Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft
File:                     ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft (raw, json)
Hash identifier:          VNq7qRkkMhy+mwxP03ucPgel+aakO3ISZMGC1guQz7M=
Subject key identifier:   53:80:19:0A:6B:8D:C8:7E:43:0A:1F:41:A4:60:09:FD:F5:9D:54:82
Authority key identifier: B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6
Certificate issuer:       /CN=A9131067/serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6
Certificate serial:       0755
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft
Manifest number:          0722
Signing time:             Tue 28 Jul 2026 22:48:43 +0000
Manifest this update:     Tue 28 Jul 2026 22:48:43 +0000
Manifest next update:     Tue 04 Aug 2026 22:48:43 +0000
Files and hashes:         1: ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl (hash: 6uuT7c0m8Zvs/sc3S5eVv2oE9lgFtMFpyoIptd+daU8=)
                          2: BD9AE4AE55D111F0A7CFBB2BC4F9AE02.roa (hash: I0fdKsHvXdyMww8h7AjfWaIz+Z8MPQG9V3zDhTuhz2k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl
                          rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 22:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1877 (0x755)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131067, serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6
        Validity
            Not Before: Jul 28 22:48:43 2026 GMT
            Not After : Aug  4 22:48:43 2026 GMT
        Subject: CN=6a6931cb-60da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:82:ac:80:c8:0a:5f:95:37:69:e9:02:2b:75:
                    cb:58:07:0a:12:71:53:d5:a3:20:f4:18:fb:8d:11:
                    4c:7c:f0:40:2b:a3:59:ea:e7:92:fa:03:8a:86:5d:
                    40:78:13:4f:c0:d9:d8:22:9f:49:fe:ce:f8:48:6a:
                    70:c8:80:b2:7d:0f:91:a5:9f:3a:75:ba:70:3a:7c:
                    14:cd:bb:fa:d9:64:23:43:bd:39:c4:4c:56:45:a1:
                    7c:7e:da:e0:54:2f:53:a4:75:8a:d0:d8:1b:68:ca:
                    bd:65:03:11:c2:9a:bc:d0:92:15:8b:77:e7:c8:2d:
                    57:e4:27:81:a8:48:6a:c4:b2:98:40:cb:b2:45:89:
                    ea:f8:28:9a:8d:0b:8e:ef:f2:f3:7d:1d:6b:1c:8a:
                    d8:3f:99:8f:e7:dd:0e:ed:31:96:df:d3:43:3f:a6:
                    0f:97:2c:fa:6b:c2:28:b1:05:b2:4b:58:95:11:58:
                    11:37:99:03:21:fd:c0:aa:8b:a4:3d:3b:12:18:87:
                    59:b3:ac:ba:b3:52:29:a6:7f:52:fb:08:97:d4:3c:
                    8d:3d:1a:d2:e6:18:5a:d2:0e:2c:36:85:96:6e:4c:
                    f6:bb:b3:9c:87:28:a2:c0:95:2c:28:d6:70:42:36:
                    38:e5:54:cc:5f:d9:06:6e:d8:67:93:a4:fb:82:11:
                    95:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:80:19:0A:6B:8D:C8:7E:43:0A:1F:41:A4:60:09:FD:F5:9D:54:82
            X509v3 Authority Key Identifier:
                keyid:B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b8:6f:c6:f4:2d:cd:88:ac:54:96:ee:01:50:5b:cc:f2:ad:
         a7:67:0a:ca:a0:db:26:6c:0b:ee:79:17:17:fd:36:b0:d1:c5:
         b0:d5:70:ba:0c:c6:85:76:71:c0:98:aa:bf:3b:1d:0e:76:ea:
         6f:84:53:73:a9:d9:a2:00:23:1a:f9:87:a3:a9:78:69:88:ce:
         ff:2c:92:2b:fb:7b:44:54:77:74:77:a2:5e:0a:1d:79:94:d9:
         37:19:bf:17:87:b1:cc:36:64:e5:f4:ec:6b:08:b8:47:f3:d9:
         6e:d6:64:9d:b8:d0:f4:25:e9:22:bf:e2:35:71:31:11:7f:b8:
         62:a7:34:a2:b9:42:23:a0:cf:72:28:dd:6f:c5:69:a0:a6:57:
         85:0c:57:d2:2d:b8:20:0e:13:e6:82:7e:8b:4a:57:fc:2b:51:
         09:21:25:b1:d4:27:75:fa:e2:6d:d7:9b:34:d0:d6:17:32:3e:
         b7:03:87:ff:4e:f3:32:02:e2:ef:24:31:65:c9:69:e1:22:a6:
         bd:15:4c:69:fe:19:e2:09:6c:5f:58:22:f0:8e:38:08:1d:26:
         8e:82:97:5a:b9:df:73:2c:5f:91:b8:da:6a:46:34:26:3b:2f:
         5f:2a:71:51:80:5b:d9:68:5e:33:ed:6d:1f:35:94:7f:81:e8:
         c8:92:7b:c9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzEwNjcxMTAvBgNVBAUTKEIyQzQ3QzJFM0Q0RkM3RURDOTlBRTIwRTQ2QjE3NEIx
MEEwMzc1RjYwHhcNMjYwNzI4MjI0ODQzWhcNMjYwODA0MjI0ODQzWjAYMRYwFAYD
VQQDEw02YTY5MzFjYi02MGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArYKsgMgKX5U3aekCK3XLWAcKEnFT1aMg9Bj7jRFMfPBAK6NZ6ueS+gOKhl1A
eBNPwNnYIp9J/s74SGpwyICyfQ+RpZ86dbpwOnwUzbv62WQjQ705xExWRaF8ftrg
VC9TpHWK0NgbaMq9ZQMRwpq80JIVi3fnyC1X5CeBqEhqxLKYQMuyRYnq+CiajQuO
7/LzfR1rHIrYP5mP590O7TGW39NDP6YPlyz6a8IosQWyS1iVEVgRN5kDIf3Aqouk
PTsSGIdZs6y6s1Ippn9S+wiX1DyNPRrS5hha0g4sNoWWbkz2u7OchyiiwJUsKNZw
QjY45VTMX9kGbthnk6T7ghGViQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFOAGQpr
jch+QwofQaRgCf31nVSCMB8GA1UdIwQYMBaAFLLEfC49T8ftyZriDkaxdLEKA3X2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTA2Ny84REQwMEY1NkE2
QUQxMUVCODI3RkMxMUNDNEY5QUUwMi9zc1I4TGoxUHgtM0ptdUlPUnJGMHNRb0Rk
ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NzUjhMajFQeC0zSm11SU9SckYwc1FvRGRmWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTA2Ny84REQwMEY1NkE2QUQxMUVCODI3RkMxMUNDNEY5QUUwMi9zc1I4TGoxUHgt
M0ptdUlPUnJGMHNRb0RkZlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAALhvxvQtzYisVJbuAVBbzPKtp2cKyqDbJmwL7nkXF/02sNHFsNVwugzGhXZx
wJiqvzsdDnbqb4RTc6nZogAjGvmHo6l4aYjO/yySK/t7RFR3dHeiXgodeZTZNxm/
F4exzDZk5fTsawi4R/PZbtZknbjQ9CXpIr/iNXExEX+4Yqc0orlCI6DPcijdb8Vp
oKZXhQxX0i24IA4T5oJ+i0pX/CtRCSElsdQndfribdebNNDWFzI+twOH/07zMgLi
7yQxZclp4SKmvRVMaf4Z4glsX1gi8I44CB0mjoKXWrnfcyxfkbjaakY0JjsvXypx
UYBb2WheM+1tHzWUf4HoyJJ7yQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:00:28 2026 by rpki-client