Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
File:                     FN2GhClPGzOjE6-48OuhyKADeAk.mft (raw, json)
Hash identifier:          7RSvW1nUJ3JjnW+ob/wOBpalckIpgV28MHQpaHmnQ/g=
Subject key identifier:   49:A8:F1:FA:1B:BF:AB:EC:29:E4:AD:10:87:E7:B2:4D:C2:E4:02:BE
Authority key identifier: 14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09
Certificate issuer:       /CN=A9160A05/serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809
Certificate serial:       0171
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
Manifest number:          015E
Signing time:             Mon 27 Jul 2026 06:58:22 +0000
Manifest this update:     Mon 27 Jul 2026 06:58:21 +0000
Manifest next update:     Mon 03 Aug 2026 06:58:21 +0000
Files and hashes:         1: FN2GhClPGzOjE6-48OuhyKADeAk.crl (hash: ht1x+KErFGAPZ4lm3nQEwKLWUreAU6P35i0QPMn0N5k=)
                          2: F7981812F38811EFAC05053AC4F9AE02.roa (hash: EK3pUqrH9H4fquoX1peOlD1L2xEfn/Ee2ouiE9JS3Uk=)
                          3: E9B0903AF38811EF81B8CE39C4F9AE02.roa (hash: SSKa739rT23rOpIYYisZx12/v/K7+nclE63wWrbXXlU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl
                          rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:58:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160A05, serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809
        Validity
            Not Before: Jul 27 06:58:21 2026 GMT
            Not After : Aug  3 06:58:21 2026 GMT
        Subject: CN=6a67018e-a60d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:78:23:96:b7:28:97:09:d3:62:1d:ca:c7:f5:
                    ce:32:a7:c9:82:05:f4:e7:da:8a:c2:ba:40:f0:3b:
                    f9:4a:19:58:94:e7:29:82:c6:94:28:a6:f6:cd:5a:
                    52:fd:84:fb:83:95:7a:32:0b:4b:b7:6a:c4:2f:e8:
                    55:ef:92:39:07:9b:da:ce:c8:44:de:d2:f6:cb:5f:
                    b2:98:bb:c5:20:9e:39:b3:42:a2:03:c2:6f:e6:b5:
                    11:38:a3:bf:60:f1:92:ed:ed:39:ec:cf:09:ef:c2:
                    77:03:d5:6e:03:3a:20:bb:08:35:eb:e6:1a:f4:27:
                    1b:75:b3:b9:e6:2e:d3:d4:40:a9:07:70:d8:cf:cd:
                    f0:5c:65:3d:7d:f0:a8:01:e6:73:a1:59:3e:47:fb:
                    9c:32:6b:6a:fd:49:86:8e:6c:b9:89:30:d0:a3:d5:
                    75:4e:d1:3c:56:c1:7d:6c:97:8e:78:79:8e:e3:98:
                    f1:23:35:2b:e5:5f:26:b2:13:3b:08:bd:32:1b:57:
                    87:c1:f1:9a:b6:44:5e:d0:0c:09:99:6e:73:64:5e:
                    14:88:61:ef:46:83:c1:ed:20:19:bb:dc:74:63:8d:
                    8e:fb:8e:f2:2e:12:8b:36:ca:3b:43:13:01:01:98:
                    eb:b4:4b:00:8a:71:72:f6:71:f5:61:f6:09:18:62:
                    65:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A8:F1:FA:1B:BF:AB:EC:29:E4:AD:10:87:E7:B2:4D:C2:E4:02:BE
            X509v3 Authority Key Identifier:
                keyid:14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ea:c1:27:1a:4a:b3:95:6b:04:da:b3:97:64:6c:72:da:46:
         b7:2c:c9:8c:38:57:ef:1e:3a:d1:f1:f3:ec:f9:68:7a:5b:70:
         06:3b:8d:a1:7a:08:75:ed:50:71:23:d2:6b:3f:0a:0f:bf:3f:
         ab:91:1f:1e:8c:ed:57:cf:ba:aa:36:06:01:cd:bf:a2:3b:a6:
         17:5a:76:16:1a:fa:b9:d0:f8:8d:39:4f:20:38:a6:2d:8c:28:
         86:b0:03:84:76:07:00:60:b0:08:ca:b5:db:3f:a3:17:fa:b0:
         f3:84:36:ab:63:ef:96:aa:2b:b4:3d:5e:81:79:42:d6:c3:57:
         a1:60:18:0c:f4:49:ab:03:4c:3d:33:37:1c:27:ba:d3:49:f7:
         20:1e:31:ce:3a:21:e1:3f:bc:db:ae:bd:59:eb:03:c1:b0:21:
         ec:4b:11:b9:7e:00:b6:89:23:70:20:8a:e6:82:cb:0f:fb:c6:
         95:1d:09:85:3b:08:16:af:1b:f4:1e:85:b3:27:b4:19:da:cc:
         1c:e0:58:a1:c9:b2:83:ea:f3:84:df:08:f4:1b:d1:ae:24:ad:
         02:76:68:4e:dc:d4:08:5a:65:74:a3:09:ad:5e:14:f7:f8:bd:
         56:b5:e9:1d:cd:04:7d:db:f5:75:e1:95:f0:b2:10:65:e8:b5:
         a7:14:55:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjBBMDUxMTAvBgNVBAUTKDE0REQ4Njg0Mjk0RjFCMzNBMzEzQUZCOEYwRUJBMUM4
QTAwMzc4MDkwHhcNMjYwNzI3MDY1ODIxWhcNMjYwODAzMDY1ODIxWjAYMRYwFAYD
VQQDEw02YTY3MDE4ZS1hNjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA33gjlrcolwnTYh3Kx/XOMqfJggX059qKwrpA8Dv5ShlYlOcpgsaUKKb2zVpS
/YT7g5V6MgtLt2rEL+hV75I5B5vazshE3tL2y1+ymLvFIJ45s0KiA8Jv5rUROKO/
YPGS7e057M8J78J3A9VuAzoguwg16+Ya9CcbdbO55i7T1ECpB3DYz83wXGU9ffCo
AeZzoVk+R/ucMmtq/UmGjmy5iTDQo9V1TtE8VsF9bJeOeHmO45jxIzUr5V8mshM7
CL0yG1eHwfGatkRe0AwJmW5zZF4UiGHvRoPB7SAZu9x0Y42O+47yLhKLNso7QxMB
AZjrtEsAinFy9nH1YfYJGGJlZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEmo8fob
v6vsKeStEIfnsk3C5AK+MB8GA1UdIwQYMBaAFBTdhoQpTxszoxOvuPDrocigA3gJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEEwNS9EMTdDODg2ODdD
OEExMUVGOEZBQjY5MDlDNEY5QUUwMi9GTjJHaENsUEd6T2pFNi00OE91aHlLQURl
QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0ZOMkdoQ2xQR3pPakU2LTQ4T3VoeUtBRGVBay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MEEwNS9EMTdDODg2ODdDOEExMUVGOEZBQjY5MDlDNEY5QUUwMi9GTjJHaENsUEd6
T2pFNi00OE91aHlLQURlQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj+rBJxpKs5VrBNqzl2RsctpGtyzJjDhX7x460fHz7PloeltwBjuNoXoIde1Q
cSPSaz8KD78/q5EfHoztV8+6qjYGAc2/ojumF1p2Fhr6udD4jTlPIDimLYwohrAD
hHYHAGCwCMq12z+jF/qw84Q2q2PvlqortD1egXlC1sNXoWAYDPRJqwNMPTM3HCe6
00n3IB4xzjoh4T+82669WesDwbAh7EsRuX4AtokjcCCK5oLLD/vGlR0JhTsIFq8b
9B6Fsye0GdrMHOBYocmyg+rzhN8I9BvRriStAnZoTtzUCFpldKMJrV4U9/i9VrXp
Hc0Efdv1deGV8LIQZei1pxRV4w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:10:49 2026 by rpki-client