Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.mft
File:                     -vIwziL75k9oiZnvfNiU3b2biSU.mft (raw, json)
Hash identifier:          wb6uMrj74E1Ej9aXJhMOs2ve53RMvR9agoLDebO2uug=
Subject key identifier:   5B:C9:78:D7:A2:7C:43:C7:B0:3E:4B:CB:F7:3B:FA:8F:6F:59:D8:F3
Authority key identifier: FA:F2:30:CE:22:FB:E6:4F:68:89:99:EF:7C:D8:94:DD:BD:9B:89:25
Certificate issuer:       /CN=A913841B/serialNumber=FAF230CE22FBE64F688999EF7CD894DDBD9B8925
Certificate serial:       C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-vIwziL75k9oiZnvfNiU3b2biSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.mft
Manifest number:          C4
Signing time:             Mon 27 Jul 2026 09:03:07 +0000
Manifest this update:     Mon 27 Jul 2026 09:03:07 +0000
Manifest next update:     Mon 03 Aug 2026 09:03:07 +0000
Files and hashes:         1: -vIwziL75k9oiZnvfNiU3b2biSU.crl (hash: 9+UCFMTtcNRLkc2qtRfDh7jJgIU+tS1l+RZF53JUuig=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.crl
                          rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-vIwziL75k9oiZnvfNiU3b2biSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913841B, serialNumber=FAF230CE22FBE64F688999EF7CD894DDBD9B8925
        Validity
            Not Before: Jul 27 09:03:07 2026 GMT
            Not After : Aug  3 09:03:07 2026 GMT
        Subject: CN=6a671ecb-0116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f1:68:21:68:b9:4d:9d:cc:24:53:03:1b:55:
                    25:b9:35:9c:99:ea:0b:8d:38:05:60:a4:be:95:b9:
                    2b:27:fc:34:21:03:04:2e:d4:95:ee:01:c9:44:56:
                    10:f3:76:71:05:5f:6e:25:30:fd:84:db:2f:cb:80:
                    67:89:90:46:3e:bb:15:fd:8d:de:d8:dc:3d:b4:a3:
                    51:b2:63:ea:8b:fd:8a:44:2b:67:ad:8a:40:cc:01:
                    e8:72:81:bb:f6:b7:d8:fb:1b:65:61:34:16:b7:58:
                    af:ba:85:1c:c8:0d:d1:71:65:9e:1e:f6:cd:03:24:
                    87:3d:e3:90:e9:a7:4d:88:ae:59:9b:3a:cd:4a:04:
                    7e:44:92:44:72:43:2e:c4:5d:55:95:d3:64:eb:40:
                    00:ef:b1:4d:3a:b0:68:a4:f5:bb:56:90:6a:18:89:
                    a4:5a:35:91:4f:65:dc:37:68:6c:c4:37:e2:0d:74:
                    a8:98:d4:ee:56:24:e3:0c:95:20:1e:78:40:c4:19:
                    6d:f7:dd:18:fe:de:94:21:70:aa:1f:45:1b:48:21:
                    2f:7a:8d:f0:d9:95:41:c3:e9:9b:3e:83:6c:57:0e:
                    29:e9:ad:85:5f:c9:5c:c2:ef:ae:a5:d6:f5:8c:f4:
                    31:3f:64:83:2c:09:88:36:ca:bb:9e:4e:98:d7:23:
                    f6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C9:78:D7:A2:7C:43:C7:B0:3E:4B:CB:F7:3B:FA:8F:6F:59:D8:F3
            X509v3 Authority Key Identifier:
                keyid:FA:F2:30:CE:22:FB:E6:4F:68:89:99:EF:7C:D8:94:DD:BD:9B:89:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-vIwziL75k9oiZnvfNiU3b2biSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:a0:5c:a2:56:a2:31:b0:7c:92:9b:10:2f:da:66:28:3d:b9:
         db:25:6f:bf:e6:64:aa:4a:06:7f:cf:63:86:9d:5f:7f:18:9c:
         df:19:57:03:dd:09:65:d5:73:99:53:b4:f3:ac:aa:0b:eb:59:
         81:90:34:c8:b8:73:0b:79:a7:88:ba:24:87:81:3d:3f:35:3f:
         7f:44:ec:6a:f8:f9:0d:12:d6:d3:de:fd:66:43:89:7d:f9:d0:
         62:f9:fa:f5:0b:a3:3c:e9:a8:3e:08:ab:53:f5:4d:42:fb:47:
         ee:78:1a:d0:7d:0a:c4:5a:8e:76:7a:54:38:6d:8e:54:d5:3a:
         f9:f5:24:f1:16:a4:fa:dc:84:f6:31:25:73:b6:d5:85:8b:bb:
         62:27:ca:05:23:7e:18:73:44:3a:c6:c6:0a:ef:ac:4a:00:37:
         b2:f3:76:71:e9:c1:ee:29:ad:b2:fa:ec:a0:9c:62:e2:78:03:
         bf:a1:87:5e:85:cf:da:d0:34:0d:1c:92:2a:23:94:00:b2:f0:
         a0:19:c8:2f:64:fc:3c:20:c1:92:d7:fd:5a:4b:cd:d3:ee:0b:
         3f:7b:22:d1:43:e1:a9:e6:14:74:79:25:73:34:b5:de:ee:0c:
         49:dd:d2:d8:8d:ba:54:cc:e5:c1:9a:6b:ca:c1:a6:4e:cc:a6:
         77:33:51:cf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzg0MUIxMTAvBgNVBAUTKEZBRjIzMENFMjJGQkU2NEY2ODg5OTlFRjdDRDg5NERE
QkQ5Qjg5MjUwHhcNMjYwNzI3MDkwMzA3WhcNMjYwODAzMDkwMzA3WjAYMRYwFAYD
VQQDEw02YTY3MWVjYi0wMTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2/FoIWi5TZ3MJFMDG1UluTWcmeoLjTgFYKS+lbkrJ/w0IQMELtSV7gHJRFYQ
83ZxBV9uJTD9hNsvy4BniZBGPrsV/Y3e2Nw9tKNRsmPqi/2KRCtnrYpAzAHocoG7
9rfY+xtlYTQWt1ivuoUcyA3RcWWeHvbNAySHPeOQ6adNiK5ZmzrNSgR+RJJEckMu
xF1VldNk60AA77FNOrBopPW7VpBqGImkWjWRT2XcN2hsxDfiDXSomNTuViTjDJUg
HnhAxBlt990Y/t6UIXCqH0UbSCEveo3w2ZVBw+mbPoNsVw4p6a2FX8lcwu+updb1
jPQxP2SDLAmINsq7nk6Y1yP2yQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFvJeNei
fEPHsD5Ly/c7+o9vWdjzMB8GA1UdIwQYMBaAFPryMM4i++ZPaImZ73zYlN29m4kl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODQxQi9ENUYxMThFRTYw
QzAxMUYwQTJGMUVBMkNDNEY5QUUwMi8tdkl3emlMNzVrOW9pWm52Zk5pVTNiMmJp
U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy12SXd6aUw3NWs5b2labnZmTmlVM2IyYmlTVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODQxQi9ENUYxMThFRTYwQzAxMUYwQTJGMUVBMkNDNEY5QUUwMi8tdkl3emlMNzVr
OW9pWm52Zk5pVTNiMmJpU1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAaBcolaiMbB8kpsQL9pmKD252yVvv+ZkqkoGf89jhp1ffxic3xlXA90JZdVz
mVO086yqC+tZgZA0yLhzC3mniLokh4E9PzU/f0Tsavj5DRLW0979ZkOJffnQYvn6
9QujPOmoPgirU/VNQvtH7nga0H0KxFqOdnpUOG2OVNU6+fUk8Rak+tyE9jElc7bV
hYu7YifKBSN+GHNEOsbGCu+sSgA3svN2cenB7imtsvrsoJxi4ngDv6GHXoXP2tA0
DRySKiOUALLwoBnIL2T8PCDBktf9WkvN0+4LP3si0UPhqeYUdHklczS13u4MSd3S
2I26VMzlwZprysGmTsymdzNRzw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:19 2026 by rpki-client