Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.mft
File:                     z8CATaxP_3oipAThDphkpxHeGck.mft (raw, json)
Hash identifier:          B8iBPpBWnXg7Nxv6tjHPZp9cJUAPiCnfpccmnmMDIpo=
Subject key identifier:   9D:06:56:51:74:C7:E8:0F:DE:86:11:D5:C6:DD:01:A5:03:B4:83:91
Authority key identifier: CF:C0:80:4D:AC:4F:FF:7A:22:A4:04:E1:0E:98:64:A7:11:DE:19:C9
Certificate issuer:       /CN=A91A12C4/serialNumber=CFC0804DAC4FFF7A22A404E10E9864A711DE19C9
Certificate serial:       016D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8CATaxP_3oipAThDphkpxHeGck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.mft
Manifest number:          0164
Signing time:             Mon 27 Jul 2026 06:49:41 +0000
Manifest this update:     Mon 27 Jul 2026 06:49:41 +0000
Manifest next update:     Mon 03 Aug 2026 06:49:41 +0000
Files and hashes:         1: z8CATaxP_3oipAThDphkpxHeGck.crl (hash: cMLvthv5ZVcumcFpmraqPHIxR3JYqgKIsWA9dw7HuZA=)
                          2: BCA395126C1811EFAFBE6B0FC4F9AE02.roa (hash: cWJj/maUSSWmIwVQv3v+/nXUc2cIEZ3WxI91PpLYj30=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.crl
                          rsync://rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8CATaxP_3oipAThDphkpxHeGck.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A12C4, serialNumber=CFC0804DAC4FFF7A22A404E10E9864A711DE19C9
        Validity
            Not Before: Jul 27 06:49:41 2026 GMT
            Not After : Aug  3 06:49:41 2026 GMT
        Subject: CN=6a66ff85-ea81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:92:a3:8d:38:48:c4:c3:34:24:82:2f:04:68:
                    01:3a:ce:50:89:19:e5:3e:93:60:d5:12:72:72:d2:
                    11:d8:19:b0:2f:b2:73:41:02:55:0e:00:5d:25:bc:
                    73:5e:af:6c:34:40:6f:56:58:6e:8f:11:b3:c8:92:
                    b4:56:0e:5e:14:c8:e8:30:fe:2b:81:1f:96:71:f5:
                    d8:b3:1f:a9:4d:a1:e6:f4:23:3f:8c:0a:38:bc:d8:
                    66:77:15:20:0c:bf:81:b6:43:9a:5e:78:8e:12:17:
                    fb:21:4b:35:34:df:65:ed:06:eb:2b:bf:a3:ce:61:
                    3d:09:27:9e:cf:77:8d:7f:42:f1:a8:bf:f9:f9:c9:
                    39:a5:cc:4f:73:9e:b9:90:36:47:89:3b:cc:55:9f:
                    76:4b:c3:18:b9:b4:ed:20:8a:10:ae:cc:df:0e:5d:
                    d4:37:04:57:30:2c:ff:dd:20:48:be:67:32:4f:98:
                    e7:17:5a:3e:38:db:3b:f5:a5:4c:df:d1:37:12:1b:
                    3c:12:76:03:31:2f:f1:92:0f:9c:22:3f:98:0e:3f:
                    08:57:85:dd:fb:46:65:c7:69:b1:36:56:16:ce:13:
                    3e:ae:a1:a8:89:e4:34:43:59:e1:17:b8:20:65:13:
                    2c:ec:39:95:49:fa:c4:72:1f:89:97:22:11:60:8d:
                    d5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:06:56:51:74:C7:E8:0F:DE:86:11:D5:C6:DD:01:A5:03:B4:83:91
            X509v3 Authority Key Identifier:
                keyid:CF:C0:80:4D:AC:4F:FF:7A:22:A4:04:E1:0E:98:64:A7:11:DE:19:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8CATaxP_3oipAThDphkpxHeGck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:5a:93:c1:d7:ce:74:a7:ea:d9:39:44:cb:6e:3e:3d:04:6d:
         3e:0a:fa:45:38:1c:8b:52:c6:21:2a:98:48:65:c1:b4:ed:18:
         24:3f:5e:27:6d:ee:30:12:e2:dd:69:05:6e:28:27:63:f3:af:
         91:f7:5d:f6:73:59:14:0f:59:6d:35:93:a5:ec:30:fb:9a:bc:
         6c:57:0c:6c:6f:d7:ba:97:ee:3d:ce:ad:1b:16:de:ea:ed:77:
         1f:b5:7d:56:81:a2:36:94:3f:30:14:79:f4:24:73:31:5c:45:
         52:4b:e2:08:81:5a:b2:44:6d:0a:24:d1:89:4f:6b:79:03:99:
         d2:86:30:fc:70:9e:57:c0:26:a3:4e:ca:66:fa:60:69:0a:3a:
         39:d8:8b:75:45:89:41:a2:3b:a8:f9:d4:b2:6d:dd:d0:1f:a1:
         de:3d:4e:3d:f2:8c:c3:7f:b7:46:42:f2:eb:91:f9:94:66:00:
         9e:1d:35:82:cf:cc:24:ec:59:4c:77:4f:da:7b:b3:7b:8c:25:
         03:82:6c:c2:ae:a0:38:7c:17:3a:d8:09:91:ba:0b:70:ab:d2:
         e7:b2:04:0d:c5:9e:5d:86:21:5c:08:e1:13:c2:a8:54:e6:cd:
         47:7a:ee:79:3b:ce:87:02:c3:e2:32:79:d9:2b:88:da:14:6d:
         3e:4f:1f:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTEyQzQxMTAvBgNVBAUTKENGQzA4MDREQUM0RkZGN0EyMkE0MDRFMTBFOTg2NEE3
MTFERTE5QzkwHhcNMjYwNzI3MDY0OTQxWhcNMjYwODAzMDY0OTQxWjAYMRYwFAYD
VQQDEw02YTY2ZmY4NS1lYTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAupKjjThIxMM0JIIvBGgBOs5QiRnlPpNg1RJyctIR2BmwL7JzQQJVDgBdJbxz
Xq9sNEBvVlhujxGzyJK0Vg5eFMjoMP4rgR+WcfXYsx+pTaHm9CM/jAo4vNhmdxUg
DL+BtkOaXniOEhf7IUs1NN9l7QbrK7+jzmE9CSeez3eNf0LxqL/5+ck5pcxPc565
kDZHiTvMVZ92S8MYubTtIIoQrszfDl3UNwRXMCz/3SBIvmcyT5jnF1o+ONs79aVM
39E3Ehs8EnYDMS/xkg+cIj+YDj8IV4Xd+0Zlx2mxNlYWzhM+rqGoieQ0Q1nhF7gg
ZRMs7DmVSfrEch+JlyIRYI3VYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ0GVlF0
x+gP3oYR1cbdAaUDtIORMB8GA1UdIwQYMBaAFM/AgE2sT/96IqQE4Q6YZKcR3hnJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTJDNC9GMzE5RURDMjZD
MTcxMUVGQkRCRkQ1MEJDNEY5QUUwMi96OENBVGF4UF8zb2lwQVRoRHBoa3B4SGVH
Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3o4Q0FUYXhQXzNvaXBBVGhEcGhrcHhIZUdjay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTJDNC9GMzE5RURDMjZDMTcxMUVGQkRCRkQ1MEJDNEY5QUUwMi96OENBVGF4UF8z
b2lwQVRoRHBoa3B4SGVHY2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO1qTwdfOdKfq2TlEy24+PQRtPgr6RTgci1LGISqYSGXBtO0YJD9eJ23uMBLi
3WkFbignY/Ovkfdd9nNZFA9ZbTWTpeww+5q8bFcMbG/XupfuPc6tGxbe6u13H7V9
VoGiNpQ/MBR59CRzMVxFUkviCIFaskRtCiTRiU9reQOZ0oYw/HCeV8Amo07KZvpg
aQo6OdiLdUWJQaI7qPnUsm3d0B+h3j1OPfKMw3+3RkLy65H5lGYAnh01gs/MJOxZ
THdP2nuze4wlA4Jswq6gOHwXOtgJkboLcKvS57IEDcWeXYYhXAjhE8KoVObNR3ru
eTvOhwLD4jJ52SuI2hRtPk8f/g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:31:43 2026 by rpki-client