Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft
File:                     CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft (raw, json)
Hash identifier:          7aezPn2+D0Z7xYnTPDjt1tbL+ZuklW2W0le2LbhO/Z0=
Subject key identifier:   F4:4A:99:AA:F2:3E:53:6C:09:08:EF:E5:90:06:B0:4D:4B:4F:44:60
Authority key identifier: 0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46
Certificate issuer:       /CN=A9128C53/serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946
Certificate serial:       01F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft
Manifest number:          01F0
Signing time:             Thu 23 Jul 2026 04:41:23 +0000
Manifest this update:     Thu 23 Jul 2026 04:41:23 +0000
Manifest next update:     Thu 30 Jul 2026 04:41:23 +0000
Files and hashes:         1: CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl (hash: ndlRjc6AbhgfVi1BjGKfT76GV2p0fqr/tbLu+V/AhTc=)
                          2: 04A9BC6EDAC011EE94B8705AC4F9AE02.roa (hash: CCRIx6xx0eQTTafK35qMinnGOYOtSbUUlnFtAWNi/ek=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl
                          rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:41:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501 (0x1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128C53, serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946
        Validity
            Not Before: Jul 23 04:41:23 2026 GMT
            Not After : Jul 30 04:41:23 2026 GMT
        Subject: CN=6a619b73-e297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:10:50:84:cb:b6:1a:9e:1c:b2:0c:5c:2e:ca:
                    c7:b5:47:c6:4c:e6:d5:14:db:a3:3c:14:49:33:74:
                    e4:3b:2a:48:af:b9:e7:4d:0b:b1:bf:e2:89:fa:1e:
                    80:30:74:4e:44:f2:e6:67:f1:f0:d2:92:14:ab:e0:
                    52:79:ce:27:d0:6b:57:21:63:11:b1:3d:90:48:ff:
                    6b:47:f0:3f:10:43:cd:87:99:4e:fb:fc:e9:b0:ba:
                    4b:4b:1c:c1:7c:32:26:f8:ea:ee:d4:49:de:a9:69:
                    5b:ff:d4:65:06:5b:35:c0:f4:48:3f:b4:33:0e:e2:
                    37:d9:08:6b:fd:cf:dc:98:03:48:c3:22:8c:ff:99:
                    69:63:3d:31:1b:8e:bc:16:16:25:0e:17:7d:dd:3a:
                    6a:b5:1f:cc:20:d9:f5:de:4a:5e:50:da:e3:af:b6:
                    fe:5f:95:4e:c6:b5:b0:f3:f3:34:9c:57:18:19:25:
                    92:4c:ea:a2:a3:e1:6f:7b:fa:ea:4c:d9:e2:00:2e:
                    f7:c9:75:00:90:bf:2b:82:cf:e9:cf:50:71:b7:98:
                    46:a3:89:ed:f4:93:7f:4b:c3:89:a3:f9:eb:3b:7b:
                    59:02:d1:29:9a:66:ab:a7:95:a2:de:76:84:50:21:
                    ee:2c:8b:3f:0e:1f:e8:8b:53:ae:e7:2f:69:88:2a:
                    51:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:4A:99:AA:F2:3E:53:6C:09:08:EF:E5:90:06:B0:4D:4B:4F:44:60
            X509v3 Authority Key Identifier:
                keyid:0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:b0:93:3b:82:ce:5e:e7:de:77:2c:13:d7:dd:6e:61:8a:cd:
         61:ca:ff:82:9c:f5:34:d9:79:ab:08:d8:e2:a0:6c:19:5d:37:
         7d:40:33:ff:bc:ca:05:66:b3:84:e1:f3:24:3f:71:13:1e:e7:
         09:06:61:3b:3b:ad:9d:f1:d8:10:5e:e6:b6:c2:9e:90:03:98:
         02:03:a6:d2:39:88:34:be:7e:10:34:6a:5e:8c:df:a3:b9:0c:
         15:b0:1b:c0:cc:e8:9b:c5:ae:d9:1b:3d:cc:78:e1:19:99:1c:
         dc:a6:3c:6f:0f:aa:93:f2:46:27:8a:d5:59:2a:e5:f8:b7:bc:
         7c:59:d7:46:c0:45:71:86:a8:2c:ea:b9:7d:33:4a:b2:33:bf:
         ad:e5:48:72:80:e7:58:88:f0:72:b2:26:96:8a:f7:87:fa:ac:
         49:ab:55:ed:3c:ba:8b:8e:27:5f:b6:88:e3:1c:df:75:65:b7:
         36:82:87:fe:ae:0c:33:69:4a:05:4f:2a:ca:d0:57:3e:83:92:
         df:60:b5:82:02:4f:2c:3c:dd:89:b6:c1:56:d4:29:91:8d:7c:
         7c:86:34:78:5d:63:05:8e:2a:13:b7:e3:5d:a4:a1:51:5e:38:
         2c:63:18:bf:80:4f:3a:89:f5:e9:c2:ea:62:e9:f1:83:37:04:
         37:40:9c:23
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjhDNTMxMTAvBgNVBAUTKDBBNDVDNTBFMzcyMzVBMkFBMjIzRTlGMzEzMzFGNjk0
MjhFMEQ5NDYwHhcNMjYwNzIzMDQ0MTIzWhcNMjYwNzMwMDQ0MTIzWjAYMRYwFAYD
VQQDEw02YTYxOWI3My1lMjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApBBQhMu2Gp4csgxcLsrHtUfGTObVFNujPBRJM3TkOypIr7nnTQuxv+KJ+h6A
MHRORPLmZ/Hw0pIUq+BSec4n0GtXIWMRsT2QSP9rR/A/EEPNh5lO+/zpsLpLSxzB
fDIm+Oru1EneqWlb/9RlBls1wPRIP7QzDuI32Qhr/c/cmANIwyKM/5lpYz0xG468
FhYlDhd93TpqtR/MINn13kpeUNrjr7b+X5VOxrWw8/M0nFcYGSWSTOqio+Fve/rq
TNniAC73yXUAkL8rgs/pz1Bxt5hGo4nt9JN/S8OJo/nrO3tZAtEpmmarp5Wi3naE
UCHuLIs/Dh/oi1Ou5y9piCpRwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPRKmary
PlNsCQjv5ZAGsE1LT0RgMB8GA1UdIwQYMBaAFApFxQ43I1oqoiPp8xMx9pQo4NlG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEM1My9FQTZFQ0UwQTkz
ODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldpcWlJLW56RXpIMmxDamcy
VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NrWEZEamNqV2lxaUktbnpFekgybENqZzJVWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OEM1My9FQTZFQ0UwQTkzODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldp
cWlJLW56RXpIMmxDamcyVVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAt7CTO4LOXufedywT191uYYrNYcr/gpz1NNl5qwjY4qBsGV03fUAz/7zKBWaz
hOHzJD9xEx7nCQZhOzutnfHYEF7mtsKekAOYAgOm0jmINL5+EDRqXozfo7kMFbAb
wMzom8Wu2Rs9zHjhGZkc3KY8bw+qk/JGJ4rVWSrl+Le8fFnXRsBFcYaoLOq5fTNK
sjO/reVIcoDnWIjwcrImlor3h/qsSatV7Ty6i44nX7aI4xzfdWW3NoKH/q4MM2lK
BU8qytBXPoOS32C1ggJPLDzdibbBVtQpkY18fIY0eF1jBY4qE7fjXaShUV44LGMY
v4BPOon16cLqYunxgzcEN0CcIw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:10:13 2026 by rpki-client