Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157AC6/851461804E0211F1BC2D5411C8833773/bXCBEk8H_qBymCIdIb-UA2jT-_o.mft
File:                     bXCBEk8H_qBymCIdIb-UA2jT-_o.mft (raw, json)
Hash identifier:          1NFWhu7tazssNK2VMJQu73qEmRBbft0TlVunha6WK0Q=
Subject key identifier:   9F:BF:C8:AE:A8:C0:20:4A:B7:F4:94:82:CA:4C:74:7C:FE:44:AC:CA
Authority key identifier: 6D:70:81:12:4F:07:FE:A0:72:98:22:1D:21:BF:94:03:68:D3:FB:FA
Certificate issuer:       /CN=A9157AC6/serialNumber=6D7081124F07FEA07298221D21BF940368D3FBFA
Certificate serial:       2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXCBEk8H_qBymCIdIb-UA2jT-_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157AC6/851461804E0211F1BC2D5411C8833773/bXCBEk8H_qBymCIdIb-UA2jT-_o.mft
Manifest number:          29
Signing time:             Mon 27 Jul 2026 11:10:41 +0000
Manifest this update:     Mon 27 Jul 2026 11:10:40 +0000
Manifest next update:     Mon 03 Aug 2026 11:10:40 +0000
Files and hashes:         1: bXCBEk8H_qBymCIdIb-UA2jT-_o.crl (hash: hnI7nOi2kK0O6RjaXfd3AdHvCQQteedtsq07wUjzknI=)
                          2: ECE5B66E6F0F11F1A31C64DE84A30FBC.roa (hash: i24Uxxkgrbji9z54Ow7Jw2e9+h7i/J19UczyJNjiFts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157AC6/851461804E0211F1BC2D5411C8833773/bXCBEk8H_qBymCIdIb-UA2jT-_o.crl
                          rsync://rpki.apnic.net/member_repository/A9157AC6/851461804E0211F1BC2D5411C8833773/bXCBEk8H_qBymCIdIb-UA2jT-_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXCBEk8H_qBymCIdIb-UA2jT-_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:10:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157AC6, serialNumber=6D7081124F07FEA07298221D21BF940368D3FBFA
        Validity
            Not Before: Jul 27 11:10:40 2026 GMT
            Not After : Aug  3 11:10:40 2026 GMT
        Subject: CN=6a673cb1-5786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d9:25:b9:b5:b1:54:a2:29:c6:58:90:50:c4:
                    f1:9e:af:77:21:c6:6d:d1:ff:41:54:d3:a5:17:2d:
                    af:1c:6e:16:67:df:e4:c2:64:f6:2f:86:93:58:d3:
                    d1:00:7a:fe:50:21:8d:14:8d:42:7f:39:e0:8f:cb:
                    0e:d2:ef:c6:08:56:8a:29:5b:a8:fc:0a:11:d1:50:
                    6c:46:4e:4d:1f:91:05:da:42:1b:89:de:cc:23:a0:
                    4f:f2:50:c0:b5:aa:44:a0:81:ff:fe:c9:86:27:61:
                    8d:90:d0:81:24:b7:f9:09:e8:6c:91:3a:07:6c:0c:
                    ad:c8:8a:b4:d3:27:c5:af:92:2d:d7:29:2a:aa:81:
                    a5:1c:c4:33:7d:85:24:54:33:95:98:7c:6e:2c:b2:
                    c2:aa:c7:34:ca:5d:3b:39:fe:2f:3c:94:89:c6:5f:
                    95:53:f9:a5:c1:2e:67:5e:0f:cb:8b:3d:98:2d:9f:
                    43:14:c1:6b:33:ec:0d:a7:72:86:f1:1f:93:85:2a:
                    42:c8:d5:9b:55:81:d7:0d:bb:a7:b4:07:ea:a9:1d:
                    6c:02:a5:09:0c:cb:4f:eb:79:8c:99:a9:62:c9:10:
                    8a:57:ca:89:cd:0c:e3:da:e4:3b:f3:87:2f:4d:6d:
                    76:e1:27:7f:6b:77:1e:c4:8a:00:e0:52:69:f5:2c:
                    90:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BF:C8:AE:A8:C0:20:4A:B7:F4:94:82:CA:4C:74:7C:FE:44:AC:CA
            X509v3 Authority Key Identifier:
                keyid:6D:70:81:12:4F:07:FE:A0:72:98:22:1D:21:BF:94:03:68:D3:FB:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157AC6/851461804E0211F1BC2D5411C8833773/bXCBEk8H_qBymCIdIb-UA2jT-_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXCBEk8H_qBymCIdIb-UA2jT-_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157AC6/851461804E0211F1BC2D5411C8833773/bXCBEk8H_qBymCIdIb-UA2jT-_o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:44:bf:d9:18:21:03:e2:bd:e3:37:25:ba:21:84:46:f4:80:
         25:de:b0:53:2a:f2:94:ef:d3:05:a8:e3:23:cf:aa:82:76:ae:
         6d:cb:d0:60:a2:5d:c5:db:1c:98:67:76:46:ea:9d:50:28:af:
         b6:5b:9d:1e:5d:ff:e5:f0:04:2b:79:1b:78:b0:ec:f3:8a:67:
         b1:37:7a:a5:84:5a:9f:f2:5b:ee:85:c9:7a:0c:c8:81:82:c6:
         7b:22:2b:6f:22:29:7a:2e:79:49:d9:e6:7e:b5:49:e4:26:13:
         06:16:8b:84:ec:bc:30:51:d5:b4:19:ee:08:46:83:b2:94:26:
         eb:da:41:91:dd:22:a0:dd:2d:ea:44:f7:75:c5:89:dd:59:72:
         b9:dd:4e:68:08:61:70:36:b6:88:8d:e8:a7:0b:01:d3:a8:ad:
         63:f9:04:52:93:59:26:70:63:2d:17:36:e1:1f:32:5d:a2:aa:
         7b:bf:02:bb:0b:78:e4:1e:c8:09:81:32:e1:00:00:12:0a:db:
         0f:22:71:f4:69:d4:34:b7:55:d9:9d:8f:e3:1c:01:b3:0c:de:
         71:d9:32:99:c2:b7:a2:53:f4:53:02:d3:5e:f5:33:23:88:ce:
         b6:17:59:7c:52:19:ba:56:d3:6c:28:65:83:e0:7b:93:eb:f7:
         c0:c4:d0:8e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
N0FDNjExMC8GA1UEBRMoNkQ3MDgxMTI0RjA3RkVBMDcyOTgyMjFEMjFCRjk0MDM2
OEQzRkJGQTAeFw0yNjA3MjcxMTEwNDBaFw0yNjA4MDMxMTEwNDBaMBgxFjAUBgNV
BAMTDTZhNjczY2IxLTU3ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDX2SW5tbFUoinGWJBQxPGer3chxm3R/0FU06UXLa8cbhZn3+TCZPYvhpNY09EA
ev5QIY0UjUJ/OeCPyw7S78YIVoopW6j8ChHRUGxGTk0fkQXaQhuJ3swjoE/yUMC1
qkSggf/+yYYnYY2Q0IEkt/kJ6GyROgdsDK3IirTTJ8Wvki3XKSqqgaUcxDN9hSRU
M5WYfG4sssKqxzTKXTs5/i88lInGX5VT+aXBLmdeD8uLPZgtn0MUwWsz7A2ncobx
H5OFKkLI1ZtVgdcNu6e0B+qpHWwCpQkMy0/reYyZqWLJEIpXyonNDOPa5Dvzhy9N
bXbhJ39rdx7EigDgUmn1LJC5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUn7/IrqjA
IEq39JSCykx0fP5ErMowHwYDVR0jBBgwFoAUbXCBEk8H/qBymCIdIb+UA2jT+/ow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3QUM2Lzg1MTQ2MTgwNEUw
MjExRjFCQzJENTQxMUM4ODMzNzczL2JYQ0JFazhIX3FCeW1DSWRJYi1VQTJqVC1f
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYlhDQkVrOEhfcUJ5bUNJZEliLVVBMmpULV9vLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3
QUM2Lzg1MTQ2MTgwNEUwMjExRjFCQzJENTQxMUM4ODMzNzczL2JYQ0JFazhIX3FC
eW1DSWRJYi1VQTJqVC1fby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCjRL/ZGCED4r3jNyW6IYRG9IAl3rBTKvKU79MFqOMjz6qCdq5ty9Bgol3F2xyY
Z3ZG6p1QKK+2W50eXf/l8AQreRt4sOzzimexN3qlhFqf8lvuhcl6DMiBgsZ7Iitv
Iil6LnlJ2eZ+tUnkJhMGFouE7LwwUdW0Ge4IRoOylCbr2kGR3SKg3S3qRPd1xYnd
WXK53U5oCGFwNraIjeinCwHTqK1j+QRSk1kmcGMtFzbhHzJdoqp7vwK7C3jkHsgJ
gTLhAAASCtsPInH0adQ0t1XZnY/jHAGzDN5x2TKZwreiU/RTAtNe9TMjiM62F1l8
Uhm6VtNsKGWD4HuT6/fAxNCO
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:19:30 2026 by rpki-client