:62:ff:1f:c3:2f:b9:ff:98:3b:7d:92:33:4c:
                    90:48:f1:57:d9:ae:60:d6:dc:fa:bb:6f:8d:cd:ad:
                    cc:4d:1a:a4:20:c6:b8:ac:5e:80:37:4b:9e:c9:41:
                    e8:86:15:79:fa:a7:f8:44:bf:bf:80:e1:8f:8a:7f:
                    c3:72:4d:96:18:c2:fa:a1:7f:f0:7c:b8:a2:8b:07:
                    be:22:07:d7:bf:2d:96:94:56:75:58:ee:0a:fc:6c:
                    60:56:ea:f8:b5:ba:b5:f5:0f:ac:16:64:12:bc:ed:
                    61:10:47:35:68:f2:d0:d2:49:99:4e:00:c9:1e:18:
                    03:3c:7d:dc:03:92:72:f0:fb:ef:a1:c1:05:5d:a8:
                    64:14:51:7c:99:b7:88:1b:9b:8f:7f:51:5d:7b:cb:
                    d9:70:4f:df:0a:df:cc:c2:b4:bb:8e:95:ce:7d:9c:
                    9e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A4:74:5D:B1:B4:6D:DE:D9:3B:86:CC:D0:E3:C3:40:95:9B:71:B3
            X509v3 Authority Key Identifier:
                keyid:D6:23:A3:92:58:08:BA:E8:4C:27:14:E1:6A:87:84:04:E0:60:48:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:3b:68:1c:ed:67:ef:5f:9f:3f:26:39:e0:92:49:95:bc:fd:
         98:23:17:73:ac:60:d5:cf:c6:74:94:4e:a3:2d:a1:92:0e:06:
         3f:d9:63:a7:7b:96:49:52:82:74:83:9a:ea:86:db:43:a9:e4:
         54:06:6c:d6:fd:d2:b3:c6:af:09:57:9b:38:1e:9e:4c:b5:ab:
         07:db:53:ad:51:69:ef:be:bc:ee:09:4d:99:f2:fd:9b:c6:e3:
         61:ab:2c:be:7a:9d:a4:95:b0:40:ed:c9:1a:64:ad:7b:3d:6d:
         94:50:c5:44:1f:9c:4a:65:45:b5:ca:7d:33:94:a3:a7:c6:1a:
         b6:0b:cd:25:ef:a5:92:60:a2:e3:61:ff:ce:9e:04:c8:68:98:
         7b:27:c7:90:b2:f3:ce:22:e1:df:c7:00:e8:3d:6d:69:8d:10:
         8e:d4:3a:37:d2:0e:cb:2a:62:3e:e6:2d:4f:ff:5a:16:09:b1:
         76:89:70:3e:76:31:db:db:30:e2:e7:c1:47:06:55:7c:32:3d:
         c1:50:80:c9:e0:57:b6:0e:0b:dd:ff:ed:43:4d:18:32:a2:0b:
         1f:25:f2:19:75:7f:89:83:09:83:21:b4:33:b6:64:72:01:9f:
         27:fa:ee:c6:c9:3c:5a:de:d8:52:79:74:b2:47:e1:89:22:0d:
         6e:ce:7a:0f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkExRTcxMTAvBgNVBAUTKEQ2MjNBMzkyNTgwOEJBRTg0QzI3MTRFMTZBODc4NDA0
RTA2MDQ4RDEwHhcNMjYwNzI2MjM0ODM2WhcNMjYwODAyMjM0ODM2WjAYMRYwFAYD
VQQDEw02YTY2OWNkNC01OTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnaTPljIn+fj5z1IL9jzFrQku/a/WgYGWMzvPqe8lbDjq7eFZ0SwUsDwCXIvy
zhcbW7Shpt5LC9FO0n8jWK4gCvHL7T+1Xw8jqkPQBmWH3HiKxlDbghuMtFu0uGL/
H8Mvuf+YO32SM0yQSPFX2a5g1tz6u2+Nza3MTRqkIMa4rF6AN0ueyUHohhV5+qf4
RL+/gOGPin/Dck2WGML6oX/wfLiiiwe+IgfXvy2WlFZ1WO4K/GxgVur4tbq19Q+s
FmQSvO1hEEc1aPLQ0kmZTgDJHhgDPH3cA5Jy8PvvocEFXahkFFF8mbeIG5uPf1Fd
e8vZcE/fCt/MwrS7jpXOfZyeowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAWkdF2x
tG3e2TuGzNDjw0CVm3GzMB8GA1UdIwQYMBaAFNYjo5JYCLroTCcU4WqHhATgYEjR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTFFNy8xMEZBQkVEMjAy
NTUxMUVDOEVEMjQwODVDNEY5QUUwMi8xaU9qa2xnSXV1aE1KeFRoYW9lRUJPQmdT
TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFpT2prbGdJdXVoTUp4VGhhb2VFQk9CZ1NORS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QTFFNy8xMEZBQkVEMjAyNTUxMUVDOEVEMjQwODVDNEY5QUUwMi8xaU9qa2xnSXV1
aE1KeFRoYW9lRUJPQmdTTkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAADtoHO1n71+fPyY54JJJlbz9mCMXc6xg1c/GdJROoy2hkg4GP9ljp3uWSVKC
dIOa6obbQ6nkVAZs1v3Ss8avCVebOB6eTLWrB9tTrVFp77687glNmfL9m8bjYass
vnqdpJWwQO3JGmStez1tlFDFRB+cSmVFtcp9M5Sjp8YatgvNJe+lkmCi42H/zp4E
yGiYeyfHkLLzziLh38cA6D1taY0QjtQ6N9IOyypiPuYtT/9aFgmxdolwPnYx29sw
4ufBRwZVfDI9wVCAyeBXtg4L3f/tQ00YMqILHyXyGXV/iYMJgyG0M7ZkcgGfJ/ru
xsk8Wt7YUnl0skfhiSINbs56Dw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:49 2026 by rpki-client