Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft
File:                     NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft (raw, json)
Hash identifier:          dUKcfeKbrYiBl/HZ0Z3gOP9kf8xidgK8qqtVKy5LmWg=
Subject key identifier:   08:4F:7E:DF:FA:6B:85:12:56:98:3D:8E:4E:62:08:CF:B1:DE:C3:5E
Authority key identifier: 35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8
Certificate issuer:       /CN=A918EDB2/serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8
Certificate serial:       1A13
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft
Manifest number:          4C11
Signing time:             Tue 28 Jul 2026 15:25:44 +0000
Manifest this update:     Tue 28 Jul 2026 15:25:44 +0000
Manifest next update:     Tue 04 Aug 2026 15:25:44 +0000
Files and hashes:         1: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl (hash: 8/Qa4MnFwMinIgtw8gJNaXp9r7YOxPZPVoCJOiXc9HY=)
                          2: F22C58CEE69611EAA594260CC4F9AE02.roa (hash: gEyD44KlU7kGIP6KThcKtoihoaJv7b+z5iLc4Ql5KJc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6675 (0x1a13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8
        Validity
            Not Before: Jul 28 15:25:44 2026 GMT
            Not After : Aug  4 15:25:44 2026 GMT
        Subject: CN=6a68c9f8-25b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e7:0e:bb:b7:af:c4:d7:64:e2:e6:8d:85:af:
                    75:2c:cc:06:a5:f9:a5:3e:a9:31:87:60:aa:39:11:
                    65:c2:f8:d9:2c:a6:2e:ef:96:6f:a0:11:df:28:a6:
                    64:29:9f:d2:a4:70:b2:14:46:58:ba:3a:5c:34:0c:
                    68:48:7d:4f:9d:56:51:87:8b:dc:47:06:26:a4:42:
                    3a:ec:fa:ce:58:47:d7:06:22:a0:85:f7:07:d1:bc:
                    29:0b:4f:b5:ca:5d:ef:ef:4e:42:c5:9c:3d:f5:4c:
                    eb:46:49:96:e8:9a:7e:96:b0:2e:a4:f4:32:e9:da:
                    35:6b:32:fd:9b:9d:b6:c0:04:f2:b8:dd:e2:55:12:
                    a6:50:59:95:7c:4d:a8:45:de:ee:57:5f:90:0e:e1:
                    85:4b:5e:77:17:aa:37:37:70:c4:44:28:4c:fe:bb:
                    4f:c7:58:71:19:01:22:bb:7c:ca:57:c0:32:80:c6:
                    a0:22:bf:c6:4f:aa:27:f9:92:c3:a8:55:3d:11:43:
                    4e:65:08:29:8b:29:f5:fb:1c:72:64:be:51:0d:ba:
                    e5:54:26:f7:be:e0:55:39:05:50:95:30:5a:fc:0f:
                    06:77:d5:49:47:8b:45:f8:21:0b:c2:ad:ee:bf:7b:
                    f7:1a:1c:91:86:a7:fa:1a:36:5c:29:6d:59:fe:4b:
                    52:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:4F:7E:DF:FA:6B:85:12:56:98:3D:8E:4E:62:08:CF:B1:DE:C3:5E
            X509v3 Authority Key Identifier:
                keyid:35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:86:aa:69:bd:8c:c3:41:4c:06:ed:99:2b:94:b8:8f:cb:fe:
         e6:68:13:f1:ce:fe:32:6e:18:06:60:ea:db:03:04:05:60:8d:
         51:14:9d:46:bf:e5:6a:59:f0:04:fc:58:b5:75:85:44:6e:c9:
         e5:85:50:82:2c:75:b7:e4:23:48:51:b9:cd:49:fa:6e:3f:5a:
         f4:32:71:4c:34:db:1d:38:12:32:eb:c9:e2:58:8a:47:79:66:
         99:7e:32:79:49:2d:2a:60:0e:81:ee:ce:a7:90:c9:a1:48:6d:
         df:41:03:b2:6b:30:af:3e:c4:eb:0e:d2:c0:df:f8:bb:72:53:
         de:45:6d:49:85:d6:13:cc:43:17:54:22:87:50:57:ac:e6:0e:
         fc:18:11:55:5e:f2:50:9d:3a:b0:04:6c:b9:96:6d:df:96:0d:
         fa:1b:46:c5:9b:65:b8:6d:b8:fa:71:86:f5:a2:66:1d:c7:a6:
         8d:99:4e:63:20:dd:b2:79:9a:b5:91:12:11:d1:92:73:49:b9:
         22:07:61:bb:04:61:f1:60:f4:82:0f:0b:54:62:4a:dc:39:8b:
         d7:a1:88:40:16:4f:fc:92:4a:c9:79:33:b3:fe:3c:8e:4f:c3:
         92:8e:9e:24:5c:5c:49:1a:6d:c4:5b:db:73:bb:da:97:51:2e:
         8b:1a:78:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDM1QTNGNjFGQzVERkYxOTJDMUQ5MEM3NEFCODJDN0Ey
NUQ3RTE2RDgwHhcNMjYwNzI4MTUyNTQ0WhcNMjYwODA0MTUyNTQ0WjAYMRYwFAYD
VQQDEw02YTY4YzlmOC0yNWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkecOu7evxNdk4uaNha91LMwGpfmlPqkxh2CqORFlwvjZLKYu75ZvoBHfKKZk
KZ/SpHCyFEZYujpcNAxoSH1PnVZRh4vcRwYmpEI67PrOWEfXBiKghfcH0bwpC0+1
yl3v705CxZw99UzrRkmW6Jp+lrAupPQy6do1azL9m522wATyuN3iVRKmUFmVfE2o
Rd7uV1+QDuGFS153F6o3N3DERChM/rtPx1hxGQEiu3zKV8AygMagIr/GT6on+ZLD
qFU9EUNOZQgpiyn1+xxyZL5RDbrlVCb3vuBVOQVQlTBa/A8Gd9VJR4tF+CELwq3u
v3v3GhyRhqf6GjZcKW1Z/ktSdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAhPft/6
a4USVpg9jk5iCM+x3sNeMB8GA1UdIwQYMBaAFDWj9h/F3/GSwdkMdKuCx6JdfhbY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8wREYzQjI1RTcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjhaTEIyUXgwcTRMSG9sMS1G
dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy
RkQxRkYyL05hUDJIOFhmOFpMQjJReDBxNExIb2wxLUZ0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RURCMi8wREYzQjI1RTcwRTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjha
TEIyUXgwcTRMSG9sMS1GdGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK4aqab2Mw0FMBu2ZK5S4j8v+5mgT8c7+Mm4YBmDq2wMEBWCNURSdRr/lalnw
BPxYtXWFRG7J5YVQgix1t+QjSFG5zUn6bj9a9DJxTDTbHTgSMuvJ4liKR3lmmX4y
eUktKmAOge7Op5DJoUht30EDsmswrz7E6w7SwN/4u3JT3kVtSYXWE8xDF1Qih1BX
rOYO/BgRVV7yUJ06sARsuZZt35YN+htGxZtluG24+nGG9aJmHcemjZlOYyDdsnma
tZESEdGSc0m5IgdhuwRh8WD0gg8LVGJK3DmL16GIQBZP/JJKyXkzs/48jk/Dko6e
JFxcSRptxFvbc7val1Euixp42w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:41:08 2026 by rpki-client