Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
File:                     33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft (raw, json)
Hash identifier:          ElVtQlhgq3D2qAstPL62dquVJYop0w3thdkXY4RMWzA=
Subject key identifier:   A0:A6:B8:89:CA:6E:06:AF:B7:2D:96:4A:74:08:EC:7F:68:99:7B:44
Authority key identifier: DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC
Certificate issuer:       /CN=A9179F6E/serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
Certificate serial:       052C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
Manifest number:          0524
Signing time:             Mon 27 Jul 2026 00:33:35 +0000
Manifest this update:     Mon 27 Jul 2026 00:33:34 +0000
Manifest next update:     Mon 03 Aug 2026 00:33:34 +0000
Files and hashes:         1: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl (hash: /9iZwR3Rc7goEKf1nj8YVSPEBHOmc0C+61EHXnsz6UM=)
                          2: F5DED02A588511ECAC342433C4F9AE02.roa (hash: 99vdeYRHmvAZBTn+o2vbxAXonLGmmxRzUfRMT6ujYvs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl
                          rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1324 (0x52c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F6E, serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
        Validity
            Not Before: Jul 27 00:33:34 2026 GMT
            Not After : Aug  3 00:33:34 2026 GMT
        Subject: CN=6a66a75f-491f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:00:bf:ca:43:6b:43:31:3a:11:fb:ef:62:5c:
                    25:d6:05:85:69:9a:c2:35:a0:5f:c2:e1:4e:a9:ae:
                    31:bc:19:c9:11:0f:95:23:bf:c7:64:b2:d8:20:4e:
                    d4:76:ab:84:b6:82:5b:7c:c4:01:d6:ac:0d:fd:24:
                    51:0a:36:6c:37:f9:ee:c6:b8:a4:34:1f:0c:b1:2f:
                    3e:49:24:ea:fb:66:e1:42:27:59:15:9a:f5:9f:c4:
                    4e:4d:2b:d7:0e:fc:14:9c:e4:83:94:61:49:08:7a:
                    4d:71:65:b0:7e:1a:14:d7:d2:1f:19:ab:43:a1:dd:
                    b2:3b:6b:e9:cc:7f:ab:92:04:fb:b5:68:83:0b:33:
                    a2:37:19:4f:9a:3a:85:ca:a9:e7:e6:a1:6e:51:7d:
                    d7:fb:30:06:6e:80:c6:50:27:05:1e:a1:ed:33:17:
                    05:39:88:2c:da:73:47:4b:97:1a:60:4d:d7:53:d2:
                    e8:54:a9:c7:7f:c1:7d:c4:f8:04:0c:c6:ad:c7:08:
                    7b:4b:1d:6a:e5:50:3d:b6:9d:23:8c:95:f3:66:71:
                    24:03:f5:37:4d:2a:87:98:27:c5:cc:8c:1b:43:aa:
                    81:67:6d:17:6d:5a:e3:49:c9:cb:51:61:6e:03:55:
                    1b:b6:2d:f9:c1:d0:98:44:1c:be:4a:d6:d7:35:a5:
                    8b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A6:B8:89:CA:6E:06:AF:B7:2D:96:4A:74:08:EC:7F:68:99:7B:44
            X509v3 Authority Key Identifier:
                keyid:DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:cd:94:88:b1:02:3b:b0:ed:cc:3e:63:a1:8a:0e:34:84:de:
         52:84:5a:ec:fc:6a:c2:24:fb:71:d7:f0:87:a5:f1:ef:b2:15:
         29:cc:fe:66:c5:b6:d1:c3:78:fe:2a:27:13:c8:f9:b2:f9:99:
         fb:fe:04:4c:0b:47:53:7d:9e:88:7c:8f:32:d1:9a:c0:92:70:
         24:1b:01:e3:7d:34:99:a3:85:22:30:e5:71:d2:6c:fb:1b:41:
         13:37:60:19:cf:c5:33:62:8d:58:4e:0b:98:46:b3:d7:8a:dd:
         8e:1c:da:ff:2d:d7:c4:c3:97:ef:aa:f8:cd:51:c3:0c:e6:0b:
         fc:39:73:e3:7b:b1:7b:3f:ce:a0:49:34:f8:7c:60:f3:bc:04:
         f5:b6:62:b9:70:95:59:ba:44:50:12:fd:8b:f9:60:b4:b3:36:
         c1:6b:4e:ae:68:5d:70:c0:81:91:18:39:3d:81:56:11:6c:15:
         fa:b6:1f:a8:98:d4:da:83:6d:32:f8:e6:e4:58:62:5b:22:2e:
         19:e3:aa:26:bf:2e:e2:b8:24:47:b7:8b:27:16:b4:9c:cd:2d:
         31:15:84:cb:80:5a:76:db:0d:48:1a:27:8a:82:86:ce:d4:93:
         c5:e6:80:53:6d:d2:01:5b:6b:26:65:aa:d9:b0:7d:77:ff:2b:
         f4:d6:0c:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzlGNkUxMTAvBgNVBAUTKERGNzUyNkE4OEVBNzcwOTRBNjJGMTQzOUZGQjQyMDhG
NTAyRjRGRUMwHhcNMjYwNzI3MDAzMzM0WhcNMjYwODAzMDAzMzM0WjAYMRYwFAYD
VQQDEw02YTY2YTc1Zi00OTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxQC/ykNrQzE6EfvvYlwl1gWFaZrCNaBfwuFOqa4xvBnJEQ+VI7/HZLLYIE7U
dquEtoJbfMQB1qwN/SRRCjZsN/nuxrikNB8MsS8+SSTq+2bhQidZFZr1n8ROTSvX
DvwUnOSDlGFJCHpNcWWwfhoU19IfGatDod2yO2vpzH+rkgT7tWiDCzOiNxlPmjqF
yqnn5qFuUX3X+zAGboDGUCcFHqHtMxcFOYgs2nNHS5caYE3XU9LoVKnHf8F9xPgE
DMatxwh7Sx1q5VA9tp0jjJXzZnEkA/U3TSqHmCfFzIwbQ6qBZ20XbVrjScnLUWFu
A1Ubti35wdCYRBy+StbXNaWLgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKCmuInK
bgavty2WSnQI7H9omXtEMB8GA1UdIwQYMBaAFN91JqiOp3CUpi8UOf+0II9QL0/s
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUY2RS8wNjM1ODYwNjU4
ODMxMUVDQkRCQjRFNkJDNEY5QUUwMi8zM1VtcUk2bmNKU21MeFE1XzdRZ2oxQXZU
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzMzVW1xSTZuY0pTbUx4UTVfN1FnajFBdlQtdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OUY2RS8wNjM1ODYwNjU4ODMxMUVDQkRCQjRFNkJDNEY5QUUwMi8zM1VtcUk2bmNK
U21MeFE1XzdRZ2oxQXZULXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADc2UiLECO7DtzD5joYoONITeUoRa7PxqwiT7cdfwh6Xx77IVKcz+ZsW20cN4
/ionE8j5svmZ+/4ETAtHU32eiHyPMtGawJJwJBsB4300maOFIjDlcdJs+xtBEzdg
Gc/FM2KNWE4LmEaz14rdjhza/y3XxMOX76r4zVHDDOYL/Dlz43uxez/OoEk0+Hxg
87wE9bZiuXCVWbpEUBL9i/lgtLM2wWtOrmhdcMCBkRg5PYFWEWwV+rYfqJjU2oNt
Mvjm5FhiWyIuGeOqJr8u4rgkR7eLJxa0nM0tMRWEy4BadtsNSBonioKGztSTxeaA
U23SAVtrJmWq2bB9d/8r9NYMbA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:41:26 2026 by rpki-client