Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
File:                     PSzMkYN0TcaWqFVry5BDhI6V33A.mft (raw, json)
Hash identifier:          zneUTmP78dSy67zN/DfLvbDu68yk6Zxmdxik8ryEEdc=
Subject key identifier:   37:56:68:86:51:DC:6B:98:40:97:0F:FF:4F:B2:2E:0A:29:B5:40:3E
Authority key identifier: 3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70
Certificate issuer:       /CN=A912D826/serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70
Certificate serial:       045D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
Manifest number:          044B
Signing time:             Thu 23 Jul 2026 01:06:21 +0000
Manifest this update:     Thu 23 Jul 2026 01:06:20 +0000
Manifest next update:     Thu 30 Jul 2026 01:06:20 +0000
Files and hashes:         1: PSzMkYN0TcaWqFVry5BDhI6V33A.crl (hash: kLrJ6GvvJOCRkw4dXG5BxwdkS6lOHzsyeA7lUqz9rkI=)
                          2: 69A20286514B11F0B8A8C66DC4F9AE02.roa (hash: NkI+pmzBqCxF9snRnYsLLFaunC0T93+l8haq4O7khjQ=)
                          3: 804B03560A7211EE8FA2CD58C4F9AE02.roa (hash: i18vAYWYZqWUAwFZVSlGk7OxKqt1gz8XjzU2hmpsWh8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl
                          rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:06:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1117 (0x45d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D826, serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70
        Validity
            Not Before: Jul 23 01:06:20 2026 GMT
            Not After : Jul 30 01:06:20 2026 GMT
        Subject: CN=6a61690d-fa88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:53:83:be:ba:bc:44:d7:cc:71:31:47:a1:df:
                    ee:a0:12:4b:24:63:3a:60:92:fa:9f:8d:94:53:65:
                    99:84:0a:12:d9:5f:82:d7:af:7a:09:e8:79:58:60:
                    d6:a4:33:42:1b:70:4d:c4:80:7f:e9:0d:3c:04:c0:
                    de:5a:b4:29:20:6e:d2:e2:02:83:cb:e5:4e:b8:37:
                    92:c1:ca:64:65:b5:64:7b:bb:75:0d:e2:15:65:a6:
                    02:66:8e:6b:15:61:4a:20:f9:d0:75:ce:6b:5d:3f:
                    60:99:bd:7c:4f:e1:be:f9:c7:ab:1b:fc:61:7a:89:
                    73:1a:73:56:62:fd:2c:7b:8b:e2:dc:21:bd:94:27:
                    41:ce:4b:c5:93:1c:c3:9b:0a:65:e5:2e:f7:4d:c0:
                    5a:e1:23:75:d1:75:00:5e:ae:1b:6e:34:0e:ed:57:
                    8f:b7:49:82:11:13:52:10:63:e3:9f:93:ba:52:f3:
                    59:9d:d6:f7:7f:a3:ca:ce:bc:25:f5:af:1f:a5:2f:
                    b1:8f:2a:dd:85:97:9b:58:8d:b8:28:15:67:2f:eb:
                    7f:a7:fa:dc:e0:1c:ec:66:2a:c1:f7:7a:70:d0:ab:
                    3f:5a:47:3b:fe:32:45:80:1d:95:6f:2c:a5:65:6a:
                    e4:5a:74:dd:e1:c6:dd:de:61:2d:52:24:2a:33:da:
                    87:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:56:68:86:51:DC:6B:98:40:97:0F:FF:4F:B2:2E:0A:29:B5:40:3E
            X509v3 Authority Key Identifier:
                keyid:3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a5:05:d3:f7:45:e7:d9:e2:d1:a6:c0:72:f9:48:e4:82:b1:
         c7:be:62:52:54:9d:5b:66:74:1a:b3:ca:2c:a2:cb:7b:80:32:
         f5:47:f4:24:a4:3f:7a:f4:b0:e0:e3:bb:e5:0c:22:a0:29:77:
         5d:fa:44:22:69:3e:9d:ae:15:1e:97:f5:6c:15:cc:9a:b1:9d:
         5d:6c:56:58:46:1c:28:75:14:ad:82:1f:33:30:c9:1f:92:73:
         9b:42:4e:92:9a:45:93:18:cc:38:91:7f:e7:f8:80:7c:a6:74:
         57:91:ad:00:55:32:70:61:31:24:f1:79:be:cf:20:4d:0a:0b:
         b6:7d:e9:7c:fe:ff:a4:eb:61:a6:ce:f2:35:86:96:18:f5:48:
         04:b0:a8:41:b2:61:97:4b:fc:c5:51:01:98:17:b5:2e:f8:e4:
         4b:cd:56:a6:20:a5:2b:c3:e4:c3:97:ae:65:ec:46:0f:a1:bc:
         0a:ce:ed:9c:56:b4:fc:7e:f8:71:43:c7:d9:4d:88:4e:10:13:
         fe:74:6d:17:e0:e2:b3:3e:ea:a6:e5:ab:9d:72:4c:b8:92:2b:
         ac:93:e6:82:27:e4:6c:7d:95:52:53:af:ea:56:f6:ef:78:7a:
         92:ff:4f:f0:d2:93:45:a4:fb:10:f8:94:0a:91:a3:d0:5c:14:
         4c:e3:f9:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQ4MjYxMTAvBgNVBAUTKDNEMkNDQzkxODM3NDREQzY5NkE4NTU2QkNCOTA0Mzg0
OEU5NURGNzAwHhcNMjYwNzIzMDEwNjIwWhcNMjYwNzMwMDEwNjIwWjAYMRYwFAYD
VQQDEw02YTYxNjkwZC1mYTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAolODvrq8RNfMcTFHod/uoBJLJGM6YJL6n42UU2WZhAoS2V+C1696Ceh5WGDW
pDNCG3BNxIB/6Q08BMDeWrQpIG7S4gKDy+VOuDeSwcpkZbVke7t1DeIVZaYCZo5r
FWFKIPnQdc5rXT9gmb18T+G++cerG/xheolzGnNWYv0se4vi3CG9lCdBzkvFkxzD
mwpl5S73TcBa4SN10XUAXq4bbjQO7VePt0mCERNSEGPjn5O6UvNZndb3f6PKzrwl
9a8fpS+xjyrdhZebWI24KBVnL+t/p/rc4BzsZirB93pw0Ks/Wkc7/jJFgB2Vbyyl
ZWrkWnTd4cbd3mEtUiQqM9qH4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDdWaIZR
3GuYQJcP/0+yLgoptUA+MB8GA1UdIwQYMBaAFD0szJGDdE3GlqhVa8uQQ4SOld9w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDgyNi9DRjRFMUQ3NEFF
NEExMUVDODQ2RjNGNjhDNEY5QUUwMi9QU3pNa1lOMFRjYVdxRlZyeTVCRGhJNlYz
M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BTek1rWU4wVGNhV3FGVnJ5NUJEaEk2VjMzQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDgyNi9DRjRFMUQ3NEFFNEExMUVDODQ2RjNGNjhDNEY5QUUwMi9QU3pNa1lOMFRj
YVdxRlZyeTVCRGhJNlYzM0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKKUF0/dF59ni0abAcvlI5IKxx75iUlSdW2Z0GrPKLKLLe4Ay9Uf0JKQ/evSw
4OO75QwioCl3XfpEImk+na4VHpf1bBXMmrGdXWxWWEYcKHUUrYIfMzDJH5Jzm0JO
kppFkxjMOJF/5/iAfKZ0V5GtAFUycGExJPF5vs8gTQoLtn3pfP7/pOthps7yNYaW
GPVIBLCoQbJhl0v8xVEBmBe1LvjkS81WpiClK8Pkw5euZexGD6G8Cs7tnFa0/H74
cUPH2U2IThAT/nRtF+Disz7qpuWrnXJMuJIrrJPmgifkbH2VUlOv6lb273h6kv9P
8NKTRaT7EPiUCpGj0FwUTOP5+w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:08:10 2026 by rpki-client