Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
File:                     5K6ANyqGeYe7Kgq74RCrgENw1eM.mft (raw, json)
Hash identifier:          XS3asV6uhqgMv666/osz1iWRtqQNebAVUlwAKhmKA54=
Subject key identifier:   0E:30:70:7A:18:F5:E3:82:5D:B4:9D:63:2A:F8:52:83:47:A1:48:55
Authority key identifier: E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3
Certificate issuer:       /CN=A917452D/serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3
Certificate serial:       03FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
Manifest number:          037D
Signing time:             Wed 29 Jul 2026 01:58:37 +0000
Manifest this update:     Wed 29 Jul 2026 01:58:36 +0000
Manifest next update:     Wed 05 Aug 2026 01:58:36 +0000
Files and hashes:         1: 5K6ANyqGeYe7Kgq74RCrgENw1eM.crl (hash: ekfDVvhkZ7wO0F+TnOVHPMfgUSx3sAGy/YmjZD09keI=)
                          2: AA71F05C60EF11EF8D645D72C4F9AE02.roa (hash: ZekLkbwk4y5kRd+4yPe1K3c5jSN2HJp6NjlpAMKckXc=)
                          3: 7D96BB10A96B11F09DD07C12C4F9AE02.roa (hash: 2RTgLoy0RD3Ypi83mkCGJfdMp3piRyK+gquTLVUemeE=)
                          4: 10B04C9853D411EFB53AD61CC4F9AE02.roa (hash: 4o3ddXiD0kGEF8H2vPGXgiNQ6JrBMxAlP8Wcn6GN+9Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl
                          rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 01:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1021 (0x3fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917452D, serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3
        Validity
            Not Before: Jul 29 01:58:36 2026 GMT
            Not After : Aug  5 01:58:36 2026 GMT
        Subject: CN=6a695e4d-1d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:43:6d:01:c3:f7:b6:6c:dc:18:f2:c6:67:0b:
                    f4:49:1a:88:4b:d3:d5:fb:4e:4f:e2:2f:1b:a3:11:
                    6e:fe:c3:75:71:b4:43:f0:78:fd:26:15:7c:c5:d6:
                    f8:d7:27:09:49:57:42:ee:2b:1c:80:9d:3a:bd:17:
                    c2:ab:e5:47:19:9a:97:13:73:46:f0:a9:a1:aa:4b:
                    a4:8b:f8:89:28:f7:db:8e:6b:a2:ec:da:40:72:a0:
                    9b:b1:3e:42:a0:66:9a:32:b9:98:76:8c:68:5e:fe:
                    e8:84:4f:6b:14:3f:10:39:fb:e5:4e:3d:55:c8:32:
                    63:7a:c3:ad:84:f6:9c:79:f0:bd:30:24:54:25:ec:
                    a6:c9:74:83:8f:13:75:a9:09:05:d4:46:82:1a:b0:
                    ef:68:4d:c3:91:80:13:c9:a5:e3:8c:e8:34:84:ec:
                    19:6a:5c:40:31:22:80:e4:16:e7:08:1c:f7:23:6d:
                    68:f9:8d:ce:2e:04:cb:8a:d5:35:8e:09:64:00:c5:
                    03:ac:b7:4c:95:2e:c2:bd:b9:7b:7f:be:cf:82:97:
                    c2:63:fd:ce:4b:96:cc:96:a4:a7:36:f0:ee:56:20:
                    19:61:2a:8a:05:f9:0b:b6:78:59:b3:27:8a:02:b0:
                    50:17:ef:d5:a3:44:fc:45:7c:b7:ba:c2:e8:6f:9b:
                    57:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:30:70:7A:18:F5:E3:82:5D:B4:9D:63:2A:F8:52:83:47:A1:48:55
            X509v3 Authority Key Identifier:
                keyid:E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:c1:f5:e1:b5:2d:c5:04:52:cb:a4:8d:81:06:99:fa:67:26:
         37:75:ce:87:30:d0:6d:f4:c9:9b:22:7f:d1:37:9c:43:ce:c9:
         b3:62:b4:05:18:cd:15:00:5b:a7:16:3c:f7:b7:46:15:0f:5c:
         61:d1:2f:ff:e6:c5:c0:c4:25:38:67:a0:df:84:b0:9f:bf:30:
         42:c0:06:43:50:4f:6f:d6:c4:76:93:53:ff:7c:0b:2c:53:25:
         d4:8b:b1:3a:02:c0:10:f7:e5:ca:67:5a:17:2b:57:6b:01:1b:
         38:3b:36:2a:c1:8b:8e:a3:9c:e2:ec:cd:da:da:0c:cb:71:75:
         dc:01:bc:1e:f3:68:24:78:e2:be:81:2b:4c:30:6b:10:28:0e:
         06:ec:b6:61:b5:ba:eb:19:f5:16:f0:62:b2:71:22:bb:70:bb:
         66:1d:bb:ac:0e:33:db:c0:ac:5f:64:d0:64:a5:1a:88:d1:25:
         55:d1:d5:8d:42:ec:02:1f:bf:24:59:94:12:14:e9:c9:05:2a:
         60:f5:bc:53:49:e6:d6:0f:76:d3:1a:52:67:e6:14:6b:3a:96:
         f4:4f:38:10:44:db:f4:f5:c7:13:86:99:8c:e8:c8:77:67:5a:
         c3:3a:ae:ba:2b:2d:42:b5:b2:cf:87:bd:e6:b7:9b:57:fa:21:
         b7:cb:cb:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQ1MkQxMTAvBgNVBAUTKEU0QUU4MDM3MkE4Njc5ODdCQjJBMEFCQkUxMTBBQjgw
NDM3MEQ1RTMwHhcNMjYwNzI5MDE1ODM2WhcNMjYwODA1MDE1ODM2WjAYMRYwFAYD
VQQDEw02YTY5NWU0ZC0xZDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1ENtAcP3tmzcGPLGZwv0SRqIS9PV+05P4i8boxFu/sN1cbRD8Hj9JhV8xdb4
1ycJSVdC7iscgJ06vRfCq+VHGZqXE3NG8Kmhqkuki/iJKPfbjmui7NpAcqCbsT5C
oGaaMrmYdoxoXv7ohE9rFD8QOfvlTj1VyDJjesOthPacefC9MCRUJeymyXSDjxN1
qQkF1EaCGrDvaE3DkYATyaXjjOg0hOwZalxAMSKA5BbnCBz3I21o+Y3OLgTLitU1
jglkAMUDrLdMlS7Cvbl7f77PgpfCY/3OS5bMlqSnNvDuViAZYSqKBfkLtnhZsyeK
ArBQF+/Vo0T8RXy3usLob5tXxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA4wcHoY
9eOCXbSdYyr4UoNHoUhVMB8GA1UdIwQYMBaAFOSugDcqhnmHuyoKu+EQq4BDcNXj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDUyRC9BQTQyMTcxRTI3
NjgxMUVEOUEyMjE3MzBDNEY5QUUwMi81SzZBTnlxR2VZZTdLZ3E3NFJDcmdFTncx
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVLNkFOeXFHZVllN0tncTc0UkNyZ0VOdzFlTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NDUyRC9BQTQyMTcxRTI3NjgxMUVEOUEyMjE3MzBDNEY5QUUwMi81SzZBTnlxR2VZ
ZTdLZ3E3NFJDcmdFTncxZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtMH14bUtxQRSy6SNgQaZ+mcmN3XOhzDQbfTJmyJ/0TecQ87Js2K0BRjNFQBb
pxY897dGFQ9cYdEv/+bFwMQlOGeg34Swn78wQsAGQ1BPb9bEdpNT/3wLLFMl1Iux
OgLAEPflymdaFytXawEbODs2KsGLjqOc4uzN2toMy3F13AG8HvNoJHjivoErTDBr
ECgOBuy2YbW66xn1FvBisnEiu3C7Zh27rA4z28CsX2TQZKUaiNElVdHVjULsAh+/
JFmUEhTpyQUqYPW8U0nm1g920xpSZ+YUazqW9E84EETb9PXHE4aZjOjId2dawzqu
uistQrWyz4e95rebV/oht8vLIA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:32:03 2026 by rpki-client