Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft
File:                     nWBHd6Cse-aqCBCwJetJPqbdNGM.mft (raw, json)
Hash identifier:          fUT5V1WG5s1cr8X09mdLDifEeyVExmrTi5uxC5RYRhQ=
Subject key identifier:   78:1F:B3:41:ED:46:74:69:7A:C7:B9:7D:92:10:22:23:93:39:52:1A
Authority key identifier: 9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63
Certificate issuer:       /CN=A9198FD0/serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463
Certificate serial:       0576
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft
Manifest number:          056C
Signing time:             Wed 29 Jul 2026 00:00:55 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:55 +0000
Manifest next update:     Wed 05 Aug 2026 00:00:55 +0000
Files and hashes:         1: nWBHd6Cse-aqCBCwJetJPqbdNGM.crl (hash: Q/YfqMyYQqdDxiqRXKonHYu48+12QpNeOgkD8GgsW48=)
                          2: 8327C2403DE011ECAB508171C4F9AE02.roa (hash: /jQYkc5f5l8Pbu5OorjTzCnm6qjRNO98wm8eYK6GV7w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl
                          rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 00:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1398 (0x576)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198FD0, serialNumber=9D604777A0AC7BE6AA0810B025EB493EA6DD3463
        Validity
            Not Before: Jul 29 00:00:55 2026 GMT
            Not After : Aug  5 00:00:55 2026 GMT
        Subject: CN=6a6942b7-53d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ee:d7:5b:05:72:14:1c:96:b2:82:88:8b:00:
                    66:df:2a:ec:0b:2f:a5:30:38:04:ff:ba:1d:04:41:
                    95:9f:3b:4f:cb:6f:bd:b2:f1:e9:00:86:63:aa:25:
                    b1:02:7f:1e:09:d2:74:8b:14:1e:a9:1b:a0:db:fc:
                    14:dd:8f:f5:af:1d:01:cc:b8:be:08:50:3f:75:37:
                    78:d6:54:07:b0:2b:8a:07:19:cb:24:48:8c:c8:dd:
                    19:cc:f9:41:f4:cd:5d:4c:7c:3a:44:b0:10:9e:c2:
                    9b:73:69:ad:37:6d:b8:68:9e:bc:55:bc:e2:7a:22:
                    7d:6d:65:2c:34:09:50:00:63:98:b4:fe:ef:8e:63:
                    a9:6d:ec:fe:0f:a0:f5:40:09:cd:ee:5b:85:bd:20:
                    f8:5b:ee:5a:f3:96:95:8e:ac:50:36:58:1e:ae:d0:
                    f4:50:a1:0f:c0:53:77:c4:6d:51:6f:33:11:84:41:
                    14:7e:f7:df:5d:dd:f7:fb:92:7d:52:4d:36:9f:ee:
                    48:dc:66:5c:90:4f:7b:48:c4:57:ee:4b:9c:11:7d:
                    16:e4:de:dc:34:f9:c5:52:0b:8e:70:0c:96:2c:a6:
                    3e:2d:94:56:6d:85:1d:79:d4:a4:1f:f3:5d:85:e3:
                    99:66:d2:dd:04:de:0b:ed:a9:d7:5e:18:09:dd:84:
                    fc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1F:B3:41:ED:46:74:69:7A:C7:B9:7D:92:10:22:23:93:39:52:1A
            X509v3 Authority Key Identifier:
                keyid:9D:60:47:77:A0:AC:7B:E6:AA:08:10:B0:25:EB:49:3E:A6:DD:34:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWBHd6Cse-aqCBCwJetJPqbdNGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198FD0/20B4BD803DD511ECB7266464C4F9AE02/nWBHd6Cse-aqCBCwJetJPqbdNGM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:9b:20:8b:7f:d5:dc:fb:58:06:cd:95:f9:58:77:06:79:45:
         33:44:74:42:23:79:13:2e:c7:5b:84:d4:40:a7:bf:8b:7a:bd:
         79:30:43:39:3b:8c:9b:9e:b3:1d:26:dc:3d:e9:22:d9:5f:6c:
         3b:b6:cb:db:5d:fb:64:d4:d1:33:77:36:f2:38:38:cd:1c:be:
         38:3b:bd:ea:37:54:4a:12:b8:2f:ea:39:cc:7b:8e:0f:fa:ea:
         a1:26:38:b3:4f:5a:3f:1b:7c:3e:cb:5c:e2:64:fd:bb:4b:b9:
         00:62:0f:3d:d4:17:90:37:f0:c4:19:5a:4e:f0:7b:57:00:bc:
         87:c0:de:98:24:d5:0e:ed:56:86:05:45:d4:1f:a0:c5:b0:92:
         38:3e:f5:b5:35:af:a9:d3:9d:98:07:e6:8b:41:c8:2d:52:bd:
         4c:1a:61:1e:4a:e6:7c:83:f4:2a:77:4a:0e:5f:1e:49:d5:e8:
         23:a8:c3:75:a7:f5:1d:39:c9:27:8f:10:f6:db:1d:4d:11:d1:
         8a:83:35:ce:c7:8d:2c:58:a2:7c:79:3b:56:d4:a5:b5:53:3d:
         79:d6:1b:3b:2a:49:29:82:a2:20:96:a9:91:82:e1:72:c5:0e:
         7d:ce:78:d2:d2:ae:d1:70:69:29:7f:e2:cf:62:90:8a:c0:e7:
         23:b7:a9:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OThGRDAxMTAvBgNVBAUTKDlENjA0Nzc3QTBBQzdCRTZBQTA4MTBCMDI1RUI0OTNF
QTZERDM0NjMwHhcNMjYwNzI5MDAwMDU1WhcNMjYwODA1MDAwMDU1WjAYMRYwFAYD
VQQDEw02YTY5NDJiNy01M2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqe7XWwVyFByWsoKIiwBm3yrsCy+lMDgE/7odBEGVnztPy2+9svHpAIZjqiWx
An8eCdJ0ixQeqRug2/wU3Y/1rx0BzLi+CFA/dTd41lQHsCuKBxnLJEiMyN0ZzPlB
9M1dTHw6RLAQnsKbc2mtN224aJ68VbzieiJ9bWUsNAlQAGOYtP7vjmOpbez+D6D1
QAnN7luFvSD4W+5a85aVjqxQNlgertD0UKEPwFN3xG1RbzMRhEEUfvffXd33+5J9
Uk02n+5I3GZckE97SMRX7kucEX0W5N7cNPnFUguOcAyWLKY+LZRWbYUdedSkH/Nd
heOZZtLdBN4L7anXXhgJ3YT8OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHgfs0Ht
RnRpese5fZIQIiOTOVIaMB8GA1UdIwQYMBaAFJ1gR3egrHvmqggQsCXrST6m3TRj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEZEMC8yMEI0QkQ4MDNE
RDUxMUVDQjcyNjY0NjRDNEY5QUUwMi9uV0JIZDZDc2UtYXFDQkN3SmV0SlBxYmRO
R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25XQkhkNkNzZS1hcUNCQ3dKZXRKUHFiZE5HTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OEZEMC8yMEI0QkQ4MDNERDUxMUVDQjcyNjY0NjRDNEY5QUUwMi9uV0JIZDZDc2Ut
YXFDQkN3SmV0SlBxYmROR00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANJsgi3/V3PtYBs2V+Vh3BnlFM0R0QiN5Ey7HW4TUQKe/i3q9eTBDOTuMm56z
HSbcPeki2V9sO7bL2137ZNTRM3c28jg4zRy+ODu96jdUShK4L+o5zHuOD/rqoSY4
s09aPxt8Pstc4mT9u0u5AGIPPdQXkDfwxBlaTvB7VwC8h8DemCTVDu1WhgVF1B+g
xbCSOD71tTWvqdOdmAfmi0HILVK9TBphHkrmfIP0KndKDl8eSdXoI6jDdaf1HTnJ
J48Q9tsdTRHRioM1zseNLFiifHk7VtSltVM9edYbOypJKYKiIJapkYLhcsUOfc54
0tKu0XBpKX/iz2KQisDnI7epHQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:20:36 2026 by rpki-client