Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft
File:                     0aHv0iQTWusJg56ovbjNxZnOZX8.mft (raw, json)
Hash identifier:          P4OJuHt9MQXUizOq9ZySyxOJAJLnOc3ChVtJdYCWAFA=
Subject key identifier:   99:60:21:CD:FE:85:79:51:D9:69:30:27:C0:DC:17:44:44:C3:A7:74
Authority key identifier: D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F
Certificate issuer:       /CN=A917D9FC/serialNumber=D1A1EFD224135AEB09839EA8BDB8CDC599CE657F
Certificate serial:       0570
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft
Manifest number:          0568
Signing time:             Tue 28 Jul 2026 16:33:21 +0000
Manifest this update:     Tue 28 Jul 2026 16:33:21 +0000
Manifest next update:     Tue 04 Aug 2026 16:33:21 +0000
Files and hashes:         1: 0aHv0iQTWusJg56ovbjNxZnOZX8.crl (hash: 190qafENYSX10fiztX3Sn+4KT+guiSf5JS8et6sE2KU=)
                          2: AD94C92242BA11ECB1E8FF11C4F9AE02.roa (hash: pPVg90RNjRjphrQIpFi1Dtq7Yfiqt2CKG2uE/Sw0pBw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.crl
                          rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1392 (0x570)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D9FC, serialNumber=D1A1EFD224135AEB09839EA8BDB8CDC599CE657F
        Validity
            Not Before: Jul 28 16:33:21 2026 GMT
            Not After : Aug  4 16:33:21 2026 GMT
        Subject: CN=6a68d9d1-c450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:11:d8:7c:ce:30:c7:5a:60:b2:47:06:5b:8c:
                    a6:d9:14:a6:8f:4d:0f:98:39:9a:12:22:21:49:2f:
                    7e:07:4f:ab:4c:90:2a:04:3e:a7:c2:c4:b1:42:45:
                    2b:bd:32:3f:a1:fc:56:0d:c4:3a:60:a4:bf:1a:9a:
                    40:89:90:d0:14:10:2b:08:29:09:a9:63:68:aa:24:
                    e2:b8:b1:2a:aa:bc:7b:81:ea:60:17:c0:ff:0f:4b:
                    78:3c:8f:51:d9:bf:8e:54:32:a1:6d:93:ad:59:6e:
                    11:f1:9c:49:5a:8d:08:a8:37:0b:48:50:a0:52:99:
                    3b:7e:14:4a:57:15:5e:0e:17:2b:f1:55:03:a4:4b:
                    06:7d:89:69:64:66:3c:63:50:c1:6f:49:c8:d7:c8:
                    65:d5:29:fe:99:30:e0:f0:be:05:07:72:a7:9f:c1:
                    24:7f:70:55:4e:79:95:c9:a1:6c:f0:c9:e4:0e:cb:
                    61:6b:3d:69:01:41:a1:f5:a2:b2:fd:c7:6f:ff:d2:
                    3e:81:bd:a6:b1:14:80:a5:b2:8f:c8:2d:c3:cd:81:
                    2d:96:16:ce:01:59:3e:ec:a3:a9:f6:46:88:1e:1a:
                    e7:e0:97:51:a5:3d:a7:a4:80:44:05:7b:10:6f:28:
                    eb:12:5e:84:3e:50:8f:6c:e6:f4:a3:a8:fe:d5:18:
                    9b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:60:21:CD:FE:85:79:51:D9:69:30:27:C0:DC:17:44:44:C3:A7:74
            X509v3 Authority Key Identifier:
                keyid:D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:bb:4b:65:de:56:7b:a6:a3:c4:79:0a:9a:ca:ef:c3:c3:cf:
         51:ca:d9:68:5a:bd:03:6c:1e:1b:f0:a9:6d:d3:2c:df:29:34:
         0f:6d:47:37:7b:48:0c:f6:ce:58:01:e0:f1:e1:5e:22:59:82:
         50:d5:f3:e6:31:7f:9d:2c:dd:ad:07:56:fb:95:8f:cb:c1:b7:
         d0:46:b7:46:96:b5:87:5d:c4:14:51:98:32:7c:04:ac:bc:13:
         0c:d3:1e:f6:32:e2:89:27:a2:57:2a:3e:fa:b8:45:6f:01:de:
         62:c7:34:47:bd:fb:ff:6e:8d:ec:6c:bd:b7:4e:14:59:19:53:
         df:c7:77:01:32:5d:20:4c:d4:57:d5:5d:81:6b:ca:b4:9b:c2:
         bf:df:af:4e:54:64:9c:82:cf:da:71:d4:2a:cd:0c:86:fc:73:
         1b:e3:c3:e2:75:0a:40:10:3a:71:78:0a:8f:f6:9c:8c:c9:d4:
         d5:7f:a0:f7:0e:da:b9:20:9a:98:f5:be:c2:05:dc:f3:e7:57:
         87:05:07:7b:e9:f3:f7:3c:8f:5a:af:e7:09:65:eb:51:6a:40:
         77:60:aa:ea:cc:45:ba:c2:c8:c4:ef:14:aa:79:8c:b1:9b:07:
         83:50:e5:5a:35:81:15:a6:18:52:f3:a9:4e:0b:d2:38:65:c0:
         67:4d:54:ae
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0Q5RkMxMTAvBgNVBAUTKEQxQTFFRkQyMjQxMzVBRUIwOTgzOUVBOEJEQjhDREM1
OTlDRTY1N0YwHhcNMjYwNzI4MTYzMzIxWhcNMjYwODA0MTYzMzIxWjAYMRYwFAYD
VQQDEw02YTY4ZDlkMS1jNDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwRHYfM4wx1pgskcGW4ym2RSmj00PmDmaEiIhSS9+B0+rTJAqBD6nwsSxQkUr
vTI/ofxWDcQ6YKS/GppAiZDQFBArCCkJqWNoqiTiuLEqqrx7gepgF8D/D0t4PI9R
2b+OVDKhbZOtWW4R8ZxJWo0IqDcLSFCgUpk7fhRKVxVeDhcr8VUDpEsGfYlpZGY8
Y1DBb0nI18hl1Sn+mTDg8L4FB3Knn8Ekf3BVTnmVyaFs8MnkDsthaz1pAUGh9aKy
/cdv/9I+gb2msRSApbKPyC3DzYEtlhbOAVk+7KOp9kaIHhrn4JdRpT2npIBEBXsQ
byjrEl6EPlCPbOb0o6j+1RibQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJlgIc3+
hXlR2WkwJ8DcF0REw6d0MB8GA1UdIwQYMBaAFNGh79IkE1rrCYOeqL24zcWZzmV/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlGQy83QTMwMkQwMDQy
QjExMUVDOUYyNEEwNkVDNEY5QUUwMi8wYUh2MGlRVFd1c0pnNTZvdmJqTnhabk9a
WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzBhSHYwaVFUV3VzSmc1Nm92YmpOeFpuT1pYOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RDlGQy83QTMwMkQwMDQyQjExMUVDOUYyNEEwNkVDNEY5QUUwMi8wYUh2MGlRVFd1
c0pnNTZvdmJqTnhabk9aWDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGLtLZd5We6ajxHkKmsrvw8PPUcrZaFq9A2weG/CpbdMs3yk0D21HN3tIDPbO
WAHg8eFeIlmCUNXz5jF/nSzdrQdW+5WPy8G30Ea3Rpa1h13EFFGYMnwErLwTDNMe
9jLiiSeiVyo++rhFbwHeYsc0R737/26N7Gy9t04UWRlT38d3ATJdIEzUV9VdgWvK
tJvCv9+vTlRknILP2nHUKs0MhvxzG+PD4nUKQBA6cXgKj/acjMnU1X+g9w7auSCa
mPW+wgXc8+dXhwUHe+nz9zyPWq/nCWXrUWpAd2Cq6sxFusLIxO8UqnmMsZsHg1Dl
WjWBFaYYUvOpTgvSOGXAZ01Urg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:30:22 2026 by rpki-client