Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft
File:                     X-MMr29aMskZ0zWqlNDnMzzQVDU.mft (raw, json)
Hash identifier:          P9sfMmlp19YyxBT5nH5F9DHp7G4B5wVH4qc/LL113Os=
Subject key identifier:   C9:BF:34:ED:36:23:EA:4A:1B:42:5D:19:63:41:03:30:E4:57:CE:B0
Authority key identifier: 5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35
Certificate issuer:       /CN=A911E403/serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435
Certificate serial:       08C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft
Manifest number:          08AF
Signing time:             Wed 22 Jul 2026 21:06:08 +0000
Manifest this update:     Wed 22 Jul 2026 21:06:08 +0000
Manifest next update:     Wed 29 Jul 2026 21:06:08 +0000
Files and hashes:         1: X-MMr29aMskZ0zWqlNDnMzzQVDU.crl (hash: I8KNOIQWsfNYpxnvJ+RFaxoPkl+XUrSMv974yt2Sxec=)
                          2: FE02E774CFFD11EC8CFDFF68C4F9AE02.roa (hash: 4+lHA5+XA6q3WA0a7feDPb9rgvNk8uk4zcP3rt42nhM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl
                          rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2247 (0x8c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E403, serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435
        Validity
            Not Before: Jul 22 21:06:08 2026 GMT
            Not After : Jul 29 21:06:08 2026 GMT
        Subject: CN=6a6130c0-a5ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:66:58:20:98:36:d1:6e:1f:4f:aa:d6:fd:1f:
                    2f:f1:57:0d:d9:35:7b:d1:b4:32:42:f3:17:e7:9f:
                    e1:27:5e:bf:cc:61:66:0c:81:8b:34:cb:c8:91:1b:
                    6d:73:9f:8d:26:1d:0e:a1:c2:80:36:27:7c:15:55:
                    f1:fd:a3:d3:ee:d5:42:08:30:ae:30:69:6b:ad:5e:
                    8f:90:fc:4c:65:12:40:4d:73:9a:22:18:85:c8:ad:
                    e8:b6:ab:65:1c:d7:18:5e:db:cd:e4:a7:04:c1:6b:
                    11:c2:38:73:8b:a4:13:ee:59:9f:2d:06:b3:41:3c:
                    3e:7a:c6:5f:37:0b:1c:7f:b1:8d:f1:84:fb:5a:55:
                    30:a6:64:7c:b1:3e:6a:52:a4:1d:c5:74:ac:ab:04:
                    f6:b8:33:88:be:4c:70:ed:0f:4d:fc:ac:aa:55:0e:
                    1e:88:40:f8:ce:a8:e9:9d:7c:9c:11:33:7f:ce:3d:
                    18:9a:25:04:e8:f9:78:b6:91:df:79:12:a8:e1:22:
                    aa:2c:a8:cc:a9:8e:c7:f7:30:d4:0e:a1:51:15:d8:
                    75:9a:1f:04:06:5f:99:85:f6:ad:8e:c4:42:21:9f:
                    8e:47:76:9e:d6:9d:df:bb:10:f7:45:ca:a3:ed:8b:
                    c9:c4:91:69:56:bc:76:fe:42:17:51:df:83:f8:e6:
                    e5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BF:34:ED:36:23:EA:4A:1B:42:5D:19:63:41:03:30:E4:57:CE:B0
            X509v3 Authority Key Identifier:
                keyid:5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:65:5f:87:2b:d5:f3:b9:65:f1:50:b3:32:81:88:f3:6c:1a:
         6a:ca:36:fa:a7:ef:c2:a7:ec:d9:27:ec:be:56:12:ce:4a:9e:
         92:ac:51:a7:09:a7:b0:51:d2:c3:01:a4:02:81:a6:0e:bc:03:
         e8:d9:7d:d5:c2:a2:1d:fe:44:aa:20:b1:a1:39:dc:23:f3:f7:
         a5:66:94:bd:61:83:8e:18:e5:ad:4c:2e:14:1f:8f:48:0a:a2:
         09:35:82:46:4a:41:da:fe:7b:d8:d3:3e:14:5f:57:11:06:76:
         75:6a:a2:b3:cc:a2:79:6a:38:76:d7:cd:d2:88:03:52:a4:ea:
         40:b6:cd:86:12:33:3c:8e:67:1c:24:57:f7:40:d5:40:6a:ba:
         9e:d0:48:f1:20:b1:9e:ac:6f:a8:ff:dd:55:7d:94:1a:02:76:
         01:85:f5:da:af:5e:00:a1:0f:f9:ea:e9:18:da:f0:b8:cf:98:
         6a:ee:a1:91:29:99:68:b7:88:8e:29:8e:b8:67:48:b2:ed:5b:
         4a:8c:4e:7d:c8:82:b5:8d:73:ae:5c:f9:bf:dc:05:f7:db:47:
         ad:f0:61:8e:a0:ca:4b:11:c9:e4:d0:ab:ff:e8:9f:97:fd:ba:
         09:ca:e6:84:29:e9:3c:92:a0:b7:1f:f1:e8:df:f6:e1:10:46:
         19:4b:b1:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUU0MDMxMTAvBgNVBAUTKDVGRTMwQ0FGNkY1QTMyQzkxOUQzMzVBQTk0RDBFNzMz
M0NEMDU0MzUwHhcNMjYwNzIyMjEwNjA4WhcNMjYwNzI5MjEwNjA4WjAYMRYwFAYD
VQQDEw02YTYxMzBjMC1hNWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6mZYIJg20W4fT6rW/R8v8VcN2TV70bQyQvMX55/hJ16/zGFmDIGLNMvIkRtt
c5+NJh0OocKANid8FVXx/aPT7tVCCDCuMGlrrV6PkPxMZRJATXOaIhiFyK3otqtl
HNcYXtvN5KcEwWsRwjhzi6QT7lmfLQazQTw+esZfNwscf7GN8YT7WlUwpmR8sT5q
UqQdxXSsqwT2uDOIvkxw7Q9N/KyqVQ4eiED4zqjpnXycETN/zj0YmiUE6Pl4tpHf
eRKo4SKqLKjMqY7H9zDUDqFRFdh1mh8EBl+ZhfatjsRCIZ+OR3ae1p3fuxD3Rcqj
7YvJxJFpVrx2/kIXUd+D+OblvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMm/NO02
I+pKG0JdGWNBAzDkV86wMB8GA1UdIwQYMBaAFF/jDK9vWjLJGdM1qpTQ5zM80FQ1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTQwMy9BMUNDRUNGRUY4
QkIxMUVBODdCMURFNkJDNEY5QUUwMi9YLU1NcjI5YU1za1oweldxbE5Ebk16elFW
RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1gtTU1yMjlhTXNrWjB6V3FsTkRuTXp6UVZEVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RTQwMy9BMUNDRUNGRUY4QkIxMUVBODdCMURFNkJDNEY5QUUwMi9YLU1NcjI5YU1z
a1oweldxbE5Ebk16elFWRFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsGVfhyvV87ll8VCzMoGI82waaso2+qfvwqfs2SfsvlYSzkqekqxRpwmnsFHS
wwGkAoGmDrwD6Nl91cKiHf5EqiCxoTncI/P3pWaUvWGDjhjlrUwuFB+PSAqiCTWC
RkpB2v572NM+FF9XEQZ2dWqis8yieWo4dtfN0ogDUqTqQLbNhhIzPI5nHCRX90DV
QGq6ntBI8SCxnqxvqP/dVX2UGgJ2AYX12q9eAKEP+erpGNrwuM+Yau6hkSmZaLeI
jimOuGdIsu1bSoxOfciCtY1zrlz5v9wF99tHrfBhjqDKSxHJ5NCr/+ifl/26Ccrm
hCnpPJKgtx/x6N/24RBGGUuxkw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:55:23 2026 by rpki-client