Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
File:                     fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft (raw, json)
Hash identifier:          3N6VU5WQMut2V1jhA2JfSd6GQa/7iZdEflFLob693to=
Subject key identifier:   8B:01:D4:88:FA:9F:36:77:DC:B7:08:FF:30:F6:48:79:5A:97:87:49
Authority key identifier: 7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77
Certificate issuer:       /CN=A9159309/serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777
Certificate serial:       CA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
Manifest number:          C4
Signing time:             Mon 27 Jul 2026 09:03:30 +0000
Manifest this update:     Mon 27 Jul 2026 09:03:29 +0000
Manifest next update:     Mon 03 Aug 2026 09:03:29 +0000
Files and hashes:         1: fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl (hash: uIGY9KBBKmdtpXUwj8kpb7pH9nL4D4CDhv/aweMERHs=)
                          2: B32DFBA0613E11F0807A9A39C4F9AE02.roa (hash: znQCSmWYjAzJ99g/MnFKRiPRCuuveVvzPYPlkOv1NBM=)
                          3: 21C5B04263A311F096468248C4F9AE02.roa (hash: ZAT1gq4fsyyEvWAh5Wb9WrqtHt9uUHF0Lm9+fNRhxOc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl
                          rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159309, serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777
        Validity
            Not Before: Jul 27 09:03:29 2026 GMT
            Not After : Aug  3 09:03:29 2026 GMT
        Subject: CN=6a671ee2-27c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:65:66:d7:34:39:17:61:50:36:97:ba:d9:a5:
                    cc:aa:a8:82:f6:ad:0a:fd:37:ed:9a:db:2a:e2:24:
                    04:c7:05:1f:36:ae:66:67:da:b1:3c:45:9c:2a:ef:
                    1f:61:60:8e:55:6c:fc:1d:f9:61:27:c0:55:eb:6b:
                    e1:5f:13:d4:42:fa:41:ec:67:f0:83:be:da:b6:6a:
                    14:df:60:58:78:11:e5:7e:25:69:75:f4:f9:3d:81:
                    78:8f:6f:17:78:e2:6b:f2:d4:1a:95:0e:91:22:6b:
                    72:ac:86:2b:a4:3e:8a:9f:f5:60:f8:70:1a:3e:5a:
                    62:1f:33:29:05:53:1f:ca:50:77:88:5c:48:8d:23:
                    5f:cd:96:da:05:79:c6:ed:85:6c:44:c9:98:4b:93:
                    8b:2f:14:c3:a5:a2:7d:6e:17:76:22:30:3d:34:aa:
                    99:14:ca:ab:16:c5:02:1b:93:f3:7b:fd:81:8e:03:
                    6f:ba:98:9e:a9:b0:79:8b:21:da:05:5d:e6:36:30:
                    c6:fa:d9:67:e2:f6:6f:f6:08:03:c4:cc:dd:0b:d3:
                    70:55:7d:c1:3d:96:38:77:f8:f6:bd:54:23:3f:6d:
                    a8:a8:f2:3b:94:e9:de:8f:06:ef:c5:8b:92:46:cf:
                    e7:8d:20:e9:d6:aa:57:e2:a1:7b:c1:67:5b:c1:20:
                    7e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:01:D4:88:FA:9F:36:77:DC:B7:08:FF:30:F6:48:79:5A:97:87:49
            X509v3 Authority Key Identifier:
                keyid:7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:d9:2e:0c:94:83:dc:b4:bd:0b:ec:54:3c:ca:71:85:29:a9:
         ff:95:25:ac:a9:1b:c8:14:d1:a0:de:b6:62:b6:b2:6e:24:2e:
         af:9d:02:f3:a2:9b:54:66:70:c7:cf:8c:2a:30:70:ab:84:a1:
         d3:74:94:05:51:d3:8f:61:86:07:48:47:6e:51:a9:28:87:50:
         43:df:83:69:5a:15:a9:3d:a1:1a:08:4a:62:e2:f0:03:fe:f2:
         e7:06:d4:7a:a7:f6:20:e2:03:77:b0:17:d2:26:6c:e7:5b:85:
         ba:04:8e:2e:b1:22:36:a5:4e:1d:82:f6:57:a6:73:c8:8a:f9:
         14:cb:37:12:70:a9:0d:6c:7b:23:64:9b:13:19:bc:e5:26:26:
         dd:59:52:87:92:1b:9a:ce:10:10:04:a2:94:72:e8:6e:dd:ab:
         59:34:ca:17:48:aa:d1:5e:93:b9:55:44:26:cc:63:9d:cc:21:
         b2:99:2e:2e:83:9a:89:9c:b3:56:ae:fb:65:3c:19:da:2f:6d:
         d0:9a:a6:89:b6:d8:dd:83:06:c2:c8:cd:5a:7e:dd:a3:84:8e:
         54:43:0b:bf:58:93:df:4c:8f:d4:8d:a8:fb:aa:6e:61:01:46:
         17:89:18:cd:1d:65:30:2b:db:2c:39:3a:a6:70:bc:99:ce:30:
         3f:71:f1:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTkzMDkxMTAvBgNVBAUTKDdEOEZBMEJFRjZBRUY3MUJERjg4Mzg1OEY3MzYxOUQz
QjU5RTI3NzcwHhcNMjYwNzI3MDkwMzI5WhcNMjYwODAzMDkwMzI5WjAYMRYwFAYD
VQQDEw02YTY3MWVlMi0yN2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2GVm1zQ5F2FQNpe62aXMqqiC9q0K/Tftmtsq4iQExwUfNq5mZ9qxPEWcKu8f
YWCOVWz8HflhJ8BV62vhXxPUQvpB7Gfwg77atmoU32BYeBHlfiVpdfT5PYF4j28X
eOJr8tQalQ6RImtyrIYrpD6Kn/Vg+HAaPlpiHzMpBVMfylB3iFxIjSNfzZbaBXnG
7YVsRMmYS5OLLxTDpaJ9bhd2IjA9NKqZFMqrFsUCG5Pze/2BjgNvupieqbB5iyHa
BV3mNjDG+tln4vZv9ggDxMzdC9NwVX3BPZY4d/j2vVQjP22oqPI7lOnejwbvxYuS
Rs/njSDp1qpX4qF7wWdbwSB+mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIsB1Ij6
nzZ33LcI/zD2SHlal4dJMB8GA1UdIwQYMBaAFH2PoL72rvcb34g4WPc2GdO1nid3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTMwOS85ODkxRTkyRTYx
M0QxMUYwQjAzNkI4MzZDNEY5QUUwMi9mWS1ndnZhdTl4dmZpRGhZOXpZWjA3V2VK
M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2ZZLWd2dmF1OXh2ZmlEaFk5ellaMDdXZUozYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OTMwOS85ODkxRTkyRTYxM0QxMUYwQjAzNkI4MzZDNEY5QUUwMi9mWS1ndnZhdTl4
dmZpRGhZOXpZWjA3V2VKM2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANNkuDJSD3LS9C+xUPMpxhSmp/5UlrKkbyBTRoN62YraybiQur50C86KbVGZw
x8+MKjBwq4Sh03SUBVHTj2GGB0hHblGpKIdQQ9+DaVoVqT2hGghKYuLwA/7y5wbU
eqf2IOIDd7AX0iZs51uFugSOLrEiNqVOHYL2V6ZzyIr5FMs3EnCpDWx7I2SbExm8
5SYm3VlSh5Ibms4QEASilHLobt2rWTTKF0iq0V6TuVVEJsxjncwhspkuLoOaiZyz
Vq77ZTwZ2i9t0JqmibbY3YMGwsjNWn7do4SOVEMLv1iT30yP1I2o+6puYQFGF4kY
zR1lMCvbLDk6pnC8mc4wP3Hx+g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:00:46 2026 by rpki-client