Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft
File:                     ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft (raw, json)
Hash identifier:          RdOnPK6FjFTXhSVaiyMMWG9X8OWr7T8GFOKhExur8pY=
Subject key identifier:   8C:4A:B9:BA:18:F4:2E:70:48:CC:09:AF:FC:B9:D0:E5:56:F2:AE:CF
Authority key identifier: 6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A
Certificate issuer:       /CN=A9199BDF/serialNumber=6A4F43110050F0681964D858F9144E052BB8899A
Certificate serial:       105E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft
Manifest number:          103E
Signing time:             Tue 28 Jul 2026 17:33:46 +0000
Manifest this update:     Tue 28 Jul 2026 17:33:46 +0000
Manifest next update:     Tue 04 Aug 2026 17:33:46 +0000
Files and hashes:         1: ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl (hash: 0x0QX1C9sx0U88yXRhnshbRwK7P8TRDwx7pyvSAwCIA=)
                          2: B0604836C95A11F0930CD216C4F9AE02.roa (hash: oCQ1G/cB7TCeHKMDNbFEVWrOPNKnyydcJqHYFPTV4ek=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl
                          rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4190 (0x105e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199BDF, serialNumber=6A4F43110050F0681964D858F9144E052BB8899A
        Validity
            Not Before: Jul 28 17:33:46 2026 GMT
            Not After : Aug  4 17:33:46 2026 GMT
        Subject: CN=6a68e7fa-c488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ea:3d:b9:03:bf:b6:9d:cc:f2:df:14:24:5d:
                    ce:cb:29:7f:f4:fb:1b:11:16:94:ed:62:0d:4c:d3:
                    1e:90:bf:37:bb:5a:f2:03:33:09:8c:0f:89:bf:46:
                    c1:35:0c:83:74:67:43:77:ef:20:a1:8d:6d:78:9b:
                    e8:6c:88:15:b2:bf:91:5b:b4:70:19:5c:c5:62:2c:
                    f1:ea:47:59:db:40:63:9a:eb:21:45:fa:bb:9c:27:
                    3e:b0:50:99:9d:5d:f8:c5:a3:38:af:70:93:ee:51:
                    2e:35:94:62:54:8f:87:63:cf:3f:50:6c:75:04:f2:
                    8b:f1:d0:b5:bf:1e:93:dd:10:b3:5f:13:71:d0:ca:
                    12:01:48:df:b3:31:42:e9:83:6c:57:50:ab:4a:a3:
                    7f:2d:a4:e2:25:aa:4b:59:f4:94:b7:b5:1d:e3:d7:
                    8c:ac:6f:c1:5b:61:99:05:9a:dd:ba:9d:86:be:35:
                    f3:0f:17:36:52:2b:c9:ac:c9:b3:b7:f3:5a:39:e2:
                    97:61:48:41:ac:07:83:b6:c1:f9:84:d8:a1:5f:40:
                    03:8f:64:3d:8f:da:82:1c:92:9d:7a:eb:3d:87:f6:
                    d4:dd:99:92:bc:ca:d6:7b:0a:91:5f:8f:1b:f0:54:
                    9b:6a:ce:dc:41:95:31:70:c4:a3:ac:c9:92:54:9b:
                    b6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4A:B9:BA:18:F4:2E:70:48:CC:09:AF:FC:B9:D0:E5:56:F2:AE:CF
            X509v3 Authority Key Identifier:
                keyid:6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:d6:a4:c7:72:cb:10:ba:0e:ac:d1:4b:53:5c:52:e2:a2:42:
         87:27:cf:ec:0b:51:e5:dc:bc:b2:b3:be:4e:34:47:09:7b:47:
         ac:bf:60:20:27:81:ee:6a:2d:a3:e8:89:88:6d:fe:06:67:b2:
         3d:5b:b5:f5:4e:65:47:91:e8:73:8e:6f:85:27:4f:9c:ca:e4:
         da:71:de:27:25:9d:53:14:e3:61:23:58:34:e1:02:e2:eb:ae:
         01:59:92:34:46:4f:46:5b:f1:87:d3:c6:fb:3f:45:79:28:1b:
         7f:9e:45:8a:46:c4:72:4d:d1:7c:f3:86:6f:63:df:32:8e:83:
         76:a0:cd:8e:c5:25:28:ef:2d:0a:b2:63:b3:e1:f8:47:aa:76:
         40:d4:4f:dc:85:d4:d6:12:3f:4e:cd:fb:eb:36:84:65:8a:e7:
         fc:eb:29:1a:3d:8c:62:ab:95:33:b8:f0:ff:df:37:79:65:26:
         0c:f9:9f:8b:25:b4:f5:b6:31:5b:78:30:e0:eb:ef:be:8f:93:
         f0:89:14:b1:9c:e7:b7:e1:75:6e:b0:57:5d:ca:a2:58:d9:da:
         e8:6b:5d:1b:05:65:6a:8a:46:f1:f0:38:ab:61:09:51:03:e0:
         79:34:d3:03:bc:af:7c:8d:98:bc:95:4a:25:0d:83:cb:64:e4:
         f6:77:c3:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTlCREYxMTAvBgNVBAUTKDZBNEY0MzExMDA1MEYwNjgxOTY0RDg1OEY5MTQ0RTA1
MkJCODg5OUEwHhcNMjYwNzI4MTczMzQ2WhcNMjYwODA0MTczMzQ2WjAYMRYwFAYD
VQQDEw02YTY4ZTdmYS1jNDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnuo9uQO/tp3M8t8UJF3Oyyl/9PsbERaU7WINTNMekL83u1ryAzMJjA+Jv0bB
NQyDdGdDd+8goY1teJvobIgVsr+RW7RwGVzFYizx6kdZ20BjmushRfq7nCc+sFCZ
nV34xaM4r3CT7lEuNZRiVI+HY88/UGx1BPKL8dC1vx6T3RCzXxNx0MoSAUjfszFC
6YNsV1CrSqN/LaTiJapLWfSUt7Ud49eMrG/BW2GZBZrdup2GvjXzDxc2UivJrMmz
t/NaOeKXYUhBrAeDtsH5hNihX0ADj2Q9j9qCHJKdeus9h/bU3ZmSvMrWewqRX48b
8FSbas7cQZUxcMSjrMmSVJu2AwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIxKuboY
9C5wSMwJr/y50OVW8q7PMB8GA1UdIwQYMBaAFGpPQxEAUPBoGWTYWPkUTgUruIma
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUJERi9FNzBFMEE5ODcw
OTMxMUU5ODBCRDdDM0RDNEY5QUUwMi9hazlERVFCUThHZ1paTmhZLVJST0JTdTRp
Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FrOURFUUJROEdnWlpOaFktUlJPQlN1NGlaby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OUJERi9FNzBFMEE5ODcwOTMxMUU5ODBCRDdDM0RDNEY5QUUwMi9hazlERVFCUThH
Z1paTmhZLVJST0JTdTRpWm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAtakx3LLELoOrNFLU1xS4qJChyfP7AtR5dy8srO+TjRHCXtHrL9gICeB7mot
o+iJiG3+BmeyPVu19U5lR5Hoc45vhSdPnMrk2nHeJyWdUxTjYSNYNOEC4uuuAVmS
NEZPRlvxh9PG+z9FeSgbf55FikbEck3RfPOGb2PfMo6DdqDNjsUlKO8tCrJjs+H4
R6p2QNRP3IXU1hI/Ts376zaEZYrn/OspGj2MYquVM7jw/983eWUmDPmfiyW09bYx
W3gw4Ovvvo+T8IkUsZznt+F1brBXXcqiWNna6GtdGwVlaopG8fA4q2EJUQPgeTTT
A7yvfI2YvJVKJQ2Dy2Tk9nfD+g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:09:19 2026 by rpki-client