Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
File:                     -ffptMwx85XFzbj6yfUvyldSTeE.mft (raw, json)
Hash identifier:          yfN0Gr/YNpSZGN+JHUQBhpz6RpfS8NGwok6AARdvZ+A=
Subject key identifier:   0C:C3:0E:4C:6F:5E:36:6D:44:3D:66:0E:47:F0:40:89:9F:D3:28:C3
Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1
Certificate issuer:       /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
Certificate serial:       03A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
Manifest number:          0385
Signing time:             Thu 23 Jul 2026 01:46:36 +0000
Manifest this update:     Thu 23 Jul 2026 01:46:35 +0000
Manifest next update:     Thu 30 Jul 2026 01:46:35 +0000
Files and hashes:         1: -ffptMwx85XFzbj6yfUvyldSTeE.crl (hash: d3VfDHjsSGDkTtF0u2mxJ6ypq52IJVi/7AJOcRLMPGo=)
                          2: 9770D05EBC4211F0B94CE580C4F9AE02.roa (hash: EKVGFJ/g32vu6i1eB7NEFOf+Zsly8ubAP4iYudVd5gM=)
                          3: 14A16ED4F0C011EFB89A0131C4F9AE02.roa (hash: JiCW8fyrxd1H5hhanenqtI3Q+to3q8hEENBSB39tRpc=)
                          4: A38DD8D40E1111F1B60944950A3D8C67.roa (hash: 8xomlP6u/pFuCS+4ZI0VqTn0cJ1Ypm6zhDkBB6EqaYQ=)
                          5: 0EDE44B2797511EF9F3FEC4CC4F9AE02.roa (hash: X52OCC/lE3b4nsh0tIE1/ie7TTPJC9iTuuS5fQwz44I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl
                          rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 937 (0x3a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DFFA, serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
        Validity
            Not Before: Jul 23 01:46:35 2026 GMT
            Not After : Jul 30 01:46:35 2026 GMT
        Subject: CN=6a61727c-7fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:d8:b3:bf:24:98:b5:03:68:1a:ec:94:7a:
                    5f:ce:4d:6f:94:e4:35:e2:cb:fd:d4:c5:9a:13:b7:
                    c0:ee:fb:ca:c8:25:bb:93:65:7c:ef:0f:05:ef:6e:
                    a4:ce:1a:7c:d3:24:1c:3b:6e:c7:b4:af:65:51:92:
                    d5:28:70:6a:3c:e9:b4:cc:1f:16:88:a2:41:da:a5:
                    49:9b:8c:8b:80:c1:0a:d5:ab:99:7e:23:92:3a:52:
                    ae:47:d8:3c:11:79:cf:9d:fc:5b:21:d1:01:f9:45:
                    02:c3:b6:78:3e:96:db:51:01:cc:8e:5a:ae:84:81:
                    e1:16:81:a8:88:fd:31:a2:51:08:ef:a0:9e:ac:67:
                    86:b9:df:d6:5b:47:c0:a8:1e:36:d7:3f:9c:77:dc:
                    38:d8:6e:3b:c9:c6:9b:1b:2d:1a:4e:ed:86:b8:b0:
                    93:05:60:c5:4e:91:0f:2a:92:9c:a1:48:f7:3a:98:
                    42:7e:c5:db:9c:e2:a0:7b:fc:c7:26:10:74:b2:f7:
                    ca:04:03:22:54:40:dd:aa:05:5f:49:aa:9f:15:f9:
                    09:dc:3a:ec:3e:2a:cb:a9:55:a8:f4:3e:dc:52:23:
                    f6:f9:83:b0:5f:69:8b:98:8c:72:c5:91:bb:1d:64:
                    21:9b:18:55:8d:08:26:21:4b:94:37:92:fb:0c:b6:
                    a1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C3:0E:4C:6F:5E:36:6D:44:3D:66:0E:47:F0:40:89:9F:D3:28:C3
            X509v3 Authority Key Identifier:
                keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:6c:01:cb:d1:b8:44:44:b8:8b:0d:49:3f:43:0c:0a:1c:07:
         b1:10:9f:f7:0a:2f:05:f4:cf:8a:54:71:01:83:29:71:69:95:
         41:40:74:84:3a:ab:8b:66:d5:98:84:11:d3:45:a5:80:bf:0d:
         54:04:74:03:73:8f:bb:c8:23:62:da:e4:7a:6b:3f:ce:35:0e:
         77:e9:dd:cc:b1:4d:25:af:83:0f:9e:4b:62:e9:44:c3:c6:2a:
         ad:fe:2a:18:49:eb:d3:17:4f:ed:2e:0a:e4:26:35:92:00:fb:
         12:4c:43:b0:79:89:a5:ac:53:1c:5f:20:cb:ec:24:b0:38:ba:
         2f:19:2c:1f:f9:a2:92:30:73:95:47:21:a9:f7:0f:b4:ac:86:
         fe:ca:a1:78:34:50:05:d3:27:81:14:3f:b4:8d:80:f0:6e:1a:
         9a:9e:4f:2c:6b:73:36:58:71:91:e9:9f:f5:00:0f:b2:fa:19:
         81:4b:ee:7c:de:6a:70:7b:8a:ad:9e:12:6a:d5:02:3b:c6:e8:
         f1:14:ff:5a:77:67:81:58:2e:2a:36:b6:89:9f:dd:99:67:53:
         db:43:25:79:c4:ad:34:d9:3f:28:29:fe:09:1f:a3:dc:a5:d8:
         3c:2f:19:dc:19:2c:2a:f8:14:8b:af:f6:09:45:69:32:aa:38:
         ba:5f:70:1c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkRGRkExMTAvBgNVBAUTKEY5RjdFOUI0Q0MzMUYzOTVDNUNEQjhGQUM5RjUyRkNB
NTc1MjRERTEwHhcNMjYwNzIzMDE0NjM1WhcNMjYwNzMwMDE0NjM1WjAYMRYwFAYD
VQQDEw02YTYxNzI3Yy03ZmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvLLYs78kmLUDaBrslHpfzk1vlOQ14sv91MWaE7fA7vvKyCW7k2V87w8F726k
zhp80yQcO27HtK9lUZLVKHBqPOm0zB8WiKJB2qVJm4yLgMEK1auZfiOSOlKuR9g8
EXnPnfxbIdEB+UUCw7Z4PpbbUQHMjlquhIHhFoGoiP0xolEI76CerGeGud/WW0fA
qB421z+cd9w42G47ycabGy0aTu2GuLCTBWDFTpEPKpKcoUj3OphCfsXbnOKge/zH
JhB0svfKBAMiVEDdqgVfSaqfFfkJ3DrsPirLqVWo9D7cUiP2+YOwX2mLmIxyxZG7
HWQhmxhVjQgmIUuUN5L7DLahzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAzDDkxv
XjZtRD1mDkfwQImf0yjDMB8GA1UdIwQYMBaAFPn36bTMMfOVxc24+sn1L8pXUk3h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREZGQS9DRTgxQTUxNDAz
MkMxMUVEQThDQjQwNkVDNEY5QUUwMi8tZmZwdE13eDg1WEZ6Ymo2eWZVdnlsZFNU
ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1mZnB0TXd4ODVYRnpiajZ5ZlV2eWxkU1RlRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
REZGQS9DRTgxQTUxNDAzMkMxMUVEQThDQjQwNkVDNEY5QUUwMi8tZmZwdE13eDg1
WEZ6Ymo2eWZVdnlsZFNUZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjGwBy9G4RES4iw1JP0MMChwHsRCf9wovBfTPilRxAYMpcWmVQUB0hDqri2bV
mIQR00WlgL8NVAR0A3OPu8gjYtrkems/zjUOd+ndzLFNJa+DD55LYulEw8Yqrf4q
GEnr0xdP7S4K5CY1kgD7EkxDsHmJpaxTHF8gy+wksDi6LxksH/mikjBzlUchqfcP
tKyG/sqheDRQBdMngRQ/tI2A8G4amp5PLGtzNlhxkemf9QAPsvoZgUvufN5qcHuK
rZ4SatUCO8bo8RT/WndngVguKja2iZ/dmWdT20MlecStNNk/KCn+CR+j3KXYPC8Z
3BksKvgUi6/2CUVpMqo4ul9wHA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:06 2026 by rpki-client