Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft
File:                     fX8vgARwzrGTx-t4mDlZW3YnR08.mft (raw, json)
Hash identifier:          LcJ4wYLbIjo+4/A/Lp8S+evfkJrnPuFySZ7YRjWFQe4=
Subject key identifier:   87:33:39:24:80:9C:9A:BE:4C:F0:08:74:F8:07:05:72:63:85:96:92
Authority key identifier: 7D:7F:2F:80:04:70:CE:B1:93:C7:EB:78:98:39:59:5B:76:27:47:4F
Certificate issuer:       /CN=A914F700/serialNumber=7D7F2F800470CEB193C7EB789839595B7627474F
Certificate serial:       04D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fX8vgARwzrGTx-t4mDlZW3YnR08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft
Manifest number:          04CC
Signing time:             Mon 27 Jul 2026 00:48:08 +0000
Manifest this update:     Mon 27 Jul 2026 00:48:07 +0000
Manifest next update:     Mon 03 Aug 2026 00:48:07 +0000
Files and hashes:         1: fX8vgARwzrGTx-t4mDlZW3YnR08.crl (hash: MVjzL7MBQo+jInZ4Fa1IsRqaOWAYFIqpZf/0elqu+L8=)
                          2: 6D7B126C798111ECBBDBD359C4F9AE02.roa (hash: fEICKXxhcMhgodlecCtySeHQZa+ZGIRq7EvZ78I9IQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.crl
                          rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fX8vgARwzrGTx-t4mDlZW3YnR08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:48:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1235 (0x4d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F700, serialNumber=7D7F2F800470CEB193C7EB789839595B7627474F
        Validity
            Not Before: Jul 27 00:48:07 2026 GMT
            Not After : Aug  3 00:48:07 2026 GMT
        Subject: CN=6a66aac8-a7af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2c:6c:29:e7:75:37:cd:0d:47:6e:9f:c1:aa:
                    a4:d1:50:f2:2f:34:42:21:cd:13:38:1f:fd:9a:67:
                    f3:e4:95:4d:f2:f2:b7:ca:2b:ee:56:22:6c:7e:d1:
                    b3:a3:75:a6:25:b3:88:3a:27:85:8f:a5:24:88:25:
                    01:a1:18:75:f7:86:c9:ef:3f:c2:f5:f1:ac:39:5c:
                    41:d7:aa:9b:3d:59:46:7d:20:ba:b2:b7:ea:4a:0c:
                    ac:0e:31:86:95:35:2a:cf:bd:28:5d:a4:25:c6:6b:
                    eb:0c:68:27:e8:32:bb:38:72:a1:d8:0c:2c:c3:49:
                    ec:9d:4e:d8:05:70:1b:23:45:de:69:db:97:6b:c5:
                    65:7a:95:a2:e3:3a:07:e9:bc:73:fc:26:a0:c0:fd:
                    05:8a:d2:d1:e5:4e:9c:db:38:59:7c:04:a3:de:34:
                    02:7a:35:49:a4:e2:09:86:1a:41:fc:d4:21:4c:34:
                    61:20:74:7d:4e:03:46:fd:27:0e:f4:6d:54:e3:cd:
                    46:81:2e:d5:b8:fc:19:b1:13:21:c1:32:f5:77:4e:
                    f5:31:08:2b:d0:ed:33:1b:f8:e3:bc:ea:f5:8d:6b:
                    33:49:f0:cf:12:6b:9b:e7:c6:c4:c4:f8:b9:93:6b:
                    27:c2:b2:c3:4b:bb:b8:d0:1b:73:db:4d:9c:92:4f:
                    75:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:33:39:24:80:9C:9A:BE:4C:F0:08:74:F8:07:05:72:63:85:96:92
            X509v3 Authority Key Identifier:
                keyid:7D:7F:2F:80:04:70:CE:B1:93:C7:EB:78:98:39:59:5B:76:27:47:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fX8vgARwzrGTx-t4mDlZW3YnR08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:29:f2:2b:ee:6b:b1:c5:94:e7:dd:c8:9c:e0:fc:52:c8:03:
         b0:c0:9f:59:4c:5f:68:76:58:85:c1:2b:b2:13:97:97:4a:56:
         62:11:52:96:89:41:58:f2:3c:2b:2c:d0:ca:d0:63:a8:ea:27:
         1c:e4:4d:d6:b8:4b:58:1b:b9:12:00:a8:f9:28:80:ad:bf:ae:
         cb:88:43:28:ba:b7:28:f0:cb:b1:59:96:03:27:6d:74:dc:e9:
         74:19:d5:7d:4a:33:58:ab:24:5f:d5:6f:e0:85:41:e0:3a:56:
         13:0b:42:b8:9b:38:14:be:8d:bf:57:c0:4f:04:ef:b6:33:d6:
         7e:fb:15:9a:63:bf:f4:49:20:5e:53:62:8a:5b:a1:26:fa:6d:
         90:75:92:10:6d:02:2f:77:b7:76:bb:30:d0:63:32:87:d6:ff:
         f9:b7:ee:af:52:81:f9:a9:8b:b8:16:b1:f6:52:a8:08:2c:89:
         3b:13:8d:0b:95:79:e4:c2:5c:a0:bd:4d:88:93:93:e2:79:6a:
         d2:cf:45:e4:58:98:f1:e9:b3:33:7b:0f:19:f5:0b:df:c4:d5:
         06:b8:83:60:82:6b:9f:0e:0a:09:cc:b8:f9:3c:4f:62:0d:0d:
         f9:94:b4:78:c0:34:36:3e:ab:8d:04:92:93:3e:d3:d9:96:53:
         30:56:3e:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEY3MDAxMTAvBgNVBAUTKDdEN0YyRjgwMDQ3MENFQjE5M0M3RUI3ODk4Mzk1OTVC
NzYyNzQ3NEYwHhcNMjYwNzI3MDA0ODA3WhcNMjYwODAzMDA0ODA3WjAYMRYwFAYD
VQQDEw02YTY2YWFjOC1hN2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArixsKed1N80NR26fwaqk0VDyLzRCIc0TOB/9mmfz5JVN8vK3yivuViJsftGz
o3WmJbOIOieFj6UkiCUBoRh194bJ7z/C9fGsOVxB16qbPVlGfSC6srfqSgysDjGG
lTUqz70oXaQlxmvrDGgn6DK7OHKh2Awsw0nsnU7YBXAbI0XeaduXa8VlepWi4zoH
6bxz/CagwP0FitLR5U6c2zhZfASj3jQCejVJpOIJhhpB/NQhTDRhIHR9TgNG/ScO
9G1U481GgS7VuPwZsRMhwTL1d071MQgr0O0zG/jjvOr1jWszSfDPEmub58bExPi5
k2snwrLDS7u40Btz202ckk91lQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIczOSSA
nJq+TPAIdPgHBXJjhZaSMB8GA1UdIwQYMBaAFH1/L4AEcM6xk8freJg5WVt2J0dP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjcwMC9ENEM1REIxMjc5
N0UxMUVDOENENzgyNTdDNEY5QUUwMi9mWDh2Z0FSd3pyR1R4LXQ0bURsWlczWW5S
MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZYOHZnQVJ3enJHVHgtdDRtRGxaVzNZblIwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RjcwMC9ENEM1REIxMjc5N0UxMUVDOENENzgyNTdDNEY5QUUwMi9mWDh2Z0FSd3py
R1R4LXQ0bURsWlczWW5SMDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfynyK+5rscWU593InOD8UsgDsMCfWUxfaHZYhcErshOXl0pWYhFSlolBWPI8
KyzQytBjqOonHORN1rhLWBu5EgCo+SiArb+uy4hDKLq3KPDLsVmWAydtdNzpdBnV
fUozWKskX9Vv4IVB4DpWEwtCuJs4FL6Nv1fATwTvtjPWfvsVmmO/9EkgXlNiiluh
JvptkHWSEG0CL3e3drsw0GMyh9b/+bfur1KB+amLuBax9lKoCCyJOxONC5V55MJc
oL1NiJOT4nlq0s9F5FiY8emzM3sPGfUL38TVBriDYIJrnw4KCcy4+TxPYg0N+ZS0
eMA0Nj6rjQSSkz7T2ZZTMFY+Kg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:37:50 2026 by rpki-client