Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft
File:                     enhVXghERXV_vNAN3R10w2nLoLA.mft (raw, json)
Hash identifier:          WS7sLYblYdPqi3aiTeZFAfAUNZtMSQcTrs63QhZBkbc=
Subject key identifier:   DD:62:4C:07:E4:6B:74:E5:B3:29:44:F6:19:52:4E:6B:A0:31:F6:DA
Authority key identifier: 7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0
Certificate issuer:       /CN=A914E6AA/serialNumber=7A78555E084445757FBCD00DDD1D74C369CBA0B0
Certificate serial:       0228
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft
Manifest number:          0C7B
Signing time:             Sun 26 Jul 2026 23:05:40 +0000
Manifest this update:     Sun 26 Jul 2026 23:05:40 +0000
Manifest next update:     Sun 02 Aug 2026 23:05:40 +0000
Files and hashes:         1: enhVXghERXV_vNAN3R10w2nLoLA.crl (hash: 7OdBGxhvksrl1f0bOjpIU9X0wfFHj6dXscpOwydxMaU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.crl
                          rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:05:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552 (0x228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E6AA, serialNumber=7A78555E084445757FBCD00DDD1D74C369CBA0B0
        Validity
            Not Before: Jul 26 23:05:40 2026 GMT
            Not After : Aug  2 23:05:40 2026 GMT
        Subject: CN=6a6692c4-aeab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ff:05:59:78:d2:43:36:78:c6:b7:5b:0e:14:
                    29:3f:bf:33:59:9c:f9:06:2e:91:1c:b9:c2:2a:7e:
                    08:e5:24:a2:12:45:c4:a3:b4:fc:0a:6a:8b:0d:00:
                    ee:4b:65:88:b8:21:8d:8a:1c:39:3a:76:3c:78:f0:
                    75:fb:3e:57:05:17:f0:4e:94:84:41:e5:10:89:8d:
                    08:ed:b4:89:e7:a3:79:96:f3:56:a5:70:1a:76:d5:
                    49:21:15:9b:9d:d2:8b:e8:a4:91:15:e3:5c:ae:51:
                    7d:9f:61:b8:04:fd:c4:2f:6e:eb:e2:6c:2e:a1:6d:
                    93:a2:0d:c9:cd:b1:a9:a0:50:f8:d3:28:05:02:44:
                    f2:5c:7d:c4:6f:3a:6c:51:f6:45:3c:66:02:8f:4e:
                    8d:d2:1a:c4:c9:dc:84:44:20:7d:7f:6e:94:30:64:
                    40:71:8b:77:08:71:13:21:07:17:9a:c9:3f:ef:c8:
                    50:aa:39:c1:2e:5c:74:18:f2:48:57:99:01:2f:4a:
                    00:6f:c3:d0:84:86:63:5a:76:84:02:4a:73:57:25:
                    ba:39:3f:31:28:d5:92:ee:37:6c:20:75:c2:58:56:
                    c7:ec:ec:cb:aa:44:86:2b:c6:f1:5a:5d:d9:8f:69:
                    a6:f5:5b:0c:01:d5:8f:d8:a0:9e:8a:09:e1:4b:5c:
                    07:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:62:4C:07:E4:6B:74:E5:B3:29:44:F6:19:52:4E:6B:A0:31:F6:DA
            X509v3 Authority Key Identifier:
                keyid:7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:8e:d4:d2:8b:ac:bd:89:18:8e:f5:ae:03:06:42:75:9d:e5:
         03:cb:e9:b8:b5:ec:4b:ef:46:6d:3c:2a:ed:ac:75:cf:f8:0f:
         e3:75:08:3e:d2:00:45:03:d9:0b:cd:e7:bd:12:b1:bc:09:57:
         8b:e6:7f:89:b7:88:83:e4:8a:b1:6f:5e:c7:60:3e:cc:29:e4:
         d2:07:89:17:eb:7a:81:f8:6a:36:8e:da:69:e5:12:28:ad:8c:
         ff:1e:17:d1:ab:c7:d6:7b:a4:35:14:22:d6:c1:dc:a6:12:34:
         ec:a7:08:ae:a8:4b:bd:5a:2e:ed:bd:aa:e4:0b:2a:c1:30:18:
         f3:e7:d6:1c:c6:09:02:bd:0d:1e:55:f1:0b:33:64:1c:a5:78:
         28:6e:46:67:c8:80:31:26:44:19:da:87:55:ab:62:f8:9a:9d:
         e3:f1:81:56:91:05:a7:a2:0a:b7:42:be:8f:f5:4e:d5:ab:9c:
         5a:17:6d:63:47:d3:9c:dd:44:eb:1d:c7:ea:f2:af:4f:70:c4:
         dd:3b:80:71:1e:0c:17:d4:a4:a9:ee:7f:fb:95:10:a1:78:a4:
         c4:f9:0f:c9:ea:56:09:8b:64:fc:39:1f:72:5b:b8:fc:80:01:
         a3:17:00:31:67:59:10:cc:dd:41:d4:4a:f5:f8:ab:e1:ed:b7:
         a7:5b:62:b9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU2QUExMTAvBgNVBAUTKDdBNzg1NTVFMDg0NDQ1NzU3RkJDRDAwREREMUQ3NEMz
NjlDQkEwQjAwHhcNMjYwNzI2MjMwNTQwWhcNMjYwODAyMjMwNTQwWjAYMRYwFAYD
VQQDEw02YTY2OTJjNC1hZWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1P8FWXjSQzZ4xrdbDhQpP78zWZz5Bi6RHLnCKn4I5SSiEkXEo7T8CmqLDQDu
S2WIuCGNihw5OnY8ePB1+z5XBRfwTpSEQeUQiY0I7bSJ56N5lvNWpXAadtVJIRWb
ndKL6KSRFeNcrlF9n2G4BP3EL27r4mwuoW2Tog3JzbGpoFD40ygFAkTyXH3Ebzps
UfZFPGYCj06N0hrEydyERCB9f26UMGRAcYt3CHETIQcXmsk/78hQqjnBLlx0GPJI
V5kBL0oAb8PQhIZjWnaEAkpzVyW6OT8xKNWS7jdsIHXCWFbH7OzLqkSGK8bxWl3Z
j2mm9VsMAdWP2KCeignhS1wHZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN1iTAfk
a3TlsylE9hlSTmugMfbaMB8GA1UdIwQYMBaAFHp4VV4IREV1f7zQDd0ddMNpy6Cw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE
QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9lbmhWWGdoRVJYVl92TkFOM1IxMHcybkxv
TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VuaFZYZ2hFUlhWX3ZOQU4zUjEwdzJuTG9MQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9lbmhWWGdoRVJY
Vl92TkFOM1IxMHcybkxvTEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe47U0ousvYkYjvWuAwZCdZ3lA8vpuLXsS+9GbTwq7ax1z/gP43UIPtIARQPZ
C83nvRKxvAlXi+Z/ibeIg+SKsW9ex2A+zCnk0geJF+t6gfhqNo7aaeUSKK2M/x4X
0avH1nukNRQi1sHcphI07KcIrqhLvVou7b2q5AsqwTAY8+fWHMYJAr0NHlXxCzNk
HKV4KG5GZ8iAMSZEGdqHVati+Jqd4/GBVpEFp6IKt0K+j/VO1aucWhdtY0fTnN1E
6x3H6vKvT3DE3TuAcR4MF9Skqe5/+5UQoXikxPkPyepWCYtk/Dkfclu4/IABoxcA
MWdZEMzdQdRK9fir4e23p1tiuQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:40:53 2026 by rpki-client