Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft
File:                     sGbiQQUMOMNJyyXUQBRFD09QGK4.mft (raw, json)
Hash identifier:          ueUkR+Ku+vYQnBhqXPvdHlDZKs5qapcgwmk5nem2q3U=
Subject key identifier:   0D:5D:2D:6D:84:6C:2F:1E:8C:0C:1B:FE:41:81:EC:B2:8B:89:0D:29
Authority key identifier: B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE
Certificate issuer:       /CN=A916CE83/serialNumber=B066E241050C38C349CB25D44014450F4F5018AE
Certificate serial:       1126
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft
Manifest number:          110D
Signing time:             Tue 28 Jul 2026 17:23:38 +0000
Manifest this update:     Tue 28 Jul 2026 17:23:37 +0000
Manifest next update:     Tue 04 Aug 2026 17:23:37 +0000
Files and hashes:         1: sGbiQQUMOMNJyyXUQBRFD09QGK4.crl (hash: 6h5bC0gWBE87GEye1TRzjHFodT25DhcQ99UfYtXsAhU=)
                          2: 6657C8D243B911E9AE253437C4F9AE02.roa (hash: TwYATUTcZOqT2PE79Ayni601C0ew8QPNyjOGtV30Eds=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl
                          rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:23:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4390 (0x1126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CE83, serialNumber=B066E241050C38C349CB25D44014450F4F5018AE
        Validity
            Not Before: Jul 28 17:23:37 2026 GMT
            Not After : Aug  4 17:23:37 2026 GMT
        Subject: CN=6a68e59a-c7f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2c:74:a1:fa:ee:c6:23:7e:8f:fe:88:cd:8f:
                    59:b8:0a:67:80:ce:4f:68:23:fa:dc:8b:62:80:7a:
                    9c:10:4a:a4:d1:be:54:40:8d:fe:6d:1a:20:c5:8f:
                    c1:1f:d2:05:16:e3:41:d8:18:71:92:af:32:46:9e:
                    48:b4:b5:a3:f7:60:87:a4:cf:e2:74:87:2a:1d:80:
                    6b:c3:cb:16:ea:d6:3a:66:7a:dd:79:85:52:40:65:
                    6d:93:c2:02:a9:2e:a3:38:79:16:9f:53:c5:04:af:
                    4c:ed:c6:34:ca:f1:f2:b5:0a:c6:3d:12:ce:d3:c2:
                    64:e9:d8:f4:36:9a:5a:35:b0:6e:77:1a:e0:b8:1a:
                    c0:be:02:3a:2c:31:75:3a:a0:0b:8c:b9:89:10:b4:
                    02:f1:87:95:0e:10:71:01:4e:f4:00:67:b0:1b:02:
                    63:b6:8f:a8:12:e5:c5:24:30:4e:ea:ec:44:f2:96:
                    a0:a8:ce:35:6d:e4:e3:5e:10:db:a3:91:e5:c4:24:
                    51:07:e0:16:8f:96:7c:79:6c:e3:70:0c:49:42:42:
                    c7:b7:a5:d0:1f:f5:43:94:58:ca:7c:a5:6f:94:6a:
                    46:f4:9d:68:7a:e7:8e:09:b8:0a:03:01:4d:24:3e:
                    24:5d:79:08:6f:14:94:f3:2e:4a:53:b9:91:18:22:
                    4c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5D:2D:6D:84:6C:2F:1E:8C:0C:1B:FE:41:81:EC:B2:8B:89:0D:29
            X509v3 Authority Key Identifier:
                keyid:B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:d4:f2:b2:2f:2e:77:71:71:12:3b:3a:9c:62:af:62:ed:09:
         db:09:10:88:88:a3:e9:8f:18:86:b6:31:fc:a2:97:d7:01:5f:
         18:d1:a1:58:f8:ef:9d:68:2e:e0:ff:a7:0e:fe:3a:46:ab:2e:
         f9:43:74:6a:76:d4:23:4f:26:77:21:5e:87:a4:fb:f7:5a:6e:
         0a:e8:80:c9:de:61:77:b6:b0:1e:ce:b4:94:64:02:e6:cc:ea:
         1e:20:42:f8:87:55:ac:07:9f:6a:4e:ca:8c:23:a5:9c:fc:a4:
         88:51:94:3d:03:8a:a9:3e:c1:04:79:31:6c:0a:58:91:d0:c2:
         c6:27:01:af:f2:67:89:10:e3:0d:f3:c6:4b:b0:16:53:f1:4f:
         50:de:8c:66:87:9b:db:cf:aa:12:c1:52:04:05:e3:d8:18:dc:
         18:03:c4:3d:81:5a:72:40:b9:7c:48:2d:41:b9:c0:ee:52:2f:
         43:49:5d:f6:b1:54:62:9a:69:2a:75:83:b1:a1:4c:cc:a8:c8:
         2b:43:99:da:fb:a1:91:0d:e9:19:0e:11:6a:9d:af:f0:5e:fa:
         3a:25:3a:e0:bf:0c:c6:38:80:6d:9b:fc:c0:3c:a0:f1:f7:73:
         e7:95:97:93:c9:2f:7c:a3:d4:ba:7d:b3:a7:8b:e5:f2:f4:07:
         79:66:0e:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICESYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkNFODMxMTAvBgNVBAUTKEIwNjZFMjQxMDUwQzM4QzM0OUNCMjVENDQwMTQ0NTBG
NEY1MDE4QUUwHhcNMjYwNzI4MTcyMzM3WhcNMjYwODA0MTcyMzM3WjAYMRYwFAYD
VQQDEw02YTY4ZTU5YS1jN2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Cx0ofruxiN+j/6IzY9ZuApngM5PaCP63ItigHqcEEqk0b5UQI3+bRogxY/B
H9IFFuNB2Bhxkq8yRp5ItLWj92CHpM/idIcqHYBrw8sW6tY6ZnrdeYVSQGVtk8IC
qS6jOHkWn1PFBK9M7cY0yvHytQrGPRLO08Jk6dj0NppaNbBudxrguBrAvgI6LDF1
OqALjLmJELQC8YeVDhBxAU70AGewGwJjto+oEuXFJDBO6uxE8pagqM41beTjXhDb
o5HlxCRRB+AWj5Z8eWzjcAxJQkLHt6XQH/VDlFjKfKVvlGpG9J1oeueOCbgKAwFN
JD4kXXkIbxSU8y5KU7mRGCJM2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA1dLW2E
bC8ejAwb/kGB7LKLiQ0pMB8GA1UdIwQYMBaAFLBm4kEFDDjDScsl1EAURQ9PUBiu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0U4My85NTY0MTkxQTQz
QjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9NTkp5eVhVUUJSRkQwOVFH
SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NHYmlRUVVNT01OSnl5WFVRQlJGRDA5UUdLNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Q0U4My85NTY0MTkxQTQzQjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9N
Tkp5eVhVUUJSRkQwOVFHSzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAodTysi8ud3FxEjs6nGKvYu0J2wkQiIij6Y8YhrYx/KKX1wFfGNGhWPjvnWgu
4P+nDv46Rqsu+UN0anbUI08mdyFeh6T791puCuiAyd5hd7awHs60lGQC5szqHiBC
+IdVrAefak7KjCOlnPykiFGUPQOKqT7BBHkxbApYkdDCxicBr/JniRDjDfPGS7AW
U/FPUN6MZoeb28+qEsFSBAXj2BjcGAPEPYFackC5fEgtQbnA7lIvQ0ld9rFUYppp
KnWDsaFMzKjIK0OZ2vuhkQ3pGQ4Rap2v8F76OiU64L8MxjiAbZv8wDyg8fdz55WX
k8kvfKPUun2zp4vl8vQHeWYO0g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:24:09 2026 by rpki-client