Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
File:                     2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft (raw, json)
Hash identifier:          3fEyo/BRMWrq1X9xeCISQ52/bBefLphXcLt5g8ujpdA=
Subject key identifier:   0A:0E:95:6E:7F:23:2F:EF:6A:0F:24:D3:4E:29:17:5C:45:87:11:B6
Authority key identifier: D9:24:0B:E5:27:23:E5:17:F1:E5:47:5A:1B:CF:94:B8:F0:8C:03:80
Certificate issuer:       /CN=A9124D7C/serialNumber=D9240BE52723E517F1E5475A1BCF94B8F08C0380
Certificate serial:       3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
Manifest number:          3C
Signing time:             Thu 23 Jul 2026 10:34:25 +0000
Manifest this update:     Thu 23 Jul 2026 10:34:25 +0000
Manifest next update:     Thu 30 Jul 2026 10:34:25 +0000
Files and hashes:         1: 2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl (hash: 9CfLh+cjuRyexDhs37yc5X/oB4Wjo3xBqYAyPw5w6rs=)
                          2: 8C138F502CCA11F1960EC6ED91833773.roa (hash: xJmZuhv9rNcM/Fsd3fmDp03WFv+ujmJvez9T7ai4exw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl
                          rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:34:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124D7C, serialNumber=D9240BE52723E517F1E5475A1BCF94B8F08C0380
        Validity
            Not Before: Jul 23 10:34:25 2026 GMT
            Not After : Jul 30 10:34:25 2026 GMT
        Subject: CN=6a61ee31-847d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:52:b4:d8:fb:e6:58:36:0c:c5:e1:96:2b:60:
                    c0:ed:74:12:b8:ab:e2:83:73:71:4f:6d:94:01:1b:
                    ff:d7:ae:ec:15:ea:fd:e1:c0:3a:90:8a:41:29:49:
                    ba:0a:d5:5c:a3:68:cd:46:de:ee:d0:21:de:f2:25:
                    6e:ee:e4:72:05:19:17:ea:41:a1:2c:85:1b:32:46:
                    a6:88:4f:52:57:f2:be:64:2c:57:bd:5f:8a:c3:f3:
                    aa:6e:c4:71:bc:05:a8:24:c3:95:d9:47:cd:ed:2e:
                    ff:5c:4a:ef:3c:f4:09:f4:d1:49:25:eb:d5:0f:97:
                    3c:29:2c:8a:40:d7:cc:46:cd:6b:75:5d:bd:5f:d7:
                    66:c7:0f:4d:e4:63:ce:0f:2f:a0:2e:bc:64:88:9b:
                    82:1b:f2:ca:21:91:e0:98:90:03:4f:78:c6:48:09:
                    47:45:c1:1e:58:59:88:29:d9:88:1a:e4:0c:6b:67:
                    9d:b4:45:71:a7:b4:4d:0d:49:90:c3:ee:2c:fb:8e:
                    fa:d3:db:40:f2:a5:53:e4:0e:97:78:aa:50:99:7e:
                    d3:8e:10:c9:cc:fb:f2:3a:aa:42:5a:4b:c8:82:19:
                    ad:69:09:6e:70:c7:a8:88:86:f5:9e:bd:06:cd:67:
                    c0:ee:89:6c:f7:ac:39:5a:f3:f4:17:3f:40:4e:a1:
                    f1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0E:95:6E:7F:23:2F:EF:6A:0F:24:D3:4E:29:17:5C:45:87:11:B6
            X509v3 Authority Key Identifier:
                keyid:D9:24:0B:E5:27:23:E5:17:F1:E5:47:5A:1B:CF:94:B8:F0:8C:03:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:c6:e3:23:20:3e:f0:d6:b5:db:5c:66:8c:3c:5c:49:ba:8d:
         2f:49:ae:40:b8:fe:21:69:16:d9:fc:97:1f:7b:0e:95:62:64:
         09:36:77:94:b4:f7:20:b1:83:b3:c5:2b:1a:cd:7d:b2:02:c9:
         c3:07:57:08:c3:0a:b6:37:10:c1:d6:ef:c6:dc:40:1e:f9:67:
         d8:4a:ef:f7:7f:27:d2:bb:87:8f:69:10:c6:c2:da:35:26:6f:
         b3:56:b9:62:83:37:e9:cf:22:ed:eb:2c:6d:a2:78:3b:0c:1f:
         5f:1a:32:5d:39:7b:2b:32:df:00:2c:b3:a4:a4:a2:be:96:75:
         38:f2:c9:a3:6a:f9:30:86:1d:74:ed:40:24:37:dc:46:05:fb:
         ff:db:af:64:68:94:31:30:eb:78:49:b3:a4:ac:1c:2a:67:7b:
         52:20:9d:b5:98:b5:a4:c1:8c:64:2a:ae:fb:2d:a9:89:c0:b9:
         78:b3:ce:28:64:a9:f8:6c:8b:f0:c1:c0:d9:03:45:a3:0e:42:
         11:8f:00:c1:f2:82:a8:6f:e3:d7:72:33:d7:9f:76:45:f5:bd:
         b7:4c:f5:e4:be:96:fc:e5:d3:49:f6:43:06:54:48:38:5b:25:
         48:1c:df:ed:9b:a5:c5:1b:c0:ad:aa:d3:f4:7e:41:97:54:79:
         50:75:95:6a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
NEQ3QzExMC8GA1UEBRMoRDkyNDBCRTUyNzIzRTUxN0YxRTU0NzVBMUJDRjk0QjhG
MDhDMDM4MDAeFw0yNjA3MjMxMDM0MjVaFw0yNjA3MzAxMDM0MjVaMBgxFjAUBgNV
BAMTDTZhNjFlZTMxLTg0N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC7UrTY++ZYNgzF4ZYrYMDtdBK4q+KDc3FPbZQBG//XruwV6v3hwDqQikEpSboK
1VyjaM1G3u7QId7yJW7u5HIFGRfqQaEshRsyRqaIT1JX8r5kLFe9X4rD86puxHG8
Bagkw5XZR83tLv9cSu889An00Ukl69UPlzwpLIpA18xGzWt1Xb1f12bHD03kY84P
L6AuvGSIm4Ib8sohkeCYkANPeMZICUdFwR5YWYgp2Yga5AxrZ520RXGntE0NSZDD
7iz7jvrT20DypVPkDpd4qlCZftOOEMnM+/I6qkJaS8iCGa1pCW5wx6iIhvWevQbN
Z8DuiWz3rDla8/QXP0BOofFpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUCg6Vbn8j
L+9qDyTTTikXXEWHEbYwHwYDVR0jBBgwFoAU2SQL5Scj5Rfx5UdaG8+UuPCMA4Aw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0RDdDL0EwM0VBQUM2MkNB
RTExRjFCMjc2QjMxNUM4ODMzNzczLzJTUUw1U2NqNVJmeDVVZGFHOC1VdVBDTUE0
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMlNRTDVTY2o1UmZ4NVVkYUc4LVV1UENNQTRBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0
RDdDL0EwM0VBQUM2MkNBRTExRjFCMjc2QjMxNUM4ODMzNzczLzJTUUw1U2NqNVJm
eDVVZGFHOC1VdVBDTUE0QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAPxuMjID7w1rXbXGaMPFxJuo0vSa5AuP4haRbZ/Jcfew6VYmQJNneUtPcgsYOz
xSsazX2yAsnDB1cIwwq2NxDB1u/G3EAe+WfYSu/3fyfSu4ePaRDGwto1Jm+zVrli
gzfpzyLt6yxtong7DB9fGjJdOXsrMt8ALLOkpKK+lnU48smjavkwhh107UAkN9xG
Bfv/269kaJQxMOt4SbOkrBwqZ3tSIJ21mLWkwYxkKq77LamJwLl4s84oZKn4bIvw
wcDZA0WjDkIRjwDB8oKob+PXcjPXn3ZF9b23TPXkvpb85dNJ9kMGVEg4WyVIHN/t
m6XFG8CtqtP0fkGXVHlQdZVq
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:46:12 2026 by rpki-client