Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
File:                     nAOc5JtXef24TeO2mPZ26EQjZnk.mft (raw, json)
Hash identifier:          yFGoyVz+DmHgPKgzs+1ixZ/h6v+vfznvnQIobgd/Vnw=
Subject key identifier:   A7:03:CD:94:DF:32:D7:D4:4F:CF:C9:03:83:B0:F2:47:7D:53:D6:4B
Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79
Certificate issuer:       /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
Certificate serial:       1ED7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
Manifest number:          1EC6
Signing time:             Wed 22 Jul 2026 16:07:33 +0000
Manifest this update:     Wed 22 Jul 2026 16:07:33 +0000
Manifest next update:     Wed 29 Jul 2026 16:07:33 +0000
Files and hashes:         1: nAOc5JtXef24TeO2mPZ26EQjZnk.crl (hash: OB5T8DrVAx2wsE1zhcri4dh3FCd8b8bayvEmnrIbF5Q=)
                          2: EF2F0372C9F211E986C3B486C4F9AE02.roa (hash: GbvfW/6Ib8dXYNkAkbSHRCSasYlTVMWPyWuYYz80j2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl
                          rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7895 (0x1ed7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
        Validity
            Not Before: Jul 22 16:07:33 2026 GMT
            Not After : Jul 29 16:07:33 2026 GMT
        Subject: CN=6a60eac5-f1a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:cd:c3:83:24:3d:03:9f:ee:24:83:e1:f2:0c:
                    4f:5e:14:d8:c0:04:20:b6:91:eb:42:26:f0:4b:e3:
                    2f:0e:39:35:15:86:5b:5e:3b:1f:1d:ae:fe:8f:05:
                    cd:31:4b:ad:aa:77:64:63:0e:07:a3:20:67:2c:e2:
                    02:54:86:71:90:01:c3:94:e1:f3:34:96:58:77:27:
                    af:46:b4:e0:12:d9:95:75:71:ab:2f:1d:6c:03:94:
                    a8:b6:fb:4c:6e:4a:95:3d:5d:2a:3e:52:0b:29:54:
                    90:60:be:ea:d4:a6:9f:18:e0:f5:ed:5b:6a:d6:1e:
                    f9:1e:33:fe:78:79:7e:b6:46:b0:73:2f:6b:d7:2f:
                    31:e9:b8:b1:50:cb:65:a8:79:66:49:5b:35:cf:39:
                    92:81:bc:f0:8b:be:ec:67:5e:c6:ca:e0:cf:62:f5:
                    4c:13:3b:0d:15:73:98:08:81:6e:6f:bb:b8:f4:e9:
                    e6:9b:08:79:4d:e8:19:cd:56:0e:76:0f:30:ed:59:
                    c1:93:8e:7c:3d:a0:ee:73:7a:87:8a:db:ce:8e:15:
                    ea:41:d7:90:38:10:3e:99:91:cc:7f:79:fe:00:ff:
                    b0:85:ed:03:e6:f4:3d:e8:0d:7b:f4:cf:d5:ac:89:
                    e8:a4:ac:1a:55:01:0f:40:09:f5:1c:b6:71:64:2b:
                    4d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:03:CD:94:DF:32:D7:D4:4F:CF:C9:03:83:B0:F2:47:7D:53:D6:4B
            X509v3 Authority Key Identifier:
                keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b7:3f:92:e6:23:3e:cb:bd:63:32:e1:36:3d:97:83:54:9c:
         cb:d8:3b:3d:5b:53:aa:28:bb:6e:a1:b7:47:0c:97:56:86:f4:
         0a:cd:56:75:1c:24:20:d9:6b:05:dc:57:6f:5b:75:eb:ce:05:
         bc:f6:de:42:54:f8:3a:12:a1:54:47:9c:2a:85:02:bc:1d:e0:
         81:15:f1:04:9d:3f:b3:57:64:cd:98:e7:8b:62:58:6b:29:88:
         d2:40:44:4e:c2:ac:d5:b3:83:e4:b1:cc:d6:09:e3:ce:24:e7:
         e5:16:84:30:9e:24:fd:74:13:43:b8:32:f9:16:0f:4c:98:4f:
         24:3c:ab:d5:ee:32:83:5c:26:df:00:3e:fe:3e:c5:3c:7c:65:
         25:dc:fb:09:3d:1e:0b:0c:f8:03:9f:7f:9a:9e:9e:25:08:ba:
         e0:07:63:6d:37:6e:55:7b:2a:8a:41:eb:e1:9f:02:12:6b:b8:
         58:a6:59:08:68:e5:0b:54:57:77:b7:2c:04:bb:12:bd:4f:03:
         fa:76:cf:cb:07:76:be:eb:cc:e5:ee:41:40:ad:a1:b2:eb:cb:
         3c:45:ea:c6:4d:2d:c1:b5:49:c0:db:5d:2e:49:12:f3:3f:7c:
         f8:84:5e:03:fe:2d:f9:ba:11:b3:0c:6c:60:d0:21:fe:fe:51:
         5f:ea:55:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzRBRDcxMTAvBgNVBAUTKDlDMDM5Q0U0OUI1Nzc5RkRCODRERTNCNjk4RjY3NkU4
NDQyMzY2NzkwHhcNMjYwNzIyMTYwNzMzWhcNMjYwNzI5MTYwNzMzWjAYMRYwFAYD
VQQDEw02YTYwZWFjNS1mMWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+s3DgyQ9A5/uJIPh8gxPXhTYwAQgtpHrQibwS+MvDjk1FYZbXjsfHa7+jwXN
MUutqndkYw4HoyBnLOICVIZxkAHDlOHzNJZYdyevRrTgEtmVdXGrLx1sA5SotvtM
bkqVPV0qPlILKVSQYL7q1KafGOD17Vtq1h75HjP+eHl+tkawcy9r1y8x6bixUMtl
qHlmSVs1zzmSgbzwi77sZ17GyuDPYvVMEzsNFXOYCIFub7u49Onmmwh5TegZzVYO
dg8w7VnBk458PaDuc3qHitvOjhXqQdeQOBA+mZHMf3n+AP+whe0D5vQ96A179M/V
rInopKwaVQEPQAn1HLZxZCtNvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKcDzZTf
MtfUT8/JA4Ow8kd9U9ZLMB8GA1UdIwQYMBaAFJwDnOSbV3n9uE3jtpj2duhEI2Z5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEFENy9FMzdFQzhFNjhG
NEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVmMjRUZU8ybVBaMjZFUWpa
bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25BT2M1SnRYZWYyNFRlTzJtUFoyNkVRalpuay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NEFENy9FMzdFQzhFNjhGNEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVm
MjRUZU8ybVBaMjZFUWpabmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbbc/kuYjPsu9YzLhNj2Xg1Scy9g7PVtTqii7bqG3RwyXVob0Cs1WdRwkINlr
BdxXb1t1684FvPbeQlT4OhKhVEecKoUCvB3ggRXxBJ0/s1dkzZjni2JYaymI0kBE
TsKs1bOD5LHM1gnjziTn5RaEMJ4k/XQTQ7gy+RYPTJhPJDyr1e4yg1wm3wA+/j7F
PHxlJdz7CT0eCwz4A59/mp6eJQi64AdjbTduVXsqikHr4Z8CEmu4WKZZCGjlC1RX
d7csBLsSvU8D+nbPywd2vuvM5e5BQK2hsuvLPEXqxk0twbVJwNtdLkkS8z98+IRe
A/4t+boRswxsYNAh/v5RX+pVgQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:01:19 2026 by rpki-client