Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
File:                     -bj5HSkovqo1HMNFxHNpMv2GOfE.mft (raw, json)
Hash identifier:          o4pXGXqxKkDSKBeX0TPviPRUMXu9zvMrPHqbFQ95DWk=
Subject key identifier:   0C:D4:CC:25:99:3B:62:4B:08:F1:71:39:4E:0B:11:21:1B:85:80:EA
Authority key identifier: F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1
Certificate issuer:       /CN=A917C2CC/serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1
Certificate serial:       1002
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
Manifest number:          0FEF
Signing time:             Tue 28 Jul 2026 17:35:38 +0000
Manifest this update:     Tue 28 Jul 2026 17:35:38 +0000
Manifest next update:     Tue 04 Aug 2026 17:35:38 +0000
Files and hashes:         1: -bj5HSkovqo1HMNFxHNpMv2GOfE.crl (hash: Z2z2MU9GPDmpFK+e3ywhNN7vbKiuYe/gAQDvXSdp2ck=)
                          2: F6B0145ACD2011F0B3EB5B69C4F9AE02.roa (hash: k4cp/STum9L4RJNKMc3zj8Ri5aFzIHY5Vza6zrwXHLY=)
                          3: AA75695ACD2011F0B214A868C4F9AE02.roa (hash: 2mnTM/HTgdiRw1sKfT4sEhRjUUWStC3e6p+pRA/D//M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl
                          rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4098 (0x1002)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C2CC, serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1
        Validity
            Not Before: Jul 28 17:35:38 2026 GMT
            Not After : Aug  4 17:35:38 2026 GMT
        Subject: CN=6a68e86a-908b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:de:6c:2e:a3:4e:09:cc:91:21:11:91:b8:c9:
                    bd:1a:27:f1:e3:60:4f:d4:96:52:e9:fa:54:26:22:
                    67:e9:93:a6:a9:fb:77:e4:50:b2:2b:55:eb:33:be:
                    0e:37:a1:ac:08:99:b7:4f:66:80:c2:86:45:4a:d8:
                    2e:d2:ef:91:fb:ea:f8:3d:cc:b9:66:76:c0:fd:5e:
                    7a:e8:11:7b:ff:2f:34:5c:50:54:65:b5:81:3d:34:
                    d7:f3:57:6d:a8:32:20:6f:bf:60:e4:c6:a3:18:08:
                    3c:8c:b1:74:4f:0a:5e:bd:8d:0a:a3:c0:d7:35:e2:
                    d9:f0:d7:79:4a:7f:7f:43:64:db:d2:d0:1d:dc:2f:
                    39:b3:6f:52:6a:4d:74:15:7e:e0:f3:4d:60:83:02:
                    f1:1f:07:bf:63:18:5b:aa:da:05:98:f8:e7:df:b4:
                    26:84:5b:68:14:5f:6f:23:9a:c5:63:08:60:9d:46:
                    c6:b9:8a:3e:3b:bd:d3:fa:1d:7a:e6:1a:c5:94:8b:
                    87:7f:90:14:3e:11:70:51:4e:f0:69:22:8e:4e:c1:
                    13:ce:cf:36:49:d1:d8:8f:2e:62:85:91:73:4d:76:
                    db:bc:d1:99:39:c3:75:d7:e1:9a:41:45:fa:12:32:
                    3a:11:2b:83:9e:7c:7d:97:98:37:bd:85:c1:fb:15:
                    16:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D4:CC:25:99:3B:62:4B:08:F1:71:39:4E:0B:11:21:1B:85:80:EA
            X509v3 Authority Key Identifier:
                keyid:F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:21:f3:b9:56:85:4f:9d:63:44:ef:91:99:25:67:35:be:7c:
         20:e7:ff:48:6f:81:f2:c3:75:16:51:fe:e8:8a:ca:d5:f8:5f:
         1b:83:55:98:c7:a7:4f:9c:ea:4c:19:e0:80:a7:5c:e3:a5:65:
         55:d9:de:e3:30:cc:69:98:99:02:93:d5:33:8d:1a:76:05:68:
         68:82:f7:f2:39:bd:4c:e6:42:54:7c:99:eb:a3:c6:52:0e:ea:
         a2:83:2d:f0:0e:c5:a1:e6:45:d6:7f:92:49:ef:49:78:57:89:
         40:d3:63:6d:88:58:25:ce:86:a2:86:07:b1:c9:e0:93:4b:89:
         69:8f:a2:3c:c3:23:ad:bc:f7:c4:41:11:56:23:1c:04:02:d6:
         38:f2:b8:3c:de:dd:9b:b9:9d:cb:ba:87:be:39:51:6a:9d:62:
         c6:cd:eb:b6:dd:01:84:2c:b0:c6:1e:3d:18:8f:47:b7:fb:95:
         7c:36:b8:b8:b6:4b:e6:06:be:21:ee:0a:bf:eb:9e:0c:d5:77:
         e4:48:c3:6e:69:03:87:d5:e7:d5:8c:fd:6d:fd:aa:37:85:5e:
         a6:07:c0:7e:2f:25:60:a5:e2:4d:f6:0e:c0:08:2d:bf:90:cf:
         67:ef:f5:bf:f6:39:88:44:8f:f0:29:6e:7f:46:d7:41:8d:b0:
         43:8f:ab:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0MyQ0MxMTAvBgNVBAUTKEY5QjhGOTFEMjkyOEJFQUEzNTFDQzM0NUM0NzM2OTMy
RkQ4NjM5RjEwHhcNMjYwNzI4MTczNTM4WhcNMjYwODA0MTczNTM4WjAYMRYwFAYD
VQQDEw02YTY4ZTg2YS05MDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAud5sLqNOCcyRIRGRuMm9Gifx42BP1JZS6fpUJiJn6ZOmqft35FCyK1XrM74O
N6GsCJm3T2aAwoZFStgu0u+R++r4Pcy5ZnbA/V566BF7/y80XFBUZbWBPTTX81dt
qDIgb79g5MajGAg8jLF0TwpevY0Ko8DXNeLZ8Nd5Sn9/Q2Tb0tAd3C85s29Sak10
FX7g801ggwLxHwe/YxhbqtoFmPjn37QmhFtoFF9vI5rFYwhgnUbGuYo+O73T+h16
5hrFlIuHf5AUPhFwUU7waSKOTsETzs82SdHYjy5ihZFzTXbbvNGZOcN11+GaQUX6
EjI6ESuDnnx9l5g3vYXB+xUWgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAzUzCWZ
O2JLCPFxOU4LESEbhYDqMB8GA1UdIwQYMBaAFPm4+R0pKL6qNRzDRcRzaTL9hjnx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzJDQy9DQzE5Mzg3Njc4
REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3ZxbzFITU5GeEhOcE12MkdP
ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1iajVIU2tvdnFvMUhNTkZ4SE5wTXYyR09mRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzJDQy9DQzE5Mzg3Njc4REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3Zx
bzFITU5GeEhOcE12MkdPZkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAayHzuVaFT51jRO+RmSVnNb58IOf/SG+B8sN1FlH+6IrK1fhfG4NVmMenT5zq
TBnggKdc46VlVdne4zDMaZiZApPVM40adgVoaIL38jm9TOZCVHyZ66PGUg7qooMt
8A7FoeZF1n+SSe9JeFeJQNNjbYhYJc6GooYHscngk0uJaY+iPMMjrbz3xEERViMc
BALWOPK4PN7dm7mdy7qHvjlRap1ixs3rtt0BhCywxh49GI9Ht/uVfDa4uLZL5ga+
Ie4Kv+ueDNV35EjDbmkDh9Xn1Yz9bf2qN4VepgfAfi8lYKXiTfYOwAgtv5DPZ+/1
v/Y5iESP8Cluf0bXQY2wQ4+rwQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:43:57 2026 by rpki-client