Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft
File:                     JG9qS-FbAM_sDcOZpehDn5OckXQ.mft (raw, json)
Hash identifier:          YVDQ7MrjnV2uReReWFon69+g11mANku/I5A0YpPs6CA=
Subject key identifier:   5A:AE:E3:66:B4:CB:C1:61:4D:C1:0F:F6:02:2B:0B:C0:C6:D4:60:CD
Authority key identifier: 24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74
Certificate issuer:       /CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174
Certificate serial:       07E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft
Manifest number:          07BD
Signing time:             Wed 22 Jul 2026 22:06:26 +0000
Manifest this update:     Wed 22 Jul 2026 22:06:26 +0000
Manifest next update:     Wed 29 Jul 2026 22:06:26 +0000
Files and hashes:         1: JG9qS-FbAM_sDcOZpehDn5OckXQ.crl (hash: 1A99/2h+aBMrUip/78A4DGz6FxWjil1xjUfTCRDOxGY=)
                          2: DD9876F4B19911EFA6C3FD55C4F9AE02.roa (hash: OlUYHfxgsq3VvSrhhkQb6Q/TDtAt7UfH0OhxtkAQu0U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl
                          rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2017 (0x7e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E99B, serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174
        Validity
            Not Before: Jul 22 22:06:26 2026 GMT
            Not After : Jul 29 22:06:26 2026 GMT
        Subject: CN=6a613ee2-bcfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c4:07:fc:5a:25:df:ff:f2:6f:d0:a1:2c:91:
                    bf:02:26:33:10:dd:18:5b:ea:10:e0:ce:55:50:4d:
                    f4:86:61:de:cf:76:20:cc:fd:26:de:4a:62:43:84:
                    c6:bf:03:f3:83:ef:c8:24:18:1d:29:87:f0:9b:bf:
                    4d:1c:3c:81:78:3a:60:87:ff:82:d2:38:0d:bf:7a:
                    a4:cf:4c:c1:80:cf:4e:50:f7:98:a0:71:89:b6:67:
                    4d:2e:43:67:7f:32:20:ec:c7:84:9d:4d:71:8a:95:
                    06:78:59:94:b3:09:fb:15:17:29:d1:f1:8a:a2:8a:
                    d0:b4:47:b2:41:26:c2:86:79:7c:8e:0a:26:7a:c0:
                    80:a7:c3:ff:8e:a9:6c:37:12:fe:b0:16:3b:e0:25:
                    f3:14:b4:05:aa:c7:2c:e6:c3:4b:d3:96:5e:89:61:
                    a4:fa:23:24:17:bd:28:fa:87:84:21:42:7c:45:6c:
                    3d:b9:6b:55:45:a3:92:0f:f9:3c:70:20:a7:f2:2d:
                    72:2f:6e:0c:62:cc:25:6f:00:d1:81:2a:6e:7d:0a:
                    0f:3a:29:94:b9:40:47:a3:95:56:a1:89:1a:bc:e4:
                    18:30:78:af:d9:15:73:37:5f:c5:e7:5d:31:78:f1:
                    4a:88:23:25:df:a2:07:9e:94:7b:05:e2:61:a6:9d:
                    4e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AE:E3:66:B4:CB:C1:61:4D:C1:0F:F6:02:2B:0B:C0:C6:D4:60:CD
            X509v3 Authority Key Identifier:
                keyid:24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:82:63:03:b2:ff:9d:70:13:26:39:1e:49:9f:3e:dd:d4:d1:
         09:f7:b4:0e:e5:be:00:8a:94:d7:f2:10:39:4e:4f:f6:c1:cb:
         6b:aa:81:bd:53:d7:ac:60:2a:0b:9a:0a:0d:d1:01:32:f5:c0:
         f6:38:f0:6a:f9:b2:f7:53:24:a4:07:f4:46:51:b0:25:cd:ae:
         15:66:43:0f:9d:fa:7e:35:23:64:a3:3b:d5:72:e4:60:05:8f:
         43:ea:81:f3:c3:3d:b0:03:72:9e:b6:79:0e:66:50:d0:cb:9f:
         12:b5:65:e2:4e:c2:84:c6:43:8d:2d:3f:c5:8a:98:1a:a1:eb:
         98:cc:6f:5c:b5:12:10:11:6e:c1:5e:0b:3b:30:6d:a1:46:cc:
         11:a2:57:59:c3:2a:22:06:eb:0a:0a:ca:c3:05:40:40:c6:85:
         35:32:f6:f7:bb:fb:a5:09:a2:4e:34:f6:d7:2f:13:0b:bc:02:
         b2:1a:1e:44:69:0a:24:8d:4a:32:98:2e:5f:96:af:bf:cf:6c:
         e5:d3:cc:33:2b:c5:13:2a:9c:e5:33:42:36:54:95:c0:1b:55:
         3e:e9:06:cb:0f:d9:e6:bd:3a:91:77:50:d6:f7:31:0d:5a:6f:
         7e:cb:21:25:52:22:fe:c1:1d:c1:ea:40:3e:d2:6a:ef:41:bd:
         d0:6f:9b:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkU5OUIxMTAvBgNVBAUTKDI0NkY2QTRCRTE1QjAwQ0ZFQzBEQzM5OUE1RTg0MzlG
OTM5QzkxNzQwHhcNMjYwNzIyMjIwNjI2WhcNMjYwNzI5MjIwNjI2WjAYMRYwFAYD
VQQDEw02YTYxM2VlMi1iY2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3cQH/Fol3//yb9ChLJG/AiYzEN0YW+oQ4M5VUE30hmHez3YgzP0m3kpiQ4TG
vwPzg+/IJBgdKYfwm79NHDyBeDpgh/+C0jgNv3qkz0zBgM9OUPeYoHGJtmdNLkNn
fzIg7MeEnU1xipUGeFmUswn7FRcp0fGKoorQtEeyQSbChnl8jgomesCAp8P/jqls
NxL+sBY74CXzFLQFqscs5sNL05ZeiWGk+iMkF70o+oeEIUJ8RWw9uWtVRaOSD/k8
cCCn8i1yL24MYswlbwDRgSpufQoPOimUuUBHo5VWoYkavOQYMHiv2RVzN1/F510x
ePFKiCMl36IHnpR7BeJhpp1OPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFqu42a0
y8FhTcEP9gIrC8DG1GDNMB8GA1UdIwQYMBaAFCRvakvhWwDP7A3DmaXoQ5+TnJF0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5Qi83MzNEQTRFODVC
MzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFNX3NEY09acGVoRG41T2Nr
WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pHOXFTLUZiQU1fc0RjT1pwZWhEbjVPY2tYUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RTk5Qi83MzNEQTRFODVCMzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFN
X3NEY09acGVoRG41T2NrWFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXYJjA7L/nXATJjkeSZ8+3dTRCfe0DuW+AIqU1/IQOU5P9sHLa6qBvVPXrGAq
C5oKDdEBMvXA9jjwavmy91MkpAf0RlGwJc2uFWZDD536fjUjZKM71XLkYAWPQ+qB
88M9sANynrZ5DmZQ0MufErVl4k7ChMZDjS0/xYqYGqHrmMxvXLUSEBFuwV4LOzBt
oUbMEaJXWcMqIgbrCgrKwwVAQMaFNTL297v7pQmiTjT21y8TC7wCshoeRGkKJI1K
MpguX5avv89s5dPMMyvFEyqc5TNCNlSVwBtVPukGyw/Z5r06kXdQ1vcxDVpvfssh
JVIi/sEdwepAPtJq70G90G+bbQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:52:40 2026 by rpki-client