Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft
File:                     lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft (raw, json)
Hash identifier:          2d3Obw3u+cheoYgc67li+cNmWr+0eF7iC+0wvZzTuEw=
Subject key identifier:   82:BE:97:39:1B:BD:8B:9F:8E:6B:4A:D5:D5:F0:41:2F:CF:A2:37:53
Authority key identifier: 94:2D:54:1D:FE:79:82:F6:E0:1E:6B:CC:97:6D:C0:CB:84:14:E8:38
Certificate issuer:       /CN=A917D7F2/serialNumber=942D541DFE7982F6E01E6BCC976DC0CB8414E838
Certificate serial:       3576
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft
Manifest number:          356E
Signing time:             Tue 28 Jul 2026 14:38:04 +0000
Manifest this update:     Tue 28 Jul 2026 14:38:04 +0000
Manifest next update:     Tue 04 Aug 2026 14:38:04 +0000
Files and hashes:         1: lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl (hash: NnnDiq8malnyye7+epTCfN76XZNtspXadX2cr638Mxg=)
                          2: 35FC192C272C11ED9E64C718C4F9AE02.roa (hash: 5gb2IR3RmAQfetfMD3Cf2kp33anqtncaV+qXbOqkB4k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl
                          rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 14:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13686 (0x3576)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D7F2, serialNumber=942D541DFE7982F6E01E6BCC976DC0CB8414E838
        Validity
            Not Before: Jul 28 14:38:04 2026 GMT
            Not After : Aug  4 14:38:04 2026 GMT
        Subject: CN=6a68becc-3454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:96:22:16:32:38:6d:17:0c:1c:44:60:48:98:
                    5d:7a:b1:0f:48:ec:62:57:48:99:8d:4a:38:b1:c8:
                    93:5e:9e:a1:b0:02:9a:a2:d1:45:79:30:eb:04:dd:
                    4e:ea:45:48:e6:f8:93:da:a6:89:67:b8:52:4c:f0:
                    6c:c4:bb:33:55:e9:79:07:5c:a0:cf:04:ec:5a:c1:
                    b9:3c:71:e6:78:d0:c1:05:4b:79:6f:af:3a:b3:e9:
                    14:a0:7e:6b:87:0f:e7:ce:04:c6:59:06:82:75:f4:
                    62:75:69:a6:6d:e7:a7:fe:e1:7f:c2:0b:94:62:74:
                    21:10:3c:d3:72:a7:c0:e3:bb:6d:60:08:74:5f:37:
                    80:bc:ed:ed:ba:90:78:24:80:91:de:49:03:94:0f:
                    0b:9e:23:bc:8b:b4:77:08:ac:95:dd:d9:03:0e:5b:
                    e9:de:3b:ff:d0:94:70:c9:48:47:bd:28:5b:d3:8b:
                    a2:cd:fc:5e:8b:09:3b:da:6e:00:0c:0f:5d:7b:90:
                    19:cc:57:a6:c0:09:13:f6:b4:2c:2d:66:aa:a1:b2:
                    8a:be:78:6e:89:10:b8:25:57:a2:59:62:50:74:56:
                    62:33:12:a4:f0:c5:84:3d:e1:1b:25:17:b0:8f:fb:
                    88:5c:3a:da:57:7b:a5:47:93:ec:c1:fb:ad:a8:50:
                    00:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BE:97:39:1B:BD:8B:9F:8E:6B:4A:D5:D5:F0:41:2F:CF:A2:37:53
            X509v3 Authority Key Identifier:
                keyid:94:2D:54:1D:FE:79:82:F6:E0:1E:6B:CC:97:6D:C0:CB:84:14:E8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:de:6d:2c:8d:05:2c:c7:c3:e1:8d:2a:0f:46:f9:59:1a:5d:
         46:6d:7d:fd:90:80:24:e2:4d:fb:d3:f8:f1:a0:69:72:c2:9d:
         44:44:c0:29:ca:b9:c3:b1:42:a7:0f:18:0e:f4:fa:6d:55:2d:
         ac:c5:38:e0:80:c6:7a:78:f0:84:4b:ef:0d:f3:71:c2:68:5c:
         7c:f2:2a:08:27:1b:03:17:77:73:50:aa:4e:ca:67:76:ae:77:
         f7:51:65:c4:3b:8b:4b:0e:41:af:7c:30:2f:c8:49:e1:21:61:
         c2:01:d5:e5:0b:f8:21:57:28:00:21:87:91:62:cf:d8:7a:12:
         c4:c8:ba:d8:a3:6e:a0:94:22:73:87:a0:4c:86:d6:d8:fc:39:
         17:61:ae:08:80:ef:e2:4c:c4:e4:2d:69:db:33:19:c8:18:b6:
         6a:1e:ca:f1:b1:28:5f:ef:28:e0:87:56:ba:1f:3b:f2:3c:1c:
         2b:5f:ab:57:de:f5:b0:09:04:ec:60:d4:fb:53:fa:a8:34:5e:
         e5:dd:f6:fa:77:94:4d:b1:1c:b4:40:71:57:0c:bf:9b:53:c2:
         c6:40:9e:ee:ff:0a:1c:fc:b9:a7:9a:6f:c6:4d:61:b5:78:5a:
         b6:58:df:8f:c5:3c:0f:51:14:5c:eb:30:6e:1d:68:98:bd:e8:
         36:61:b4:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0Q3RjIxMTAvBgNVBAUTKDk0MkQ1NDFERkU3OTgyRjZFMDFFNkJDQzk3NkRDMENC
ODQxNEU4MzgwHhcNMjYwNzI4MTQzODA0WhcNMjYwODA0MTQzODA0WjAYMRYwFAYD
VQQDEw02YTY4YmVjYy0zNDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwZYiFjI4bRcMHERgSJhderEPSOxiV0iZjUo4sciTXp6hsAKaotFFeTDrBN1O
6kVI5viT2qaJZ7hSTPBsxLszVel5B1ygzwTsWsG5PHHmeNDBBUt5b686s+kUoH5r
hw/nzgTGWQaCdfRidWmmbeen/uF/wguUYnQhEDzTcqfA47ttYAh0XzeAvO3tupB4
JICR3kkDlA8LniO8i7R3CKyV3dkDDlvp3jv/0JRwyUhHvShb04uizfxeiwk72m4A
DA9de5AZzFemwAkT9rQsLWaqobKKvnhuiRC4JVeiWWJQdFZiMxKk8MWEPeEbJRew
j/uIXDraV3ulR5PswfutqFAANwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIK+lzkb
vYufjmtK1dXwQS/PojdTMB8GA1UdIwQYMBaAFJQtVB3+eYL24B5rzJdtwMuEFOg4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDdGMi9GMDI4OTAzQzFE
OEMxMUUyQjE5RDVGRUEwOEIwMkNEMi9sQzFVSGY1NWd2YmdIbXZNbDIzQXk0UVU2
RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xDMVVIZjU1Z3ZiZ0htdk1sMjNBeTRRVTZEZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RDdGMi9GMDI4OTAzQzFEOEMxMUUyQjE5RDVGRUEwOEIwMkNEMi9sQzFVSGY1NWd2
YmdIbXZNbDIzQXk0UVU2RGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqd5tLI0FLMfD4Y0qD0b5WRpdRm19/ZCAJOJN+9P48aBpcsKdRETAKcq5w7FC
pw8YDvT6bVUtrMU44IDGenjwhEvvDfNxwmhcfPIqCCcbAxd3c1CqTspndq5391Fl
xDuLSw5Br3wwL8hJ4SFhwgHV5Qv4IVcoACGHkWLP2HoSxMi62KNuoJQic4egTIbW
2Pw5F2GuCIDv4kzE5C1p2zMZyBi2ah7K8bEoX+8o4IdWuh878jwcK1+rV971sAkE
7GDU+1P6qDRe5d32+neUTbEctEBxVwy/m1PCxkCe7v8KHPy5p5pvxk1htXhatljf
j8U8D1EUXOswbh1omL3oNmG0Ng==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:12:50 2026 by rpki-client