Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft
File:                     UnWd41wCZ5226TLqiGidwQ1czK4.mft (raw, json)
Hash identifier:          BM8zVkF/Vwgd1At4ozvtuB3md2BqWubloGPWKmrsndE=
Subject key identifier:   87:79:49:ED:DD:CB:8D:01:00:4D:B3:52:A5:0E:84:A5:8F:F7:7D:1F
Authority key identifier: 52:75:9D:E3:5C:02:67:9D:B6:E9:32:EA:88:68:9D:C1:0D:5C:CC:AE
Certificate issuer:       /CN=A919014C/serialNumber=52759DE35C02679DB6E932EA88689DC10D5CCCAE
Certificate serial:       021F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft
Manifest number:          0219
Signing time:             Mon 27 Jul 2026 04:25:41 +0000
Manifest this update:     Mon 27 Jul 2026 04:25:41 +0000
Manifest next update:     Mon 03 Aug 2026 04:25:41 +0000
Files and hashes:         1: UnWd41wCZ5226TLqiGidwQ1czK4.crl (hash: GxeHw/BCSHSTktG+59MXgmRoHH90q+6wDzrOZy606U4=)
                          2: 503DC7FA547F11EE9512EE75C4F9AE02.roa (hash: 9NOvh4xlPVRSfSWTuNbA/nSCtcSOmekA1WPpJANxarM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.crl
                          rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 543 (0x21f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919014C, serialNumber=52759DE35C02679DB6E932EA88689DC10D5CCCAE
        Validity
            Not Before: Jul 27 04:25:41 2026 GMT
            Not After : Aug  3 04:25:41 2026 GMT
        Subject: CN=6a66ddc5-f426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3d:ef:9e:6a:b7:fd:44:80:34:7d:ba:0f:b6:
                    ff:91:db:7d:5b:81:95:90:dd:2e:fa:cf:9a:83:7e:
                    08:5c:f6:20:19:ed:94:84:30:d5:d7:b3:40:15:83:
                    72:b6:45:15:1f:d1:4f:aa:86:a6:f5:52:0c:95:ae:
                    07:25:f2:dc:55:ff:58:a0:8a:25:81:6d:4c:e3:54:
                    b6:10:ca:41:59:97:1d:6c:57:09:7c:4c:17:05:c9:
                    ec:df:53:d0:b1:e8:0a:5e:c6:a9:b3:de:7f:82:97:
                    fe:1d:18:26:6b:cf:0a:ac:e0:f2:ed:7f:03:8d:4a:
                    12:75:5e:c3:b2:1a:56:18:4d:7b:04:c9:83:c2:7a:
                    77:a2:43:6c:95:c4:c1:c6:f9:da:71:67:d8:9b:9c:
                    c9:4c:a0:fe:e9:62:45:bb:11:af:b1:2e:d6:39:ec:
                    aa:d3:c8:60:1e:62:69:6e:23:48:32:0e:53:08:c1:
                    32:27:cb:09:3e:5a:17:db:d9:5d:46:cd:9c:ec:d1:
                    10:da:18:27:c4:4a:cd:ab:3d:23:a7:68:2c:fb:97:
                    4c:8b:af:d0:1e:4c:55:8b:9a:2e:6b:16:15:97:a8:
                    67:a4:13:18:79:94:de:52:23:f2:db:a4:c6:4c:a2:
                    9a:d6:58:49:fe:e1:27:7b:ee:ae:c3:b1:90:12:27:
                    ba:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:79:49:ED:DD:CB:8D:01:00:4D:B3:52:A5:0E:84:A5:8F:F7:7D:1F
            X509v3 Authority Key Identifier:
                keyid:52:75:9D:E3:5C:02:67:9D:B6:E9:32:EA:88:68:9D:C1:0D:5C:CC:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:a5:e4:19:c3:a9:6f:36:7f:75:93:c5:b1:84:f9:01:68:35:
         99:8e:a8:94:36:96:12:95:ef:4b:93:98:99:f9:a0:6b:f1:37:
         d5:59:a4:30:63:45:c1:94:c0:b5:0b:87:7a:da:25:b6:3f:b1:
         cd:b7:94:97:db:a6:a3:5e:61:a0:88:19:90:e2:e6:af:55:f2:
         ff:ab:fc:6d:14:40:d1:bf:86:fb:e3:13:a7:5b:6e:45:9e:28:
         2d:67:6d:5f:6c:e3:2b:dd:de:80:e5:3f:f7:8d:30:70:fe:c4:
         7b:31:3a:25:30:32:60:90:6f:34:95:4e:15:c6:e1:05:e1:eb:
         67:71:2a:27:5c:33:66:b6:35:87:6b:94:cb:32:ae:59:5a:5a:
         82:20:6f:c6:8f:89:02:e0:cd:0d:9e:20:ae:ed:a3:ab:61:81:
         3b:03:af:c0:aa:43:4d:40:ac:e0:e7:d3:be:60:ef:8f:8d:e8:
         7d:b6:d3:18:29:19:8e:bb:51:6b:d9:2b:12:f4:8c:66:80:3d:
         7a:68:5b:07:78:1e:50:dd:ce:66:fc:3a:48:db:e1:1f:96:c3:
         9b:11:f3:4e:c6:78:0a:6d:44:fa:d8:25:63:64:01:7b:c6:a4:
         8d:a4:05:a2:83:db:9e:15:03:e1:d0:e0:e6:b6:a9:17:0e:89:
         43:26:0f:e6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTAxNEMxMTAvBgNVBAUTKDUyNzU5REUzNUMwMjY3OURCNkU5MzJFQTg4Njg5REMx
MEQ1Q0NDQUUwHhcNMjYwNzI3MDQyNTQxWhcNMjYwODAzMDQyNTQxWjAYMRYwFAYD
VQQDEw02YTY2ZGRjNS1mNDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtT3vnmq3/USANH26D7b/kdt9W4GVkN0u+s+ag34IXPYgGe2UhDDV17NAFYNy
tkUVH9FPqoam9VIMla4HJfLcVf9YoIolgW1M41S2EMpBWZcdbFcJfEwXBcns31PQ
segKXsaps95/gpf+HRgma88KrODy7X8DjUoSdV7DshpWGE17BMmDwnp3okNslcTB
xvnacWfYm5zJTKD+6WJFuxGvsS7WOeyq08hgHmJpbiNIMg5TCMEyJ8sJPloX29ld
Rs2c7NEQ2hgnxErNqz0jp2gs+5dMi6/QHkxVi5ouaxYVl6hnpBMYeZTeUiPy26TG
TKKa1lhJ/uEne+6uw7GQEie6HwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFId5Se3d
y40BAE2zUqUOhKWP930fMB8GA1UdIwQYMBaAFFJ1neNcAmedtuky6ohoncENXMyu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDE0Qy8xNTRGQUMyQzU0
N0UxMUVFOEU3MTAwNzRDNEY5QUUwMi9VbldkNDF3Q1o1MjI2VExxaUdpZHdRMWN6
SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VuV2Q0MXdDWjUyMjZUTHFpR2lkd1ExY3pLNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MDE0Qy8xNTRGQUMyQzU0N0UxMUVFOEU3MTAwNzRDNEY5QUUwMi9VbldkNDF3Q1o1
MjI2VExxaUdpZHdRMWN6SzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV6XkGcOpbzZ/dZPFsYT5AWg1mY6olDaWEpXvS5OYmfmga/E31VmkMGNFwZTA
tQuHetoltj+xzbeUl9umo15hoIgZkOLmr1Xy/6v8bRRA0b+G++MTp1tuRZ4oLWdt
X2zjK93egOU/940wcP7EezE6JTAyYJBvNJVOFcbhBeHrZ3EqJ1wzZrY1h2uUyzKu
WVpagiBvxo+JAuDNDZ4gru2jq2GBOwOvwKpDTUCs4OfTvmDvj43ofbbTGCkZjrtR
a9krEvSMZoA9emhbB3geUN3OZvw6SNvhH5bDmxHzTsZ4Cm1E+tglY2QBe8akjaQF
ooPbnhUD4dDg5rapFw6JQyYP5g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:46:30 2026 by rpki-client