Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft
File:                     eOQpC8zJmRWAsnbcDCyXv7CGINg.mft (raw, json)
Hash identifier:          4exJBrg/5/M720wue59hAcySZ9pgoXbe6KOmBKCazKI=
Subject key identifier:   3A:8D:24:B8:ED:14:53:9F:FE:F5:10:7C:05:41:CC:3F:1D:C6:B5:55
Authority key identifier: 78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8
Certificate issuer:       /CN=A914B79F/serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8
Certificate serial:       022E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft
Manifest number:          0224
Signing time:             Mon 27 Jul 2026 04:22:00 +0000
Manifest this update:     Mon 27 Jul 2026 04:21:59 +0000
Manifest next update:     Mon 03 Aug 2026 04:21:59 +0000
Files and hashes:         1: eOQpC8zJmRWAsnbcDCyXv7CGINg.crl (hash: d1SpuNZAlFPAZwuMC9IcIon/c3fnhqV4XeDgXH7nFOY=)
                          2: 071BCFF849D011EF9F8A8969C4F9AE02.roa (hash: 6NW9Jnkv/VPSSaYMAlZB50nbZ3QmC4KywMsZ2YAiBbU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl
                          rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:21:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 558 (0x22e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B79F, serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8
        Validity
            Not Before: Jul 27 04:21:59 2026 GMT
            Not After : Aug  3 04:21:59 2026 GMT
        Subject: CN=6a66dce8-5072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:03:89:7f:83:00:c6:aa:41:2a:92:6e:c6:89:
                    40:88:1d:1c:6e:6d:04:18:97:4a:fa:81:bf:72:60:
                    cd:7b:85:63:59:53:f3:f2:03:b7:1f:26:4b:25:2c:
                    49:73:ee:37:2c:6e:94:60:85:04:db:c8:e5:77:65:
                    65:6d:74:08:58:5d:4a:3f:be:10:f4:38:2a:34:93:
                    ef:57:59:ee:20:e5:75:86:a6:b6:41:70:4c:1f:14:
                    1f:70:96:13:c6:f5:e3:36:5c:4f:b6:e8:03:f4:ae:
                    46:eb:59:67:c4:f7:7b:8b:36:24:17:aa:a3:ee:d8:
                    a8:98:4b:02:1a:cf:49:d2:c2:61:ed:ab:b0:b5:35:
                    f7:17:18:00:1d:b4:70:87:d0:9c:60:db:6d:c9:4c:
                    e3:a0:bf:70:94:6f:b8:8e:c3:33:65:13:ae:71:8d:
                    d5:0c:87:5a:7b:2c:c7:ed:0e:fd:d9:69:a3:cf:5a:
                    9a:d7:e1:3e:99:aa:4b:e1:c0:9b:6c:ba:16:8f:8d:
                    58:01:37:8a:f6:6c:fc:e4:4c:6d:67:22:03:1b:80:
                    3d:d9:df:f4:d1:5d:b8:78:b0:91:49:e0:aa:ee:55:
                    87:d9:80:8d:a2:b3:fa:d3:c3:b5:74:f1:b2:a8:57:
                    b4:c7:77:f8:45:17:92:63:5c:25:99:86:2b:a9:b3:
                    66:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8D:24:B8:ED:14:53:9F:FE:F5:10:7C:05:41:CC:3F:1D:C6:B5:55
            X509v3 Authority Key Identifier:
                keyid:78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ef:ec:4d:a9:bf:68:98:f3:57:d3:2d:7b:c1:b3:31:a2:bc:
         23:ed:6e:fa:5b:8d:32:7b:1a:6c:9d:ef:f2:f7:ff:87:d3:ba:
         96:97:a8:b5:94:52:0d:dc:80:dc:b1:d8:d0:19:9c:d4:00:74:
         a6:3e:4d:ba:b3:50:bb:17:e2:56:63:b3:63:15:0c:ba:ea:73:
         cc:6a:2b:f7:ba:de:db:7f:30:f6:9d:f7:4e:5a:94:9e:2e:38:
         9f:32:82:0d:44:29:4b:91:d0:b0:37:a0:f1:0f:2c:c8:24:d1:
         be:a0:bb:61:76:e3:97:ed:cf:0c:37:eb:42:19:ab:3e:e4:9a:
         df:fd:03:a3:d1:df:4f:3a:7c:80:4f:83:d8:a2:b6:c7:c0:b8:
         6f:0a:58:76:f5:7a:8e:b6:59:ae:6b:d9:e2:63:27:ec:52:37:
         cd:33:30:05:23:68:04:ee:e1:a9:84:59:fa:52:03:4a:01:0b:
         9b:33:08:3f:3f:fc:1c:fc:6b:f0:e6:39:21:aa:77:86:87:97:
         b1:1d:d7:8b:4c:24:dd:fa:b9:28:06:fd:3d:4f:b6:7e:ed:41:
         79:cd:c3:8d:dc:d4:42:4b:c6:9c:16:bb:ed:78:8a:d3:d2:5a:
         86:a1:fd:fb:46:5f:f6:00:44:19:36:29:bd:65:d0:3f:a4:16:
         99:df:ad:0b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEI3OUYxMTAvBgNVBAUTKDc4RTQyOTBCQ0NDOTk5MTU4MEIyNzZEQzBDMkM5N0JG
QjA4NjIwRDgwHhcNMjYwNzI3MDQyMTU5WhcNMjYwODAzMDQyMTU5WjAYMRYwFAYD
VQQDEw02YTY2ZGNlOC01MDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzwOJf4MAxqpBKpJuxolAiB0cbm0EGJdK+oG/cmDNe4VjWVPz8gO3HyZLJSxJ
c+43LG6UYIUE28jld2VlbXQIWF1KP74Q9DgqNJPvV1nuIOV1hqa2QXBMHxQfcJYT
xvXjNlxPtugD9K5G61lnxPd7izYkF6qj7tiomEsCGs9J0sJh7auwtTX3FxgAHbRw
h9CcYNttyUzjoL9wlG+4jsMzZROucY3VDIdaeyzH7Q792Wmjz1qa1+E+mapL4cCb
bLoWj41YATeK9mz85ExtZyIDG4A92d/00V24eLCRSeCq7lWH2YCNorP608O1dPGy
qFe0x3f4RReSY1wlmYYrqbNmuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDqNJLjt
FFOf/vUQfAVBzD8dxrVVMB8GA1UdIwQYMBaAFHjkKQvMyZkVgLJ23Awsl7+whiDY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Qjc5Ri9EQTY4MzdGMDRF
MjkxMUVFOTQ1QzM5NEZDNEY5QUUwMi9lT1FwQzh6Sm1SV0FzbmJjREN5WHY3Q0dJ
TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VPUXBDOHpKbVJXQXNuYmNEQ3lYdjdDR0lOZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Qjc5Ri9EQTY4MzdGMDRFMjkxMUVFOTQ1QzM5NEZDNEY5QUUwMi9lT1FwQzh6Sm1S
V0FzbmJjREN5WHY3Q0dJTmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQO/sTam/aJjzV9Mte8GzMaK8I+1u+luNMnsabJ3v8vf/h9O6lpeotZRSDdyA
3LHY0Bmc1AB0pj5NurNQuxfiVmOzYxUMuupzzGor97re238w9p33TlqUni44nzKC
DUQpS5HQsDeg8Q8syCTRvqC7YXbjl+3PDDfrQhmrPuSa3/0Do9HfTzp8gE+D2KK2
x8C4bwpYdvV6jrZZrmvZ4mMn7FI3zTMwBSNoBO7hqYRZ+lIDSgELmzMIPz/8HPxr
8OY5Iap3hoeXsR3Xi0wk3fq5KAb9PU+2fu1Bec3DjdzUQkvGnBa77XiK09JahqH9
+0Zf9gBEGTYpvWXQP6QWmd+tCw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:06:36 2026 by rpki-client