Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
File:                     B3vNZjsOY7316bgJr3Gu8eWt9js.mft (raw, json)
Hash identifier:          YhS4f/BK+4L2jfi5LXw7ZRIRpEqqHZ40p19wyjMO+u8=
Subject key identifier:   1E:B6:F1:76:CB:02:0C:1F:A6:97:C8:7D:1B:C7:05:92:D9:E6:51:B3
Authority key identifier: 07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B
Certificate issuer:       /CN=A9134309/serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
Certificate serial:       E5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
Manifest number:          DC
Signing time:             Thu 23 Jul 2026 08:26:17 +0000
Manifest this update:     Thu 23 Jul 2026 08:26:17 +0000
Manifest next update:     Thu 30 Jul 2026 08:26:17 +0000
Files and hashes:         1: B3vNZjsOY7316bgJr3Gu8eWt9js.crl (hash: BHtIDoFb28vB4LgN1/HRFBAWWUFVtrCa+ksh4SEzbgo=)
                          2: 13CC532280EC11F0A973810CC4F9AE02.roa (hash: JqgQRdLeaIMLexLk5Sg27CS93/2/7D3KXGP9opjlvo0=)
                          3: 0322BF5A6D3411F0A208C05DC4F9AE02.roa (hash: S+CNDCXqBAPQY2/ZroCNVvDaAZiKggJqTG4IMa7VBfA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl
                          rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134309, serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
        Validity
            Not Before: Jul 23 08:26:17 2026 GMT
            Not After : Jul 30 08:26:17 2026 GMT
        Subject: CN=6a61d029-8a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:49:6d:25:f3:f0:cb:09:4c:65:aa:cb:0a:81:
                    68:6c:97:98:de:d1:eb:76:b0:91:9a:56:87:b0:9f:
                    8f:eb:2e:49:04:12:c8:b6:ea:6b:bc:85:1b:bf:cf:
                    2b:2e:ce:3c:a0:04:be:b3:f2:b0:96:95:28:c1:41:
                    9b:e4:db:03:e4:b7:7a:c2:7f:4f:e4:a9:e4:03:68:
                    9e:4d:2d:c2:96:1f:12:26:e5:4c:75:31:97:dd:92:
                    cb:bb:93:67:b4:34:7d:5c:95:74:2e:61:44:1b:18:
                    e7:a4:8b:cb:06:9f:8b:3e:b7:f7:52:92:75:65:d8:
                    a7:48:65:fd:68:b9:18:25:0e:ac:46:c5:c4:7a:22:
                    c6:6c:ce:38:76:49:33:ae:79:1d:19:17:51:48:c3:
                    a4:6e:b9:de:68:7c:2f:e8:eb:a6:25:b5:20:a7:f3:
                    ae:c6:87:eb:5e:cc:18:58:4f:05:e9:4b:8e:28:a4:
                    82:22:e7:38:a0:08:4a:fa:14:15:d6:7a:81:c5:55:
                    40:dd:27:1d:5c:94:16:9c:14:bc:91:bc:9d:c8:96:
                    4a:b4:9f:d8:6c:58:1f:4e:3e:f3:f7:75:ba:8f:85:
                    72:6c:e1:78:75:55:40:57:8a:56:25:29:3f:81:cf:
                    78:b8:fb:0a:7e:f4:b7:90:fd:62:32:ff:2a:12:db:
                    45:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B6:F1:76:CB:02:0C:1F:A6:97:C8:7D:1B:C7:05:92:D9:E6:51:B3
            X509v3 Authority Key Identifier:
                keyid:07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:7b:8c:3c:72:ec:c1:bf:99:9b:7e:cf:1f:57:be:00:ed:37:
         4f:0e:55:e7:93:ef:c5:bf:e6:cc:ec:a3:31:ca:0f:e5:2e:c5:
         6b:cc:31:41:32:7d:d1:df:29:f8:03:6e:c9:4a:38:8a:2f:0b:
         47:ae:00:63:44:a2:16:c5:d3:8b:ab:df:59:55:ec:dd:0d:43:
         32:25:91:a8:15:33:0a:44:6a:69:3d:52:2c:30:de:db:35:20:
         e2:92:65:2e:f1:dc:f9:43:0b:a4:31:8b:a5:bc:af:24:57:3c:
         48:23:c8:03:66:1d:e3:d3:f1:82:ff:93:e8:1b:f7:99:5a:7c:
         a0:77:7b:c1:35:5a:88:a1:64:ce:9e:05:55:f8:ff:33:40:a1:
         04:fb:ef:c5:ea:e3:55:01:a9:88:da:dd:4e:23:e5:52:1b:cf:
         89:2c:d7:33:15:4f:b5:8a:50:79:15:ca:3c:70:5d:ad:c2:aa:
         b7:f5:3a:fb:e0:b5:df:6f:bd:f9:ba:96:65:52:54:db:1d:33:
         d5:40:45:72:c7:8e:02:86:be:c3:b1:34:7d:06:d7:1d:db:cd:
         a5:d8:66:5a:b0:e4:79:33:37:2d:82:ff:a7:ba:0e:0d:ef:88:
         18:7e:a7:98:3e:a1:74:df:fb:61:73:a6:94:dd:ba:c3:3e:1c:
         73:f8:7e:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQzMDkxMTAvBgNVBAUTKDA3N0JDRDY2M0IwRTYzQkRGNUU5QjgwOUFGNzFBRUYx
RTVBREY2M0IwHhcNMjYwNzIzMDgyNjE3WhcNMjYwNzMwMDgyNjE3WjAYMRYwFAYD
VQQDEw02YTYxZDAyOS04YTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs0ltJfPwywlMZarLCoFobJeY3tHrdrCRmlaHsJ+P6y5JBBLItuprvIUbv88r
Ls48oAS+s/KwlpUowUGb5NsD5Ld6wn9P5KnkA2ieTS3Clh8SJuVMdTGX3ZLLu5Nn
tDR9XJV0LmFEGxjnpIvLBp+LPrf3UpJ1ZdinSGX9aLkYJQ6sRsXEeiLGbM44dkkz
rnkdGRdRSMOkbrneaHwv6OumJbUgp/OuxofrXswYWE8F6UuOKKSCIuc4oAhK+hQV
1nqBxVVA3ScdXJQWnBS8kbydyJZKtJ/YbFgfTj7z93W6j4VybOF4dVVAV4pWJSk/
gc94uPsKfvS3kP1iMv8qEttFGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB628XbL
AgwfppfIfRvHBZLZ5lGzMB8GA1UdIwQYMBaAFAd7zWY7DmO99em4Ca9xrvHlrfY7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDMwOS9ENDFGQTMyQzNF
RTMxMUYwQjkzOTg0NDJDNEY5QUUwMi9CM3ZOWmpzT1k3MzE2YmdKcjNHdThlV3Q5
anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0Izdk5aanNPWTczMTZiZ0pyM0d1OGVXdDlqcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDMwOS9ENDFGQTMyQzNFRTMxMUYwQjkzOTg0NDJDNEY5QUUwMi9CM3ZOWmpzT1k3
MzE2YmdKcjNHdThlV3Q5anMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWXuMPHLswb+Zm37PH1e+AO03Tw5V55Pvxb/mzOyjMcoP5S7Fa8wxQTJ90d8p
+ANuyUo4ii8LR64AY0SiFsXTi6vfWVXs3Q1DMiWRqBUzCkRqaT1SLDDe2zUg4pJl
LvHc+UMLpDGLpbyvJFc8SCPIA2Yd49Pxgv+T6Bv3mVp8oHd7wTVaiKFkzp4FVfj/
M0ChBPvvxerjVQGpiNrdTiPlUhvPiSzXMxVPtYpQeRXKPHBdrcKqt/U6++C132+9
+bqWZVJU2x0z1UBFcseOAoa+w7E0fQbXHdvNpdhmWrDkeTM3LYL/p7oODe+IGH6n
mD6hdN/7YXOmlN26wz4cc/h+OQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:15:25 2026 by rpki-client