Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft
File:                     jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft (raw, json)
Hash identifier:          DDcYnUpxkp7gWF7TYGOpq8ChV4iLHixA+UhpW3bApFk=
Subject key identifier:   5C:AD:73:D2:D8:E8:10:A1:51:A3:C1:9D:69:C8:D5:4D:56:F8:43:24
Authority key identifier: 8D:4B:F7:9A:41:9E:EC:0F:A5:33:E5:FC:A5:0F:F3:72:A3:3C:B3:90
Certificate issuer:       /CN=A918497E/serialNumber=8D4BF79A419EEC0FA533E5FCA50FF372A33CB390
Certificate serial:       01E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft
Manifest number:          01E0
Signing time:             Wed 29 Jul 2026 04:44:14 +0000
Manifest this update:     Wed 29 Jul 2026 04:44:14 +0000
Manifest next update:     Wed 05 Aug 2026 04:44:14 +0000
Files and hashes:         1: jUv3mkGe7A-lM-X8pQ_zcqM8s5A.crl (hash: mhp06PELr7mieS2ws7Z7wfkReAbDNxTvqk9F0x2GQY4=)
                          2: D8FEAF6C637611EFB2D9FD47C4F9AE02.roa (hash: Vy56QzLj3xyE23NG6q6W7GkOltoRSJz12saYaOd0mlc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.crl
                          rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 04:44:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 485 (0x1e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918497E, serialNumber=8D4BF79A419EEC0FA533E5FCA50FF372A33CB390
        Validity
            Not Before: Jul 29 04:44:14 2026 GMT
            Not After : Aug  5 04:44:14 2026 GMT
        Subject: CN=6a69851e-51fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fa:f7:4d:7e:e8:79:4e:7c:9b:d4:f0:69:c1:
                    d4:74:46:e8:8e:3a:96:5f:08:29:a9:24:5a:ca:99:
                    bf:d5:0b:e7:50:54:35:39:4e:43:7f:0d:f0:03:7d:
                    84:4a:d3:6a:32:11:74:8e:93:ae:be:5c:fd:69:bb:
                    58:b6:a9:25:05:ac:aa:b4:32:2e:a5:f2:02:2e:4d:
                    32:76:ef:23:fd:92:6b:bc:2c:aa:f7:b4:ef:cd:73:
                    4f:27:07:89:2d:9d:d3:cf:30:7d:be:20:6e:12:c3:
                    a8:c2:fe:9d:a3:81:1e:92:9e:25:e8:08:97:ff:73:
                    66:1b:6c:0a:25:fb:57:3d:ab:ec:fd:be:85:5c:98:
                    87:b4:72:9a:72:98:9a:ee:50:9e:c8:be:3d:94:a5:
                    86:2b:a1:c3:af:a8:2d:6f:36:e5:69:68:fe:71:cd:
                    95:5b:d0:fc:70:d7:f6:21:cf:e7:bb:f3:84:66:37:
                    32:92:1d:9c:a2:9e:87:c7:11:99:0f:e5:bc:23:c5:
                    25:47:b7:a0:49:d8:62:ab:39:cb:bc:05:bd:72:2e:
                    3c:ca:29:30:b8:22:3b:4f:36:dd:6e:c7:31:58:ca:
                    ce:00:12:c5:fa:45:b7:ad:e9:7b:1d:e6:ac:55:e5:
                    e2:64:6a:28:86:29:0e:08:2a:e7:8b:1d:9b:3e:96:
                    59:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AD:73:D2:D8:E8:10:A1:51:A3:C1:9D:69:C8:D5:4D:56:F8:43:24
            X509v3 Authority Key Identifier:
                keyid:8D:4B:F7:9A:41:9E:EC:0F:A5:33:E5:FC:A5:0F:F3:72:A3:3C:B3:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:16:9f:45:83:8b:a1:34:06:fa:43:e3:b3:be:cb:cf:c9:f8:
         65:07:f0:5e:2e:1b:ef:c2:53:9c:91:b7:92:47:84:4b:0a:21:
         7a:08:96:86:7a:f6:41:f6:87:51:fc:b9:04:6c:d0:ef:09:44:
         b9:2d:c9:9b:78:19:0b:c2:5a:89:6c:8f:23:14:95:86:d7:14:
         03:1a:15:54:f1:43:10:80:48:4b:f8:ed:e2:ee:a2:4a:a0:00:
         e1:da:5f:29:fa:c6:71:1e:7e:46:cb:86:24:30:63:77:f7:dd:
         3b:21:b7:5e:66:e4:53:24:80:08:08:07:d0:0a:44:49:12:a2:
         79:9c:9f:bc:ac:7f:73:d5:ed:b0:34:80:f7:c8:c5:24:51:c5:
         f3:59:60:31:3d:0b:69:c0:47:f5:63:57:51:7b:8e:a7:76:c4:
         50:b2:00:c3:00:85:18:d0:16:b8:e4:38:39:86:88:51:25:7e:
         86:f2:f9:57:b4:37:4b:d2:28:93:f7:e2:52:e8:cb:73:f6:97:
         b9:81:21:8e:cd:ac:2a:3c:88:e6:c4:a3:5a:56:0c:c8:99:d5:
         91:3c:f4:3d:cc:f2:d4:fc:cd:8f:65:f8:75:64:68:64:b9:a0:
         c1:10:58:c0:df:7d:3b:e9:99:e3:43:2d:2c:9f:94:13:6f:e2:
         12:e3:4a:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQ5N0UxMTAvBgNVBAUTKDhENEJGNzlBNDE5RUVDMEZBNTMzRTVGQ0E1MEZGMzcy
QTMzQ0IzOTAwHhcNMjYwNzI5MDQ0NDE0WhcNMjYwODA1MDQ0NDE0WjAYMRYwFAYD
VQQDEw02YTY5ODUxZS01MWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjPr3TX7oeU58m9TwacHUdEbojjqWXwgpqSRaypm/1QvnUFQ1OU5Dfw3wA32E
StNqMhF0jpOuvlz9abtYtqklBayqtDIupfICLk0ydu8j/ZJrvCyq97TvzXNPJweJ
LZ3TzzB9viBuEsOowv6do4Eekp4l6AiX/3NmG2wKJftXPavs/b6FXJiHtHKacpia
7lCeyL49lKWGK6HDr6gtbzblaWj+cc2VW9D8cNf2Ic/nu/OEZjcykh2cop6HxxGZ
D+W8I8UlR7egSdhiqznLvAW9ci48yikwuCI7TzbdbscxWMrOABLF+kW3rel7Heas
VeXiZGoohikOCCrnix2bPpZZLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFytc9LY
6BChUaPBnWnI1U1W+EMkMB8GA1UdIwQYMBaAFI1L95pBnuwPpTPl/KUP83KjPLOQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk3RS9DMzIwQzIyNkI1
RDgxMUVFOERBNjZEODVDNEY5QUUwMi9qVXYzbWtHZTdBLWxNLVg4cFFfemNxTThz
NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pVdjNta0dlN0EtbE0tWDhwUV96Y3FNOHM1QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDk3RS9DMzIwQzIyNkI1RDgxMUVFOERBNjZEODVDNEY5QUUwMi9qVXYzbWtHZTdB
LWxNLVg4cFFfemNxTThzNUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbBafRYOLoTQG+kPjs77Lz8n4ZQfwXi4b78JTnJG3kkeESwohegiWhnr2QfaH
Ufy5BGzQ7wlEuS3Jm3gZC8JaiWyPIxSVhtcUAxoVVPFDEIBIS/jt4u6iSqAA4dpf
KfrGcR5+RsuGJDBjd/fdOyG3XmbkUySACAgH0ApESRKieZyfvKx/c9XtsDSA98jF
JFHF81lgMT0LacBH9WNXUXuOp3bEULIAwwCFGNAWuOQ4OYaIUSV+hvL5V7Q3S9Io
k/fiUujLc/aXuYEhjs2sKjyI5sSjWlYMyJnVkTz0Pczy1PzNj2X4dWRoZLmgwRBY
wN99O+mZ40MtLJ+UE2/iEuNKgQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:01:32 2026 by rpki-client