Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E31D/2CF6B8B0F9C911EFA54F762AC4F9AE02/5igiDz_QD0F7mXLh1KD2QWlueZk.mft
File:                     5igiDz_QD0F7mXLh1KD2QWlueZk.mft (raw, json)
Hash identifier:          wNSsf+fZnNwvppODFJi7gcxqkvlPGfW9re5TFYBEpKc=
Subject key identifier:   5F:C0:76:81:FF:34:52:2A:00:A0:AD:5A:4B:E8:15:76:F7:50:14:8F
Authority key identifier: E6:28:22:0F:3F:D0:0F:41:7B:99:72:E1:D4:A0:F6:41:69:6E:79:99
Certificate issuer:       /CN=A912E31D/serialNumber=E628220F3FD00F417B9972E1D4A0F641696E7999
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5igiDz_QD0F7mXLh1KD2QWlueZk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E31D/2CF6B8B0F9C911EFA54F762AC4F9AE02/5igiDz_QD0F7mXLh1KD2QWlueZk.mft
Manifest number:          010C
Signing time:             Wed 29 Jul 2026 07:28:42 +0000
Manifest this update:     Wed 29 Jul 2026 07:28:41 +0000
Manifest next update:     Wed 05 Aug 2026 07:28:41 +0000
Files and hashes:         1: 5igiDz_QD0F7mXLh1KD2QWlueZk.crl (hash: XbeIM5bYW3DjpQCP5OhM0BiFYtcU/51mqkIDjdaQ2tM=)
                          2: 9CDF0C0CFA4311EFAEC6A81AC4F9AE02.roa (hash: E47slZkZUSxL3blqpxWmejtiKRk74l+RdUUIQ3bo/bo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E31D/2CF6B8B0F9C911EFA54F762AC4F9AE02/5igiDz_QD0F7mXLh1KD2QWlueZk.crl
                          rsync://rpki.apnic.net/member_repository/A912E31D/2CF6B8B0F9C911EFA54F762AC4F9AE02/5igiDz_QD0F7mXLh1KD2QWlueZk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5igiDz_QD0F7mXLh1KD2QWlueZk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 07:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E31D, serialNumber=E628220F3FD00F417B9972E1D4A0F641696E7999
        Validity
            Not Before: Jul 29 07:28:41 2026 GMT
            Not After : Aug  5 07:28:41 2026 GMT
        Subject: CN=6a69aba9-5f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8b:2f:11:fe:01:63:a9:5d:1e:78:a1:05:4a:
                    c7:ca:ab:22:52:ca:c3:75:7a:fb:b2:9c:dc:13:93:
                    ca:89:06:f9:56:4d:86:77:c8:1b:9a:40:7d:0d:d5:
                    75:2e:bb:bf:c0:c9:cb:80:f1:1a:6f:8c:b4:58:ad:
                    86:29:f7:94:cf:25:11:aa:2e:f6:3a:7b:32:67:15:
                    78:a7:3a:58:a9:5f:83:30:c9:be:b3:21:05:b5:90:
                    50:64:9a:96:c2:59:11:2a:8a:db:ef:bb:04:63:17:
                    93:fd:31:14:35:c4:17:e9:91:11:44:8b:ce:41:17:
                    34:2e:4a:65:83:88:e6:b6:22:13:ef:dd:b5:4d:8e:
                    2b:e0:d0:6f:ff:b7:a3:e0:eb:5d:8d:0a:c9:2e:1c:
                    f9:66:03:e2:47:c1:9f:6f:4a:79:84:17:c5:d7:fd:
                    68:29:83:a8:45:11:eb:3a:95:da:81:b7:5e:a8:2d:
                    91:3e:7e:39:a0:a3:a9:3c:cf:63:6f:1b:63:a4:a1:
                    b8:e1:dd:78:1b:bb:fa:c1:f7:b0:e7:37:78:ef:da:
                    c4:6a:36:de:91:3a:b1:b7:96:81:9a:69:67:f2:86:
                    3f:07:8b:52:ee:e0:b0:d8:ad:b9:8e:5b:cc:60:fb:
                    1e:2a:a9:03:89:72:5e:a5:8f:0f:bc:7f:44:1e:08:
                    d5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C0:76:81:FF:34:52:2A:00:A0:AD:5A:4B:E8:15:76:F7:50:14:8F
            X509v3 Authority Key Identifier:
                keyid:E6:28:22:0F:3F:D0:0F:41:7B:99:72:E1:D4:A0:F6:41:69:6E:79:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E31D/2CF6B8B0F9C911EFA54F762AC4F9AE02/5igiDz_QD0F7mXLh1KD2QWlueZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5igiDz_QD0F7mXLh1KD2QWlueZk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E31D/2CF6B8B0F9C911EFA54F762AC4F9AE02/5igiDz_QD0F7mXLh1KD2QWlueZk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:0f:b5:7e:35:79:6b:1c:ea:e3:87:0f:6a:dd:93:42:5d:43:
         f6:3a:85:48:0a:e2:ee:97:de:a7:c3:85:cc:ca:87:c1:8e:32:
         e4:51:ec:cf:d9:35:a3:d8:67:d6:2b:e2:03:4f:01:aa:43:13:
         05:51:c9:8e:95:03:4f:80:28:f2:10:9c:21:ca:47:ee:c3:d2:
         7a:44:6c:e2:56:1a:b2:3d:1c:9f:74:0f:00:4d:40:b3:e8:e9:
         43:d1:8c:7c:6a:3b:81:e1:4c:ba:a7:4a:07:e9:ae:0b:19:9b:
         60:e0:06:d3:02:e9:65:15:3f:dd:26:0d:9a:7a:67:f9:19:19:
         dc:9f:fa:2e:20:2d:7c:0f:44:c6:30:9d:ec:cc:c8:c0:da:ec:
         cc:6f:b9:ed:42:dc:f5:cb:c4:4b:0b:4c:95:4d:2c:0e:16:4d:
         92:5c:2f:83:6b:de:28:ca:b7:75:f5:1f:39:41:21:0e:f7:2d:
         a1:f0:a4:c0:ef:1c:85:32:23:3f:46:f7:fe:e4:a8:d1:b9:73:
         ad:3d:13:ec:7d:27:96:5b:52:e3:cd:8f:9b:17:75:e0:b8:82:
         9f:75:e9:7e:ae:6d:2a:ba:37:4d:62:4c:ee:16:87:0c:8d:e6:
         08:5d:3f:16:f4:7d:cc:63:52:36:39:a6:84:64:14:e1:b7:0c:
         1e:e2:ef:d9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkUzMUQxMTAvBgNVBAUTKEU2MjgyMjBGM0ZEMDBGNDE3Qjk5NzJFMUQ0QTBGNjQx
Njk2RTc5OTkwHhcNMjYwNzI5MDcyODQxWhcNMjYwODA1MDcyODQxWjAYMRYwFAYD
VQQDEw02YTY5YWJhOS01ZjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0osvEf4BY6ldHnihBUrHyqsiUsrDdXr7spzcE5PKiQb5Vk2Gd8gbmkB9DdV1
Lru/wMnLgPEab4y0WK2GKfeUzyURqi72OnsyZxV4pzpYqV+DMMm+syEFtZBQZJqW
wlkRKorb77sEYxeT/TEUNcQX6ZERRIvOQRc0Lkplg4jmtiIT7921TY4r4NBv/7ej
4OtdjQrJLhz5ZgPiR8Gfb0p5hBfF1/1oKYOoRRHrOpXagbdeqC2RPn45oKOpPM9j
bxtjpKG44d14G7v6wfew5zd479rEajbekTqxt5aBmmln8oY/B4tS7uCw2K25jlvM
YPseKqkDiXJepY8PvH9EHgjVRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF/AdoH/
NFIqAKCtWkvoFXb3UBSPMB8GA1UdIwQYMBaAFOYoIg8/0A9Be5ly4dSg9kFpbnmZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTMxRC8yQ0Y2QjhCMEY5
QzkxMUVGQTU0Rjc2MkFDNEY5QUUwMi81aWdpRHpfUUQwRjdtWExoMUtEMlFXbHVl
WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVpZ2lEel9RRDBGN21YTGgxS0QyUVdsdWVaay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RTMxRC8yQ0Y2QjhCMEY5QzkxMUVGQTU0Rjc2MkFDNEY5QUUwMi81aWdpRHpfUUQw
RjdtWExoMUtEMlFXbHVlWmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqA+1fjV5axzq44cPat2TQl1D9jqFSAri7pfep8OFzMqHwY4y5FHsz9k1o9hn
1iviA08BqkMTBVHJjpUDT4Ao8hCcIcpH7sPSekRs4lYasj0cn3QPAE1As+jpQ9GM
fGo7geFMuqdKB+muCxmbYOAG0wLpZRU/3SYNmnpn+RkZ3J/6LiAtfA9ExjCd7MzI
wNrszG+57ULc9cvESwtMlU0sDhZNklwvg2veKMq3dfUfOUEhDvctofCkwO8chTIj
P0b3/uSo0blzrT0T7H0nlltS482Pmxd14LiCn3Xpfq5tKro3TWJM7haHDI3mCF0/
FvR9zGNSNjmmhGQU4bcMHuLv2Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:28:51 2026 by rpki-client