Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft
File:                     15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft (raw, json)
Hash identifier:          4sOCRwId6nt6YEO3grQUi/anIVsA2cmUOcb6C7DsRDI=
Subject key identifier:   85:B1:4D:54:F5:EC:02:DF:7C:77:22:ED:49:2B:07:9A:BA:21:15:2D
Authority key identifier: D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4
Certificate issuer:       /CN=A9143F26/serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4
Certificate serial:       0247
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft
Manifest number:          023D
Signing time:             Wed 29 Jul 2026 03:40:18 +0000
Manifest this update:     Wed 29 Jul 2026 03:40:17 +0000
Manifest next update:     Wed 05 Aug 2026 03:40:17 +0000
Files and hashes:         1: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl (hash: da48KeiqjMZtsGuI3QcavB0DTSCApD1zsUCS2jYcVI0=)
                          2: 9728C64EF10811EE8F128341C4F9AE02.roa (hash: oPiJqmRhnsqJ9VzYZizn2gWr3NtxijO+hht/Af3EOxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl
                          rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 03:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 583 (0x247)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143F26, serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4
        Validity
            Not Before: Jul 29 03:40:17 2026 GMT
            Not After : Aug  5 03:40:17 2026 GMT
        Subject: CN=6a697622-a8db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:a2:bd:db:50:d4:5f:0e:5d:4f:07:76:b4:
                    1e:8e:d8:bf:4e:b9:92:f9:4c:49:2b:aa:88:92:ec:
                    93:6d:98:b9:29:65:92:a9:85:c4:59:2e:0f:55:a3:
                    e5:b2:80:40:76:c4:e4:f1:99:ac:8e:71:a2:4e:24:
                    2e:5d:85:c3:39:ef:cf:e4:08:ab:be:ef:0d:48:6c:
                    65:44:78:64:e0:80:f4:9c:ee:0e:f1:02:01:f0:ee:
                    a4:66:09:25:1b:bb:7d:46:6b:e8:83:5c:00:30:ff:
                    35:6f:65:b4:5b:61:6c:39:df:70:84:56:4b:43:62:
                    9d:a9:b8:ce:c9:5b:59:d1:ee:c7:2b:b6:a0:3e:08:
                    5e:bc:78:9c:f0:00:af:2f:a2:73:ac:55:be:8e:77:
                    27:31:ec:15:cd:d3:1a:b7:20:01:2d:a4:1f:60:82:
                    bd:e1:e0:b3:50:26:2c:b2:c2:7d:b6:a1:1f:a0:e6:
                    5f:f3:32:15:a0:26:d5:f2:3e:8d:52:a6:df:3a:6b:
                    95:91:3f:a5:49:ac:62:43:10:7c:f8:25:45:0c:9b:
                    e9:05:1c:02:c1:97:f3:5b:99:de:e0:ba:8e:5b:81:
                    50:e0:41:7d:49:5c:c9:e1:c1:d5:85:0e:12:30:79:
                    95:1d:46:65:6d:38:e9:d2:c1:53:29:4d:56:68:a4:
                    d4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B1:4D:54:F5:EC:02:DF:7C:77:22:ED:49:2B:07:9A:BA:21:15:2D
            X509v3 Authority Key Identifier:
                keyid:D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:cf:19:5f:c4:c5:8c:5c:ef:86:27:ca:61:a8:29:1d:7b:6d:
         07:9d:04:af:0b:ee:ee:5b:bf:61:3e:64:7f:50:a9:1f:cf:2f:
         f2:42:73:54:69:e5:aa:17:b8:68:fb:89:fc:1c:19:69:0e:3d:
         a3:d5:cb:f5:98:ab:05:08:c1:25:23:71:f9:54:0c:9a:75:7e:
         9b:e8:e5:c8:50:6d:1f:e1:bf:9d:a8:64:9f:f6:cd:ce:23:cb:
         ca:19:d8:27:78:91:5f:ec:23:99:2b:ac:5b:4f:e8:8e:f6:59:
         f9:8d:ec:6a:f3:84:67:ae:67:2a:14:51:8f:02:e0:2d:f1:38:
         2c:40:c8:95:cd:5e:a4:ea:c8:65:44:1c:bf:4c:d6:fd:f1:60:
         d1:8c:e5:d2:0c:37:94:80:28:c1:6a:61:d6:f9:cd:c6:cd:67:
         0f:ab:cd:5b:dd:ce:06:6d:9a:41:56:1e:c3:c8:4f:db:6e:55:
         19:ef:3e:48:b4:72:7b:ec:3d:90:ad:49:cd:6b:04:e9:77:29:
         49:a9:ea:aa:7d:a0:dc:b6:6b:86:c1:83:a9:30:4d:40:bb:5b:
         12:41:e0:69:66:f8:d2:f2:b0:0e:81:c4:43:98:a2:8c:d1:f8:
         54:3e:e4:78:82:72:51:32:6b:93:0c:f7:6a:01:32:9e:0e:55:
         26:ae:34:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDNGMjYxMTAvBgNVBAUTKEQ3OTBDMkM0NjkzMkJFOUQyNTgyMkQ5OTEyOEVCQkNG
MDMzRDQ1QzQwHhcNMjYwNzI5MDM0MDE3WhcNMjYwODA1MDM0MDE3WjAYMRYwFAYD
VQQDEw02YTY5NzYyMi1hOGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAugyivdtQ1F8OXU8HdrQejti/TrmS+UxJK6qIkuyTbZi5KWWSqYXEWS4PVaPl
soBAdsTk8ZmsjnGiTiQuXYXDOe/P5Airvu8NSGxlRHhk4ID0nO4O8QIB8O6kZgkl
G7t9Rmvog1wAMP81b2W0W2FsOd9whFZLQ2KdqbjOyVtZ0e7HK7agPghevHic8ACv
L6JzrFW+jncnMewVzdMatyABLaQfYIK94eCzUCYsssJ9tqEfoOZf8zIVoCbV8j6N
UqbfOmuVkT+lSaxiQxB8+CVFDJvpBRwCwZfzW5ne4LqOW4FQ4EF9SVzJ4cHVhQ4S
MHmVHUZlbTjp0sFTKU1WaKTUnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIWxTVT1
7ALffHci7UkrB5q6IRUtMB8GA1UdIwQYMBaAFNeQwsRpMr6dJYItmRKOu88DPUXE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0YyNi83MDNBMDI1NDJE
NTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZwMGxnaTJaRW82N3p3TTlS
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzE1REN4R2t5dnAwbGdpMlpFbzY3endNOVJjUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
M0YyNi83MDNBMDI1NDJENTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZw
MGxnaTJaRW82N3p3TTlSY1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABc8ZX8TFjFzvhifKYagpHXttB50Erwvu7lu/YT5kf1CpH88v8kJzVGnlqhe4
aPuJ/BwZaQ49o9XL9ZirBQjBJSNx+VQMmnV+m+jlyFBtH+G/nahkn/bNziPLyhnY
J3iRX+wjmSusW0/ojvZZ+Y3savOEZ65nKhRRjwLgLfE4LEDIlc1epOrIZUQcv0zW
/fFg0Yzl0gw3lIAowWph1vnNxs1nD6vNW93OBm2aQVYew8hP225VGe8+SLRye+w9
kK1JzWsE6XcpSanqqn2g3LZrhsGDqTBNQLtbEkHgaWb40vKwDoHEQ5iijNH4VD7k
eIJyUTJrkwz3agEyng5VJq40PQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:39:29 2026 by rpki-client