Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft
File:                     nQdEbvmfPFfCnFgta3rKRzX05HA.mft (raw, json)
Hash identifier:          2YALqps3F+BZwsEULkUHQf1pQWm+np0KPxG0aJj0Fwo=
Subject key identifier:   7D:AA:F5:01:45:9D:9A:50:0E:23:AB:72:E6:90:55:F0:B1:CF:E6:2E
Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70
Certificate issuer:       /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470
Certificate serial:       091E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft
Manifest number:          08E0
Signing time:             Tue 28 Jul 2026 21:00:15 +0000
Manifest this update:     Tue 28 Jul 2026 21:00:15 +0000
Manifest next update:     Tue 04 Aug 2026 21:00:15 +0000
Files and hashes:         1: nQdEbvmfPFfCnFgta3rKRzX05HA.crl (hash: M8+xWHcT6fX5dYvVW/8lAF+6Yp4UgXNuTKXBGyVE/cM=)
                          2: 30A238FA7C0311F192D3088B8FA30FBC.roa (hash: X1FnYer6ian8Ac0sFfx3IyMLAtIA4fKJbnOQ0obiOyY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl
                          rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2334 (0x91e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917190F, serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470
        Validity
            Not Before: Jul 28 21:00:15 2026 GMT
            Not After : Aug  4 21:00:15 2026 GMT
        Subject: CN=6a69185f-f308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:69:88:4a:f6:1b:72:8c:8a:24:de:b0:b7:3d:
                    b7:d4:b2:ab:ba:02:43:fc:f5:49:f7:ef:c3:13:98:
                    eb:3f:1a:13:33:fc:d2:8e:11:e2:85:0b:5b:9d:31:
                    1b:96:36:d2:b9:50:77:ed:84:db:19:86:d9:e7:2e:
                    f8:45:93:e4:f3:16:3d:e3:68:26:5e:a5:ad:ad:96:
                    bc:e5:55:73:54:12:c6:43:06:95:5f:96:25:33:7c:
                    17:bd:8a:b3:68:9b:c7:0d:41:95:60:c9:e4:1f:46:
                    34:ad:1e:27:56:48:5c:8f:7d:bd:7f:eb:8a:ea:6d:
                    19:1e:4a:29:73:28:d9:dd:37:11:74:25:1a:49:a9:
                    44:8b:cf:ce:2a:b9:53:45:71:4c:40:28:11:b1:7d:
                    8a:a5:d0:dd:4e:eb:a0:98:ed:a3:7a:5f:c3:d3:b7:
                    ce:b2:f5:db:d0:dc:7e:40:5a:19:7d:1b:d0:13:38:
                    8d:14:92:c2:82:53:7a:7f:b2:9b:75:13:ed:69:eb:
                    82:ca:ee:4d:60:ba:12:fa:0e:6d:14:a7:19:8d:58:
                    f6:94:1b:d5:0d:62:02:47:db:64:4c:c8:17:33:a6:
                    5d:ed:08:db:db:0f:4f:b6:91:d5:ce:8a:33:7c:69:
                    c0:87:53:00:94:cf:87:10:a9:3b:f8:7a:f7:14:24:
                    00:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AA:F5:01:45:9D:9A:50:0E:23:AB:72:E6:90:55:F0:B1:CF:E6:2E
            X509v3 Authority Key Identifier:
                keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:db:9d:99:41:b7:aa:ce:9c:0b:e2:e5:7e:eb:8a:ac:3b:da:
         b4:d2:84:db:e8:ce:b7:c2:e7:5c:5f:58:f7:1a:4d:cd:a4:7b:
         0a:76:85:95:17:38:5f:09:c0:1c:de:13:83:89:15:4f:4e:2c:
         df:9e:ab:b9:71:43:fb:17:23:4c:3e:14:34:b6:2d:15:33:67:
         da:4b:cd:60:9d:5e:58:e3:c3:b2:68:29:02:b2:68:50:4c:96:
         1a:3d:7d:c9:28:52:57:a5:23:48:b6:d3:04:79:74:ff:0e:54:
         aa:6b:7c:7b:12:5e:4f:28:d1:60:4a:92:4f:02:db:99:06:8d:
         81:19:ff:c8:72:3e:57:a8:90:9a:6a:23:23:14:a5:8a:42:e6:
         53:56:a0:2d:44:f6:e3:73:73:5e:ce:78:2f:83:b8:32:52:65:
         88:fd:d1:13:74:00:0d:1a:6a:41:7c:b0:39:a5:55:46:7c:1d:
         3e:0a:5b:f2:3e:50:45:60:c1:aa:09:27:f7:76:ab:c5:2f:60:
         5e:ff:d1:40:d7:e7:b7:e8:19:57:f3:85:2b:d0:7d:52:8a:1f:
         f4:08:97:b8:cb:38:6e:5a:f7:ff:85:35:28:6e:bf:db:78:d5:
         73:75:b7:e1:d9:de:42:b5:31:6f:91:e4:7c:c8:0d:d9:72:76:
         86:fc:fb:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE5MEYxMTAvBgNVBAUTKDlEMDc0NDZFRjk5RjNDNTdDMjlDNTgyRDZCN0FDQTQ3
MzVGNEU0NzAwHhcNMjYwNzI4MjEwMDE1WhcNMjYwODA0MjEwMDE1WjAYMRYwFAYD
VQQDEw02YTY5MTg1Zi1mMzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA72mISvYbcoyKJN6wtz231LKrugJD/PVJ9+/DE5jrPxoTM/zSjhHihQtbnTEb
ljbSuVB37YTbGYbZ5y74RZPk8xY942gmXqWtrZa85VVzVBLGQwaVX5YlM3wXvYqz
aJvHDUGVYMnkH0Y0rR4nVkhcj329f+uK6m0ZHkopcyjZ3TcRdCUaSalEi8/OKrlT
RXFMQCgRsX2KpdDdTuugmO2jel/D07fOsvXb0Nx+QFoZfRvQEziNFJLCglN6f7Kb
dRPtaeuCyu5NYLoS+g5tFKcZjVj2lBvVDWICR9tkTMgXM6Zd7Qjb2w9PtpHVzooz
fGnAh1MAlM+HEKk7+Hr3FCQAFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH2q9QFF
nZpQDiOrcuaQVfCxz+YuMB8GA1UdIwQYMBaAFJ0HRG75nzxXwpxYLWt6ykc19ORw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkwRi9CM0NBNzZDMEZB
MzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBGZkNuRmd0YTNyS1J6WDA1
SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25RZEVidm1mUEZmQ25GZ3RhM3JLUnpYMDVIQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTkwRi9CM0NBNzZDMEZBMzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBG
ZkNuRmd0YTNyS1J6WDA1SEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPtudmUG3qs6cC+LlfuuKrDvatNKE2+jOt8LnXF9Y9xpNzaR7CnaFlRc4XwnA
HN4Tg4kVT04s356ruXFD+xcjTD4UNLYtFTNn2kvNYJ1eWOPDsmgpArJoUEyWGj19
yShSV6UjSLbTBHl0/w5Uqmt8exJeTyjRYEqSTwLbmQaNgRn/yHI+V6iQmmojIxSl
ikLmU1agLUT243NzXs54L4O4MlJliP3RE3QADRpqQXywOaVVRnwdPgpb8j5QRWDB
qgkn93arxS9gXv/RQNfnt+gZV/OFK9B9Uoof9AiXuMs4blr3/4U1KG6/23jVc3W3
4dneQrUxb5HkfMgN2XJ2hvz7bQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:18:41 2026 by rpki-client