Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft
File:                     4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft (raw, json)
Hash identifier:          jCGJQ4Ag1LGdOOZIhX4YOdd0p3vdwK05pdYHcNTeuIc=
Subject key identifier:   81:5F:0E:9F:7C:6F:0D:17:2C:CC:C3:28:7A:62:92:FD:CB:A8:0C:6A
Authority key identifier: E0:88:13:BD:18:8C:DC:2A:BF:50:18:DE:6F:E3:7F:44:37:47:20:8E
Certificate issuer:       /CN=A9142091/serialNumber=E08813BD188CDC2ABF5018DE6FE37F443747208E
Certificate serial:       0290
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft
Manifest number:          0289
Signing time:             Mon 27 Jul 2026 03:10:21 +0000
Manifest this update:     Mon 27 Jul 2026 03:10:20 +0000
Manifest next update:     Mon 03 Aug 2026 03:10:20 +0000
Files and hashes:         1: 4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl (hash: BcgVpRiSsqirQjN/QxBLz/UW9hwtYpqFqoYZBWATzsI=)
                          2: A8C0A13EAB5D11ED88A54424C4F9AE02.roa (hash: c8XgK4k1WTQiswMVAGE4kKsCbobn1u/Z+G3dpP2KXyw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl
                          rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 656 (0x290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142091, serialNumber=E08813BD188CDC2ABF5018DE6FE37F443747208E
        Validity
            Not Before: Jul 27 03:10:20 2026 GMT
            Not After : Aug  3 03:10:20 2026 GMT
        Subject: CN=6a66cc1d-c64b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fe:f7:20:6c:56:89:63:1a:1f:dc:97:42:de:
                    9d:e1:8c:79:e2:2f:f7:cb:88:24:27:e4:d0:32:f1:
                    0f:dc:81:3b:36:4b:f2:51:bf:38:78:66:c7:eb:98:
                    74:e9:9a:b3:6a:58:f5:e8:17:e7:c1:93:48:b6:d6:
                    64:82:b9:47:f6:a3:f6:db:54:df:4e:91:db:ed:f4:
                    d8:70:6d:34:49:52:5c:fd:24:5e:5c:f8:f7:90:55:
                    04:2e:e1:6e:69:eb:88:a1:29:8f:24:7b:ca:a0:bd:
                    d7:fe:d5:02:50:d8:e5:74:13:10:8d:e3:95:27:43:
                    68:58:a2:b7:42:ff:3c:0c:e8:f1:e1:96:de:6c:7d:
                    64:c7:a2:00:1b:9e:4c:12:94:9b:8d:74:30:d9:e1:
                    df:2b:d0:66:13:04:30:b8:b0:23:21:2b:f8:b9:7f:
                    5d:c6:37:44:b4:4c:08:01:82:4b:a9:4c:12:37:88:
                    43:62:72:26:41:fc:34:ae:6f:d6:f3:a9:0d:41:6c:
                    3f:15:7a:46:79:d7:aa:b8:9f:de:c7:2a:83:b6:9b:
                    9b:f8:94:8a:56:c9:86:5c:65:a0:73:f4:2c:d3:1d:
                    6e:05:66:8f:60:ee:83:0d:e8:3d:27:d2:b2:a1:79:
                    a2:0c:d5:21:b3:73:14:af:80:ac:6c:50:5e:6c:c1:
                    56:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5F:0E:9F:7C:6F:0D:17:2C:CC:C3:28:7A:62:92:FD:CB:A8:0C:6A
            X509v3 Authority Key Identifier:
                keyid:E0:88:13:BD:18:8C:DC:2A:BF:50:18:DE:6F:E3:7F:44:37:47:20:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:03:82:ab:bf:13:8e:ad:f2:07:d1:ab:b2:11:15:6b:e5:4f:
         c8:81:2d:d5:c3:3a:bd:0f:92:34:26:df:3c:61:6d:31:bb:d9:
         98:85:82:73:c7:07:58:85:1f:66:9c:a0:5c:b3:61:90:2a:89:
         da:d3:af:5d:ed:ae:f4:4c:c0:9e:33:77:9a:52:b1:4c:1f:e3:
         04:3a:2d:a9:1d:15:e2:9c:8b:20:1d:7c:5a:74:a5:32:e6:6d:
         54:a7:67:54:c9:8f:32:c3:d7:18:7e:1c:53:ca:b5:5b:d1:3d:
         64:9b:3f:8b:4d:38:78:c4:f3:44:10:2e:08:93:7c:d0:b3:9d:
         d0:6d:b3:02:15:30:2f:04:1c:ab:bb:8b:fe:53:0c:29:d0:6d:
         d2:f1:7e:eb:49:bc:76:dd:3d:30:cc:63:dd:5a:eb:09:24:08:
         91:a6:f0:90:77:ff:16:e8:1c:fe:52:41:1d:a1:83:fc:ed:5f:
         29:a0:5b:06:d4:cb:dd:7a:e9:0c:3a:58:04:2f:db:c9:13:cc:
         8a:b6:30:57:78:37:eb:72:0f:12:6b:94:b5:ce:7b:a5:2c:15:
         7a:8f:4f:06:9b:b7:fe:c9:f0:49:9a:67:4f:5d:9a:c9:35:dc:
         29:e8:f1:db:59:6e:ea:c0:4c:a6:e7:29:58:e9:2f:90:e1:bb:
         90:21:6e:16
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIwOTExMTAvBgNVBAUTKEUwODgxM0JEMTg4Q0RDMkFCRjUwMThERTZGRTM3RjQ0
Mzc0NzIwOEUwHhcNMjYwNzI3MDMxMDIwWhcNMjYwODAzMDMxMDIwWjAYMRYwFAYD
VQQDEw02YTY2Y2MxZC1jNjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnP73IGxWiWMaH9yXQt6d4Yx54i/3y4gkJ+TQMvEP3IE7NkvyUb84eGbH65h0
6Zqzalj16BfnwZNIttZkgrlH9qP221TfTpHb7fTYcG00SVJc/SReXPj3kFUELuFu
aeuIoSmPJHvKoL3X/tUCUNjldBMQjeOVJ0NoWKK3Qv88DOjx4ZbebH1kx6IAG55M
EpSbjXQw2eHfK9BmEwQwuLAjISv4uX9dxjdEtEwIAYJLqUwSN4hDYnImQfw0rm/W
86kNQWw/FXpGedequJ/exyqDtpub+JSKVsmGXGWgc/Qs0x1uBWaPYO6DDeg9J9Ky
oXmiDNUhs3MUr4CsbFBebMFWbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIFfDp98
bw0XLMzDKHpikv3LqAxqMB8GA1UdIwQYMBaAFOCIE70YjNwqv1AY3m/jf0Q3RyCO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjA5MS9BQkM0RDQ0NEFC
NTkxMUVEOUI3OUIxMUVDNEY5QUUwMi80SWdUdlJpTTNDcV9VQmplYi1OX1JEZEhJ
STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRJZ1R2UmlNM0NxX1VCamViLU5fUkRkSElJNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjA5MS9BQkM0RDQ0NEFCNTkxMUVEOUI3OUIxMUVDNEY5QUUwMi80SWdUdlJpTTND
cV9VQmplYi1OX1JEZEhJSTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiAOCq78Tjq3yB9GrshEVa+VPyIEt1cM6vQ+SNCbfPGFtMbvZmIWCc8cHWIUf
ZpygXLNhkCqJ2tOvXe2u9EzAnjN3mlKxTB/jBDotqR0V4pyLIB18WnSlMuZtVKdn
VMmPMsPXGH4cU8q1W9E9ZJs/i004eMTzRBAuCJN80LOd0G2zAhUwLwQcq7uL/lMM
KdBt0vF+60m8dt09MMxj3VrrCSQIkabwkHf/Fugc/lJBHaGD/O1fKaBbBtTL3Xrp
DDpYBC/byRPMirYwV3g363IPEmuUtc57pSwVeo9PBpu3/snwSZpnT12ayTXcKejx
21lu6sBMpucpWOkvkOG7kCFuFg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:09:19 2026 by rpki-client