Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft
File:                     rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft (raw, json)
Hash identifier:          9nVuFU1lItwRsfev/ktUKPPmiDMhogIanXEwGWaFR3E=
Subject key identifier:   6B:9E:0A:99:15:19:47:D3:E8:AD:17:D0:28:8F:CF:1A:E4:0C:48:3D
Authority key identifier: AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F
Certificate issuer:       /CN=A918EBC3/serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F
Certificate serial:       0943
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft
Manifest number:          0939
Signing time:             Tue 28 Jul 2026 20:34:03 +0000
Manifest this update:     Tue 28 Jul 2026 20:34:03 +0000
Manifest next update:     Tue 04 Aug 2026 20:34:03 +0000
Files and hashes:         1: rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl (hash: jUE37uxgPFfUCz3aBdyhlChsogtOHtfV6yJOf2Lshlo=)
                          2: 7CDBE740C7FD11EAB795396AC4F9AE02.roa (hash: h62+VMn+Dt63VlfLK40869a9uvaLhnaJW7JV3wldaEk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl
                          rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:34:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2371 (0x943)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EBC3, serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F
        Validity
            Not Before: Jul 28 20:34:03 2026 GMT
            Not After : Aug  4 20:34:03 2026 GMT
        Subject: CN=6a69123b-c17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0a:4e:d1:44:9c:c1:24:48:ad:32:3d:0c:ca:
                    1d:41:91:a3:aa:ff:35:66:ea:0a:75:36:fd:68:c2:
                    95:b8:e8:7e:eb:5e:cf:c3:0a:08:6f:15:1f:43:cb:
                    97:22:d8:16:35:cd:c0:a8:71:9e:89:51:d4:cc:f2:
                    b2:19:22:55:f8:f7:32:d6:ee:94:46:ae:b1:29:88:
                    7a:23:f5:12:0a:de:83:0f:eb:de:f2:bf:43:4d:3a:
                    04:dd:1a:1b:f9:0c:0b:1e:8d:2a:34:7c:ae:4f:4f:
                    6d:26:ea:16:94:f3:24:a5:f6:29:ea:45:74:64:76:
                    4f:3b:c2:69:a6:98:aa:e1:cb:3a:c4:dd:da:3a:0b:
                    93:40:41:93:cd:64:1f:2e:4a:6a:42:e4:a0:a8:eb:
                    78:92:e3:ed:07:bb:4f:41:ee:e3:22:13:3a:68:e9:
                    65:bf:ef:e7:c0:f0:7e:9a:e8:fb:a7:46:9e:81:21:
                    c6:b5:31:17:39:31:07:1e:d4:b1:e5:64:a6:3f:20:
                    1d:a4:35:1b:5c:6c:18:e8:f8:a9:94:61:2f:1f:06:
                    1a:06:06:e6:fb:72:59:9b:5d:f9:cf:16:af:44:be:
                    9c:78:ad:51:77:7e:49:a4:c7:2d:20:c1:46:da:f6:
                    1e:62:86:fb:4a:9a:af:66:d1:a6:2e:74:43:51:9b:
                    76:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9E:0A:99:15:19:47:D3:E8:AD:17:D0:28:8F:CF:1A:E4:0C:48:3D
            X509v3 Authority Key Identifier:
                keyid:AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ca:04:5e:31:fa:d1:16:82:c2:1c:df:0d:72:9d:a3:ea:73:
         98:d0:f4:52:39:a4:57:08:82:2a:8f:22:02:11:1e:3f:7e:ed:
         b9:a8:ef:6c:b2:b2:79:4c:1d:22:b7:43:27:17:0c:4b:47:b9:
         d4:4c:69:6c:2e:b1:2a:28:bd:fb:e6:13:40:07:52:78:2d:8f:
         e1:fd:4d:81:a5:1a:45:7a:38:4f:4b:d6:23:bf:d4:87:df:e0:
         c5:f2:c1:58:c8:26:d7:ba:10:ca:6a:d5:ae:38:2d:01:3f:4a:
         45:b8:80:f7:64:e0:f7:7a:de:2d:39:e5:f1:0a:03:fd:bd:f9:
         24:88:dd:f1:a7:b4:5f:f5:bb:02:fd:e3:33:ab:62:dd:b8:d4:
         b4:ff:75:34:24:eb:32:36:51:89:c4:da:e4:1b:1f:5e:82:79:
         40:7b:d9:47:fb:d7:01:a8:31:53:b8:57:61:ba:8c:d5:e1:8a:
         98:2f:2c:04:84:29:3c:f4:46:e2:6d:5a:ea:41:68:58:29:46:
         93:fb:16:e1:7d:42:a5:06:92:5d:45:f6:d2:af:89:be:a5:79:
         de:e9:78:68:45:2d:e9:c9:e7:8b:0d:7a:33:b2:54:04:9d:ca:
         f7:79:b8:c8:ce:dd:7c:b7:7e:d8:bb:81:93:99:c9:fb:0f:75:
         d5:66:d0:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVCQzMxMTAvBgNVBAUTKEFDNTYwNzBEQkU1RUU2REJCRjY3MTE5NzM4NDcyMzMx
Mjc5MTdBMkYwHhcNMjYwNzI4MjAzNDAzWhcNMjYwODA0MjAzNDAzWjAYMRYwFAYD
VQQDEw02YTY5MTIzYi1jMTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0QpO0UScwSRIrTI9DModQZGjqv81ZuoKdTb9aMKVuOh+617PwwoIbxUfQ8uX
ItgWNc3AqHGeiVHUzPKyGSJV+Pcy1u6URq6xKYh6I/USCt6DD+ve8r9DTToE3Rob
+QwLHo0qNHyuT09tJuoWlPMkpfYp6kV0ZHZPO8Jpppiq4cs6xN3aOguTQEGTzWQf
LkpqQuSgqOt4kuPtB7tPQe7jIhM6aOllv+/nwPB+muj7p0aegSHGtTEXOTEHHtSx
5WSmPyAdpDUbXGwY6PiplGEvHwYaBgbm+3JZm135zxavRL6ceK1Rd35JpMctIMFG
2vYeYob7SpqvZtGmLnRDUZt2hQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGueCpkV
GUfT6K0X0CiPzxrkDEg9MB8GA1UdIwQYMBaAFKxWBw2+Xubbv2cRlzhHIzEnkXov
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUJDMy8wRDQxRkU1Q0M3
RkMxMUVBOTYyQjAwNjlDNEY5QUUwMi9yRllIRGI1ZTV0dV9aeEdYT0Vjak1TZVJl
aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JGWUhEYjVlNXR1X1p4R1hPRWNqTVNlUmVpOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RUJDMy8wRDQxRkU1Q0M3RkMxMUVBOTYyQjAwNjlDNEY5QUUwMi9yRllIRGI1ZTV0
dV9aeEdYT0Vjak1TZVJlaTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbcoEXjH60RaCwhzfDXKdo+pzmND0UjmkVwiCKo8iAhEeP37tuajvbLKyeUwd
IrdDJxcMS0e51ExpbC6xKii9++YTQAdSeC2P4f1NgaUaRXo4T0vWI7/Uh9/gxfLB
WMgm17oQymrVrjgtAT9KRbiA92Tg93reLTnl8QoD/b35JIjd8ae0X/W7Av3jM6ti
3bjUtP91NCTrMjZRicTa5BsfXoJ5QHvZR/vXAagxU7hXYbqM1eGKmC8sBIQpPPRG
4m1a6kFoWClGk/sW4X1CpQaSXUX20q+JvqV53ul4aEUt6cnniw16M7JUBJ3K93m4
yM7dfLd+2LuBk5nJ+w911WbQgg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:26:31 2026 by rpki-client