Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
File:                     vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft (raw, json)
Hash identifier:          IAbVJf6B0CYso2Y9/xRYaXIWf4yE2Kep0tkaOUtgZMo=
Subject key identifier:   60:28:91:11:2E:41:4C:A1:B5:E9:3B:E4:61:B9:D7:D6:0A:EF:3D:14
Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
Certificate issuer:       /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Certificate serial:       3618
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
Manifest number:          35CC
Signing time:             Tue 28 Jul 2026 14:22:18 +0000
Manifest this update:     Tue 28 Jul 2026 14:22:18 +0000
Manifest next update:     Tue 04 Aug 2026 14:22:18 +0000
Files and hashes:         1: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl (hash: 9Dn1Z/FAGuBMZ/ofoL32Xkmty0eokeq4GLgc888XJV4=)
                          2: 783697D2107A11F1854A0E192E3D8C67.roa (hash: u2qCKyigjPH4j5wmCAUM23ECz8eFGM2p/X5a8KmrEbA=)
                          3: 666EE7025B7211EF8C1A8E4EC4F9AE02.roa (hash: n+nnGda2pfs3ZhBFnhSRNHg0Wnh4vJZWvSvb4sr/Vl8=)
                          4: 34013D1A69E911F18D43391FA247A888.roa (hash: TU4h3PTGkuJs0cClNzVxXAJnxXSrF11ivP3gcFNPm7A=)
                          5: 6193036675CA11F1B93BCE9E67A30FBC.roa (hash: n8jo7OOyKoEMXrPDLqPZ0GKTDNmrCmsRnCo2kxsObx0=)
                          6: 8064BD9A531811F19CFFFF86C0833773.roa (hash: 6eSWI3lacVFYWJ6Y3LXT4o1eDdujYg9oUunVgvcKPVw=)
                          7: 0C79C6F678D811F192CB568F96A30FBC.roa (hash: ssvnbnbPiJy1G5RE7lDBvaD1kbNv/PwbXJ9FfnkTt1Q=)
                          8: 583C86380BB211ED8F05E427C4F9AE02.roa (hash: cG1NSTCHLn5vicb1ufAMlhQdqrLCijyh6U7DgWV8zhY=)
                          9: 6D188172BF5C11F098B79354C4F9AE02.roa (hash: +vcVP3Vc/xQrceGKHxptusion7qC1wdDocXyLDBF9wk=)
                          10: AC0031765B6E11EF997EC429C4F9AE02.roa (hash: qOOSzovo+PYCi2hcGVMepWRZjfhHlcX70ZUUrgBUwaI=)
                          11: 66EFC4305B7211EF8C1A8E4EC4F9AE02.roa (hash: QiW5WLzMPyrMhxHIDq8/IKEW48FLfKVmyD0cpARH3Ac=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 14:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13848 (0x3618)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
        Validity
            Not Before: Jul 28 14:22:18 2026 GMT
            Not After : Aug  4 14:22:18 2026 GMT
        Subject: CN=6a68bb1a-ae4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d9:b9:f8:d7:b0:27:17:34:62:d6:46:fb:35:
                    07:ad:13:02:a9:5a:e0:7f:38:c8:5a:e7:49:a0:f4:
                    8b:0d:51:8a:a1:93:fb:12:1b:be:66:d2:a2:c0:2a:
                    52:21:27:66:01:4f:cf:c8:f0:93:65:68:89:a2:36:
                    e5:48:a5:5f:7d:fc:7a:2c:e2:d8:9e:7a:6c:66:a0:
                    8d:99:ac:7e:91:8f:bd:3d:ac:3c:fa:5f:0b:84:d0:
                    7d:81:e6:1e:be:c6:b5:bc:04:57:59:be:d0:98:87:
                    82:df:33:af:72:2a:72:42:8f:ca:64:85:fb:04:38:
                    57:5d:23:54:aa:cb:7d:f4:a1:01:3e:4e:9c:e5:92:
                    b1:7b:fc:ee:1e:8d:05:fc:19:1e:64:bb:55:b7:2f:
                    e0:a7:67:e4:68:ca:2c:4c:e3:ef:2b:38:99:c2:97:
                    25:45:87:a1:b9:9a:36:31:3e:81:d3:ca:a5:d9:69:
                    14:e9:73:a8:b4:e0:6e:48:c9:82:cd:e5:81:bb:42:
                    b7:ed:4f:ca:8d:42:4d:cb:26:97:c2:93:18:39:74:
                    0b:6b:be:db:0a:49:60:e4:e6:8c:5d:7a:4c:db:df:
                    e8:b9:b4:f3:e4:5c:be:b5:60:58:c3:8b:12:5e:f4:
                    4e:47:53:83:f8:e8:b2:80:1d:bf:09:bb:83:de:5a:
                    31:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:28:91:11:2E:41:4C:A1:B5:E9:3B:E4:61:B9:D7:D6:0A:EF:3D:14
            X509v3 Authority Key Identifier:
                keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:9c:f2:0e:a0:0d:37:40:f2:22:88:45:6d:a9:b2:35:fb:13:
         15:80:10:08:ec:d1:9b:36:cd:97:ba:7b:21:19:dd:92:7b:b1:
         b0:e2:0f:55:d6:df:d1:e3:78:86:c0:63:0d:ce:f7:54:26:a1:
         14:d9:48:04:5a:40:ff:97:97:d3:da:cd:25:c6:53:b9:97:08:
         00:18:b4:dd:cd:9e:7a:3b:91:b2:bc:8a:29:89:45:02:66:95:
         2e:bc:e5:19:54:eb:5e:e4:bf:8e:15:01:37:57:6a:48:6a:13:
         a2:11:c5:17:aa:9d:f8:51:84:65:d4:d9:77:3d:1c:90:03:d5:
         99:fc:16:81:bb:30:91:2f:66:06:8f:ef:7c:bd:25:67:6b:24:
         78:03:bb:5c:cf:07:a5:13:33:e6:e4:1b:52:11:79:ec:5f:83:
         01:d0:52:52:06:67:4f:ff:5c:4e:e2:4f:38:0b:28:49:da:bd:
         2c:8e:be:47:cd:50:81:23:70:7e:a8:ef:3c:28:9a:1b:74:1d:
         d4:c8:5b:9a:5f:7d:8c:18:20:89:20:ad:3b:32:58:55:87:8b:
         24:30:1a:f3:77:53:bf:60:c6:7b:be:48:24:7b:41:43:22:10:
         f1:3b:db:a8:91:45:90:a7:01:2d:d9:8e:b8:97:e5:01:44:65:
         96:a3:64:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKEJGMEU2RjRFRTBFMTdEREU4QzRBMjRCRjg5N0QxOUI4
N0FBNTc1OUYwHhcNMjYwNzI4MTQyMjE4WhcNMjYwODA0MTQyMjE4WjAYMRYwFAYD
VQQDEw02YTY4YmIxYS1hZTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAh9m5+NewJxc0YtZG+zUHrRMCqVrgfzjIWudJoPSLDVGKoZP7Ehu+ZtKiwCpS
ISdmAU/PyPCTZWiJojblSKVfffx6LOLYnnpsZqCNmax+kY+9Paw8+l8LhNB9geYe
vsa1vARXWb7QmIeC3zOvcipyQo/KZIX7BDhXXSNUqst99KEBPk6c5ZKxe/zuHo0F
/BkeZLtVty/gp2fkaMosTOPvKziZwpclRYehuZo2MT6B08ql2WkU6XOotOBuSMmC
zeWBu0K37U/KjUJNyyaXwpMYOXQLa77bCklg5OaMXXpM29/oubTz5Fy+tWBYw4sS
XvROR1OD+OiygB2/CbuD3loxPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGAokREu
QUyhtek75GG519YK7z0UMB8GA1UdIwQYMBaAFL8Ob07g4X3ejEokv4l9Gbh6pXWf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS85QTg1QkI1MDFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZkNk1TaVNfaVgwWnVIcWxk
WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3Z3NXZUdURoZmQ2TVNpU19pWDBadUhxbGRaOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OUYzRS85QTg1QkI1MDFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZk
Nk1TaVNfaVgwWnVIcWxkWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE5zyDqANN0DyIohFbamyNfsTFYAQCOzRmzbNl7p7IRndknuxsOIPVdbf0eN4
hsBjDc73VCahFNlIBFpA/5eX09rNJcZTuZcIABi03c2eejuRsryKKYlFAmaVLrzl
GVTrXuS/jhUBN1dqSGoTohHFF6qd+FGEZdTZdz0ckAPVmfwWgbswkS9mBo/vfL0l
Z2skeAO7XM8HpRMz5uQbUhF57F+DAdBSUgZnT/9cTuJPOAsoSdq9LI6+R81QgSNw
fqjvPCiaG3Qd1Mhbml99jBggiSCtOzJYVYeLJDAa83dTv2DGe75IJHtBQyIQ8Tvb
qJFFkKcBLdmOuJflAURllqNkXw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:13:04 2026 by rpki-client