Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft
File:                     f30yDyoH5DPdvf4oV_XTGTVFF7k.mft (raw, json)
Hash identifier:          fsGjwIUxuB0d1WupzvAu/i3BDJjOW8Qg2i8Twk3Y3EY=
Subject key identifier:   69:19:AD:97:61:AB:6F:A5:79:2E:74:A6:BB:BE:D2:0D:42:00:C7:7C
Authority key identifier: 7F:7D:32:0F:2A:07:E4:33:DD:BD:FE:28:57:F5:D3:19:35:45:17:B9
Certificate issuer:       /CN=A914877B/serialNumber=7F7D320F2A07E433DDBDFE2857F5D319354517B9
Certificate serial:       0CBF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft
Manifest number:          0CA9
Signing time:             Sun 26 Jul 2026 18:52:52 +0000
Manifest this update:     Sun 26 Jul 2026 18:52:51 +0000
Manifest next update:     Sun 02 Aug 2026 18:52:51 +0000
Files and hashes:         1: f30yDyoH5DPdvf4oV_XTGTVFF7k.crl (hash: OaffCXsqS54jicpDlpOwAa4MKSIqT2BzpH+0AtMyetc=)
                          2: 800676321BD311EAA341A62DC4F9AE02.roa (hash: ca3rCU+xITln6FgR3wUziPrzx8A5i4ANvYXJUthQ0/Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.crl
                          rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 18:52:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3263 (0xcbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914877B, serialNumber=7F7D320F2A07E433DDBDFE2857F5D319354517B9
        Validity
            Not Before: Jul 26 18:52:51 2026 GMT
            Not After : Aug  2 18:52:51 2026 GMT
        Subject: CN=6a665784-62bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c5:46:07:30:23:01:8d:14:13:83:db:8b:40:
                    c8:4a:be:05:ec:44:69:f1:5c:d6:e4:99:99:67:76:
                    cc:12:1e:bf:73:2e:42:27:2f:70:6c:b4:1f:e1:3a:
                    03:e2:45:a1:1b:3e:37:af:5c:92:e7:83:4a:92:86:
                    c8:64:8c:dd:dc:56:5a:fe:7b:ea:a8:a7:5f:5a:a1:
                    8e:fd:c9:9e:55:db:a3:f3:d7:f4:cf:3e:41:bc:99:
                    5a:3e:4a:cd:39:7a:27:9d:62:87:a4:1e:bc:1d:a9:
                    f1:4f:5d:5f:3f:b7:b1:74:d0:8f:8f:30:9d:02:b4:
                    9f:2e:0f:8c:7a:f6:8e:4d:43:70:8d:51:d2:01:ac:
                    7b:2c:3a:ed:c3:c8:27:2f:a6:e4:5e:74:37:87:c5:
                    b3:d5:08:f1:e0:27:1a:9f:4b:2c:18:8a:d9:d4:1a:
                    fc:c3:e3:ea:56:75:aa:a2:ac:40:31:b0:db:40:7c:
                    b6:cd:34:a0:5c:6c:b5:ab:e4:9e:7e:bd:93:cc:75:
                    63:f3:b1:7c:90:6d:f1:b4:81:84:75:35:f5:b4:81:
                    fd:02:08:91:ba:16:3b:2b:ad:c9:0b:fe:92:57:11:
                    0d:e5:6e:e7:7f:7a:bb:64:43:c7:3a:31:ac:99:17:
                    d4:86:0f:6a:31:a1:63:7e:a3:32:da:e4:db:50:d2:
                    d7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:19:AD:97:61:AB:6F:A5:79:2E:74:A6:BB:BE:D2:0D:42:00:C7:7C
            X509v3 Authority Key Identifier:
                keyid:7F:7D:32:0F:2A:07:E4:33:DD:BD:FE:28:57:F5:D3:19:35:45:17:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c6:91:a0:dc:75:35:70:f3:69:9b:e4:31:2c:da:93:e0:d1:
         ce:99:a6:73:37:44:3e:b9:d0:8e:45:91:51:39:c0:c8:f7:86:
         da:1b:3e:58:1e:39:29:69:85:bb:a8:9f:84:93:2a:04:69:5d:
         6f:5c:37:da:49:b2:3c:29:72:d9:9e:99:5d:5b:e5:17:79:96:
         c4:69:68:af:c3:22:b9:c0:d7:dd:51:7c:64:68:21:4a:91:87:
         12:77:fe:d0:34:71:75:74:73:3d:3f:ae:33:07:51:f2:04:32:
         68:c2:ad:e8:f3:a4:56:c6:65:bf:82:04:7a:48:d5:50:8b:60:
         37:34:4f:db:89:4e:36:3d:25:d4:2d:db:bb:73:8f:3c:89:76:
         93:ef:12:3d:f8:4a:9e:2d:90:f5:87:95:66:92:74:8e:4c:42:
         1c:b9:17:fc:93:d2:6f:4c:91:88:83:c0:12:5c:52:bf:90:8e:
         ac:4a:e6:02:03:53:9f:f9:3b:fc:e0:c6:9b:91:72:35:b4:3e:
         9b:92:a5:7a:80:6b:c8:62:98:7a:28:fa:0f:26:79:e9:50:4e:
         79:8d:26:e9:45:d4:09:79:63:ee:15:71:72:f3:04:c2:f8:38:
         03:da:cf:ea:73:6c:26:15:a6:a3:47:6d:0c:0b:40:83:2b:38:
         66:4e:27:06
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDg3N0IxMTAvBgNVBAUTKDdGN0QzMjBGMkEwN0U0MzNEREJERkUyODU3RjVEMzE5
MzU0NTE3QjkwHhcNMjYwNzI2MTg1MjUxWhcNMjYwODAyMTg1MjUxWjAYMRYwFAYD
VQQDEw02YTY2NTc4NC02MmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAucVGBzAjAY0UE4Pbi0DISr4F7ERp8VzW5JmZZ3bMEh6/cy5CJy9wbLQf4ToD
4kWhGz43r1yS54NKkobIZIzd3FZa/nvqqKdfWqGO/cmeVduj89f0zz5BvJlaPkrN
OXonnWKHpB68HanxT11fP7exdNCPjzCdArSfLg+MevaOTUNwjVHSAax7LDrtw8gn
L6bkXnQ3h8Wz1Qjx4Ccan0ssGIrZ1Br8w+PqVnWqoqxAMbDbQHy2zTSgXGy1q+Se
fr2TzHVj87F8kG3xtIGEdTX1tIH9AgiRuhY7K63JC/6SVxEN5W7nf3q7ZEPHOjGs
mRfUhg9qMaFjfqMy2uTbUNLXFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGkZrZdh
q2+leS50pru+0g1CAMd8MB8GA1UdIwQYMBaAFH99Mg8qB+Qz3b3+KFf10xk1RRe5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODc3Qi8yNTkxMDExRTFC
RDIxMUVBQUJEMEVFMkFDNEY5QUUwMi9mMzB5RHlvSDVEUGR2ZjRvVl9YVEdUVkZG
N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2YzMHlEeW9INURQZHZmNG9WX1hUR1RWRkY3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
ODc3Qi8yNTkxMDExRTFCRDIxMUVBQUJEMEVFMkFDNEY5QUUwMi9mMzB5RHlvSDVE
UGR2ZjRvVl9YVEdUVkZGN2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGcaRoNx1NXDzaZvkMSzak+DRzpmmczdEPrnQjkWRUTnAyPeG2hs+WB45KWmF
u6ifhJMqBGldb1w32kmyPCly2Z6ZXVvlF3mWxGlor8MiucDX3VF8ZGghSpGHEnf+
0DRxdXRzPT+uMwdR8gQyaMKt6POkVsZlv4IEekjVUItgNzRP24lONj0l1C3bu3OP
PIl2k+8SPfhKni2Q9YeVZpJ0jkxCHLkX/JPSb0yRiIPAElxSv5COrErmAgNTn/k7
/ODGm5FyNbQ+m5KleoBryGKYeij6DyZ56VBOeY0m6UXUCXlj7hVxcvMEwvg4A9rP
6nNsJhWmo0dtDAtAgys4Zk4nBg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:32:57 2026 by rpki-client