Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
File:                     TDZeNqZHnY6wtQ2Q820dexnvhNM.mft (raw, json)
Hash identifier:          9wi9pYDXcdzpFt0SYNRtAWZ/jRTnunDfpB7QGMRvAVs=
Subject key identifier:   00:06:42:44:B1:04:C4:AF:C0:21:78:65:38:6A:5D:5E:E9:C9:31:6D
Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
Certificate issuer:       /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
Certificate serial:       0205
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
Manifest number:          01D0
Signing time:             Thu 23 Jul 2026 05:40:10 +0000
Manifest this update:     Thu 23 Jul 2026 05:40:10 +0000
Manifest next update:     Thu 30 Jul 2026 05:40:10 +0000
Files and hashes:         1: TDZeNqZHnY6wtQ2Q820dexnvhNM.crl (hash: VYcAO+lhDMelyo8UYFl3Xf70VL5qPTWd9dk/Zxgby9Y=)
                          2: 4699D9EADB0B11F0B7B5790A82D3641D.roa (hash: T2Foy9ASPzGFF0amgq/n/ifzed5ff9yCRwIVozmPQbI=)
                          3: CAF0BBBCDB0811F0A3EA0CD881D3641D.roa (hash: K6rhOjUE5MsA7iPT9OzT+5zbheWWIvW6req+7O+50Rk=)
                          4: ECDF4CE2DB0911F0B89EBE0382D3641D.roa (hash: +cfq+DBj705kE9pcPQ8fHhTnhcZwL0furcECRqclk3Y=)
                          5: 26B79D64E9FE11EF8751AE17C4F9AE02.roa (hash: CSwNiNiHBOdBkX8QVfEy5RdNRxWDtIIzMJX3lDPz73I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl
                          rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:40:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135B49, serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
        Validity
            Not Before: Jul 23 05:40:10 2026 GMT
            Not After : Jul 30 05:40:10 2026 GMT
        Subject: CN=6a61a93a-f5bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:19:71:cb:d9:b5:55:91:81:79:a3:48:a5:31:
                    e4:2b:a5:d9:e9:9b:38:10:f4:7c:30:a3:80:73:0a:
                    22:32:78:39:64:37:78:5a:a7:23:6f:6b:8d:4c:de:
                    07:9c:b4:e8:16:05:88:e0:4f:41:17:3d:0f:33:84:
                    80:83:02:8d:34:2a:55:24:5b:31:70:c2:05:ec:38:
                    42:2c:9f:96:38:68:07:5b:82:c8:d5:02:97:e5:7c:
                    d3:a3:bf:a0:10:c7:e5:55:02:8d:72:48:7a:c1:13:
                    f9:53:dc:81:f8:0f:47:d3:1e:cb:52:99:84:67:61:
                    2c:6e:79:30:82:7b:fb:42:59:03:b4:e2:0a:e7:0b:
                    a9:ea:b3:cf:fa:56:5d:df:d4:2b:a8:c0:12:47:35:
                    0b:dc:38:9d:fd:b2:f3:55:f7:29:c8:37:f6:3e:1c:
                    dc:0e:05:b9:3e:2d:32:a5:47:18:79:ed:66:5a:4e:
                    f1:af:39:12:fa:ba:4b:b4:bc:6f:d8:0b:e5:12:84:
                    bc:5a:c3:b0:a8:5b:d4:93:2f:4a:a6:af:cd:cd:2a:
                    17:fd:7b:da:f1:d8:79:ae:fd:b1:8f:23:ad:bd:ae:
                    f0:9b:e1:57:fe:1e:45:ba:89:7c:93:71:b3:20:2b:
                    66:b3:01:8f:07:bf:fb:21:39:fd:e4:01:c3:c3:a8:
                    57:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:06:42:44:B1:04:C4:AF:C0:21:78:65:38:6A:5D:5E:E9:C9:31:6D
            X509v3 Authority Key Identifier:
                keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:54:5c:76:61:72:60:11:6d:77:6b:df:9c:b0:60:c5:23:26:
         ff:fd:7e:05:4e:13:84:a8:1c:6d:53:4e:19:61:14:df:76:14:
         10:6e:be:a4:5a:72:76:4f:43:00:e1:51:92:60:3a:5b:00:0e:
         7f:49:af:e2:f3:21:5a:76:b7:f7:b3:17:ed:fb:72:4a:c7:26:
         9d:8f:ff:0a:f7:e4:c8:cd:6f:30:96:ed:6e:df:3d:8c:fd:00:
         64:ac:c0:06:43:19:ff:c8:ab:b3:30:63:be:a1:09:d4:96:3c:
         6b:f6:aa:31:cf:c7:19:25:d0:2d:93:66:a4:5a:db:3d:48:dd:
         75:56:36:76:13:19:e2:3c:cb:68:ca:de:88:db:4c:a8:fe:6b:
         12:d8:a1:e1:f1:01:4e:3c:17:04:e3:00:3b:7b:46:31:4c:d4:
         7a:77:54:cb:f7:94:0d:d1:24:4c:9b:54:3d:e0:2b:3b:d4:0d:
         6e:cc:b6:c3:fe:24:32:28:c9:9d:c1:d9:7d:3b:b7:66:ad:1e:
         ac:83:4b:b6:59:b5:ed:a1:9b:30:c7:eb:3d:57:d3:b9:33:d1:
         ca:2a:99:dc:7b:e7:29:28:90:cd:42:4f:7e:b6:5a:9c:28:77:
         cc:2f:bc:d8:4a:96:84:58:dd:73:f3:4a:dc:ff:1b:81:09:34:
         b9:81:77:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzVCNDkxMTAvBgNVBAUTKDRDMzY1RTM2QTY0NzlEOEVCMEI1MEQ5MEYzNkQxRDdC
MTlFRjg0RDMwHhcNMjYwNzIzMDU0MDEwWhcNMjYwNzMwMDU0MDEwWjAYMRYwFAYD
VQQDEw02YTYxYTkzYS1mNWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5Rlxy9m1VZGBeaNIpTHkK6XZ6Zs4EPR8MKOAcwoiMng5ZDd4Wqcjb2uNTN4H
nLToFgWI4E9BFz0PM4SAgwKNNCpVJFsxcMIF7DhCLJ+WOGgHW4LI1QKX5XzTo7+g
EMflVQKNckh6wRP5U9yB+A9H0x7LUpmEZ2Esbnkwgnv7QlkDtOIK5wup6rPP+lZd
39QrqMASRzUL3Did/bLzVfcpyDf2PhzcDgW5Pi0ypUcYee1mWk7xrzkS+rpLtLxv
2AvlEoS8WsOwqFvUky9Kpq/NzSoX/Xva8dh5rv2xjyOtva7wm+FX/h5Fuol8k3Gz
ICtmswGPB7/7ITn95AHDw6hXSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAAGQkSx
BMSvwCF4ZThqXV7pyTFtMB8GA1UdIwQYMBaAFEw2XjamR52OsLUNkPNtHXsZ74TT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUI0OS81MzE4QTEwODEy
MDExMUVGQURDODUzNDVDNEY5QUUwMi9URFplTnFaSG5ZNnd0UTJRODIwZGV4bnZo
Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1REWmVOcVpIblk2d3RRMlE4MjBkZXhudmhOTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NUI0OS81MzE4QTEwODEyMDExMUVGQURDODUzNDVDNEY5QUUwMi9URFplTnFaSG5Z
Nnd0UTJRODIwZGV4bnZoTk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXVRcdmFyYBFtd2vfnLBgxSMm//1+BU4ThKgcbVNOGWEU33YUEG6+pFpydk9D
AOFRkmA6WwAOf0mv4vMhWna397MX7ftySscmnY//CvfkyM1vMJbtbt89jP0AZKzA
BkMZ/8irszBjvqEJ1JY8a/aqMc/HGSXQLZNmpFrbPUjddVY2dhMZ4jzLaMreiNtM
qP5rEtih4fEBTjwXBOMAO3tGMUzUendUy/eUDdEkTJtUPeArO9QNbsy2w/4kMijJ
ncHZfTu3Zq0erINLtlm17aGbMMfrPVfTuTPRyiqZ3HvnKSiQzUJPfrZanCh3zC+8
2EqWhFjdc/NK3P8bgQk0uYF3og==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:17:46 2026 by rpki-client