Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
File:                     -o32EYRRvVM4cqyjdiK_c77RlEE.mft (raw, json)
Hash identifier:          Tvt+UL8E/DP6HgsAvT78oDsA7nhFCS4cKXzGXpcYPg0=
Subject key identifier:   56:42:F0:BF:56:42:E9:E8:13:44:0C:30:6D:44:1F:57:86:DF:0B:0A
Authority key identifier: FA:8D:F6:11:84:51:BD:53:38:72:AC:A3:76:22:BF:73:BE:D1:94:41
Certificate issuer:       /CN=A9135450/serialNumber=FA8DF6118451BD533872ACA37622BF73BED19441
Certificate serial:       0339
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
Manifest number:          0333
Signing time:             Thu 23 Jul 2026 02:01:01 +0000
Manifest this update:     Thu 23 Jul 2026 02:01:00 +0000
Manifest next update:     Thu 30 Jul 2026 02:01:00 +0000
Files and hashes:         1: -o32EYRRvVM4cqyjdiK_c77RlEE.crl (hash: UofLosr+kEIGSLE/tXF9otbgsE3blRu9hBPpZ3ykk34=)
                          2: CA57150418B311EDB72D3165C4F9AE02.roa (hash: EI6GzHfnkWqNaMVXOSJiD8mcwGEHnHoi3RAZSaS8pSA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.crl
                          rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 825 (0x339)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135450, serialNumber=FA8DF6118451BD533872ACA37622BF73BED19441
        Validity
            Not Before: Jul 23 02:01:00 2026 GMT
            Not After : Jul 30 02:01:00 2026 GMT
        Subject: CN=6a6175dd-6c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8a:5f:85:f0:ee:f6:14:76:da:d4:28:b6:ba:
                    41:fc:43:6a:67:9c:87:b7:c8:3e:25:77:b4:1a:30:
                    a5:15:b2:a7:72:5c:25:02:f4:59:fd:c4:96:7a:d4:
                    27:ff:03:8e:35:1f:4f:5e:67:ab:ba:a2:9b:47:bd:
                    ff:f3:e6:84:9a:39:22:0c:cc:8e:3a:e5:7b:43:b1:
                    59:0c:c0:a9:dd:0e:08:bd:49:de:dd:bf:25:df:fb:
                    5d:81:c7:d9:76:4b:70:73:ed:3c:ff:e2:c9:0b:cd:
                    20:a2:e1:49:96:8b:54:0d:43:72:e8:3a:1f:a1:69:
                    6d:06:00:ee:09:c6:da:d5:fb:ef:84:34:d4:48:7e:
                    50:dc:85:c3:c3:8f:15:7a:b0:4b:44:79:f9:24:93:
                    7d:de:15:4c:ee:37:77:d0:e3:b7:b4:47:b6:59:29:
                    d2:a7:8d:55:2a:14:b7:ef:ad:a1:20:c1:e9:6a:43:
                    83:ee:87:c1:c1:3b:05:38:cc:f8:d5:a8:ae:c8:ce:
                    bd:91:f8:23:49:59:68:59:71:2d:e0:7c:b4:fc:a9:
                    b5:5d:fc:79:dd:8b:60:b7:31:07:50:cf:cd:ef:70:
                    be:bd:00:7f:40:f3:a3:b3:e1:97:75:f5:da:a2:be:
                    51:c7:b7:2a:4e:8e:89:43:6b:92:9c:90:e3:27:5b:
                    0d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:42:F0:BF:56:42:E9:E8:13:44:0C:30:6D:44:1F:57:86:DF:0B:0A
            X509v3 Authority Key Identifier:
                keyid:FA:8D:F6:11:84:51:BD:53:38:72:AC:A3:76:22:BF:73:BE:D1:94:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:e7:4c:78:0e:29:10:4e:15:2b:df:51:e3:1b:cf:b2:10:e8:
         e1:bf:cf:a4:79:44:1c:3b:5b:21:82:38:ee:f1:26:48:15:ab:
         27:39:56:2d:e1:53:e9:e0:97:01:17:78:aa:44:0b:56:10:87:
         44:69:12:85:7a:ee:f1:b9:cb:ef:7f:8b:01:58:88:4f:b7:0a:
         72:e9:28:50:e2:ee:58:89:aa:1a:37:b2:71:28:38:f4:c3:ac:
         5b:9b:a9:ad:34:13:34:d0:a3:6f:ce:1b:35:14:0e:dd:5f:1b:
         2a:df:cb:0f:ac:ad:08:ce:b5:e8:ea:2f:cd:4a:69:df:18:ad:
         a7:6d:88:9b:c0:10:15:c1:de:0f:8c:c9:2f:26:2c:7c:2e:f8:
         48:89:2f:ed:c7:e7:fb:9f:25:15:e2:02:65:57:ee:b6:3a:c8:
         3d:0c:e2:82:a2:3a:d0:11:de:ab:fc:76:20:af:44:7e:97:ae:
         8e:cf:42:b7:3a:85:5b:1f:f8:ad:17:f1:ca:9f:7e:e5:8c:a2:
         e5:29:cd:bb:f8:e3:22:1c:45:93:0b:63:4a:18:ef:60:de:b1:
         e0:30:a3:b5:38:46:ae:ad:5c:bf:8c:92:0a:ca:9e:13:1e:8a:
         4d:a6:c9:34:ce:8e:55:e7:ce:bb:00:5b:47:11:21:73:d5:8d:
         8d:cf:fb:62
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzU0NTAxMTAvBgNVBAUTKEZBOERGNjExODQ1MUJENTMzODcyQUNBMzc2MjJCRjcz
QkVEMTk0NDEwHhcNMjYwNzIzMDIwMTAwWhcNMjYwNzMwMDIwMTAwWjAYMRYwFAYD
VQQDEw02YTYxNzVkZC02YzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtIpfhfDu9hR22tQotrpB/ENqZ5yHt8g+JXe0GjClFbKnclwlAvRZ/cSWetQn
/wOONR9PXmeruqKbR73/8+aEmjkiDMyOOuV7Q7FZDMCp3Q4IvUne3b8l3/tdgcfZ
dktwc+08/+LJC80gouFJlotUDUNy6DofoWltBgDuCcba1fvvhDTUSH5Q3IXDw48V
erBLRHn5JJN93hVM7jd30OO3tEe2WSnSp41VKhS3762hIMHpakOD7ofBwTsFOMz4
1aiuyM69kfgjSVloWXEt4Hy0/Km1Xfx53YtgtzEHUM/N73C+vQB/QPOjs+GXdfXa
or5Rx7cqTo6JQ2uSnJDjJ1sNKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFZC8L9W
QunoE0QMMG1EH1eG3wsKMB8GA1UdIwQYMBaAFPqN9hGEUb1TOHKso3Yiv3O+0ZRB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTQ1MC84NDNEQzY5NjE4
QjExMUVEQkVDNUZFNjNDNEY5QUUwMi8tbzMyRVlSUnZWTTRjcXlqZGlLX2M3N1Js
RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1vMzJFWVJSdlZNNGNxeWpkaUtfYzc3UmxFRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NTQ1MC84NDNEQzY5NjE4QjExMUVEQkVDNUZFNjNDNEY5QUUwMi8tbzMyRVlSUnZW
TTRjcXlqZGlLX2M3N1JsRUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkOdMeA4pEE4VK99R4xvPshDo4b/PpHlEHDtbIYI47vEmSBWrJzlWLeFT6eCX
ARd4qkQLVhCHRGkShXru8bnL73+LAViIT7cKcukoUOLuWImqGjeycSg49MOsW5up
rTQTNNCjb84bNRQO3V8bKt/LD6ytCM616OovzUpp3xitp22Im8AQFcHeD4zJLyYs
fC74SIkv7cfn+58lFeICZVfutjrIPQzigqI60BHeq/x2IK9Efpeujs9CtzqFWx/4
rRfxyp9+5Yyi5SnNu/jjIhxFkwtjShjvYN6x4DCjtThGrq1cv4ySCsqeEx6KTabJ
NM6OVefOuwBbRxEhc9WNjc/7Yg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:56:42 2026 by rpki-client