Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft
File:                     E3ay871bTTWtlSsXkNgnRpktQW8.mft (raw, json)
Hash identifier:          BBQsRcwqeTrJwj2rtaiCtIRdsnd/mcJ0/RlfKPBIoAc=
Subject key identifier:   41:A2:59:B6:11:E6:D3:12:82:A1:5F:2A:70:20:94:52:E3:D4:2E:BF
Authority key identifier: 13:76:B2:F3:BD:5B:4D:35:AD:95:2B:17:90:D8:27:46:99:2D:41:6F
Certificate issuer:       /CN=A9183A80/serialNumber=1376B2F3BD5B4D35AD952B1790D82746992D416F
Certificate serial:       01AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft
Manifest number:          0634
Signing time:             Mon 27 Jul 2026 00:56:34 +0000
Manifest this update:     Mon 27 Jul 2026 00:56:33 +0000
Manifest next update:     Mon 03 Aug 2026 00:56:33 +0000
Files and hashes:         1: E3ay871bTTWtlSsXkNgnRpktQW8.crl (hash: XatBesOeDe+OM6yc2CbLadn0B9OcBzKuaWguAdSGhC4=)
                          2: F03F059C391D11EF9A100142C4F9AE02.roa (hash: +62L24ARwxsz7CVaJKv515m0+Lg0yNxUoqJGRQhPpt4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.crl
                          rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183A80, serialNumber=1376B2F3BD5B4D35AD952B1790D82746992D416F
        Validity
            Not Before: Jul 27 00:56:33 2026 GMT
            Not After : Aug  3 00:56:33 2026 GMT
        Subject: CN=6a66acc2-841e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:87:55:f1:42:62:4a:be:7a:07:a4:0a:0f:5e:
                    f6:73:02:16:66:5d:48:8c:89:51:83:7c:0e:2f:77:
                    a3:ba:b7:fa:e2:11:a3:3f:73:17:5e:23:49:e1:15:
                    62:0f:9e:00:d9:f7:75:4e:91:67:79:a1:66:be:84:
                    c9:3b:31:1d:4d:d7:a0:d3:4a:dc:71:2d:2d:07:b0:
                    bb:e3:da:97:d4:31:e0:14:8b:f0:e7:f8:ca:93:ed:
                    99:f5:9a:08:c2:ef:ab:30:69:0e:2a:3d:c0:59:e8:
                    d9:24:48:5a:63:89:ed:87:94:d4:52:b1:4c:f8:67:
                    89:74:e6:f5:6c:7d:8a:8f:46:86:a0:88:09:74:59:
                    97:28:d7:73:a7:54:ab:0c:64:9c:eb:fa:60:05:80:
                    05:e4:5a:ee:38:44:f1:56:1e:f1:ae:d5:b3:94:bc:
                    c5:9e:fa:7b:c7:a9:f3:46:cd:1e:f2:c5:c0:44:8e:
                    73:ff:96:61:d5:9f:5a:3d:ff:e3:3b:62:f8:49:81:
                    bc:a0:b4:f8:5e:67:0d:36:2f:f8:47:15:af:20:2b:
                    d4:ec:ff:84:eb:2b:74:e6:2f:b7:8d:78:25:d4:44:
                    a1:d3:2a:97:82:f3:92:d2:3c:18:7e:c7:6b:1b:e6:
                    99:cf:54:d5:ad:90:2b:e9:c1:bd:12:03:8e:2f:9e:
                    ea:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A2:59:B6:11:E6:D3:12:82:A1:5F:2A:70:20:94:52:E3:D4:2E:BF
            X509v3 Authority Key Identifier:
                keyid:13:76:B2:F3:BD:5B:4D:35:AD:95:2B:17:90:D8:27:46:99:2D:41:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:e4:22:d9:b6:2d:b3:24:ce:2c:bb:98:20:86:f0:c4:57:c9:
         0a:ed:30:2e:d8:7a:3f:0d:b9:a3:10:7e:e6:8e:a5:ab:45:40:
         2d:fc:5f:0a:be:20:05:6e:0d:90:96:31:74:09:3d:af:f0:6f:
         0f:18:26:a5:a2:04:3d:d5:db:5f:89:a9:7a:c5:9a:69:8f:b5:
         3b:a9:6e:10:24:f4:75:e4:2b:16:97:56:ae:c0:b3:34:96:6b:
         bf:89:63:75:27:1f:0c:6d:47:5e:0b:e4:72:60:9d:12:df:e6:
         a8:e7:0a:bd:ad:03:72:0b:07:68:fb:16:01:08:f8:75:d8:55:
         4d:30:7b:bc:39:81:44:95:38:0d:8b:08:1f:b1:6f:9f:12:2c:
         fc:aa:0c:5c:1a:28:39:c5:01:68:06:f0:70:0f:d3:dd:ff:ce:
         98:43:0c:c0:08:b4:f8:ce:ae:fc:94:c7:b4:a8:d1:18:35:20:
         c9:ed:17:55:26:66:48:cb:db:64:0e:81:b7:9e:3b:bd:0b:22:
         3d:e2:65:bb:7f:4d:82:32:da:49:46:fa:a5:28:30:6d:5e:d6:
         96:30:9b:b8:60:bd:68:84:36:a5:25:42:ff:ea:d6:1a:91:2e:
         f5:1f:2f:16:e8:2e:87:9d:07:98:e6:63:8c:cf:29:bb:7e:80:
         c2:23:4f:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODNBODAxMTAvBgNVBAUTKDEzNzZCMkYzQkQ1QjREMzVBRDk1MkIxNzkwRDgyNzQ2
OTkyRDQxNkYwHhcNMjYwNzI3MDA1NjMzWhcNMjYwODAzMDA1NjMzWjAYMRYwFAYD
VQQDEw02YTY2YWNjMi04NDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5YdV8UJiSr56B6QKD172cwIWZl1IjIlRg3wOL3ejurf64hGjP3MXXiNJ4RVi
D54A2fd1TpFneaFmvoTJOzEdTdeg00rccS0tB7C749qX1DHgFIvw5/jKk+2Z9ZoI
wu+rMGkOKj3AWejZJEhaY4nth5TUUrFM+GeJdOb1bH2Kj0aGoIgJdFmXKNdzp1Sr
DGSc6/pgBYAF5FruOETxVh7xrtWzlLzFnvp7x6nzRs0e8sXARI5z/5Zh1Z9aPf/j
O2L4SYG8oLT4XmcNNi/4RxWvICvU7P+E6yt05i+3jXgl1ESh0yqXgvOS0jwYfsdr
G+aZz1TVrZAr6cG9EgOOL57qqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEGiWbYR
5tMSgqFfKnAglFLj1C6/MB8GA1UdIwQYMBaAFBN2svO9W001rZUrF5DYJ0aZLUFv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0E4MC82OTAxMTlEMjg4
MUExMUVDQkNDRkEwMEZDNEY5QUUwMi9FM2F5ODcxYlRUV3RsU3NYa05nblJwa3RR
VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0UzYXk4NzFiVFRXdGxTc1hrTmduUnBrdFFXOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
M0E4MC82OTAxMTlEMjg4MUExMUVDQkNDRkEwMEZDNEY5QUUwMi9FM2F5ODcxYlRU
V3RsU3NYa05nblJwa3RRVzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoeQi2bYtsyTOLLuYIIbwxFfJCu0wLth6Pw25oxB+5o6lq0VALfxfCr4gBW4N
kJYxdAk9r/BvDxgmpaIEPdXbX4mpesWaaY+1O6luECT0deQrFpdWrsCzNJZrv4lj
dScfDG1HXgvkcmCdEt/mqOcKva0DcgsHaPsWAQj4ddhVTTB7vDmBRJU4DYsIH7Fv
nxIs/KoMXBooOcUBaAbwcA/T3f/OmEMMwAi0+M6u/JTHtKjRGDUgye0XVSZmSMvb
ZA6Bt547vQsiPeJlu39NgjLaSUb6pSgwbV7WljCbuGC9aIQ2pSVC/+rWGpEu9R8v
Fuguh50HmOZjjM8pu36AwiNPfw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:40:31 2026 by rpki-client