Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft
File:                     R34i4b061SBOOtwt7NbSoZSs-lg.mft (raw, json)
Hash identifier:          dGANgRgWZA+ALpQf3PSnfZRu1TdJEueY5zlDHoI9iVw=
Subject key identifier:   11:DC:A7:D3:C7:23:17:6E:E0:A5:38:D0:0B:EE:3C:4E:D6:5B:62:79
Authority key identifier: 47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58
Certificate issuer:       /CN=A912B600/serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58
Certificate serial:       1256
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft
Manifest number:          1249
Signing time:             Wed 22 Jul 2026 14:48:10 +0000
Manifest this update:     Wed 22 Jul 2026 14:48:10 +0000
Manifest next update:     Wed 29 Jul 2026 14:48:10 +0000
Files and hashes:         1: R34i4b061SBOOtwt7NbSoZSs-lg.crl (hash: X7AQHIo9bZUVFRDCUiaFM8VJLVBXw0QDXlaO8lKXbeY=)
                          2: 6C510F98B51C11EAA1649251C4F9AE02.roa (hash: FFjxfnMou/98tB5BNVIfzefmsUkfNyGwBbqp5Be3Rjg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl
                          rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:48:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4694 (0x1256)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B600, serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58
        Validity
            Not Before: Jul 22 14:48:10 2026 GMT
            Not After : Jul 29 14:48:10 2026 GMT
        Subject: CN=6a60d82a-33a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c0:19:da:f8:e1:68:47:2e:22:06:57:14:84:
                    96:ff:47:77:ce:1c:87:9b:3a:bd:8c:95:b5:9a:ce:
                    87:03:e9:ca:32:2a:62:4b:d2:19:88:d8:2c:06:41:
                    ba:0c:79:94:aa:44:a2:de:59:17:f6:3c:db:8b:36:
                    04:07:78:2e:6e:ae:b3:46:fe:21:4f:a9:d1:ab:80:
                    02:76:59:51:52:f0:03:9a:85:1b:b8:24:e8:41:10:
                    f2:b4:24:db:cc:e9:0a:c9:c6:9a:f8:ea:fc:9b:eb:
                    51:f6:34:d2:ce:8a:a4:86:09:33:1b:dd:70:04:1b:
                    51:b4:c4:04:09:8a:dd:6e:8e:0e:5d:28:d9:9e:f4:
                    65:bf:49:d1:15:0e:6a:9f:ec:a5:b3:f0:e8:21:40:
                    d7:ef:fc:16:55:cc:d9:24:b8:47:5c:ce:26:bd:c2:
                    bc:92:e1:a2:fb:7c:b2:d6:d3:58:f7:14:04:d0:46:
                    6a:ca:40:af:12:41:27:50:e9:02:d2:46:ce:d6:69:
                    64:fa:15:1c:8e:be:9b:eb:73:20:eb:e7:8d:b9:4c:
                    bf:e1:d9:31:d6:49:f9:11:cb:e3:0a:92:ae:24:ce:
                    d6:49:cb:14:1b:5a:08:98:70:92:12:f5:6d:b8:a4:
                    58:65:73:a6:8e:9f:de:32:4a:30:b1:ab:bb:f7:5c:
                    0c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DC:A7:D3:C7:23:17:6E:E0:A5:38:D0:0B:EE:3C:4E:D6:5B:62:79
            X509v3 Authority Key Identifier:
                keyid:47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:40:b4:a1:f4:b7:d1:94:cd:44:4d:81:a2:44:76:09:e3:3f:
         dc:ed:85:fb:99:72:ab:c3:9f:be:ba:6c:93:1a:b8:da:2d:90:
         60:e7:e8:4d:3f:f4:fa:c1:0b:5b:10:a6:6c:6b:99:20:f1:ec:
         a6:65:a4:a1:15:d2:53:bd:54:d7:da:70:2c:22:44:61:b4:5c:
         ba:af:c3:b9:11:36:27:0f:85:79:8b:e0:cc:5f:60:ea:56:ae:
         d7:46:ae:ac:3d:fe:b7:09:01:d4:cf:8c:8f:26:a4:bb:ab:23:
         97:fd:86:b3:fd:f9:46:43:79:d9:fd:f7:bb:3c:dc:99:6f:59:
         0c:b7:67:9e:b1:f3:22:7c:fd:fc:45:fd:8b:e6:a0:f4:6f:8b:
         96:60:6a:79:b4:d5:41:d6:ac:f0:20:0b:e6:aa:4c:40:7b:d1:
         43:2a:7f:a3:56:4a:79:f5:67:83:ad:ee:f6:39:ba:1a:ba:89:
         df:ec:be:d5:40:96:16:e6:e3:02:9b:ef:94:64:53:f4:3a:75:
         8e:56:ab:0a:a9:ae:51:c6:02:da:88:6b:b1:60:bc:6b:b3:30:
         af:22:39:5e:54:8e:99:53:42:fe:92:d8:fc:2c:39:fe:15:05:
         f6:54:ce:4a:be:89:87:1a:0c:25:29:63:83:4b:11:57:27:c0:
         cd:4a:be:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICElYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkI2MDAxMTAvBgNVBAUTKDQ3N0UyMkUxQkQzQUQ1MjA0RTNBREMyREVDRDZEMkEx
OTRBQ0ZBNTgwHhcNMjYwNzIyMTQ0ODEwWhcNMjYwNzI5MTQ0ODEwWjAYMRYwFAYD
VQQDEw02YTYwZDgyYS0zM2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6MAZ2vjhaEcuIgZXFISW/0d3zhyHmzq9jJW1ms6HA+nKMipiS9IZiNgsBkG6
DHmUqkSi3lkX9jzbizYEB3gubq6zRv4hT6nRq4ACdllRUvADmoUbuCToQRDytCTb
zOkKycaa+Or8m+tR9jTSzoqkhgkzG91wBBtRtMQECYrdbo4OXSjZnvRlv0nRFQ5q
n+yls/DoIUDX7/wWVczZJLhHXM4mvcK8kuGi+3yy1tNY9xQE0EZqykCvEkEnUOkC
0kbO1mlk+hUcjr6b63Mg6+eNuUy/4dkx1kn5EcvjCpKuJM7WScsUG1oImHCSEvVt
uKRYZXOmjp/eMkowsau791wM0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBHcp9PH
Ixdu4KU40AvuPE7WW2J5MB8GA1UdIwQYMBaAFEd+IuG9OtUgTjrcLezW0qGUrPpY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC8zQjA2RjMwNjA0
MzUxMUU5OUUwOUNDNjNDNEY5QUUwMi9SMzRpNGIwNjFTQk9PdHd0N05iU29aU3Mt
bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1IzNGk0YjA2MVNCT090d3Q3TmJTb1pTcy1sZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjYwMC8zQjA2RjMwNjA0MzUxMUU5OUUwOUNDNjNDNEY5QUUwMi9SMzRpNGIwNjFT
Qk9PdHd0N05iU29aU3MtbGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP0C0ofS30ZTNRE2BokR2CeM/3O2F+5lyq8Ofvrpskxq42i2QYOfoTT/0+sEL
WxCmbGuZIPHspmWkoRXSU71U19pwLCJEYbRcuq/DuRE2Jw+FeYvgzF9g6lau10au
rD3+twkB1M+Mjyaku6sjl/2Gs/35RkN52f33uzzcmW9ZDLdnnrHzInz9/EX9i+ag
9G+LlmBqebTVQdas8CAL5qpMQHvRQyp/o1ZKefVng63u9jm6GrqJ3+y+1UCWFubj
ApvvlGRT9Dp1jlarCqmuUcYC2ohrsWC8a7MwryI5XlSOmVNC/pLY/Cw5/hUF9lTO
Sr6JhxoMJSljg0sRVyfAzUq++w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:54:13 2026 by rpki-client