Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
File:                     M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft (raw, json)
Hash identifier:          cOoQ+vuHcj5ef49Rexu9Fl3R1jv3ROggqb7VWzRSMSI=
Subject key identifier:   88:F6:F9:CD:A9:10:7D:E2:16:EE:BE:FE:24:1A:03:B4:C8:EE:F5:84
Authority key identifier: 33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B
Certificate issuer:       /CN=A9154961/serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B
Certificate serial:       0321
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
Manifest number:          0318
Signing time:             Sat 13 Jun 2026 01:11:45 +0000
Manifest this update:     Sat 13 Jun 2026 01:11:45 +0000
Manifest next update:     Sat 20 Jun 2026 01:11:45 +0000
Files and hashes:         1: M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl (hash: KgdCTN3pzCA69AOJ2yH7sJmp4oQkvUE1Gp3zQPWFzd0=)
                          2: 7359F5C43A4A11ED9B8FF35AC4F9AE02.roa (hash: RE9FWoshhFwVBEKSS3waEgRjXTpLrxodiVIl1CwWm+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl
                          rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:11:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 801 (0x321)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154961, serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B
        Validity
            Not Before: Jun 13 01:11:45 2026 GMT
            Not After : Jun 20 01:11:45 2026 GMT
        Subject: CN=6a2cae51-c396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:14:6a:45:d5:84:f5:53:16:47:af:61:0b:b9:
                    17:92:df:73:a5:57:5b:91:34:ae:91:d5:23:c2:d3:
                    33:2c:f6:89:cf:37:bb:ef:f5:e4:9c:89:77:92:53:
                    0c:82:6a:d8:a7:87:39:95:79:78:85:c3:3e:00:0c:
                    3c:d4:42:5e:7a:e1:6e:a1:d5:1d:70:b6:15:19:c5:
                    44:29:f5:3b:80:cb:58:97:b2:93:dc:e9:42:33:13:
                    e1:ce:97:2c:9b:08:70:37:f5:c7:ef:37:1a:c2:ce:
                    9d:7e:67:71:6c:63:2a:ad:46:17:b6:92:1b:a1:82:
                    d6:b6:0d:e6:9f:ca:08:94:34:94:a6:dc:13:13:fe:
                    8a:1b:3c:12:e0:84:4a:f9:c9:ba:bb:f9:f8:df:e5:
                    5c:93:d6:9e:8f:dd:90:02:f2:b5:62:4f:4d:2c:c7:
                    f3:9e:0f:5a:ff:c8:74:e3:5d:9b:20:6f:44:78:86:
                    5e:15:5f:26:ec:d5:93:01:6c:04:41:0d:82:36:6a:
                    1d:df:a2:f3:f1:f2:f0:19:91:a6:8b:cb:31:6e:75:
                    d8:a1:30:5b:0c:6d:56:35:bd:55:50:4a:0d:a8:2e:
                    f7:4d:55:36:db:a9:b9:9c:12:5e:ed:4c:f0:4a:30:
                    97:85:f7:d4:2c:ea:d2:a4:22:b1:77:59:05:b1:10:
                    f8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F6:F9:CD:A9:10:7D:E2:16:EE:BE:FE:24:1A:03:B4:C8:EE:F5:84
            X509v3 Authority Key Identifier:
                keyid:33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c7:99:5c:87:73:b2:76:54:d1:61:9b:d8:4e:e7:34:1b:58:
         e4:9d:1e:58:a2:c2:5e:0e:62:ad:60:08:03:b8:e7:00:ac:cf:
         83:f8:14:db:0b:f4:ed:cb:44:3a:88:bb:27:dc:4f:e0:b7:09:
         7d:55:1f:55:0b:54:fc:d7:7b:3a:b0:d4:46:75:14:5d:4c:a4:
         9d:9e:20:ab:9e:dc:16:61:a6:3a:cf:cf:3f:2e:b2:41:b8:7e:
         b5:24:23:10:07:1e:11:9a:0d:ee:f8:fb:98:ec:73:37:c1:60:
         45:b2:97:65:ee:54:35:79:3f:20:19:fa:76:36:92:b7:51:26:
         0c:93:99:9c:d8:79:9e:87:8f:2e:f4:c3:4f:48:15:8d:5d:5f:
         48:6a:da:a6:d6:d4:6d:92:62:75:5a:c2:be:5e:4a:68:10:9c:
         7c:21:6c:1a:14:01:81:80:35:3c:66:ca:a1:97:f0:72:fe:77:
         18:40:d8:1e:d9:75:3f:c4:2c:52:ef:fb:9c:12:dc:0b:f2:fb:
         5f:4f:4f:7f:7e:31:f6:22:e0:26:98:10:29:4d:5a:76:9c:39:
         11:9d:cc:f6:9c:81:5a:95:70:29:a3:66:ba:67:7c:b7:a4:56:
         af:a3:fc:07:4b:1f:d0:b9:04:63:7a:31:56:82:b5:ed:05:84:
         b0:98:2a:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQ5NjExMTAvBgNVBAUTKDMzQjBENTY4OTUwNDgzNkMxMUU5RUNERDBEMTE5QzA1
OEQzRjc2MEIwHhcNMjYwNjEzMDExMTQ1WhcNMjYwNjIwMDExMTQ1WjAYMRYwFAYD
VQQDEw02YTJjYWU1MS1jMzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzRRqRdWE9VMWR69hC7kXkt9zpVdbkTSukdUjwtMzLPaJzze77/XknIl3klMM
gmrYp4c5lXl4hcM+AAw81EJeeuFuodUdcLYVGcVEKfU7gMtYl7KT3OlCMxPhzpcs
mwhwN/XH7zcaws6dfmdxbGMqrUYXtpIboYLWtg3mn8oIlDSUptwTE/6KGzwS4IRK
+cm6u/n43+Vck9aej92QAvK1Yk9NLMfzng9a/8h0412bIG9EeIZeFV8m7NWTAWwE
QQ2CNmod36Lz8fLwGZGmi8sxbnXYoTBbDG1WNb1VUEoNqC73TVU226m5nBJe7Uzw
SjCXhffULOrSpCKxd1kFsRD4HwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIj2+c2p
EH3iFu6+/iQaA7TI7vWEMB8GA1UdIwQYMBaAFDOw1WiVBINsEens3Q0RnAWNP3YL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDk2MS9GRUJCRkE4MDFC
RTIxMUVEQUYxN0E1NThDNEY5QUUwMi9NN0RWYUpVRWcyd1I2ZXpkRFJHY0JZMF9k
Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL003RFZhSlVFZzJ3UjZlemREUkdjQlkwX2Rncy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDk2MS9GRUJCRkE4MDFCRTIxMUVEQUYxN0E1NThDNEY5QUUwMi9NN0RWYUpVRWcy
d1I2ZXpkRFJHY0JZMF9kZ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR8eZXIdzsnZU0WGb2E7nNBtY5J0eWKLCXg5irWAIA7jnAKzPg/gU2wv07ctE
Ooi7J9xP4LcJfVUfVQtU/Nd7OrDURnUUXUyknZ4gq57cFmGmOs/PPy6yQbh+tSQj
EAceEZoN7vj7mOxzN8FgRbKXZe5UNXk/IBn6djaSt1EmDJOZnNh5noePLvTDT0gV
jV1fSGraptbUbZJidVrCvl5KaBCcfCFsGhQBgYA1PGbKoZfwcv53GEDYHtl1P8Qs
Uu/7nBLcC/L7X09Pf34x9iLgJpgQKU1adpw5EZ3M9pyBWpVwKaNmumd8t6RWr6P8
B0sf0LkEY3oxVoK17QWEsJgqNg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:50:40 2026 by rpki-client