Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
File:                     asqbm3MwkHBq_T-FI8wMwYzWjjE.mft (raw, json)
Hash identifier:          /gxrbArHi2TkaL6mieR6/4RTtxCnXtBFcaLZxV5NsBw=
Subject key identifier:   0C:1C:2E:F2:7A:3C:BC:1D:38:40:AF:72:99:9D:92:20:FB:78:E0:9D
Authority key identifier: 6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31
Certificate issuer:       /CN=A9130EA4/serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31
Certificate serial:       0CA2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
Manifest number:          0C94
Signing time:             Tue 28 Jul 2026 18:49:21 +0000
Manifest this update:     Tue 28 Jul 2026 18:49:20 +0000
Manifest next update:     Tue 04 Aug 2026 18:49:20 +0000
Files and hashes:         1: asqbm3MwkHBq_T-FI8wMwYzWjjE.crl (hash: kgY35xhL+0+76R4gFcxSriIxHKK7uiNXDyRtl6lBVi8=)
                          2: 08754752218611EAA5DF883CC4F9AE02.roa (hash: 9BPurM+bulBYlNNGJgaGdzigQeRd9Aok8jx7Ea5CeBI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl
                          rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:49:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3234 (0xca2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130EA4, serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31
        Validity
            Not Before: Jul 28 18:49:20 2026 GMT
            Not After : Aug  4 18:49:20 2026 GMT
        Subject: CN=6a68f9b1-6da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:d7:6a:a1:9f:c2:c6:30:78:ac:da:ee:15:b8:
                    27:0f:3a:6a:f8:43:20:0e:20:7a:d4:c7:ab:ed:68:
                    32:2e:8e:76:f3:9d:ba:52:62:a3:30:87:6c:56:b6:
                    02:b9:50:f7:b1:35:39:7a:ea:12:73:7b:e7:1b:ab:
                    b7:39:43:1b:03:f4:85:46:22:d1:19:97:25:79:2a:
                    df:83:08:df:b0:e5:31:2f:cf:d4:e6:d7:12:e3:36:
                    c8:22:46:db:5c:9a:c3:46:6a:94:d9:a7:ed:c9:73:
                    f3:80:18:98:1b:0d:42:21:23:da:db:19:bd:1c:9d:
                    9f:62:f7:bf:9e:29:de:8d:72:7d:86:b5:2b:80:31:
                    4f:90:36:2e:b8:b1:cb:04:7b:93:87:7d:76:c4:00:
                    d0:28:26:6e:13:46:4a:5b:f7:a9:98:ea:74:5c:f9:
                    a0:6a:fe:72:5d:41:26:b5:40:b3:06:82:14:b7:d8:
                    f6:c2:6a:9b:f2:25:a6:0b:72:0e:7a:90:d6:02:f5:
                    c6:01:fe:28:48:f8:43:cd:a1:ad:85:75:21:0f:84:
                    38:f9:9f:4e:cb:db:02:af:31:fd:83:fe:3c:42:96:
                    0d:87:ed:53:bc:0a:b0:59:2c:99:89:29:45:d5:77:
                    b4:27:13:18:40:46:bf:1a:65:52:e2:fd:73:1a:92:
                    7d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1C:2E:F2:7A:3C:BC:1D:38:40:AF:72:99:9D:92:20:FB:78:E0:9D
            X509v3 Authority Key Identifier:
                keyid:6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:52:1d:d3:4f:bf:ec:15:4e:37:e3:85:ad:e3:cd:0a:82:8d:
         fa:06:5a:57:c6:51:79:c3:9e:e7:6a:09:b2:be:c3:bd:95:b0:
         d1:86:b7:91:de:29:ee:2f:23:7a:aa:3b:e4:c0:33:37:c3:92:
         b4:c6:ef:26:64:38:e2:00:59:26:c5:65:2e:91:d5:8e:0a:b6:
         52:ce:53:96:ce:2e:59:3d:b1:2f:51:58:bc:2d:ca:17:8a:87:
         f8:33:33:de:21:1b:4a:68:fa:36:3b:30:57:db:28:e0:5d:81:
         c8:75:e6:da:9a:6d:42:49:18:2e:ea:54:63:09:5a:2d:a4:e9:
         3b:62:d4:6b:be:6d:c5:d0:8f:7e:a6:bb:78:21:54:be:1f:dc:
         c2:dc:23:1c:17:e8:ec:ee:eb:7a:59:50:8d:a9:00:9e:3e:a4:
         77:d7:a4:13:f6:8e:e3:c7:ba:2c:0d:aa:af:b7:97:c1:6b:24:
         fc:f5:36:c3:f7:11:96:c8:73:73:0a:ab:d8:a7:e1:cf:88:46:
         a2:6a:9e:a9:1c:1d:7b:2b:ba:99:fd:67:8b:7b:96:a7:6f:5b:
         b8:3d:88:94:f5:b0:f5:8d:10:b9:1a:69:a5:bb:1d:db:b0:4e:
         01:9a:23:f4:fc:fe:6e:38:7a:5b:be:ee:ef:7d:e8:16:8d:bb:
         d3:5c:43:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzBFQTQxMTAvBgNVBAUTKDZBQ0E5QjlCNzMzMDkwNzA2QUZEM0Y4NTIzQ0MwQ0Mx
OENENjhFMzEwHhcNMjYwNzI4MTg0OTIwWhcNMjYwODA0MTg0OTIwWjAYMRYwFAYD
VQQDEw02YTY4ZjliMS02ZGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8tdqoZ/CxjB4rNruFbgnDzpq+EMgDiB61Mer7WgyLo528526UmKjMIdsVrYC
uVD3sTU5euoSc3vnG6u3OUMbA/SFRiLRGZcleSrfgwjfsOUxL8/U5tcS4zbIIkbb
XJrDRmqU2aftyXPzgBiYGw1CISPa2xm9HJ2fYve/ninejXJ9hrUrgDFPkDYuuLHL
BHuTh312xADQKCZuE0ZKW/epmOp0XPmgav5yXUEmtUCzBoIUt9j2wmqb8iWmC3IO
epDWAvXGAf4oSPhDzaGthXUhD4Q4+Z9Oy9sCrzH9g/48QpYNh+1TvAqwWSyZiSlF
1Xe0JxMYQEa/GmVS4v1zGpJ9dQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAwcLvJ6
PLwdOECvcpmdkiD7eOCdMB8GA1UdIwQYMBaAFGrKm5tzMJBwav0/hSPMDMGM1o4x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEVBNC9CNjJDQ0U4MDIx
ODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNNd2tIQnFfVC1GSTh3TXdZeldq
akUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FzcWJtM013a0hCcV9ULUZJOHdNd1l6V2pqRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MEVBNC9CNjJDQ0U4MDIxODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNNd2tI
QnFfVC1GSTh3TXdZeldqakUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHFId00+/7BVON+OFrePNCoKN+gZaV8ZRecOe52oJsr7DvZWw0Ya3kd4p7i8j
eqo75MAzN8OStMbvJmQ44gBZJsVlLpHVjgq2Us5Tls4uWT2xL1FYvC3KF4qH+DMz
3iEbSmj6NjswV9so4F2ByHXm2pptQkkYLupUYwlaLaTpO2LUa75txdCPfqa7eCFU
vh/cwtwjHBfo7O7rellQjakAnj6kd9ekE/aO48e6LA2qr7eXwWsk/PU2w/cRlshz
cwqr2Kfhz4hGomqeqRwdeyu6mf1ni3uWp29buD2IlPWw9Y0QuRpppbsd27BOAZoj
9Pz+bjh6W77u733oFo2701xDtw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:54:12 2026 by rpki-client