Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft
File:                     povAkQ-DHeyBilCjIUX3Q1XOY8A.mft (raw, json)
Hash identifier:          fIZ6wKo7xM+AplI2UTmVpKAKxIPjzSA/J5tGBDAGjmY=
Subject key identifier:   6B:BC:30:25:EE:E4:FF:82:73:1D:07:B5:FF:33:96:C5:E5:A3:0D:FE
Authority key identifier: A6:8B:C0:91:0F:83:1D:EC:81:8A:50:A3:21:45:F7:43:55:CE:63:C0
Certificate issuer:       /CN=A919B6FC/serialNumber=A68BC0910F831DEC818A50A32145F74355CE63C0
Certificate serial:       0712
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft
Manifest number:          0707
Signing time:             Sun 26 Jul 2026 22:53:42 +0000
Manifest this update:     Sun 26 Jul 2026 22:53:42 +0000
Manifest next update:     Sun 02 Aug 2026 22:53:42 +0000
Files and hashes:         1: povAkQ-DHeyBilCjIUX3Q1XOY8A.crl (hash: TNNkvrmUC3Skhr8xK2BLLkFP+Tmwv+/QbRWT9CXpdXo=)
                          2: 7CEDB29645AB11F0B5F06B1EC4F9AE02.roa (hash: cuTcSvsy91evXebubUcglrHQy4himiOB3q1RBQePizU=)
                          3: 61C842F4467A11F08609BD71C4F9AE02.roa (hash: XYlsQmUIHcjvKGfLOavm1lS+/6BxzuVhj/mxq5UNHus=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.crl
                          rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 22:53:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1810 (0x712)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B6FC, serialNumber=A68BC0910F831DEC818A50A32145F74355CE63C0
        Validity
            Not Before: Jul 26 22:53:42 2026 GMT
            Not After : Aug  2 22:53:42 2026 GMT
        Subject: CN=6a668ff6-ca2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5b:11:c4:2f:6b:ce:e5:00:2e:86:f6:70:90:
                    19:37:7b:3f:63:6c:42:1a:25:55:13:89:87:ac:77:
                    0a:f7:0e:d5:38:20:48:03:b3:bb:81:df:b9:11:db:
                    9a:44:23:3e:0d:4c:98:46:e2:d6:6e:72:0c:fa:ff:
                    26:bc:bc:b4:e9:e2:71:53:80:f7:d6:3e:fc:ce:e5:
                    4f:ea:ea:d5:3e:9f:43:a7:c4:1f:a4:6a:05:31:5f:
                    7c:4a:91:45:f6:93:17:4d:3c:ca:63:9e:83:97:4b:
                    c9:67:7b:c0:f6:0d:ec:29:8e:80:c4:bc:bb:3c:54:
                    16:3a:93:3a:cc:c8:fa:b5:ac:1c:9f:26:a3:a0:52:
                    4b:68:72:c3:65:27:04:de:5b:e0:63:50:a5:7d:b6:
                    4d:79:61:2a:1a:96:50:12:e7:43:4f:0e:f9:c1:34:
                    bc:cf:fb:93:21:9b:e8:3f:50:02:d7:0a:3c:ca:9a:
                    9e:5f:1a:c3:90:d7:83:56:df:c6:d2:e2:83:8f:53:
                    95:33:3c:0e:2e:ab:86:5f:3f:05:ce:b0:c4:da:e5:
                    5d:73:ab:bd:10:d7:dc:91:62:39:7f:80:be:ea:99:
                    6f:ad:5f:38:51:08:f5:16:d6:e4:d9:4e:17:ed:33:
                    37:c5:79:06:28:86:88:8f:ab:f2:d2:61:01:bc:f3:
                    60:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BC:30:25:EE:E4:FF:82:73:1D:07:B5:FF:33:96:C5:E5:A3:0D:FE
            X509v3 Authority Key Identifier:
                keyid:A6:8B:C0:91:0F:83:1D:EC:81:8A:50:A3:21:45:F7:43:55:CE:63:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:5c:74:c9:a8:17:68:68:33:45:ec:59:ed:bb:b0:20:b8:3c:
         d8:5e:4c:73:df:e4:b9:cb:91:5c:9f:b1:6d:20:1f:7f:7a:06:
         f7:82:12:93:8b:20:91:d4:04:f1:07:5d:18:76:49:b6:eb:d4:
         a3:aa:91:03:53:17:ff:27:b2:80:be:bd:ce:71:c1:06:c5:4b:
         90:2b:87:7b:84:85:ff:3d:62:32:71:1d:97:62:9a:17:5d:4f:
         48:06:3d:dc:39:ee:ba:bf:3a:c7:3a:e2:29:83:f0:10:e4:f2:
         75:f3:b0:0c:fb:94:28:88:86:5e:fb:b7:78:08:83:e4:bb:92:
         80:c0:92:2e:8f:4a:c8:00:67:16:dc:93:41:5d:31:c9:66:b5:
         18:0f:7d:22:97:76:9e:98:60:02:9c:3e:6a:cf:a4:ae:c0:3c:
         b5:da:1d:37:56:5c:bc:5a:7c:6a:53:a3:06:b1:e6:62:30:84:
         84:51:2f:a2:89:d2:6d:f3:49:59:1e:46:35:e0:86:df:66:93:
         bd:bd:bd:2e:75:07:00:de:41:ce:9b:0c:3c:f9:5f:b2:7f:5a:
         7d:e9:e1:f1:a6:3f:a4:e2:4c:65:da:74:02:e4:65:38:a7:20:
         d4:0a:10:f2:44:ef:2b:2e:3a:98:cc:78:45:55:1d:5a:8b:fb:
         f8:39:2b:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUI2RkMxMTAvBgNVBAUTKEE2OEJDMDkxMEY4MzFERUM4MThBNTBBMzIxNDVGNzQz
NTVDRTYzQzAwHhcNMjYwNzI2MjI1MzQyWhcNMjYwODAyMjI1MzQyWjAYMRYwFAYD
VQQDEw02YTY2OGZmNi1jYTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzlsRxC9rzuUALob2cJAZN3s/Y2xCGiVVE4mHrHcK9w7VOCBIA7O7gd+5Edua
RCM+DUyYRuLWbnIM+v8mvLy06eJxU4D31j78zuVP6urVPp9Dp8QfpGoFMV98SpFF
9pMXTTzKY56Dl0vJZ3vA9g3sKY6AxLy7PFQWOpM6zMj6tawcnyajoFJLaHLDZScE
3lvgY1ClfbZNeWEqGpZQEudDTw75wTS8z/uTIZvoP1AC1wo8ypqeXxrDkNeDVt/G
0uKDj1OVMzwOLquGXz8FzrDE2uVdc6u9ENfckWI5f4C+6plvrV84UQj1Ftbk2U4X
7TM3xXkGKIaIj6vy0mEBvPNglQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGu8MCXu
5P+Ccx0Htf8zlsXlow3+MB8GA1UdIwQYMBaAFKaLwJEPgx3sgYpQoyFF90NVzmPA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjZGQy84ODkyQ0M0QTk4
MzkxMUVCQTE0MDk5NjBDNEY5QUUwMi9wb3ZBa1EtREhleUJpbENqSVVYM1ExWE9Z
OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BvdkFrUS1ESGV5QmlsQ2pJVVgzUTFYT1k4QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QjZGQy84ODkyQ0M0QTk4MzkxMUVCQTE0MDk5NjBDNEY5QUUwMi9wb3ZBa1EtREhl
eUJpbENqSVVYM1ExWE9ZOEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWlx0yagXaGgzRexZ7buwILg82F5Mc9/kucuRXJ+xbSAff3oG94ISk4sgkdQE
8QddGHZJtuvUo6qRA1MX/yeygL69znHBBsVLkCuHe4SF/z1iMnEdl2KaF11PSAY9
3Dnuur86xzriKYPwEOTydfOwDPuUKIiGXvu3eAiD5LuSgMCSLo9KyABnFtyTQV0x
yWa1GA99Ipd2nphgApw+as+krsA8tdodN1ZcvFp8alOjBrHmYjCEhFEvoonSbfNJ
WR5GNeCG32aTvb29LnUHAN5BzpsMPPlfsn9afenh8aY/pOJMZdp0AuRlOKcg1AoQ
8kTvKy46mMx4RVUdWov7+Dkr7A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:37:07 2026 by rpki-client