Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E42C/0F8B6ACE001111F1892C277E406F56BC/ClvdO0-5-Mviogt7R_zLS4UwJTc.mft
File:                     ClvdO0-5-Mviogt7R_zLS4UwJTc.mft (raw, json)
Hash identifier:          yFHehCQjEx6C/7Dc33YCHo55fbrrQB60ye+k8YeXq/E=
Subject key identifier:   78:40:BB:B0:FD:61:16:EF:AA:29:0B:95:D1:2E:6B:83:73:82:B9:C3
Authority key identifier: 0A:5B:DD:3B:4F:B9:F8:CB:E2:A2:0B:7B:47:FC:CB:4B:85:30:25:37
Certificate issuer:       /CN=A913E42C/serialNumber=0A5BDD3B4FB9F8CBE2A20B7B47FCCB4B85302537
Certificate serial:       72
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ClvdO0-5-Mviogt7R_zLS4UwJTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E42C/0F8B6ACE001111F1892C277E406F56BC/ClvdO0-5-Mviogt7R_zLS4UwJTc.mft
Manifest number:          67
Signing time:             Tue 28 Jul 2026 12:35:22 +0000
Manifest this update:     Tue 28 Jul 2026 12:35:22 +0000
Manifest next update:     Tue 04 Aug 2026 12:35:22 +0000
Files and hashes:         1: ClvdO0-5-Mviogt7R_zLS4UwJTc.crl (hash: wH1GE2TAckqddaE8Thgg9anhCZOW7O20WQx3QenZhhw=)
                          2: CA77C1768A8011F19BC566E64611F970.roa (hash: Un9zN7NUoVkyJNJb8hIzxUZZd6XPLvkA8K83xuVn1AM=)
                          3: 4CC7C93C00F711F194E0B0C53C6F56BC.roa (hash: 7vAVjvl3vUeCtEH/2NqH9j2x3y9M77GMQ2JCNqdOMHA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E42C/0F8B6ACE001111F1892C277E406F56BC/ClvdO0-5-Mviogt7R_zLS4UwJTc.crl
                          rsync://rpki.apnic.net/member_repository/A913E42C/0F8B6ACE001111F1892C277E406F56BC/ClvdO0-5-Mviogt7R_zLS4UwJTc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ClvdO0-5-Mviogt7R_zLS4UwJTc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 12:35:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E42C, serialNumber=0A5BDD3B4FB9F8CBE2A20B7B47FCCB4B85302537
        Validity
            Not Before: Jul 28 12:35:22 2026 GMT
            Not After : Aug  4 12:35:22 2026 GMT
        Subject: CN=6a68a20a-6f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bf:a6:75:35:10:71:89:8a:36:19:7a:ee:c5:
                    b5:37:71:07:ab:94:86:2c:6c:6b:1e:d8:7d:aa:65:
                    00:60:86:a1:d0:df:cc:d2:94:22:e4:1f:34:93:75:
                    ec:e2:5e:b2:9a:33:eb:b8:94:7c:94:fc:12:52:21:
                    19:33:bb:dd:fa:1d:72:76:bd:98:5b:a5:2f:f5:5b:
                    e7:94:41:45:bd:2e:7f:f5:d4:5a:14:3b:bf:a7:e2:
                    3c:8c:c6:37:d9:56:3c:ae:b7:03:32:5e:c5:ee:6c:
                    b5:cf:97:bb:2b:92:0a:72:5c:c8:a3:cd:71:9b:21:
                    55:d6:a8:ac:46:d0:61:d5:f8:64:0d:11:f4:8b:8a:
                    64:4f:58:db:d6:19:a1:b7:28:44:85:91:da:aa:09:
                    4c:83:3a:d5:78:f9:da:8d:c6:b6:20:9f:11:5d:5a:
                    5b:bb:3e:d4:1d:3d:35:97:b9:ce:54:29:ca:e4:e8:
                    9f:d0:69:92:1f:9d:70:70:45:c7:4c:05:94:85:b0:
                    36:27:71:06:91:f7:d0:cc:82:d4:e7:33:65:cf:0e:
                    23:04:a4:ad:fd:aa:62:b5:98:0c:cc:6a:28:a8:7c:
                    03:eb:db:85:74:6d:b6:c0:d8:ab:c0:41:2e:76:9d:
                    1c:69:86:cb:fb:01:4d:9e:23:84:d1:d6:5e:1d:07:
                    b5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:40:BB:B0:FD:61:16:EF:AA:29:0B:95:D1:2E:6B:83:73:82:B9:C3
            X509v3 Authority Key Identifier:
                keyid:0A:5B:DD:3B:4F:B9:F8:CB:E2:A2:0B:7B:47:FC:CB:4B:85:30:25:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E42C/0F8B6ACE001111F1892C277E406F56BC/ClvdO0-5-Mviogt7R_zLS4UwJTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ClvdO0-5-Mviogt7R_zLS4UwJTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E42C/0F8B6ACE001111F1892C277E406F56BC/ClvdO0-5-Mviogt7R_zLS4UwJTc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:5b:af:64:ec:e2:f5:d5:36:14:be:b8:71:f4:53:65:0b:09:
         1a:1f:ab:30:9a:20:06:3d:61:b4:6c:90:5e:45:5c:06:e6:2a:
         17:7b:cf:ed:bc:5c:22:ee:d2:b6:8c:c3:7f:fb:ea:e3:0c:46:
         9d:ee:cc:64:27:e2:41:48:ae:51:73:ad:d2:d4:60:67:27:16:
         7a:2e:09:f0:0c:f7:55:89:65:c2:c9:bd:a5:34:5d:15:a4:dc:
         09:79:74:2d:6d:a7:af:8b:87:ee:af:18:29:d3:94:55:f0:2a:
         15:ff:43:7e:b7:4d:8e:8b:ca:d6:7f:b1:0d:6c:8f:f1:f1:32:
         9f:61:c5:b8:f0:0b:4f:31:f1:05:39:6b:cb:37:bb:17:60:30:
         cb:59:9f:f8:29:c6:97:23:a0:f5:63:61:68:89:06:d0:35:4d:
         3d:cc:94:2b:94:4c:65:4a:87:52:94:64:a6:9c:46:fa:17:55:
         21:a8:f1:a4:25:dc:f1:c8:e0:c5:17:27:9a:a2:e9:43:03:6d:
         3a:85:8a:e2:d0:bc:10:46:b1:45:0f:72:20:6c:4c:fe:be:6d:
         6c:6b:f2:44:34:3d:3e:77:17:31:e1:7b:1c:b8:dd:57:59:70:
         71:52:21:56:bd:ad:7c:05:fa:66:47:43:d8:bc:34:89:40:65:
         a1:39:1e:71
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
RTQyQzExMC8GA1UEBRMoMEE1QkREM0I0RkI5RjhDQkUyQTIwQjdCNDdGQ0NCNEI4
NTMwMjUzNzAeFw0yNjA3MjgxMjM1MjJaFw0yNjA4MDQxMjM1MjJaMBgxFjAUBgNV
BAMTDTZhNjhhMjBhLTZmODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCkv6Z1NRBxiYo2GXruxbU3cQerlIYsbGse2H2qZQBghqHQ38zSlCLkHzSTdezi
XrKaM+u4lHyU/BJSIRkzu936HXJ2vZhbpS/1W+eUQUW9Ln/11FoUO7+n4jyMxjfZ
VjyutwMyXsXubLXPl7srkgpyXMijzXGbIVXWqKxG0GHV+GQNEfSLimRPWNvWGaG3
KESFkdqqCUyDOtV4+dqNxrYgnxFdWlu7PtQdPTWXuc5UKcrk6J/QaZIfnXBwRcdM
BZSFsDYncQaR99DMgtTnM2XPDiMEpK39qmK1mAzMaiiofAPr24V0bbbA2KvAQS52
nRxphsv7AU2eI4TR1l4dB7WFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUeEC7sP1h
Fu+qKQuV0S5rg3OCucMwHwYDVR0jBBgwFoAUClvdO0+5+Mviogt7R/zLS4UwJTcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFNDJDLzBGOEI2QUNFMDAx
MTExRjE4OTJDMjc3RTQwNkY1NkJDL0NsdmRPMC01LU12aW9ndDdSX3pMUzRVd0pU
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvQ2x2ZE8wLTUtTXZpb2d0N1JfekxTNFV3SlRjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF
NDJDLzBGOEI2QUNFMDAxMTExRjE4OTJDMjc3RTQwNkY1NkJDL0NsdmRPMC01LU12
aW9ndDdSX3pMUzRVd0pUYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA0W69k7OL11TYUvrhx9FNlCwkaH6swmiAGPWG0bJBeRVwG5ioXe8/tvFwi7tK2
jMN/++rjDEad7sxkJ+JBSK5Rc63S1GBnJxZ6LgnwDPdViWXCyb2lNF0VpNwJeXQt
baevi4furxgp05RV8CoV/0N+t02Oi8rWf7ENbI/x8TKfYcW48AtPMfEFOWvLN7sX
YDDLWZ/4KcaXI6D1Y2FoiQbQNU09zJQrlExlSodSlGSmnEb6F1UhqPGkJdzxyODF
FyeaoulDA206hYri0LwQRrFFD3IgbEz+vm1sa/JEND0+dxcx4XscuN1XWXBxUiFW
va18BfpmR0PYvDSJQGWhOR5x
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:41:39 2026 by rpki-client