Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft
File:                     xF0041r6UWc07r4-Xaxxv0jh1fM.mft (raw, json)
Hash identifier:          DfYnzc3VrDmyMDek3jvtYmwet0a7sxmC3ovTqZ3oF/w=
Subject key identifier:   27:17:22:93:0C:3B:11:20:0F:95:26:CB:70:09:EE:1B:F6:1D:2C:F9
Authority key identifier: C4:5D:34:E3:5A:FA:51:67:34:EE:BE:3E:5D:AC:71:BF:48:E1:D5:F3
Certificate issuer:       /CN=A912A273/serialNumber=C45D34E35AFA516734EEBE3E5DAC71BF48E1D5F3
Certificate serial:       66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xF0041r6UWc07r4-Xaxxv0jh1fM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft
Manifest number:          62
Signing time:             Wed 29 Jul 2026 09:39:10 +0000
Manifest this update:     Wed 29 Jul 2026 09:39:10 +0000
Manifest next update:     Wed 05 Aug 2026 09:39:10 +0000
Files and hashes:         1: xF0041r6UWc07r4-Xaxxv0jh1fM.crl (hash: iI6gXd5IxAetg9d+vRMklnfbfoyKR9gKlAcWQ75cJNQ=)
                          2: F3BA62BEFD9011F0AC0D2AEE5B6F56BC.roa (hash: fngJ91q3M8+ZvnNF07B50n4sFQUoH1YzhPTItYhTEoc=)
                          3: F7CC41D2FD9111F0AFA9C1725C6F56BC.roa (hash: ZVS5A/ssJ9e5s48dOy5KKX8LrbmgceLLERs2KPItheg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.crl
                          rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xF0041r6UWc07r4-Xaxxv0jh1fM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 09:39:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A273, serialNumber=C45D34E35AFA516734EEBE3E5DAC71BF48E1D5F3
        Validity
            Not Before: Jul 29 09:39:10 2026 GMT
            Not After : Aug  5 09:39:10 2026 GMT
        Subject: CN=6a69ca3e-61b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:59:70:8e:c7:51:c9:26:73:66:97:3e:34:2d:
                    3e:55:d8:9c:15:c1:e6:0a:c5:62:e0:90:aa:e2:1f:
                    85:6b:50:2b:73:58:0a:0c:24:0c:dc:ee:fc:14:b6:
                    0a:07:ce:aa:7f:e1:d3:cd:23:aa:55:79:ce:4e:62:
                    a5:7c:86:f5:13:b0:e5:a6:be:db:4a:68:a9:0d:33:
                    45:bc:a8:b0:06:34:f4:65:a8:05:97:15:cc:26:27:
                    2e:bf:13:d2:70:ac:08:5d:28:0e:23:c5:d1:96:39:
                    e3:fe:70:a3:ea:d2:fc:ec:63:6d:e6:6b:eb:b5:eb:
                    24:4e:e7:db:5d:2a:e1:54:c4:f9:ad:1f:b8:1c:c3:
                    16:26:41:df:10:43:5d:dd:34:90:5c:9a:64:f2:19:
                    6a:d3:d9:1c:83:8d:e9:72:ed:b5:d4:5b:89:67:22:
                    42:e6:bf:97:cd:58:33:c2:d7:4a:ce:2f:80:47:a4:
                    28:fb:d0:0c:76:b7:ae:ec:b2:ea:74:08:d1:c4:9a:
                    63:28:92:07:f3:c3:ba:11:2d:46:14:6f:15:42:bb:
                    5e:0b:82:23:e0:24:b5:a9:0e:fe:be:09:89:81:cf:
                    24:4a:c0:42:8e:b6:7b:43:a3:b4:8c:fa:c0:2f:e9:
                    a7:7e:3d:0d:3e:d6:e0:ec:f1:c2:a1:98:cf:70:ea:
                    cc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:17:22:93:0C:3B:11:20:0F:95:26:CB:70:09:EE:1B:F6:1D:2C:F9
            X509v3 Authority Key Identifier:
                keyid:C4:5D:34:E3:5A:FA:51:67:34:EE:BE:3E:5D:AC:71:BF:48:E1:D5:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xF0041r6UWc07r4-Xaxxv0jh1fM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:0b:15:9b:47:ee:b3:b2:9c:5f:91:a5:89:61:ac:7b:d0:79:
         82:86:e6:9d:3c:a3:06:d2:4f:ad:6c:be:da:fd:6d:a8:bb:28:
         5d:5a:e1:4a:9e:06:00:c7:b9:f8:1a:ed:cb:e7:0f:05:6b:4a:
         f8:5f:fa:13:f9:27:1c:9f:1b:ef:2e:c9:51:5d:48:11:08:b5:
         57:c1:78:6e:e1:eb:93:6d:62:57:df:2e:c7:52:30:5d:79:7d:
         5b:5a:dc:45:c1:3f:73:50:43:33:cc:f2:e1:4b:3c:4b:d5:cc:
         9e:76:83:03:9c:09:fc:d2:59:92:91:43:1c:f2:f7:eb:17:ad:
         2f:d5:02:77:b7:c1:c0:32:54:18:26:e1:3a:08:52:58:15:a3:
         6c:65:96:ac:65:98:82:ba:01:74:21:ad:42:2f:ed:ba:45:5b:
         0e:7f:2f:a2:6d:09:e9:b1:90:94:66:03:a7:9e:8b:a8:37:bf:
         2a:9f:50:98:32:24:12:c0:34:8d:89:e6:24:32:6f:b1:d3:fb:
         c2:47:fd:8f:8a:05:3e:b5:d1:4b:7e:ef:2a:59:e9:24:db:fa:
         21:cc:5a:57:b2:7b:32:04:89:8c:fa:b9:03:ba:3f:87:75:37:
         5b:2d:91:cc:d8:0d:41:d7:05:eb:21:73:90:6b:ff:bf:6a:fd:
         f4:a4:9b:89
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
QTI3MzExMC8GA1UEBRMoQzQ1RDM0RTM1QUZBNTE2NzM0RUVCRTNFNURBQzcxQkY0
OEUxRDVGMzAeFw0yNjA3MjkwOTM5MTBaFw0yNjA4MDUwOTM5MTBaMBgxFjAUBgNV
BAMTDTZhNjljYTNlLTYxYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDXWXCOx1HJJnNmlz40LT5V2JwVweYKxWLgkKriH4VrUCtzWAoMJAzc7vwUtgoH
zqp/4dPNI6pVec5OYqV8hvUTsOWmvttKaKkNM0W8qLAGNPRlqAWXFcwmJy6/E9Jw
rAhdKA4jxdGWOeP+cKPq0vzsY23ma+u16yRO59tdKuFUxPmtH7gcwxYmQd8QQ13d
NJBcmmTyGWrT2RyDjely7bXUW4lnIkLmv5fNWDPC10rOL4BHpCj70Ax2t67ssup0
CNHEmmMokgfzw7oRLUYUbxVCu14LgiPgJLWpDv6+CYmBzyRKwEKOtntDo7SM+sAv
6ad+PQ0+1uDs8cKhmM9w6swjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJxcikww7
ESAPlSbLcAnuG/YdLPkwHwYDVR0jBBgwFoAUxF0041r6UWc07r4+Xaxxv0jh1fMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBMjczLzEzRDMyNURDRkQ5
MDExRjA5OUFCQ0IzOTVCNkY1NkJDL3hGMDA0MXI2VVdjMDdyNC1YYXh4djBqaDFm
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveEYwMDQxcjZVV2MwN3I0LVhheHh2MGpoMWZNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB
MjczLzEzRDMyNURDRkQ5MDExRjA5OUFCQ0IzOTVCNkY1NkJDL3hGMDA0MXI2VVdj
MDdyNC1YYXh4djBqaDFmTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC5CxWbR+6zspxfkaWJYax70HmChuadPKMG0k+tbL7a/W2ouyhdWuFKngYAx7n4
Gu3L5w8Fa0r4X/oT+SccnxvvLslRXUgRCLVXwXhu4euTbWJX3y7HUjBdeX1bWtxF
wT9zUEMzzPLhSzxL1cyedoMDnAn80lmSkUMc8vfrF60v1QJ3t8HAMlQYJuE6CFJY
FaNsZZasZZiCugF0Ia1CL+26RVsOfy+ibQnpsZCUZgOnnouoN78qn1CYMiQSwDSN
ieYkMm+x0/vCR/2PigU+tdFLfu8qWekk2/ohzFpXsnsyBImM+rkDuj+HdTdbLZHM
2A1B1wXrIXOQa/+/av30pJuJ
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:55:47 2026 by rpki-client