Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/cg3tscVvVSBB9EiED3YVdts3rfI.mft
File:                     cg3tscVvVSBB9EiED3YVdts3rfI.mft (raw, json)
Hash identifier:          O+L6tRzprTSPnjDQP4hM6hgEafUqocck8F+vS0L5KOs=
Subject key identifier:   05:B1:7C:A2:7A:25:AD:23:7E:D8:48:5E:9B:03:8E:7B:DB:59:37:25
Authority key identifier: 72:0D:ED:B1:C5:6F:55:20:41:F4:48:84:0F:76:15:76:DB:37:AD:F2
Certificate issuer:       /CN=A9135597/serialNumber=720DEDB1C56F552041F448840F761576DB37ADF2
Certificate serial:       16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cg3tscVvVSBB9EiED3YVdts3rfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/cg3tscVvVSBB9EiED3YVdts3rfI.mft
Manifest number:          02B4
Signing time:             Mon 27 Jul 2026 03:06:13 +0000
Manifest this update:     Mon 27 Jul 2026 03:06:13 +0000
Manifest next update:     Mon 03 Aug 2026 03:06:13 +0000
Files and hashes:         1: cg3tscVvVSBB9EiED3YVdts3rfI.crl (hash: GrFiaegj8VH16joM7Eft+GY3yo6FgEk24aNH45PCb9Y=)
                          2: 1A47E4986DE811F1A234B57A5CA30FBC.roa (hash: 1gx+6aoEh7HCS4ZBkElgy0tGymufvKOntntuWXEXFU4=)
                          3: 19C7B1C46DE811F1A234B57A5CA30FBC.roa (hash: GKp1QODQO8zjgMFMSHC7XIbNh/54vtscAesJ+Vx1oaY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/cg3tscVvVSBB9EiED3YVdts3rfI.crl
                          rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/cg3tscVvVSBB9EiED3YVdts3rfI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cg3tscVvVSBB9EiED3YVdts3rfI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135597, serialNumber=720DEDB1C56F552041F448840F761576DB37ADF2
        Validity
            Not Before: Jul 27 03:06:13 2026 GMT
            Not After : Aug  3 03:06:13 2026 GMT
        Subject: CN=6a66cb25-85ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:67:fe:0c:52:96:41:21:f4:8e:b3:b1:9b:4e:
                    02:10:8c:c6:a8:8a:cf:d7:62:dc:8e:28:e4:6e:3a:
                    73:3f:76:5e:6f:ce:bb:24:f1:12:a1:0b:04:c9:ee:
                    ad:cf:88:b6:d0:07:9a:26:fa:63:e9:3a:30:ca:ac:
                    51:8a:56:f8:09:f4:a1:1c:0e:78:71:73:70:0d:5c:
                    83:28:96:d2:0f:7c:7e:8d:50:8d:37:99:43:06:49:
                    d9:35:10:47:05:36:29:03:d3:7f:4b:b7:9e:8d:28:
                    ef:63:f5:e2:8c:46:94:a5:f5:44:1e:4e:b7:1d:b7:
                    40:67:3a:1e:d4:7e:89:3c:5e:43:60:24:a3:ea:b0:
                    97:17:c3:04:8a:cf:99:b7:b0:a3:3b:c0:ff:24:de:
                    18:85:3c:73:8d:62:ec:f6:9c:0c:bf:80:48:df:58:
                    ac:87:4a:34:fe:14:5b:d8:08:40:47:68:cb:9c:76:
                    ac:cb:c7:ba:aa:dc:a1:8f:42:6d:70:bf:06:dd:8d:
                    07:92:e3:48:05:2e:18:03:52:74:23:e4:8c:4e:be:
                    2a:cf:da:26:22:a9:78:ab:7f:70:30:24:93:9a:5d:
                    db:ac:2f:a0:49:20:62:d0:18:b2:dc:e5:6a:04:ac:
                    d3:98:27:80:8d:7a:3c:a5:75:6e:e0:c0:84:4a:b2:
                    9a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B1:7C:A2:7A:25:AD:23:7E:D8:48:5E:9B:03:8E:7B:DB:59:37:25
            X509v3 Authority Key Identifier:
                keyid:72:0D:ED:B1:C5:6F:55:20:41:F4:48:84:0F:76:15:76:DB:37:AD:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/cg3tscVvVSBB9EiED3YVdts3rfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cg3tscVvVSBB9EiED3YVdts3rfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/cg3tscVvVSBB9EiED3YVdts3rfI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:72:af:c3:5c:c1:75:dd:4c:f1:09:8a:f9:f3:1f:ca:9e:bf:
         be:fc:ae:a9:b5:c9:85:51:dd:54:6e:e0:fe:93:b5:93:c0:fe:
         c4:e5:11:f0:31:6d:1c:5d:d4:db:01:e8:e6:f8:ae:91:5c:8c:
         8b:e2:84:d8:14:12:92:93:05:5a:35:e7:7e:ac:85:c4:eb:1c:
         54:cc:f4:00:ff:1a:1c:5c:ec:24:28:69:23:3f:51:7e:ad:b8:
         7a:15:28:05:2b:8a:5a:0a:c6:92:b9:c8:ef:8d:9e:24:93:3b:
         af:7b:c0:d0:f1:ad:d7:d6:a9:1c:aa:e7:6b:34:0d:c1:2a:90:
         6f:b6:82:f1:d2:fe:9a:8a:da:fc:ac:fe:13:6d:04:bd:e0:56:
         2b:94:61:34:06:44:3e:e6:0e:a0:6a:16:6a:db:8b:ee:c6:d1:
         52:0a:17:42:e7:20:76:fb:28:f4:dc:07:54:e6:a7:39:4a:1f:
         51:5e:46:cf:3e:ef:27:16:30:78:a5:9d:fa:25:de:39:6f:e8:
         f6:31:60:23:69:d0:77:1e:70:a4:da:c7:0c:f6:55:3a:6e:75:
         61:9c:c5:21:20:ff:6b:f9:5e:da:e5:30:4f:81:8c:ba:0d:e1:
         9f:a4:3c:a9:3d:9f:8e:0b:e7:4c:c9:1a:54:1a:41:80:6e:5c:
         ab:5a:6d:b8
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
NTU5NzExMC8GA1UEBRMoNzIwREVEQjFDNTZGNTUyMDQxRjQ0ODg0MEY3NjE1NzZE
QjM3QURGMjAeFw0yNjA3MjcwMzA2MTNaFw0yNjA4MDMwMzA2MTNaMBgxFjAUBgNV
BAMTDTZhNjZjYjI1LTg1YWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDOZ/4MUpZBIfSOs7GbTgIQjMaois/XYtyOKORuOnM/dl5vzrsk8RKhCwTJ7q3P
iLbQB5om+mPpOjDKrFGKVvgJ9KEcDnhxc3ANXIMoltIPfH6NUI03mUMGSdk1EEcF
NikD039Lt56NKO9j9eKMRpSl9UQeTrcdt0BnOh7Ufok8XkNgJKPqsJcXwwSKz5m3
sKM7wP8k3hiFPHONYuz2nAy/gEjfWKyHSjT+FFvYCEBHaMucdqzLx7qq3KGPQm1w
vwbdjQeS40gFLhgDUnQj5IxOvirP2iYiqXirf3AwJJOaXdusL6BJIGLQGLLc5WoE
rNOYJ4CNejyldW7gwIRKspqtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUBbF8onol
rSN+2EhemwOOe9tZNyUwHwYDVR0jBBgwFoAUcg3tscVvVSBB9EiED3YVdts3rfIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1NTk3L0U5NzA3RDFFOUEz
QTExRUQ4MUIxMjcxREM0RjlBRTAyL2NnM3RzY1Z2VlNCQjlFaUVEM1lWZHRzM3Jm
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvY2czdHNjVnZWU0JCOUVpRUQzWVZkdHMzcmZJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1
NTk3L0U5NzA3RDFFOUEzQTExRUQ4MUIxMjcxREM0RjlBRTAyL2NnM3RzY1Z2VlNC
QjlFaUVEM1lWZHRzM3JmSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCMcq/DXMF13UzxCYr58x/Knr++/K6ptcmFUd1UbuD+k7WTwP7E5RHwMW0cXdTb
Aejm+K6RXIyL4oTYFBKSkwVaNed+rIXE6xxUzPQA/xocXOwkKGkjP1F+rbh6FSgF
K4paCsaSucjvjZ4kkzuve8DQ8a3X1qkcqudrNA3BKpBvtoLx0v6aitr8rP4TbQS9
4FYrlGE0BkQ+5g6gahZq24vuxtFSChdC5yB2+yj03AdU5qc5Sh9RXkbPPu8nFjB4
pZ36Jd45b+j2MWAjadB3HnCk2scM9lU6bnVhnMUhIP9r+V7a5TBPgYy6DeGfpDyp
PZ+OC+dMyRpUGkGAblyrWm24
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:04:02 2026 by rpki-client