Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
File:                     sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft (raw, json)
Hash identifier:          cxAP0R1EGgdxd2tG1T38+VrHVP3L/NCOwLcwtuDPcVg=
Subject key identifier:   92:AF:60:B2:2F:4B:CD:4E:FB:0A:42:4B:91:03:8B:D4:37:72:C5:0D
Authority key identifier: B1:4B:2E:E5:C5:ED:73:6A:B7:36:B2:55:35:86:75:9A:FC:DE:C3:E2
Certificate issuer:       /CN=A913BF1E/serialNumber=B14B2EE5C5ED736AB736B2553586759AFCDEC3E2
Certificate serial:       1057
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
Manifest number:          1039
Signing time:             Tue 28 Jul 2026 17:32:05 +0000
Manifest this update:     Tue 28 Jul 2026 17:32:05 +0000
Manifest next update:     Tue 04 Aug 2026 17:32:05 +0000
Files and hashes:         1: sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl (hash: srTB7CfUKZom+/X6J8BxhM9FmusIIZnL+LBL9t6/cpk=)
                          2: 8EF29168D1ED11F08D3A6B3CC4F9AE02.roa (hash: 4Xje0XiJFLxR2quCCNpe0kCvsRqAV/JFhxiHtPkeXUk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl
                          rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:32:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4183 (0x1057)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BF1E, serialNumber=B14B2EE5C5ED736AB736B2553586759AFCDEC3E2
        Validity
            Not Before: Jul 28 17:32:05 2026 GMT
            Not After : Aug  4 17:32:05 2026 GMT
        Subject: CN=6a68e795-ed18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a9:3c:2d:c8:72:93:dc:66:09:c7:32:8c:b2:
                    b5:63:85:9e:68:61:b7:fe:06:7f:62:db:69:0d:3a:
                    eb:cf:3a:68:02:d5:a7:c9:dd:11:c9:f5:2d:f8:7b:
                    00:58:0c:81:8e:39:09:b9:6c:5a:37:67:63:cf:e9:
                    d3:80:ee:4a:46:be:32:0d:02:30:96:15:9f:6c:9f:
                    c3:2f:a8:9b:4e:e4:84:3f:9c:e7:ed:b4:48:3d:4a:
                    11:37:02:6a:8a:74:c5:f1:19:16:56:1d:8e:ea:6a:
                    b7:2f:b0:87:c2:02:02:a6:81:ac:d7:e9:bd:e7:12:
                    21:8a:06:91:55:21:57:79:de:fc:fc:b0:fe:dc:47:
                    66:83:27:51:a6:71:b9:00:1d:0e:03:82:a7:5c:ca:
                    f6:8d:96:78:25:f9:0a:d3:ea:a7:b0:ca:b2:75:8e:
                    f2:f0:de:0b:b7:97:ad:ac:58:66:5d:5a:c0:2d:17:
                    04:a9:b4:2e:fc:19:40:36:c6:1a:23:bb:9c:57:6b:
                    a4:95:85:0a:b6:21:ff:7e:ca:94:62:1c:f2:e2:4e:
                    e8:87:1e:44:ea:77:ae:30:6b:da:12:fe:f9:3f:e5:
                    23:d6:c6:7d:01:cb:dc:f2:71:fc:3e:b8:7e:ac:50:
                    29:ce:f7:8f:48:97:0c:96:ef:a0:ad:fb:12:f9:91:
                    80:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AF:60:B2:2F:4B:CD:4E:FB:0A:42:4B:91:03:8B:D4:37:72:C5:0D
            X509v3 Authority Key Identifier:
                keyid:B1:4B:2E:E5:C5:ED:73:6A:B7:36:B2:55:35:86:75:9A:FC:DE:C3:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:9c:7f:74:15:96:4f:94:a0:1c:6b:08:4a:f2:bc:06:c5:ee:
         bc:fe:60:65:da:60:dd:c6:77:7c:f4:5f:01:83:d6:91:90:7c:
         66:66:ec:90:29:e0:0c:81:48:30:12:b9:ec:39:5e:50:40:1a:
         c3:2d:28:4f:ff:59:5f:4d:d6:93:64:c5:a5:12:e1:18:f2:0e:
         ae:df:fc:52:5d:92:45:b0:6b:10:0d:49:78:76:2b:f2:af:d6:
         fc:8b:be:02:d9:e8:62:eb:af:ba:36:00:1b:40:8d:b3:23:c5:
         b5:68:1f:08:a4:74:6d:54:a4:30:74:d6:8d:38:d4:61:4b:6d:
         e7:40:ad:4a:67:e1:fe:36:f3:c1:4a:1d:b3:81:e0:56:67:9b:
         17:c1:1d:6f:b0:dd:62:0e:1f:ed:4b:54:07:07:b7:88:5c:69:
         e9:c3:ba:6d:04:1c:7b:e6:a7:8a:8d:ab:13:c3:e2:f0:e4:fe:
         cf:fb:56:1b:74:5f:5f:f5:b5:19:7c:37:99:66:13:08:2e:0c:
         46:d1:42:54:f0:af:74:34:1d:71:2d:9a:20:80:40:b5:cc:08:
         e4:8c:85:d9:ed:9e:fc:a5:cf:b9:76:03:1e:c0:b6:fe:a9:4c:
         20:0b:cf:b0:38:c7:8b:76:c3:dc:56:27:f4:89:22:0b:50:9f:
         39:65:88:74
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0JGMUUxMTAvBgNVBAUTKEIxNEIyRUU1QzVFRDczNkFCNzM2QjI1NTM1ODY3NTlB
RkNERUMzRTIwHhcNMjYwNzI4MTczMjA1WhcNMjYwODA0MTczMjA1WjAYMRYwFAYD
VQQDEw02YTY4ZTc5NS1lZDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq6k8Lchyk9xmCccyjLK1Y4WeaGG3/gZ/YttpDTrrzzpoAtWnyd0RyfUt+HsA
WAyBjjkJuWxaN2djz+nTgO5KRr4yDQIwlhWfbJ/DL6ibTuSEP5zn7bRIPUoRNwJq
inTF8RkWVh2O6mq3L7CHwgICpoGs1+m95xIhigaRVSFXed78/LD+3EdmgydRpnG5
AB0OA4KnXMr2jZZ4JfkK0+qnsMqydY7y8N4Lt5etrFhmXVrALRcEqbQu/BlANsYa
I7ucV2uklYUKtiH/fsqUYhzy4k7ohx5E6neuMGvaEv75P+Uj1sZ9Acvc8nH8Prh+
rFApzvePSJcMlu+grfsS+ZGAawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJKvYLIv
S81O+wpCS5EDi9Q3csUNMB8GA1UdIwQYMBaAFLFLLuXF7XNqtzayVTWGdZr83sPi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkYxRS9EQkIyQkY2NjZF
NkYxMUU5QUEwMTdDMzNDNEY5QUUwMi9zVXN1NWNYdGMycTNOckpWTllaMW12emV3
LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NVc3U1Y1h0YzJxM05ySlZOWVoxbXZ6ZXctSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QkYxRS9EQkIyQkY2NjZFNkYxMUU5QUEwMTdDMzNDNEY5QUUwMi9zVXN1NWNYdGMy
cTNOckpWTllaMW12emV3LUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOpx/dBWWT5SgHGsISvK8BsXuvP5gZdpg3cZ3fPRfAYPWkZB8ZmbskCngDIFI
MBK57DleUEAawy0oT/9ZX03Wk2TFpRLhGPIOrt/8Ul2SRbBrEA1JeHYr8q/W/Iu+
AtnoYuuvujYAG0CNsyPFtWgfCKR0bVSkMHTWjTjUYUtt50CtSmfh/jbzwUods4Hg
VmebF8Edb7DdYg4f7UtUBwe3iFxp6cO6bQQce+anio2rE8Pi8OT+z/tWG3RfX/W1
GXw3mWYTCC4MRtFCVPCvdDQdcS2aIIBAtcwI5IyF2e2e/KXPuXYDHsC2/qlMIAvP
sDjHi3bD3FYn9IkiC1CfOWWIdA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:11:52 2026 by rpki-client