Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185F7D/69753F581D9C11E2A6FBF08A08B02CD2/1ppgVl8zchSc5uL8nnI9SQZ2doo.mft
File:                     1ppgVl8zchSc5uL8nnI9SQZ2doo.mft (raw, json)
Hash identifier:          3HvIh5gNArKNWCg9G1mzMYawXUOa97ES1wra6/mIWDE=
Subject key identifier:   15:FB:CD:38:6B:79:8E:45:77:57:79:B2:16:AF:10:1E:73:B2:93:07
Authority key identifier: D6:9A:60:56:5F:33:72:14:9C:E6:E2:FC:9E:72:3D:49:06:76:76:8A
Certificate issuer:       /CN=A9185F7D/serialNumber=D69A60565F3372149CE6E2FC9E723D490676768A
Certificate serial:       3564
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ppgVl8zchSc5uL8nnI9SQZ2doo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185F7D/69753F581D9C11E2A6FBF08A08B02CD2/1ppgVl8zchSc5uL8nnI9SQZ2doo.mft
Manifest number:          3564
Signing time:             Tue 28 Jul 2026 15:01:21 +0000
Manifest this update:     Tue 28 Jul 2026 15:01:21 +0000
Manifest next update:     Tue 04 Aug 2026 15:01:21 +0000
Files and hashes:         1: 1ppgVl8zchSc5uL8nnI9SQZ2doo.crl (hash: iFFYGLlKBlG+MWNc7BI+Yrx7ULA6hqNjuDmojxp2FIA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185F7D/69753F581D9C11E2A6FBF08A08B02CD2/1ppgVl8zchSc5uL8nnI9SQZ2doo.crl
                          rsync://rpki.apnic.net/member_repository/A9185F7D/69753F581D9C11E2A6FBF08A08B02CD2/1ppgVl8zchSc5uL8nnI9SQZ2doo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ppgVl8zchSc5uL8nnI9SQZ2doo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13668 (0x3564)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185F7D, serialNumber=D69A60565F3372149CE6E2FC9E723D490676768A
        Validity
            Not Before: Jul 28 15:01:21 2026 GMT
            Not After : Aug  4 15:01:21 2026 GMT
        Subject: CN=6a68c441-cf19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:16:03:b4:96:bd:60:cc:5e:15:9a:fe:e9:bf:
                    ee:64:a4:82:36:11:ea:98:fb:96:16:98:86:f2:ad:
                    a4:cd:c5:4a:4d:3f:5c:41:4c:56:43:a3:4f:0e:4e:
                    b7:a1:5f:44:9f:0c:ad:8e:a1:85:48:de:ca:79:91:
                    9c:a4:33:cb:84:05:66:16:ee:c7:63:ff:fc:7b:39:
                    b3:7c:9f:f3:3e:40:a7:85:41:7a:e3:63:06:ff:22:
                    d3:a7:29:ab:1a:44:1f:f0:16:82:38:8a:65:c6:fc:
                    44:b7:f1:f1:57:c5:f2:63:95:89:67:ee:d3:c1:c4:
                    dd:54:b6:7b:6c:ca:1b:9f:27:5a:bb:c9:ea:27:01:
                    a5:c4:98:08:9e:d9:57:21:d5:d6:36:eb:54:6f:6a:
                    03:2f:96:ad:3f:23:2a:7b:4e:e3:38:c2:e1:2a:99:
                    88:dc:d3:cb:50:42:59:e1:c6:1e:57:47:59:bb:9d:
                    b5:28:e2:c9:46:6b:dd:df:b4:b5:76:74:9a:e3:6e:
                    c0:9f:9c:e3:04:77:16:8f:65:d1:0c:28:ce:78:f8:
                    20:a7:92:1e:bc:01:51:86:f4:ef:b2:c0:0a:e0:a8:
                    3b:04:41:21:05:88:87:f7:e1:9f:c5:dd:37:3d:11:
                    08:17:fd:c4:d2:38:6c:4b:36:69:6c:91:af:05:a2:
                    b2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:FB:CD:38:6B:79:8E:45:77:57:79:B2:16:AF:10:1E:73:B2:93:07
            X509v3 Authority Key Identifier:
                keyid:D6:9A:60:56:5F:33:72:14:9C:E6:E2:FC:9E:72:3D:49:06:76:76:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185F7D/69753F581D9C11E2A6FBF08A08B02CD2/1ppgVl8zchSc5uL8nnI9SQZ2doo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ppgVl8zchSc5uL8nnI9SQZ2doo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185F7D/69753F581D9C11E2A6FBF08A08B02CD2/1ppgVl8zchSc5uL8nnI9SQZ2doo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:1f:ec:d1:cf:3b:f0:f3:d6:9d:24:c5:78:55:46:c8:a9:bc:
         3a:70:03:df:1d:61:ed:23:d5:70:c3:ae:1f:b2:cb:d6:0f:a2:
         9c:45:02:e9:63:86:12:3b:d9:ad:06:a7:13:d7:18:ef:9b:66:
         1b:fc:19:0b:d4:d9:36:14:89:51:94:e4:49:33:fc:20:bb:0d:
         7e:11:3b:c9:4e:05:99:a1:a9:ea:de:82:b1:2e:a4:8f:61:6a:
         b5:3c:75:c9:a5:53:33:cf:c8:69:ea:20:45:c5:8b:63:24:d0:
         5a:a1:0c:b2:dd:a2:69:d6:da:e8:55:51:07:45:3b:7b:b0:ec:
         4e:3d:4f:1e:d9:c1:3b:9f:58:8c:cd:68:6c:ba:ec:f4:7e:90:
         23:8b:72:48:0f:3a:0c:58:7f:dc:9c:98:86:44:9f:96:22:0b:
         3c:e8:67:85:26:42:71:54:30:11:af:d4:07:d2:9e:fe:1b:27:
         89:bf:ce:15:0f:03:9f:47:4a:1d:10:6b:d6:cc:52:9b:20:41:
         f4:67:15:23:44:12:66:8e:e9:6d:79:76:44:5c:7f:7d:a4:11:
         67:65:e8:5c:84:67:bc:9e:aa:bb:64:72:cc:46:5c:b1:e2:5d:
         03:11:eb:2f:d7:fc:0f:d5:99:99:56:00:00:12:87:67:6c:be:
         53:b2:81:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVGN0QxMTAvBgNVBAUTKEQ2OUE2MDU2NUYzMzcyMTQ5Q0U2RTJGQzlFNzIzRDQ5
MDY3Njc2OEEwHhcNMjYwNzI4MTUwMTIxWhcNMjYwODA0MTUwMTIxWjAYMRYwFAYD
VQQDEw02YTY4YzQ0MS1jZjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzhYDtJa9YMxeFZr+6b/uZKSCNhHqmPuWFpiG8q2kzcVKTT9cQUxWQ6NPDk63
oV9EnwytjqGFSN7KeZGcpDPLhAVmFu7HY//8ezmzfJ/zPkCnhUF642MG/yLTpymr
GkQf8BaCOIplxvxEt/HxV8XyY5WJZ+7TwcTdVLZ7bMobnydau8nqJwGlxJgIntlX
IdXWNutUb2oDL5atPyMqe07jOMLhKpmI3NPLUEJZ4cYeV0dZu521KOLJRmvd37S1
dnSa427An5zjBHcWj2XRDCjOePggp5IevAFRhvTvssAK4Kg7BEEhBYiH9+Gfxd03
PREIF/3E0jhsSzZpbJGvBaKy/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBX7zThr
eY5Fd1d5shavEB5zspMHMB8GA1UdIwQYMBaAFNaaYFZfM3IUnObi/J5yPUkGdnaK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUY3RC82OTc1M0Y1ODFE
OUMxMUUyQTZGQkYwOEEwOEIwMkNEMi8xcHBnVmw4emNoU2M1dUw4bm5JOVNRWjJk
b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFwcGdWbDh6Y2hTYzV1TDhubkk5U1FaMmRvby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NUY3RC82OTc1M0Y1ODFEOUMxMUUyQTZGQkYwOEEwOEIwMkNEMi8xcHBnVmw4emNo
U2M1dUw4bm5JOVNRWjJkb28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATR/s0c878PPWnSTFeFVGyKm8OnAD3x1h7SPVcMOuH7LL1g+inEUC6WOGEjvZ
rQanE9cY75tmG/wZC9TZNhSJUZTkSTP8ILsNfhE7yU4FmaGp6t6CsS6kj2FqtTx1
yaVTM8/IaeogRcWLYyTQWqEMst2iadba6FVRB0U7e7DsTj1PHtnBO59YjM1obLrs
9H6QI4tySA86DFh/3JyYhkSfliILPOhnhSZCcVQwEa/UB9Ke/hsnib/OFQ8Dn0dK
HRBr1sxSmyBB9GcVI0QSZo7pbXl2RFx/faQRZ2XoXIRnvJ6qu2RyzEZcseJdAxHr
L9f8D9WZmVYAABKHZ2y+U7KBBw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:53 2026 by rpki-client