Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft
File:                     SC1I47aWHxIIwGcVJOCOkDOV9lk.mft (raw, json)
Hash identifier:          8qNBUzk8axuImmiz4VnhqAu83m6rmU2jxV9tWHmMFWY=
Subject key identifier:   FF:D7:68:F6:8B:11:3D:12:EE:B1:D1:1B:46:5B:F8:4E:F1:F0:33:14
Authority key identifier: 48:2D:48:E3:B6:96:1F:12:08:C0:67:15:24:E0:8E:90:33:95:F6:59
Certificate issuer:       /CN=A915BCE2/serialNumber=482D48E3B6961F1208C0671524E08E903395F659
Certificate serial:       01EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft
Manifest number:          01EB
Signing time:             Mon 27 Jul 2026 04:59:37 +0000
Manifest this update:     Mon 27 Jul 2026 04:59:36 +0000
Manifest next update:     Mon 03 Aug 2026 04:59:36 +0000
Files and hashes:         1: SC1I47aWHxIIwGcVJOCOkDOV9lk.crl (hash: Z35sMdHIuh+h7yG0wsgOr4HEQPkAR9tGe69OI2lKX5I=)
                          2: EDE9D100B03B11F09472550DC4F9AE02.roa (hash: cPLdFGXiXR/WYDO7jUKAWbiNRii4uYKJ6ALY5+hpRWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.crl
                          rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:59:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 495 (0x1ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BCE2, serialNumber=482D48E3B6961F1208C0671524E08E903395F659
        Validity
            Not Before: Jul 27 04:59:36 2026 GMT
            Not After : Aug  3 04:59:36 2026 GMT
        Subject: CN=6a66e5b9-5525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:4f:b4:1f:54:ec:86:6a:eb:43:76:0b:21:
                    16:c1:ee:92:4b:34:4e:e7:84:eb:ca:35:24:8f:f0:
                    79:ff:b1:59:42:f1:4c:6c:55:99:4a:eb:0a:21:87:
                    01:f3:5e:0d:9a:be:3b:a4:c2:ec:92:77:2e:ec:54:
                    b9:ad:3b:44:26:64:12:a8:d4:74:85:21:29:43:08:
                    df:26:4d:01:4a:ce:dd:fa:f9:82:5a:07:54:ed:eb:
                    cd:37:bd:49:cd:cf:71:3f:77:80:d8:eb:ff:21:fc:
                    ca:5d:92:c7:20:5b:09:0c:3c:82:ad:30:bf:2d:d2:
                    bb:dc:fa:38:8d:a5:ed:4b:cb:3f:90:47:f3:9e:72:
                    a4:80:8c:af:14:7b:5d:94:c1:e9:fa:54:79:ae:24:
                    c6:97:b5:c3:88:48:ff:35:25:6a:96:9e:96:8a:8c:
                    a7:72:36:04:d6:b0:a1:32:9e:ff:20:84:c5:44:de:
                    c4:02:a5:4d:cc:a9:a9:b1:c1:be:29:6d:0f:d3:1a:
                    4d:2f:2b:03:3c:0c:58:e1:70:ed:00:3c:f6:43:62:
                    2f:e0:48:19:b5:00:25:c1:14:c1:a8:19:cd:f5:9a:
                    8d:9d:c9:20:a8:1f:be:cd:1a:8c:86:06:d6:35:8e:
                    11:68:f4:a8:71:14:9a:68:cc:25:7c:40:74:dc:64:
                    eb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D7:68:F6:8B:11:3D:12:EE:B1:D1:1B:46:5B:F8:4E:F1:F0:33:14
            X509v3 Authority Key Identifier:
                keyid:48:2D:48:E3:B6:96:1F:12:08:C0:67:15:24:E0:8E:90:33:95:F6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e4:e8:e6:a2:36:8d:4b:c7:ed:7d:01:3e:bc:03:fa:fd:1b:
         4c:31:a2:7a:b2:8f:fc:31:8b:44:20:7c:72:a4:8b:88:08:d1:
         6f:9b:e3:41:53:34:c6:c0:b9:55:94:fc:6d:b4:66:95:7c:ca:
         bf:8e:fb:73:15:f8:78:1d:0b:88:d6:39:86:c1:67:d5:79:75:
         8c:14:9b:36:6f:f0:82:21:72:9d:96:47:d4:ae:93:36:82:71:
         d2:d0:d8:87:e1:5c:fc:76:76:18:31:05:f3:fa:19:15:5c:b5:
         3f:9a:14:00:8b:6c:42:c8:c2:12:1b:8e:69:97:07:23:c8:fc:
         71:08:c3:8d:49:15:b5:34:e5:ca:ba:9b:3f:e3:9b:55:30:c5:
         fc:a8:23:fd:39:40:76:99:6c:b8:36:17:3f:ba:71:cc:e0:00:
         7e:59:53:cc:7e:67:84:61:07:1b:6a:e9:c2:b4:bb:ac:fc:40:
         43:28:a6:13:d4:be:59:29:19:31:46:2d:d9:93:35:eb:8d:9f:
         a1:c4:3b:a8:60:73:e6:66:0f:b3:74:d2:1b:88:17:89:f3:26:
         f4:65:c2:75:bf:9b:82:48:5f:de:53:ce:f5:69:ef:f3:a9:d2:
         8a:57:e9:38:f3:d1:27:ff:9b:94:f1:08:4e:d2:f0:67:22:85:
         d8:9a:3f:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUJDRTIxMTAvBgNVBAUTKDQ4MkQ0OEUzQjY5NjFGMTIwOEMwNjcxNTI0RTA4RTkw
MzM5NUY2NTkwHhcNMjYwNzI3MDQ1OTM2WhcNMjYwODAzMDQ1OTM2WjAYMRYwFAYD
VQQDEw02YTY2ZTViOS01NTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAslhPtB9U7IZq60N2CyEWwe6SSzRO54TryjUkj/B5/7FZQvFMbFWZSusKIYcB
814Nmr47pMLskncu7FS5rTtEJmQSqNR0hSEpQwjfJk0BSs7d+vmCWgdU7evNN71J
zc9xP3eA2Ov/IfzKXZLHIFsJDDyCrTC/LdK73Po4jaXtS8s/kEfznnKkgIyvFHtd
lMHp+lR5riTGl7XDiEj/NSVqlp6WioyncjYE1rChMp7/IITFRN7EAqVNzKmpscG+
KW0P0xpNLysDPAxY4XDtADz2Q2Iv4EgZtQAlwRTBqBnN9ZqNnckgqB++zRqMhgbW
NY4RaPSocRSaaMwlfEB03GTrUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP/XaPaL
ET0S7rHRG0Zb+E7x8DMUMB8GA1UdIwQYMBaAFEgtSOO2lh8SCMBnFSTgjpAzlfZZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkNFMi8yNEY3RTI3RTk3
QzgxMUVFOTEwMjg4MEFDNEY5QUUwMi9TQzFJNDdhV0h4SUl3R2NWSk9DT2tET1Y5
bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NDMUk0N2FXSHhJSXdHY1ZKT0NPa0RPVjlsay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QkNFMi8yNEY3RTI3RTk3QzgxMUVFOTEwMjg4MEFDNEY5QUUwMi9TQzFJNDdhV0h4
SUl3R2NWSk9DT2tET1Y5bGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAROTo5qI2jUvH7X0BPrwD+v0bTDGierKP/DGLRCB8cqSLiAjRb5vjQVM0xsC5
VZT8bbRmlXzKv477cxX4eB0LiNY5hsFn1Xl1jBSbNm/wgiFynZZH1K6TNoJx0tDY
h+Fc/HZ2GDEF8/oZFVy1P5oUAItsQsjCEhuOaZcHI8j8cQjDjUkVtTTlyrqbP+Ob
VTDF/Kgj/TlAdplsuDYXP7pxzOAAfllTzH5nhGEHG2rpwrS7rPxAQyimE9S+WSkZ
MUYt2ZM1642focQ7qGBz5mYPs3TSG4gXifMm9GXCdb+bgkhf3lPO9Wnv86nSilfp
OPPRJ/+blPEITtLwZyKF2Jo/bQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:27:37 2026 by rpki-client