Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
File:                     JyLFq77mO3a52pZseNc6ZlfSROs.mft (raw, json)
Hash identifier:          CkPaTk56P6rhgOD5tRpgTbH2lPS/gwtR6Nss48yIbT8=
Subject key identifier:   E2:90:D0:DD:FF:3F:20:0E:CF:93:A8:A2:0E:EF:FC:02:7E:B2:76:4A
Authority key identifier: 27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB
Certificate issuer:       /CN=A912B12A/serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB
Certificate serial:       0144
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
Manifest number:          0137
Signing time:             Thu 23 Jul 2026 07:11:28 +0000
Manifest this update:     Thu 23 Jul 2026 07:11:28 +0000
Manifest next update:     Thu 30 Jul 2026 07:11:28 +0000
Files and hashes:         1: JyLFq77mO3a52pZseNc6ZlfSROs.crl (hash: P1XQxa3QPgtyBJLnuJyJvSfkNRGnZJIR1sVKAJBNnbY=)
                          2: 9F03C370AE3E11EF9289306CC4F9AE02.roa (hash: VQA6pjuu/o8U/g10GJhyRj7RgcZTt+KPBg7nxgVDWd0=)
                          3: C38216B8396E11F1992DA1BA96833773.roa (hash: /iOQsyc6F1r8WmEZPqbUXMRcjfmcWlpbEB4138jOfIk=)
                          4: 221824CCAE5811EFAFE7FF84C4F9AE02.roa (hash: aDcnlxap4XDDt9ANdIB0EdEbEwHi3xK45nvSfh/8fvE=)
                          5: 9F69B82EAE3E11EF9289306CC4F9AE02.roa (hash: G5O36SvC9VS8QmGgtVxcSVr/0IErmRE6s7oSkFzNs38=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl
                          rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B12A, serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB
        Validity
            Not Before: Jul 23 07:11:28 2026 GMT
            Not After : Jul 30 07:11:28 2026 GMT
        Subject: CN=6a61bea0-6f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cf:1b:4a:e8:e8:e2:f4:8c:48:db:35:0c:82:
                    31:2c:de:c6:c6:db:e8:46:cb:34:30:1c:e4:a4:58:
                    18:15:37:38:f7:a3:3c:0d:45:13:da:0d:ee:86:1f:
                    9f:79:d7:6d:02:13:02:d6:ca:c2:60:47:16:76:54:
                    76:ae:8e:00:61:a9:f0:f8:e3:cc:31:27:de:17:7c:
                    30:0b:bf:14:b7:9f:01:90:4f:12:58:2f:83:27:01:
                    b4:69:ea:25:2a:a8:f3:d7:61:d3:d2:46:3b:93:d3:
                    0d:3c:e0:58:8d:cd:5d:92:9a:c2:9f:2c:19:3c:11:
                    8f:d5:d0:83:be:c9:e3:a4:e3:28:90:4d:b8:1f:f8:
                    9a:5e:d0:4a:67:bf:32:89:64:25:27:89:ba:5d:ea:
                    d5:99:07:0b:35:f2:10:9e:c5:ca:2f:c7:d5:ab:fd:
                    8c:c6:71:e2:e6:04:77:79:35:5d:29:83:41:4a:15:
                    3f:e3:6f:22:bb:82:37:60:40:f1:81:6a:70:1a:01:
                    e3:7b:73:26:f3:f9:32:e2:df:3c:7a:57:74:7e:20:
                    58:48:0f:80:13:41:48:a9:8b:ff:59:a2:f2:3e:0e:
                    7e:c2:f9:05:c9:a8:2c:6a:7e:f3:1e:ad:0b:cb:6f:
                    b3:16:2f:b3:f0:ea:1f:0e:65:09:51:71:5b:7c:e4:
                    dd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:90:D0:DD:FF:3F:20:0E:CF:93:A8:A2:0E:EF:FC:02:7E:B2:76:4A
            X509v3 Authority Key Identifier:
                keyid:27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c5:f5:dc:7d:6c:97:27:08:1d:09:5d:31:f1:6e:50:2b:2d:
         1c:1a:57:6c:80:5d:6d:b5:fc:d3:c2:21:ea:80:d7:d2:5d:bc:
         ce:1a:a9:cf:a9:51:7c:8e:4d:da:0f:be:21:d7:7a:2c:9b:34:
         4c:8e:0b:74:66:d1:6c:be:f1:83:51:e6:dc:0e:33:9a:69:37:
         4a:b4:6d:b6:f1:be:16:7b:ec:82:ca:6a:82:96:30:eb:f3:3a:
         bc:67:b2:13:66:a0:a1:c3:d4:2d:b3:5a:d1:ac:40:f9:c3:19:
         a8:e2:13:aa:16:52:fe:8b:03:8a:20:45:2c:eb:66:91:22:0c:
         2c:4d:30:8c:46:eb:96:54:7b:28:54:1d:98:c9:ae:da:ef:19:
         8f:5b:f1:00:3b:c9:21:05:e7:4e:43:53:6d:79:93:9d:90:77:
         79:46:fb:2d:dc:f5:d6:f6:8b:a3:63:3a:91:ff:bf:90:de:52:
         ec:ae:a1:96:b5:f5:5e:e8:f7:eb:df:81:da:32:94:d3:e7:91:
         ea:87:61:00:78:62:80:ff:44:43:a7:99:13:32:85:07:87:24:
         cf:41:1c:25:76:22:97:b4:dd:40:93:82:84:3d:af:b0:03:4d:
         35:c0:57:2e:35:e2:9b:7c:b7:12:cf:b7:08:ad:87:e7:24:21:
         a0:2f:11:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkIxMkExMTAvBgNVBAUTKDI3MjJDNUFCQkVFNjNCNzZCOURBOTY2Qzc4RDczQTY2
NTdEMjQ0RUIwHhcNMjYwNzIzMDcxMTI4WhcNMjYwNzMwMDcxMTI4WjAYMRYwFAYD
VQQDEw02YTYxYmVhMC02ZjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApc8bSujo4vSMSNs1DIIxLN7GxtvoRss0MBzkpFgYFTc496M8DUUT2g3uhh+f
eddtAhMC1srCYEcWdlR2ro4AYanw+OPMMSfeF3wwC78Ut58BkE8SWC+DJwG0aeol
Kqjz12HT0kY7k9MNPOBYjc1dkprCnywZPBGP1dCDvsnjpOMokE24H/iaXtBKZ78y
iWQlJ4m6XerVmQcLNfIQnsXKL8fVq/2MxnHi5gR3eTVdKYNBShU/428iu4I3YEDx
gWpwGgHje3Mm8/ky4t88eld0fiBYSA+AE0FIqYv/WaLyPg5+wvkFyagsan7zHq0L
y2+zFi+z8OofDmUJUXFbfOTdawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOKQ0N3/
PyAOz5Ooog7v/AJ+snZKMB8GA1UdIwQYMBaAFCcixau+5jt2udqWbHjXOmZX0kTr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyQS9CMUQ0QTU5Q0FF
M0QxMUVGOTZCNzZDNkFDNEY5QUUwMi9KeUxGcTc3bU8zYTUycFpzZU5jNlpsZlNS
T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0p5TEZxNzdtTzNhNTJwWnNlTmM2WmxmU1JPcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjEyQS9CMUQ0QTU5Q0FFM0QxMUVGOTZCNzZDNkFDNEY5QUUwMi9KeUxGcTc3bU8z
YTUycFpzZU5jNlpsZlNST3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALcX13H1slycIHQldMfFuUCstHBpXbIBdbbX808Ih6oDX0l28zhqpz6lRfI5N
2g++Idd6LJs0TI4LdGbRbL7xg1Hm3A4zmmk3SrRttvG+FnvsgspqgpYw6/M6vGey
E2agocPULbNa0axA+cMZqOITqhZS/osDiiBFLOtmkSIMLE0wjEbrllR7KFQdmMmu
2u8Zj1vxADvJIQXnTkNTbXmTnZB3eUb7Ldz11vaLo2M6kf+/kN5S7K6hlrX1Xuj3
69+B2jKU0+eR6odhAHhigP9EQ6eZEzKFB4ckz0EcJXYil7TdQJOChD2vsANNNcBX
LjXim3y3Es+3CK2H5yQhoC8R0g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:05:34 2026 by rpki-client