Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft
File:                     dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft (raw, json)
Hash identifier:          ReoNxQMEG3Iu2CAUgJyjFw2KyPeJf5fNYoZzr6FjIV8=
Subject key identifier:   CB:82:70:47:EB:32:F4:7D:2A:E3:ED:89:21:A6:AD:81:52:AD:89:76
Authority key identifier: 74:22:78:9E:8E:D0:BF:C2:0C:34:D7:BF:68:F5:19:EE:65:EF:F4:BC
Certificate issuer:       /CN=A915B0D2/serialNumber=7422789E8ED0BFC20C34D7BF68F519EE65EFF4BC
Certificate serial:       0200
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft
Manifest number:          01FA
Signing time:             Mon 27 Jul 2026 04:47:39 +0000
Manifest this update:     Mon 27 Jul 2026 04:47:39 +0000
Manifest next update:     Mon 03 Aug 2026 04:47:39 +0000
Files and hashes:         1: dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl (hash: HVQJnZAjczLUJ0JJijoVzf5jc5mh3TbApfcAjpviBEw=)
                          2: FA0FC12E869E11EE9FAC6784C4F9AE02.roa (hash: H+RrU+ZPqJuxRlrjQS4NUzBdPG3qKib/lM9dVIH4hoA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl
                          rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512 (0x200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B0D2, serialNumber=7422789E8ED0BFC20C34D7BF68F519EE65EFF4BC
        Validity
            Not Before: Jul 27 04:47:39 2026 GMT
            Not After : Aug  3 04:47:39 2026 GMT
        Subject: CN=6a66e2eb-5c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0c:a6:75:fb:c8:89:ae:94:0e:95:91:04:ae:
                    75:35:2d:77:6a:3d:be:d5:33:b0:66:35:b3:2b:b1:
                    66:7f:52:99:2c:5c:ff:91:8c:88:ab:b6:a9:4b:38:
                    af:24:4d:89:55:00:ab:55:be:98:44:4e:12:7e:e3:
                    43:b7:24:3b:dc:df:7f:6f:3e:ed:c5:ce:30:e2:c4:
                    24:b6:e1:83:ec:4d:55:2e:35:9b:72:46:c8:ef:a4:
                    07:f3:89:1d:4e:6f:de:9a:9f:d3:18:dd:bb:15:b9:
                    f5:d9:c7:d5:46:4b:69:a3:6a:2b:77:94:5e:73:27:
                    d7:00:bf:10:ef:7a:61:6d:9b:94:f2:ae:31:55:06:
                    51:a8:1e:9e:db:61:63:55:cc:07:63:4e:bc:41:69:
                    60:5a:f4:bc:52:eb:34:a0:f0:43:b7:bb:3a:48:46:
                    a8:8e:3a:9f:dc:75:44:0b:ab:16:24:da:1f:83:eb:
                    1b:85:eb:de:c9:a2:6a:6a:4e:8e:ef:af:e2:f7:8f:
                    c8:6e:95:27:15:89:c5:22:cb:22:99:4e:6d:47:df:
                    6a:fc:c6:ff:ca:12:c5:9a:e7:4b:50:28:fc:8c:7d:
                    d1:d4:67:83:da:37:45:86:f3:83:b6:40:7c:f4:fe:
                    25:ca:5c:18:66:c5:18:44:97:4a:19:99:b4:57:84:
                    c2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:82:70:47:EB:32:F4:7D:2A:E3:ED:89:21:A6:AD:81:52:AD:89:76
            X509v3 Authority Key Identifier:
                keyid:74:22:78:9E:8E:D0:BF:C2:0C:34:D7:BF:68:F5:19:EE:65:EF:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:64:75:a5:6d:a6:39:e8:1c:c0:9e:23:a6:77:27:0e:20:bf:
         68:91:84:22:36:d0:71:17:b4:12:89:30:62:f6:d4:c0:01:d3:
         7d:c5:ff:52:68:ef:52:60:95:17:8d:e9:33:0b:05:9f:34:19:
         7c:43:93:2f:1a:16:34:b4:df:f4:04:95:a3:4e:01:72:1d:8f:
         16:32:c0:0a:c9:a8:bb:1b:d9:ce:d0:e7:e0:39:4a:02:0c:ba:
         99:4f:38:0d:6d:00:ec:f9:d1:64:44:0f:b1:a3:86:2a:f1:56:
         87:c6:87:fd:0d:88:e8:9d:5a:80:36:16:87:86:8d:7f:38:71:
         75:1e:25:90:25:12:fb:79:d0:c9:77:49:87:e3:84:9d:6f:2b:
         d3:81:47:77:4a:6c:0c:ab:5b:8f:c7:c5:68:85:7f:bb:f8:b8:
         36:56:7d:66:77:b8:7e:e0:48:e3:d4:c5:ed:c5:06:00:85:82:
         db:14:69:9a:f3:d4:2f:08:37:ba:2d:a6:95:b9:0d:10:5f:20:
         4a:a0:6d:25:38:e9:48:1e:04:ab:8f:a4:6d:41:6d:9d:84:bf:
         66:12:c5:c9:3f:23:46:2e:d2:af:79:96:44:98:34:fc:e9:80:
         a7:30:5d:32:1e:5f:c0:48:87:3e:c3:76:ad:5e:f7:e9:04:71:
         f3:49:ee:68
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUIwRDIxMTAvBgNVBAUTKDc0MjI3ODlFOEVEMEJGQzIwQzM0RDdCRjY4RjUxOUVF
NjVFRkY0QkMwHhcNMjYwNzI3MDQ0NzM5WhcNMjYwODAzMDQ0NzM5WjAYMRYwFAYD
VQQDEw02YTY2ZTJlYi01YzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzgymdfvIia6UDpWRBK51NS13aj2+1TOwZjWzK7Fmf1KZLFz/kYyIq7apSziv
JE2JVQCrVb6YRE4SfuNDtyQ73N9/bz7txc4w4sQktuGD7E1VLjWbckbI76QH84kd
Tm/emp/TGN27Fbn12cfVRktpo2ord5RecyfXAL8Q73phbZuU8q4xVQZRqB6e22Fj
VcwHY068QWlgWvS8Uus0oPBDt7s6SEaojjqf3HVEC6sWJNofg+sbheveyaJqak6O
76/i94/IbpUnFYnFIssimU5tR99q/Mb/yhLFmudLUCj8jH3R1GeD2jdFhvODtkB8
9P4lylwYZsUYRJdKGZm0V4TClQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMuCcEfr
MvR9KuPtiSGmrYFSrYl2MB8GA1UdIwQYMBaAFHQieJ6O0L/CDDTXv2j1Ge5l7/S8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjBEMi84OEY5NzlBMjgy
Q0IxMUVFOUFBMzc2NENDNEY5QUUwMi9kQ0o0bm83UXY4SU1OTmVfYVBVWjdtWHY5
THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RDSjRubzdRdjhJTU5OZV9hUFVaN21YdjlMdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QjBEMi84OEY5NzlBMjgyQ0IxMUVFOUFBMzc2NENDNEY5QUUwMi9kQ0o0bm83UXY4
SU1OTmVfYVBVWjdtWHY5THcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeWR1pW2mOegcwJ4jpncnDiC/aJGEIjbQcRe0EokwYvbUwAHTfcX/UmjvUmCV
F43pMwsFnzQZfEOTLxoWNLTf9ASVo04Bch2PFjLACsmouxvZztDn4DlKAgy6mU84
DW0A7PnRZEQPsaOGKvFWh8aH/Q2I6J1agDYWh4aNfzhxdR4lkCUS+3nQyXdJh+OE
nW8r04FHd0psDKtbj8fFaIV/u/i4NlZ9Zne4fuBI49TF7cUGAIWC2xRpmvPULwg3
ui2mlbkNEF8gSqBtJTjpSB4Eq4+kbUFtnYS/ZhLFyT8jRi7Sr3mWRJg0/OmApzBd
Mh5fwEiHPsN2rV736QRx80nuaA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:10:56 2026 by rpki-client