Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft
File:                     jBwU3BZ027aLSUMBWHs9L5jtcBs.mft (raw, json)
Hash identifier:          Xdzvs9PJNY2HAPkBnqAQP0+IoLZvPfjOmOas5KruQoc=
Subject key identifier:   C2:13:CB:2F:4A:6B:3C:94:16:4D:E1:38:D6:47:30:19:2C:F6:4D:99
Authority key identifier: 8C:1C:14:DC:16:74:DB:B6:8B:49:43:01:58:7B:3D:2F:98:ED:70:1B
Certificate issuer:       /CN=A912ECA4/serialNumber=8C1C14DC1674DBB68B494301587B3D2F98ED701B
Certificate serial:       01C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft
Manifest number:          01BF
Signing time:             Thu 23 Jul 2026 05:15:29 +0000
Manifest this update:     Thu 23 Jul 2026 05:15:28 +0000
Manifest next update:     Thu 30 Jul 2026 05:15:28 +0000
Files and hashes:         1: jBwU3BZ027aLSUMBWHs9L5jtcBs.crl (hash: XLei6inaG8APm/QQcUAp6lZ+ojL4vBDd6y0dYLXBJs4=)
                          2: 24241410E2A211EEBFC9412EC4F9AE02.roa (hash: Ai5vDwK8j+bPmD/vS73OlP9MaEpaSxs04+w/LkX/yQ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.crl
                          rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455 (0x1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912ECA4, serialNumber=8C1C14DC1674DBB68B494301587B3D2F98ED701B
        Validity
            Not Before: Jul 23 05:15:28 2026 GMT
            Not After : Jul 30 05:15:28 2026 GMT
        Subject: CN=6a61a371-99ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7a:8f:00:ec:dd:ef:57:be:ce:83:61:12:96:
                    e2:94:af:66:41:2d:5c:ee:d5:5d:0d:eb:1d:3b:3a:
                    68:84:77:07:c8:65:01:42:8d:16:72:69:d9:92:b8:
                    62:ce:6f:c2:5f:64:b1:51:33:3e:56:83:48:76:e5:
                    06:bb:93:57:21:39:89:f6:d0:52:8d:93:40:eb:fb:
                    c2:73:d4:59:e1:c8:b7:bf:2a:75:76:3e:df:1d:95:
                    bf:dd:f9:13:af:27:4e:c0:1d:4c:67:07:56:79:d8:
                    26:6f:f0:e6:62:a3:be:39:81:0d:06:dc:07:4d:c3:
                    f4:ab:4d:02:ad:79:58:61:02:bf:3f:00:ef:dc:5f:
                    ad:77:4d:8b:65:ac:f2:ae:91:5d:d4:d4:6e:12:71:
                    30:c3:ba:e8:8b:f9:1d:52:52:c5:a3:d4:22:7f:02:
                    98:0f:c7:c6:45:75:35:03:fc:b3:ed:29:97:4a:6b:
                    27:3c:a6:95:ba:3c:8b:31:6f:47:15:90:89:aa:3e:
                    08:31:41:41:de:60:d2:40:f6:c7:1d:d2:a7:33:89:
                    76:ec:ef:5c:d3:c8:2a:66:5d:68:6f:63:34:f9:fd:
                    07:52:2e:7c:b6:e6:06:cd:e7:65:86:d2:5d:e9:01:
                    40:01:4d:af:fb:0a:4a:d6:0a:fb:2a:f6:e6:bc:6c:
                    00:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:13:CB:2F:4A:6B:3C:94:16:4D:E1:38:D6:47:30:19:2C:F6:4D:99
            X509v3 Authority Key Identifier:
                keyid:8C:1C:14:DC:16:74:DB:B6:8B:49:43:01:58:7B:3D:2F:98:ED:70:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:65:ee:ab:6f:fa:49:92:0f:6d:f0:8b:80:bb:3d:f2:7d:85:
         c0:7a:74:cf:24:2c:be:57:3f:1b:f7:bc:e8:da:98:fe:ab:6f:
         02:72:99:71:9e:e2:41:cf:4d:b3:69:a7:a7:1d:dc:b8:1b:e3:
         2e:58:20:28:d2:31:ca:eb:e3:91:8f:97:44:53:3a:a4:ca:a0:
         29:ef:7a:be:a4:4f:45:ef:f7:69:c8:3c:9f:1c:9e:b5:bc:af:
         e9:57:4a:20:f5:05:6f:5c:a8:5e:c9:91:9a:d5:e4:32:9f:be:
         70:5a:d7:22:b9:8d:3e:53:7b:cf:0c:c5:ca:80:21:bb:26:de:
         02:0e:0c:e1:c1:be:28:e2:50:8a:76:ba:6e:7d:a6:ce:09:dc:
         f9:38:0b:cc:89:57:e1:a4:1d:bd:a4:2f:49:e9:b1:2a:23:33:
         57:0d:59:7e:7e:35:31:f3:7e:bf:13:d0:1e:1e:dd:fb:95:5c:
         ee:e4:3e:32:d6:97:de:9e:d8:7c:c5:0f:c8:9b:7f:5a:b5:32:
         4b:4b:9b:60:38:e8:12:f5:83:17:8a:41:6e:56:87:3d:b1:8e:
         dc:52:4a:a1:c4:b3:61:f5:1f:9b:4f:85:3b:b7:41:b3:a9:55:
         15:bf:c9:ce:25:58:d3:cf:db:07:8c:6f:1a:a9:57:56:3e:16:
         7f:43:10:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkVDQTQxMTAvBgNVBAUTKDhDMUMxNERDMTY3NERCQjY4QjQ5NDMwMTU4N0IzRDJG
OThFRDcwMUIwHhcNMjYwNzIzMDUxNTI4WhcNMjYwNzMwMDUxNTI4WjAYMRYwFAYD
VQQDEw02YTYxYTM3MS05OWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA23qPAOzd71e+zoNhEpbilK9mQS1c7tVdDesdOzpohHcHyGUBQo0WcmnZkrhi
zm/CX2SxUTM+VoNIduUGu5NXITmJ9tBSjZNA6/vCc9RZ4ci3vyp1dj7fHZW/3fkT
rydOwB1MZwdWedgmb/DmYqO+OYENBtwHTcP0q00CrXlYYQK/PwDv3F+td02LZazy
rpFd1NRuEnEww7roi/kdUlLFo9QifwKYD8fGRXU1A/yz7SmXSmsnPKaVujyLMW9H
FZCJqj4IMUFB3mDSQPbHHdKnM4l27O9c08gqZl1ob2M0+f0HUi58tuYGzedlhtJd
6QFAAU2v+wpK1gr7KvbmvGwA+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMITyy9K
azyUFk3hONZHMBks9k2ZMB8GA1UdIwQYMBaAFIwcFNwWdNu2i0lDAVh7PS+Y7XAb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUNBNC80ODVGMzM2QURD
RUQxMUVFQkJCRjQwMkZDNEY5QUUwMi9qQndVM0JaMDI3YUxTVU1CV0hzOUw1anRj
QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pCd1UzQlowMjdhTFNVTUJXSHM5TDVqdGNCcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RUNBNC80ODVGMzM2QURDRUQxMUVFQkJCRjQwMkZDNEY5QUUwMi9qQndVM0JaMDI3
YUxTVU1CV0hzOUw1anRjQnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQ2Xuq2/6SZIPbfCLgLs98n2FwHp0zyQsvlc/G/e86NqY/qtvAnKZcZ7iQc9N
s2mnpx3cuBvjLlggKNIxyuvjkY+XRFM6pMqgKe96vqRPRe/3acg8nxyetbyv6VdK
IPUFb1yoXsmRmtXkMp++cFrXIrmNPlN7zwzFyoAhuybeAg4M4cG+KOJQina6bn2m
zgnc+TgLzIlX4aQdvaQvSemxKiMzVw1Zfn41MfN+vxPQHh7d+5Vc7uQ+MtaX3p7Y
fMUPyJt/WrUyS0ubYDjoEvWDF4pBblaHPbGO3FJKocSzYfUfm0+FO7dBs6lVFb/J
ziVY08/bB4xvGqlXVj4Wf0MQdg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:17:12 2026 by rpki-client