Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
File:                     Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft (raw, json)
Hash identifier:          ey7Tk+WiulfcGbiRN482kbsSHol4DB1JALsaP0rZthU=
Subject key identifier:   9E:D5:20:7E:65:3A:17:EC:85:59:73:38:D6:61:DE:32:53:BE:66:A8
Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D
Certificate issuer:       /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
Certificate serial:       246F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
Manifest number:          2427
Signing time:             Tue 28 Jul 2026 15:53:19 +0000
Manifest this update:     Tue 28 Jul 2026 15:53:18 +0000
Manifest next update:     Tue 04 Aug 2026 15:53:18 +0000
Files and hashes:         1: Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl (hash: nsPADlhLgmQ/fT97DaBj+jXrtiLKiQ2xMyrfBKUHbq4=)
                          2: 4707F6CCB10F11E5A010921EC4F9AE02.roa (hash: JCPrD1uQLa6mO5UGYsREbdubhZ0qd7uDKpV9IJX0e5I=)
                          3: 4800F752477911F19E56FD3F95833773.roa (hash: nKprgXFIoFtiYaag6EoueAF9e18RWxQbnixS8TTrznA=)
                          4: 44059B50B10F11E5A010921EC4F9AE02.roa (hash: Vbmmu23AlBObytRTwt9j6G8iDN7Sx1IFw16gH03FE0E=)
                          5: 459A5D3EB10F11E5A010921EC4F9AE02.roa (hash: /9d5ufwGgNQ7zM38tyk/+4Sfdq1zdYvG1O4jWxq8U+M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl
                          rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9327 (0x246f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
        Validity
            Not Before: Jul 28 15:53:18 2026 GMT
            Not After : Aug  4 15:53:18 2026 GMT
        Subject: CN=6a68d06f-46b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5e:88:a7:3f:f4:ce:8b:7d:b2:3f:eb:c1:98:
                    f3:ea:1d:60:9e:3a:4a:9c:55:60:21:ec:f3:ed:20:
                    a4:76:f7:da:87:2c:a0:ee:77:17:b3:ef:ea:27:46:
                    01:e0:c7:cd:3b:0e:19:3c:8c:75:8b:dd:3a:ef:4b:
                    e5:f8:b9:76:86:aa:a3:4b:42:90:08:34:3f:75:3b:
                    a2:46:b2:3c:05:3c:c6:7e:d3:cf:0f:56:82:57:ed:
                    8c:1f:06:38:91:79:cf:a0:62:04:d8:71:5c:b0:b7:
                    84:88:9c:62:f4:de:0f:0c:df:d2:3c:84:a4:a0:47:
                    ee:2e:88:9f:dd:08:42:6c:fa:ff:29:ff:88:99:ff:
                    4d:35:8b:76:1f:e6:e4:d5:5b:b0:79:35:be:a5:0d:
                    85:cd:14:28:ed:48:c7:66:4d:f8:60:46:06:f8:f7:
                    f2:3a:f6:da:8e:60:80:cf:ab:49:2f:39:e0:d6:6c:
                    3b:86:4d:74:50:9f:09:d5:b3:35:40:d8:2f:7c:d1:
                    eb:fe:ee:0d:ba:42:46:39:8c:e8:72:0b:55:43:c2:
                    36:19:50:82:68:54:34:2c:cb:eb:7f:83:5a:a7:97:
                    bc:dd:17:2d:47:a3:9d:73:55:a0:59:74:e5:56:5d:
                    76:f5:06:c6:4a:ea:62:82:43:1e:04:db:b1:5b:ee:
                    4e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D5:20:7E:65:3A:17:EC:85:59:73:38:D6:61:DE:32:53:BE:66:A8
            X509v3 Authority Key Identifier:
                keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f3:42:ff:c2:0f:72:3a:7b:ce:8e:24:fe:86:cf:0f:be:fa:
         96:e8:23:89:55:ca:44:75:09:0a:5b:20:cb:74:6c:f5:e0:a6:
         82:b8:3b:0f:2e:68:85:bc:ae:79:1a:ce:ce:03:3e:07:31:30:
         93:8a:9f:f4:88:62:6d:4f:b4:5e:d4:0b:b4:f5:20:46:a4:f9:
         c2:24:6e:3b:60:8c:94:4e:1a:3d:73:94:cd:f6:c2:cd:85:95:
         e1:56:6c:fa:0b:96:ce:b9:31:b0:07:27:e4:bd:1a:18:0a:c5:
         81:64:7a:ec:2f:56:f9:07:62:c8:d0:e6:d7:02:9d:71:f4:55:
         a6:2a:7c:ba:5c:92:3c:80:5c:01:49:43:79:cb:7e:80:98:ec:
         9f:b6:a1:08:03:ea:be:3b:2b:01:66:7e:c7:2f:5f:68:60:81:
         87:20:7c:b1:42:46:cc:ac:db:41:bd:cb:eb:9c:2c:ce:e2:4f:
         0d:9b:bd:55:cd:63:67:b8:24:8c:43:f7:a4:85:63:3c:b3:a1:
         1f:45:53:e7:e6:09:e6:58:43:2d:24:a9:dd:85:11:8f:a8:66:
         6c:a7:80:da:91:cd:73:48:e8:a3:21:f0:ab:6e:35:83:c9:8b:
         33:99:a8:3b:d8:69:68:8c:42:4f:36:22:40:fa:a6:81:0c:1a:
         f3:7f:93:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0ZBOTMxMTAvBgNVBAUTKDMyNUIyQTZGRDRCN0JENDA4OTU1NjI3MTlGRkQ4RDlB
QTFBODc2NkQwHhcNMjYwNzI4MTU1MzE4WhcNMjYwODA0MTU1MzE4WjAYMRYwFAYD
VQQDEw02YTY4ZDA2Zi00NmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsF6Ipz/0zot9sj/rwZjz6h1gnjpKnFVgIezz7SCkdvfahyyg7ncXs+/qJ0YB
4MfNOw4ZPIx1i90670vl+Ll2hqqjS0KQCDQ/dTuiRrI8BTzGftPPD1aCV+2MHwY4
kXnPoGIE2HFcsLeEiJxi9N4PDN/SPISkoEfuLoif3QhCbPr/Kf+Imf9NNYt2H+bk
1VuweTW+pQ2FzRQo7UjHZk34YEYG+PfyOvbajmCAz6tJLzng1mw7hk10UJ8J1bM1
QNgvfNHr/u4NukJGOYzocgtVQ8I2GVCCaFQ0LMvrf4Nap5e83RctR6Odc1WgWXTl
Vl129QbGSupigkMeBNuxW+5O9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ7VIH5l
OhfshVlzONZh3jJTvmaoMB8GA1UdIwQYMBaAFDJbKm/Ut71AiVVicZ/9jZqhqHZt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkE5My9FOTAxM0I3Njg0
MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZVQ0pWV0p4bl8yTm1xR29k
bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01sc3FiOVMzdlVDSlZXSnhuXzJObXFHb2RtMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RkE5My9FOTAxM0I3Njg0MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZV
Q0pWV0p4bl8yTm1xR29kbTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAavNC/8IPcjp7zo4k/obPD776lugjiVXKRHUJClsgy3Rs9eCmgrg7Dy5ohbyu
eRrOzgM+BzEwk4qf9IhibU+0XtQLtPUgRqT5wiRuO2CMlE4aPXOUzfbCzYWV4VZs
+guWzrkxsAcn5L0aGArFgWR67C9W+QdiyNDm1wKdcfRVpip8ulySPIBcAUlDect+
gJjsn7ahCAPqvjsrAWZ+xy9faGCBhyB8sUJGzKzbQb3L65wszuJPDZu9Vc1jZ7gk
jEP3pIVjPLOhH0VT5+YJ5lhDLSSp3YURj6hmbKeA2pHNc0jooyHwq241g8mLM5mo
O9hpaIxCTzYiQPqmgQwa83+Tqg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:07:16 2026 by rpki-client