Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft
File:                     cXp42D7DjxcRAnMoE5hEns3RBQA.mft (raw, json)
Hash identifier:          QT1W41e14jCSMnq7pqPyBZtjZpDMMc1I7m97MS5FHq8=
Subject key identifier:   92:95:23:A6:89:C6:E4:09:97:24:49:F3:D8:11:BB:C1:F8:0B:28:B4
Authority key identifier: 71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00
Certificate issuer:       /CN=A9168D20/serialNumber=717A78D83EC38F17110273281398449ECDD10500
Certificate serial:       072A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft
Manifest number:          071A
Signing time:             Sun 26 Jul 2026 22:50:33 +0000
Manifest this update:     Sun 26 Jul 2026 22:50:33 +0000
Manifest next update:     Sun 02 Aug 2026 22:50:33 +0000
Files and hashes:         1: cXp42D7DjxcRAnMoE5hEns3RBQA.crl (hash: uceYaoOvD3rvTVtdnsg0fQVnvjwnGEi2OvLFJjjGuVM=)
                          2: B9D0CC00D67311EEAD5F8B0FC4F9AE02.roa (hash: HmEJSmIlnqMRSQIFroiM2sK+BrSWqRLqcDK06fh9sgw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl
                          rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 22:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1834 (0x72a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168D20, serialNumber=717A78D83EC38F17110273281398449ECDD10500
        Validity
            Not Before: Jul 26 22:50:33 2026 GMT
            Not After : Aug  2 22:50:33 2026 GMT
        Subject: CN=6a668f39-1438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0f:75:46:69:cc:25:68:05:6b:94:8c:4c:69:
                    32:6f:00:6a:35:52:6e:af:ae:3a:6a:f8:85:f4:86:
                    d1:f0:16:62:87:cc:73:5a:c2:3c:e2:e7:89:ca:6a:
                    66:99:5d:d5:cb:16:ea:e4:fd:4a:d5:8f:c4:ec:b8:
                    9f:5a:f8:93:1c:72:a3:cf:eb:77:ff:66:07:55:8d:
                    e6:e5:56:77:2a:55:d5:f2:88:06:0c:ce:3c:c9:6b:
                    44:45:23:3d:ac:c0:5a:e4:e3:12:ac:67:a7:15:5f:
                    05:b5:63:1d:8b:ca:f7:2a:f6:fe:2a:75:55:d5:ef:
                    e0:47:4b:0c:4c:1c:41:eb:da:6d:19:37:c5:d9:f8:
                    b0:30:fd:7e:53:7b:1f:b6:25:7a:5a:d9:44:6b:ce:
                    26:03:12:6d:46:97:11:4d:38:95:49:ac:e6:39:c0:
                    58:02:82:0e:e5:5c:aa:27:59:5f:77:6c:4e:d8:30:
                    59:6e:54:c0:5b:b7:b4:0c:d2:0a:a4:9a:66:16:a0:
                    11:f8:51:a3:d5:ce:eb:99:10:14:70:8d:04:67:85:
                    54:66:ca:b2:8b:ea:bf:33:10:3e:2a:87:87:dd:59:
                    70:2c:b6:89:c8:f5:9d:b5:84:8b:61:df:b0:15:5f:
                    88:94:b6:8b:68:21:71:b4:9a:fc:72:65:57:25:53:
                    9e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:95:23:A6:89:C6:E4:09:97:24:49:F3:D8:11:BB:C1:F8:0B:28:B4
            X509v3 Authority Key Identifier:
                keyid:71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:9f:79:9f:91:d9:b3:15:30:42:08:4f:0b:6d:a1:34:fc:3d:
         6e:f6:36:f5:0c:1a:3e:bd:58:d2:41:a8:a4:59:39:25:b2:8b:
         89:f9:56:08:f9:94:5f:fe:51:fc:b4:e1:3b:89:e1:f5:f0:e3:
         7c:f5:7e:62:22:05:7e:5a:9d:d7:61:c0:15:49:e7:7b:90:72:
         74:5d:20:04:22:39:bb:c7:05:6f:c5:a6:01:20:f8:7d:87:7f:
         08:fa:d6:dc:64:88:e6:f8:59:2a:02:42:0e:c7:fb:d1:39:44:
         6a:19:1c:26:e0:14:0b:ab:e1:db:ed:67:3c:16:fe:61:5a:48:
         f6:41:4e:2c:ec:d8:ba:2b:0b:bd:32:18:ea:a9:44:33:90:4d:
         1d:5e:3c:91:54:82:c3:0d:66:01:1c:c8:7e:b1:06:f5:d4:f9:
         99:5a:3a:77:3e:5d:13:98:9a:a6:a4:51:48:13:0c:4c:0d:77:
         0c:ff:7c:66:a8:2d:f2:d4:7c:eb:ff:bb:86:5e:79:04:93:bc:
         c0:3f:61:42:5d:02:bf:72:78:14:6e:f0:2a:5e:56:5f:b6:1f:
         ba:c7:6a:e9:e2:36:de:a1:1a:6f:44:bc:3b:bb:ea:0a:93:31:
         5d:10:64:98:b1:44:c9:ba:c2:62:5f:11:12:34:f0:59:86:5d:
         d6:f3:04:ce
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICByowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjhEMjAxMTAvBgNVBAUTKDcxN0E3OEQ4M0VDMzhGMTcxMTAyNzMyODEzOTg0NDlF
Q0REMTA1MDAwHhcNMjYwNzI2MjI1MDMzWhcNMjYwODAyMjI1MDMzWjAYMRYwFAYD
VQQDEw02YTY2OGYzOS0xNDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvA91RmnMJWgFa5SMTGkybwBqNVJur646aviF9IbR8BZih8xzWsI84ueJympm
mV3Vyxbq5P1K1Y/E7LifWviTHHKjz+t3/2YHVY3m5VZ3KlXV8ogGDM48yWtERSM9
rMBa5OMSrGenFV8FtWMdi8r3Kvb+KnVV1e/gR0sMTBxB69ptGTfF2fiwMP1+U3sf
tiV6WtlEa84mAxJtRpcRTTiVSazmOcBYAoIO5VyqJ1lfd2xO2DBZblTAW7e0DNIK
pJpmFqAR+FGj1c7rmRAUcI0EZ4VUZsqyi+q/MxA+KoeH3VlwLLaJyPWdtYSLYd+w
FV+IlLaLaCFxtJr8cmVXJVOegQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJKVI6aJ
xuQJlyRJ89gRu8H4Cyi0MB8GA1UdIwQYMBaAFHF6eNg+w48XEQJzKBOYRJ7N0QUA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQyMC9DMEM2QUU1Qzkz
NUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4Y1JBbk1vRTVoRW5zM1JC
UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NYcDQyRDdEanhjUkFuTW9FNWhFbnMzUkJRQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OEQyMC9DMEM2QUU1QzkzNUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4
Y1JBbk1vRTVoRW5zM1JCUUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAz595n5HZsxUwQghPC22hNPw9bvY29QwaPr1Y0kGopFk5JbKLiflWCPmUX/5R
/LThO4nh9fDjfPV+YiIFflqd12HAFUnne5BydF0gBCI5u8cFb8WmASD4fYd/CPrW
3GSI5vhZKgJCDsf70TlEahkcJuAUC6vh2+1nPBb+YVpI9kFOLOzYuisLvTIY6qlE
M5BNHV48kVSCww1mARzIfrEG9dT5mVo6dz5dE5iapqRRSBMMTA13DP98Zqgt8tR8
6/+7hl55BJO8wD9hQl0Cv3J4FG7wKl5WX7Yfusdq6eI23qEab0S8O7vqCpMxXRBk
mLFEybrCYl8REjTwWYZd1vMEzg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:02:02 2026 by rpki-client