Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
File:                     4lNNJseMlwF5CZZDjBFBCCVHdqo.mft (raw, json)
Hash identifier:          2cyjfFSYW1oaZbyVvZ1VQFERS80m8CHUF9Yso3ZnmWg=
Subject key identifier:   05:DA:EE:6C:F0:EE:89:72:5F:CA:F8:FA:21:16:3B:8C:9C:87:D8:A1
Authority key identifier: E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA
Certificate issuer:       /CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA
Certificate serial:       02BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
Manifest number:          02AA
Signing time:             Thu 23 Jul 2026 02:39:29 +0000
Manifest this update:     Thu 23 Jul 2026 02:39:29 +0000
Manifest next update:     Thu 30 Jul 2026 02:39:29 +0000
Files and hashes:         1: 4lNNJseMlwF5CZZDjBFBCCVHdqo.crl (hash: VqQlGfBl/Hn8xi308BU6N5MXsJ6u4n8jWDxj8oQR73Y=)
                          2: 3AA7BED6ECBA11EE8736F274C4F9AE02.roa (hash: bytZ59Ia8ZFaLY4XNox1TiPwLTz6zD1b+H+2egXVeZ0=)
                          3: 64D427963D8B11EE80D1E96DC4F9AE02.roa (hash: poF5iER85gmZG51MJJTxxsmqAYXARy0knubqmMXJg/4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl
                          rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 700 (0x2bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127E99, serialNumber=E2534D26C78C9701790996438C114108254776AA
        Validity
            Not Before: Jul 23 02:39:29 2026 GMT
            Not After : Jul 30 02:39:29 2026 GMT
        Subject: CN=6a617ee1-ca3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:41:5a:1c:5f:3f:03:01:d7:9f:85:9d:6a:07:
                    38:74:d5:e0:13:19:94:8b:0d:da:8f:f1:61:c7:e8:
                    8c:cf:f9:61:69:76:59:23:b5:21:fa:11:c7:39:4f:
                    a2:a8:39:d1:1c:c1:1a:19:37:99:d1:ca:8b:4d:55:
                    79:c3:8a:ab:d3:af:c4:a3:23:e2:45:94:68:65:8e:
                    05:ab:f8:2b:70:11:30:19:a5:ca:b1:0d:91:c8:34:
                    de:e2:03:71:bb:25:bc:ed:45:cf:c0:3c:78:bb:77:
                    d4:26:3e:70:50:2b:60:ff:6f:73:04:4b:e4:d7:18:
                    d5:30:2c:98:33:5c:46:5f:80:87:16:bf:1e:04:54:
                    5f:00:a7:a2:f1:df:c2:e1:61:5e:b4:7a:51:33:51:
                    98:0f:6d:0e:26:de:f9:a4:73:8b:75:a4:33:5d:42:
                    9d:bb:5d:c4:1b:04:0c:9b:87:eb:8b:3d:1e:f9:83:
                    5c:4c:0b:50:a0:c9:44:36:d4:e7:af:f3:2d:36:f8:
                    21:5d:92:c4:1d:5e:20:05:c0:f1:a1:3f:7e:40:61:
                    d0:73:48:84:63:81:22:e1:32:71:25:85:53:65:a8:
                    12:f6:9c:a5:25:80:a8:4e:d7:2f:76:9e:c5:bb:be:
                    33:c2:ea:a5:28:5a:6c:6a:4e:f3:fe:00:33:05:e7:
                    3b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DA:EE:6C:F0:EE:89:72:5F:CA:F8:FA:21:16:3B:8C:9C:87:D8:A1
            X509v3 Authority Key Identifier:
                keyid:E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:9f:ac:1e:4a:12:3a:3f:3d:22:1d:06:95:8c:ff:3a:b2:cb:
         cd:54:1d:3f:81:f4:9a:ff:e8:2d:46:c0:42:22:e6:14:05:21:
         d2:2f:49:c7:c8:99:65:6a:35:ea:49:96:27:6e:0a:e3:3f:78:
         f8:81:d4:91:8d:06:97:7e:18:05:03:e3:a7:8e:0d:b6:84:eb:
         4b:8a:a4:3f:29:d0:3d:eb:c8:16:01:74:7a:56:fd:d5:87:6b:
         3e:76:b1:8c:e6:5b:6d:4f:9c:ce:22:f6:bf:82:08:1e:38:6d:
         7d:09:95:b0:09:a2:da:ae:49:99:eb:b0:12:d3:1d:9a:d5:71:
         5c:96:9d:90:7c:c9:51:c9:d3:f9:01:53:f8:0f:7a:98:9f:d1:
         4b:b8:fd:6d:71:af:75:0e:22:4f:91:29:ef:16:23:a9:5d:81:
         a2:c6:c8:25:92:9e:ac:f0:ce:4c:09:c2:6e:6c:cb:af:1c:14:
         ef:57:f3:dd:7e:be:63:b2:92:e9:2b:f3:94:3c:a7:f6:05:78:
         ae:33:fd:52:6d:b4:09:f8:21:81:ab:1a:e3:43:3b:fa:76:48:
         01:29:48:d9:1a:bb:85:ee:ad:3c:a8:78:f7:c4:43:10:00:98:
         9b:84:ad:07:74:32:0a:48:1d:11:b7:d7:82:e5:de:11:c8:1f:
         45:12:96:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICArwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjdFOTkxMTAvBgNVBAUTKEUyNTM0RDI2Qzc4Qzk3MDE3OTA5OTY0MzhDMTE0MTA4
MjU0Nzc2QUEwHhcNMjYwNzIzMDIzOTI5WhcNMjYwNzMwMDIzOTI5WjAYMRYwFAYD
VQQDEw02YTYxN2VlMS1jYTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnUFaHF8/AwHXn4Wdagc4dNXgExmUiw3aj/Fhx+iMz/lhaXZZI7Uh+hHHOU+i
qDnRHMEaGTeZ0cqLTVV5w4qr06/EoyPiRZRoZY4Fq/grcBEwGaXKsQ2RyDTe4gNx
uyW87UXPwDx4u3fUJj5wUCtg/29zBEvk1xjVMCyYM1xGX4CHFr8eBFRfAKei8d/C
4WFetHpRM1GYD20OJt75pHOLdaQzXUKdu13EGwQMm4friz0e+YNcTAtQoMlENtTn
r/MtNvghXZLEHV4gBcDxoT9+QGHQc0iEY4Ei4TJxJYVTZagS9pylJYCoTtcvdp7F
u74zwuqlKFpsak7z/gAzBec7ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAXa7mzw
7olyX8r4+iEWO4ych9ihMB8GA1UdIwQYMBaAFOJTTSbHjJcBeQmWQ4wRQQglR3aq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0U5OS8wQUNFMTlCMDdB
ODUxMUVEQUQ2OTI4ODdDNEY5QUUwMi80bE5OSnNlTWx3RjVDWlpEakJGQkNDVkhk
cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRsTk5Kc2VNbHdGNUNaWkRqQkZCQ0NWSGRxby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
N0U5OS8wQUNFMTlCMDdBODUxMUVEQUQ2OTI4ODdDNEY5QUUwMi80bE5OSnNlTWx3
RjVDWlpEakJGQkNDVkhkcW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcp+sHkoSOj89Ih0GlYz/OrLLzVQdP4H0mv/oLUbAQiLmFAUh0i9Jx8iZZWo1
6kmWJ24K4z94+IHUkY0Gl34YBQPjp44NtoTrS4qkPynQPevIFgF0elb91YdrPnax
jOZbbU+cziL2v4IIHjhtfQmVsAmi2q5JmeuwEtMdmtVxXJadkHzJUcnT+QFT+A96
mJ/RS7j9bXGvdQ4iT5Ep7xYjqV2BosbIJZKerPDOTAnCbmzLrxwU71fz3X6+Y7KS
6SvzlDyn9gV4rjP9Um20Cfghgasa40M7+nZIASlI2Rq7he6tPKh498RDEACYm4St
B3QyCkgdEbfXguXeEcgfRRKWKQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:57:14 2026 by rpki-client