Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft
File:                     aMW6vfwSOWbQX4DD-kI3lELEIgw.mft (raw, json)
Hash identifier:          mAvqyR4Ayqnqkma90FKyyITI8TwT2wrHBpdHHrm2Yx4=
Subject key identifier:   9A:50:8B:65:F6:6D:F3:D3:EE:72:DB:D0:34:0D:B5:F3:39:F1:C7:7F
Authority key identifier: 68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C
Certificate issuer:       /CN=A917201D/serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C
Certificate serial:       3596
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft
Manifest number:          3574
Signing time:             Tue 28 Jul 2026 14:47:14 +0000
Manifest this update:     Tue 28 Jul 2026 14:47:14 +0000
Manifest next update:     Tue 04 Aug 2026 14:47:14 +0000
Files and hashes:         1: aMW6vfwSOWbQX4DD-kI3lELEIgw.crl (hash: /UuxyPMbdWFpz5TNt2xGKhi4lLC7tERo4mesbWcv3Og=)
                          2: E05FE99AB0D511E5B4F68B09C4F9AE02.roa (hash: cbOF25KS3Ii1neQB3lO33xPaJIbgxTebcwnMlxfjqmE=)
                          3: 73438FF06DED11E9A21D1341C4F9AE02.roa (hash: wkiRfCu/XLYyXw4TOm6YezOpImuhMfUU+dENf0r96zI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl
                          rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 14:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13718 (0x3596)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917201D, serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C
        Validity
            Not Before: Jul 28 14:47:14 2026 GMT
            Not After : Aug  4 14:47:14 2026 GMT
        Subject: CN=6a68c0f2-9be6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:96:46:b6:cd:44:21:cf:fc:f1:2c:42:70:63:
                    83:7b:41:c5:41:13:c1:b0:b7:aa:f5:2c:57:2d:66:
                    c7:61:0d:05:72:59:b7:09:fa:6a:33:5c:15:7e:1a:
                    93:4f:71:71:14:fb:dc:5e:1f:66:16:23:2a:d6:e9:
                    be:81:cd:1e:d4:45:e4:1e:de:eb:19:a6:32:97:5b:
                    c3:fb:b8:08:ed:c0:70:e9:05:89:8c:6c:87:ad:d0:
                    bd:55:6b:d4:0d:ec:63:62:25:87:12:bb:94:4e:d7:
                    61:5c:4a:21:37:fd:d8:b6:86:2f:41:b2:22:af:b0:
                    e5:e6:a9:23:6a:03:32:e5:06:0c:97:86:91:5e:e0:
                    0f:82:5a:1a:3b:f7:59:cc:ff:03:6a:d8:85:ab:7a:
                    2b:8b:50:fe:fe:c0:a2:01:16:f7:3c:5f:8a:aa:dd:
                    45:17:60:ca:a7:23:26:8a:0c:06:1d:b8:80:5d:a6:
                    db:37:09:fc:bf:55:48:24:14:ef:b7:16:49:57:cc:
                    65:f0:e1:fd:2d:76:5b:d8:d8:bf:6a:20:af:fa:c7:
                    48:70:64:75:52:72:44:97:d2:6a:04:a8:7a:4a:01:
                    c1:9f:6c:22:d0:0d:18:49:95:16:2b:f5:e2:4b:e3:
                    2a:7a:ad:48:ce:43:b6:03:61:cd:0b:11:8f:5b:6d:
                    c0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:50:8B:65:F6:6D:F3:D3:EE:72:DB:D0:34:0D:B5:F3:39:F1:C7:7F
            X509v3 Authority Key Identifier:
                keyid:68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:76:02:75:f7:34:ff:c2:97:72:18:2a:a4:14:1b:d0:2f:1a:
         fd:46:85:30:fe:1d:ac:c5:41:bd:07:dd:83:ca:69:1b:9c:52:
         8b:da:f9:b0:12:be:7a:7f:34:f0:cc:ac:cd:2b:cb:79:5e:89:
         34:f6:25:65:d2:9f:88:23:17:27:a7:cc:c7:ba:ed:53:15:fc:
         8a:ea:34:84:ca:0b:93:52:07:6f:f8:21:66:2e:90:81:83:11:
         ba:f2:d6:fa:34:36:b5:b7:2c:d0:19:ee:ad:dc:ad:e7:97:2e:
         72:17:0b:5c:73:84:c4:14:7d:83:f3:5f:e9:0a:31:94:f5:7d:
         51:72:73:22:a1:3b:d7:41:1f:5b:58:13:bf:04:31:2f:c1:d3:
         71:cd:ec:c7:11:5a:6a:33:bd:47:73:c3:5d:9d:bb:c4:76:6b:
         ad:a5:4a:63:7b:fc:d9:a2:11:07:11:23:d5:81:0d:0e:ce:4e:
         d2:8d:1f:8d:17:9a:81:79:a4:26:34:4b:17:38:77:b1:a5:6c:
         e3:6e:46:30:be:e7:d5:c1:c3:37:00:90:dc:e4:fb:06:44:ba:
         bd:99:b6:b9:98:dd:a1:a6:ab:ca:78:6b:76:12:f1:a3:76:90:
         98:dd:d0:84:23:c7:b8:17:77:c7:2a:ab:6a:15:3e:04:e9:0d:
         99:72:37:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzIwMUQxMTAvBgNVBAUTKDY4QzVCQUJERkMxMjM5NjZEMDVGODBDM0ZBNDIzNzk0
NDJDNDIyMEMwHhcNMjYwNzI4MTQ0NzE0WhcNMjYwODA0MTQ0NzE0WjAYMRYwFAYD
VQQDEw02YTY4YzBmMi05YmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz5ZGts1EIc/88SxCcGODe0HFQRPBsLeq9SxXLWbHYQ0Fclm3CfpqM1wVfhqT
T3FxFPvcXh9mFiMq1um+gc0e1EXkHt7rGaYyl1vD+7gI7cBw6QWJjGyHrdC9VWvU
DexjYiWHEruUTtdhXEohN/3YtoYvQbIir7Dl5qkjagMy5QYMl4aRXuAPgloaO/dZ
zP8DatiFq3ori1D+/sCiARb3PF+Kqt1FF2DKpyMmigwGHbiAXabbNwn8v1VIJBTv
txZJV8xl8OH9LXZb2Ni/aiCv+sdIcGR1UnJEl9JqBKh6SgHBn2wi0A0YSZUWK/Xi
S+Mqeq1IzkO2A2HNCxGPW23AcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJpQi2X2
bfPT7nLb0DQNtfM58cd/MB8GA1UdIwQYMBaAFGjFur38Ejlm0F+Aw/pCN5RCxCIM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjAxRC9DRDFFMjk0ODFE
OTIxMUUyQTNCMUY0RjUwOEIwMkNEMi9hTVc2dmZ3U09XYlFYNERELWtJM2xFTEVJ
Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FNVzZ2ZndTT1diUVg0REQta0kzbEVMRUlndy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MjAxRC9DRDFFMjk0ODFEOTIxMUUyQTNCMUY0RjUwOEIwMkNEMi9hTVc2dmZ3U09X
YlFYNERELWtJM2xFTEVJZ3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeHYCdfc0/8KXchgqpBQb0C8a/UaFMP4drMVBvQfdg8ppG5xSi9r5sBK+en80
8MyszSvLeV6JNPYlZdKfiCMXJ6fMx7rtUxX8iuo0hMoLk1IHb/ghZi6QgYMRuvLW
+jQ2tbcs0Bnurdyt55cuchcLXHOExBR9g/Nf6QoxlPV9UXJzIqE710EfW1gTvwQx
L8HTcc3sxxFaajO9R3PDXZ27xHZrraVKY3v82aIRBxEj1YENDs5O0o0fjReagXmk
JjRLFzh3saVs425GML7n1cHDNwCQ3OT7BkS6vZm2uZjdoaarynhrdhLxo3aQmN3Q
hCPHuBd3xyqrahU+BOkNmXI3zA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:32:14 2026 by rpki-client