Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/RkGQf-X0c_GJBtRqogMH7e2hnJ0.mft
File:                     RkGQf-X0c_GJBtRqogMH7e2hnJ0.mft (raw, json)
Hash identifier:          pTqLnQDMS3INsGqlMJaUHhlKr+GUrN3Nl9lVPfuSmfs=
Subject key identifier:   24:25:92:54:F1:75:16:83:E7:48:8C:E1:5E:76:49:42:A6:45:BE:19
Authority key identifier: 46:41:90:7F:E5:F4:73:F1:89:06:D4:6A:A2:03:07:ED:ED:A1:9C:9D
Certificate issuer:       /CN=A913647F/serialNumber=4641907FE5F473F18906D46AA20307EDEDA19C9D
Certificate serial:       0166
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkGQf-X0c_GJBtRqogMH7e2hnJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/RkGQf-X0c_GJBtRqogMH7e2hnJ0.mft
Manifest number:          0155
Signing time:             Mon 27 Jul 2026 07:03:42 +0000
Manifest this update:     Mon 27 Jul 2026 07:03:41 +0000
Manifest next update:     Mon 03 Aug 2026 07:03:41 +0000
Files and hashes:         1: RkGQf-X0c_GJBtRqogMH7e2hnJ0.crl (hash: fXxNOvacYHflcy0KG2R3cc+PPdErqrlcc1crJkMXCUI=)
                          2: 88A6DB9086E211EF82ACA725C4F9AE02.roa (hash: IeI+N9Kyix7ZqzuViV7i74fTiEZyIK3quTRpR9SQXk0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/RkGQf-X0c_GJBtRqogMH7e2hnJ0.crl
                          rsync://rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/RkGQf-X0c_GJBtRqogMH7e2hnJ0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkGQf-X0c_GJBtRqogMH7e2hnJ0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913647F, serialNumber=4641907FE5F473F18906D46AA20307EDEDA19C9D
        Validity
            Not Before: Jul 27 07:03:41 2026 GMT
            Not After : Aug  3 07:03:41 2026 GMT
        Subject: CN=6a6702ce-3035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4e:e0:78:19:14:49:d1:a7:99:fe:a9:1f:63:
                    17:78:32:5a:eb:14:67:aa:0f:3e:b2:bc:65:6f:17:
                    44:1f:5c:f5:0a:ae:2a:8c:e4:4a:3a:07:1f:dc:2a:
                    8f:9f:84:a7:aa:60:c5:20:81:4a:99:c4:7c:6d:7b:
                    19:68:40:ca:43:b0:79:72:3a:c0:47:a8:83:c6:8e:
                    42:1b:7f:ac:0f:1f:dd:11:9e:75:7a:84:d7:6c:39:
                    67:f9:31:a6:f7:16:45:66:e4:eb:c3:d7:3a:f1:22:
                    08:02:d2:95:30:41:36:83:79:1a:e7:ae:d7:6c:2a:
                    84:d9:0b:39:89:a2:b1:76:f6:fc:78:97:3c:a6:e4:
                    eb:60:ba:c9:a4:5e:1d:7a:77:8a:da:c8:65:ee:bd:
                    be:90:6c:f1:35:61:0e:0f:ba:bd:d4:56:08:37:11:
                    82:e1:1e:48:0e:53:dc:27:5d:38:fb:eb:bf:fa:aa:
                    1e:e6:e7:5d:3a:44:d4:78:08:2c:12:71:59:cd:a7:
                    0b:03:37:7e:01:cf:42:46:6f:d6:de:84:58:d6:a1:
                    75:55:78:14:87:21:83:a1:23:6e:97:39:bb:cf:50:
                    c1:32:51:8e:f2:cb:7c:a6:77:20:09:78:a7:b6:fd:
                    8c:5c:5a:bf:23:f4:4b:cf:68:70:a3:30:36:84:32:
                    eb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:25:92:54:F1:75:16:83:E7:48:8C:E1:5E:76:49:42:A6:45:BE:19
            X509v3 Authority Key Identifier:
                keyid:46:41:90:7F:E5:F4:73:F1:89:06:D4:6A:A2:03:07:ED:ED:A1:9C:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/RkGQf-X0c_GJBtRqogMH7e2hnJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkGQf-X0c_GJBtRqogMH7e2hnJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/RkGQf-X0c_GJBtRqogMH7e2hnJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e4:57:61:50:c2:e2:37:fd:9f:64:b5:13:d7:41:cb:28:87:
         c0:5b:c4:af:0d:eb:f7:4f:1c:fa:87:93:96:6d:6c:37:37:33:
         86:c2:df:2f:73:77:55:3a:fb:50:c3:de:fc:d7:47:cf:b5:d3:
         de:cb:a9:bb:72:1e:1e:ae:cf:ba:ea:5a:3a:17:37:e0:84:82:
         13:a7:0b:2a:63:c4:2b:f9:4a:43:03:b6:e4:86:b5:63:a5:f6:
         ba:a4:75:3e:95:0e:91:b3:b9:bf:43:df:5c:c5:66:7a:61:e4:
         04:b0:41:60:54:a1:27:07:a5:d7:4e:2f:45:01:3d:12:07:bb:
         86:57:63:7a:1e:34:73:35:09:22:0b:7b:e7:fe:28:6c:33:c3:
         34:32:d1:93:db:e4:50:7a:8f:fc:d2:86:ab:35:ef:60:fa:a1:
         93:b6:1b:b3:a4:e9:e6:3a:a4:f5:eb:c8:83:16:3b:ea:10:6a:
         0e:0f:62:fc:e6:35:7b:51:03:d6:02:fd:db:6d:64:ac:02:28:
         92:1e:04:a3:fd:ca:fd:94:dc:34:25:68:a4:c9:f2:01:34:9f:
         a6:65:b0:92:f2:1e:75:f6:ef:a9:1b:36:14:c9:a7:5f:26:12:
         2d:60:7a:7a:6b:0f:90:a7:13:ee:aa:88:f3:38:db:dd:62:b1:
         11:4d:04:42
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzY0N0YxMTAvBgNVBAUTKDQ2NDE5MDdGRTVGNDczRjE4OTA2RDQ2QUEyMDMwN0VE
RURBMTlDOUQwHhcNMjYwNzI3MDcwMzQxWhcNMjYwODAzMDcwMzQxWjAYMRYwFAYD
VQQDEw02YTY3MDJjZS0zMDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjk7geBkUSdGnmf6pH2MXeDJa6xRnqg8+srxlbxdEH1z1Cq4qjORKOgcf3CqP
n4SnqmDFIIFKmcR8bXsZaEDKQ7B5cjrAR6iDxo5CG3+sDx/dEZ51eoTXbDln+TGm
9xZFZuTrw9c68SIIAtKVMEE2g3ka567XbCqE2Qs5iaKxdvb8eJc8puTrYLrJpF4d
eneK2shl7r2+kGzxNWEOD7q91FYINxGC4R5IDlPcJ104++u/+qoe5uddOkTUeAgs
EnFZzacLAzd+Ac9CRm/W3oRY1qF1VXgUhyGDoSNulzm7z1DBMlGO8st8pncgCXin
tv2MXFq/I/RLz2hwozA2hDLrwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCQlklTx
dRaD50iM4V52SUKmRb4ZMB8GA1UdIwQYMBaAFEZBkH/l9HPxiQbUaqIDB+3toZyd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjQ3Ri9COTFBQUE3NDg2
REIxMUVGQkE0RDVGMjZDNEY5QUUwMi9Sa0dRZi1YMGNfR0pCdFJxb2dNSDdlMmhu
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1JrR1FmLVgwY19HSkJ0UnFvZ01IN2UyaG5KMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjQ3Ri9COTFBQUE3NDg2REIxMUVGQkE0RDVGMjZDNEY5QUUwMi9Sa0dRZi1YMGNf
R0pCdFJxb2dNSDdlMmhuSjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAuRXYVDC4jf9n2S1E9dByyiHwFvErw3r908c+oeTlm1sNzczhsLfL3N3VTr7
UMPe/NdHz7XT3supu3IeHq7PuupaOhc34ISCE6cLKmPEK/lKQwO25Ia1Y6X2uqR1
PpUOkbO5v0PfXMVmemHkBLBBYFShJwel104vRQE9Ege7hldjeh40czUJIgt75/4o
bDPDNDLRk9vkUHqP/NKGqzXvYPqhk7Ybs6Tp5jqk9evIgxY76hBqDg9i/OY1e1ED
1gL9221krAIokh4Eo/3K/ZTcNCVopMnyATSfpmWwkvIedfbvqRs2FMmnXyYSLWB6
emsPkKcT7qqI8zjb3WKxEU0EQg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:38 2026 by rpki-client