Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft
File:                     AIsjUb6f1m04sRBQZ5c09E-l2X0.mft (raw, json)
Hash identifier:          sBwHhesmAWdlYd2E9Kix4AM0c+4HhpgTY7HjSpBsdHg=
Subject key identifier:   89:A5:61:6B:3C:50:EB:B0:4D:88:91:03:CC:90:9D:7B:CC:07:F2:32
Authority key identifier: 00:8B:23:51:BE:9F:D6:6D:38:B1:10:50:67:97:34:F4:4F:A5:D9:7D
Certificate issuer:       /CN=A914B0D8/serialNumber=008B2351BE9FD66D38B11050679734F44FA5D97D
Certificate serial:       01B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AIsjUb6f1m04sRBQZ5c09E-l2X0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft
Manifest number:          01AC
Signing time:             Mon 27 Jul 2026 05:48:18 +0000
Manifest this update:     Mon 27 Jul 2026 05:48:17 +0000
Manifest next update:     Mon 03 Aug 2026 05:48:17 +0000
Files and hashes:         1: AIsjUb6f1m04sRBQZ5c09E-l2X0.crl (hash: MQ0Kb/5bDdd3qqTNOJ1wG9/HxvJ6utECRepp6uCjWNc=)
                          2: 66E93DA2FB1111EE81D7643BC4F9AE02.roa (hash: gRN+gspECqlTI6rrjpufXp2pLa9m/o4m0OMYkN6xBgk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.crl
                          rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AIsjUb6f1m04sRBQZ5c09E-l2X0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 05:48:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435 (0x1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B0D8, serialNumber=008B2351BE9FD66D38B11050679734F44FA5D97D
        Validity
            Not Before: Jul 27 05:48:17 2026 GMT
            Not After : Aug  3 05:48:17 2026 GMT
        Subject: CN=6a66f121-227d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:30:eb:6f:c1:35:00:09:a8:86:62:b9:fb:f8:
                    19:93:50:9e:9e:42:66:8c:52:b8:64:e2:58:f1:72:
                    c9:86:06:0b:63:4f:eb:65:56:56:3c:5b:89:99:a7:
                    42:24:25:43:8f:70:b5:13:eb:d6:a5:4f:fd:44:26:
                    d3:ce:1c:0d:06:f0:0a:21:d5:d5:43:f2:77:a9:c2:
                    e4:10:6d:c8:30:db:70:3e:fa:1e:bc:52:92:66:44:
                    69:7f:0d:fb:02:2d:f5:bb:c6:fd:40:e4:88:12:11:
                    9e:e4:48:e9:78:49:2f:d2:92:0a:b5:f0:13:89:6e:
                    04:cf:9b:d0:c8:a6:db:67:2e:9c:ca:20:5b:0f:56:
                    46:00:51:03:c6:d6:6b:44:cb:14:9b:e3:99:5f:21:
                    18:fd:d2:18:c1:a0:91:6e:6b:9c:12:28:79:30:52:
                    94:e3:de:27:2e:ac:72:2c:98:bb:d7:cf:25:36:2d:
                    15:fa:b0:04:37:a3:22:a0:4a:b2:b1:16:08:10:20:
                    fd:69:91:32:b9:ed:8c:3d:3b:5c:d3:12:d8:6b:fc:
                    cf:58:e3:47:39:a2:63:9f:41:a5:c5:9c:41:57:12:
                    3a:1a:b1:b5:c1:06:f5:99:cd:17:c5:0e:26:0c:90:
                    47:76:f2:0b:20:b7:34:f6:56:dc:38:fc:18:da:91:
                    5d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A5:61:6B:3C:50:EB:B0:4D:88:91:03:CC:90:9D:7B:CC:07:F2:32
            X509v3 Authority Key Identifier:
                keyid:00:8B:23:51:BE:9F:D6:6D:38:B1:10:50:67:97:34:F4:4F:A5:D9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AIsjUb6f1m04sRBQZ5c09E-l2X0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:0c:99:89:d9:60:46:1f:8b:8f:8f:e6:b9:15:41:cb:b0:9a:
         6b:4c:4b:d8:0a:7a:45:29:85:34:f4:c4:9e:9c:5d:5c:b0:8c:
         2a:6e:f7:3c:a9:25:c0:e7:81:c2:d0:75:e5:83:4c:fd:45:ae:
         63:17:c9:60:ff:82:7a:0f:84:2a:89:fd:d5:35:06:1c:0d:bf:
         4a:71:64:6f:d6:90:98:a6:15:8d:e7:b3:97:48:75:48:a4:ce:
         1a:6c:31:66:52:42:e3:7a:3c:f9:65:c1:51:95:0b:8a:49:23:
         7d:04:c5:64:fd:99:07:11:ff:f7:ac:51:e5:e6:65:43:6d:49:
         65:0b:bb:8f:45:42:9a:10:ed:c9:5d:ff:2d:58:7c:f2:1d:7d:
         ce:0d:b2:92:ab:d4:f5:67:c6:aa:82:cd:19:a5:12:23:cd:17:
         ff:ca:1c:1d:2b:1d:00:f1:56:65:9f:cd:f1:79:38:ad:db:93:
         a1:ec:7b:ec:44:68:7e:32:4c:60:a5:9a:25:c4:a3:c8:66:5b:
         0d:ee:95:07:22:54:5b:88:80:2d:da:48:7b:10:eb:81:11:20:
         05:52:05:d6:c1:75:ea:1c:13:e9:58:0e:95:35:97:f9:0c:ff:
         28:7d:70:ba:3c:57:9a:0c:be:ee:49:2f:98:2e:4d:17:e5:3f:
         b0:f6:b9:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEIwRDgxMTAvBgNVBAUTKDAwOEIyMzUxQkU5RkQ2NkQzOEIxMTA1MDY3OTczNEY0
NEZBNUQ5N0QwHhcNMjYwNzI3MDU0ODE3WhcNMjYwODAzMDU0ODE3WjAYMRYwFAYD
VQQDEw02YTY2ZjEyMS0yMjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAijDrb8E1AAmohmK5+/gZk1CenkJmjFK4ZOJY8XLJhgYLY0/rZVZWPFuJmadC
JCVDj3C1E+vWpU/9RCbTzhwNBvAKIdXVQ/J3qcLkEG3IMNtwPvoevFKSZkRpfw37
Ai31u8b9QOSIEhGe5EjpeEkv0pIKtfATiW4Ez5vQyKbbZy6cyiBbD1ZGAFEDxtZr
RMsUm+OZXyEY/dIYwaCRbmucEih5MFKU494nLqxyLJi7188lNi0V+rAEN6MioEqy
sRYIECD9aZEyue2MPTtc0xLYa/zPWONHOaJjn0GlxZxBVxI6GrG1wQb1mc0XxQ4m
DJBHdvILILc09lbcOPwY2pFdIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFImlYWs8
UOuwTYiRA8yQnXvMB/IyMB8GA1UdIwQYMBaAFACLI1G+n9ZtOLEQUGeXNPRPpdl9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjBEOC8wN0FBQkNEQUZC
MTExMUVFOTEyMzM5MUJDNEY5QUUwMi9BSXNqVWI2ZjFtMDRzUkJRWjVjMDlFLWwy
WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FJc2pVYjZmMW0wNHNSQlFaNWMwOUUtbDJYMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QjBEOC8wN0FBQkNEQUZCMTExMUVFOTEyMzM5MUJDNEY5QUUwMi9BSXNqVWI2ZjFt
MDRzUkJRWjVjMDlFLWwyWDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJgyZidlgRh+Lj4/muRVBy7Caa0xL2Ap6RSmFNPTEnpxdXLCMKm73PKklwOeB
wtB15YNM/UWuYxfJYP+Ceg+EKon91TUGHA2/SnFkb9aQmKYVjeezl0h1SKTOGmwx
ZlJC43o8+WXBUZULikkjfQTFZP2ZBxH/96xR5eZlQ21JZQu7j0VCmhDtyV3/LVh8
8h19zg2ykqvU9WfGqoLNGaUSI80X/8ocHSsdAPFWZZ/N8Xk4rduToex77ERofjJM
YKWaJcSjyGZbDe6VByJUW4iALdpIexDrgREgBVIF1sF16hwT6VgOlTWX+Qz/KH1w
ujxXmgy+7kkvmC5NF+U/sPa5zA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:18:09 2026 by rpki-client