Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
File:                     ny5XiO95WFurdhmHfTlierLl1Rk.mft (raw, json)
Hash identifier:          PLrb/fM3rdpwlcr3OvB02vsn44WXrAzb3u51TUBTDqI=
Subject key identifier:   1F:BA:AA:D3:43:2A:71:FD:CD:F4:C1:28:D4:A7:40:03:F1:21:10:66
Authority key identifier: 9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19
Certificate issuer:       /CN=A913A7A6/serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519
Certificate serial:       0AF1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
Manifest number:          0AE7
Signing time:             Wed 22 Jul 2026 19:45:22 +0000
Manifest this update:     Wed 22 Jul 2026 19:45:21 +0000
Manifest next update:     Wed 29 Jul 2026 19:45:21 +0000
Files and hashes:         1: ny5XiO95WFurdhmHfTlierLl1Rk.crl (hash: 01SrDXT/ViEmNP3xN+lIr7rt5pFEzO7vJL8fjEXFTPo=)
                          2: 4DAFC184ADC011ED897A4050C4F9AE02.roa (hash: v2saofmL0m7GfqQUIwDfIhLfQiWIxApSuK3jNuC63SE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl
                          rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:45:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2801 (0xaf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A7A6, serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519
        Validity
            Not Before: Jul 22 19:45:21 2026 GMT
            Not After : Jul 29 19:45:21 2026 GMT
        Subject: CN=6a611dd2-93ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0d:e2:04:61:9a:fa:0e:74:23:6f:73:38:59:
                    22:bf:e0:2b:ef:8d:ca:b8:e4:17:39:f1:06:48:c3:
                    54:38:cf:a6:df:ec:12:6f:48:d8:25:54:cb:b1:a8:
                    a1:0d:63:28:ce:a7:6a:40:d6:ac:28:61:fc:38:b2:
                    62:22:de:8e:30:2f:cb:be:3e:03:e7:d0:75:67:7f:
                    5d:70:84:bd:2e:ba:6e:81:27:97:da:30:4a:6c:92:
                    3a:eb:d3:dd:b8:a6:44:88:fa:1c:25:d4:24:64:f3:
                    73:ab:a9:2a:ee:ab:99:76:12:87:d3:c6:43:65:15:
                    c9:e6:ff:f5:70:8e:03:b4:d6:77:1d:cf:ee:05:12:
                    5c:98:58:5b:f2:f4:ed:36:9e:34:bd:f4:5c:81:52:
                    d2:f2:ce:05:95:c8:7e:d9:ff:6a:d4:0d:e8:80:87:
                    e3:c1:67:7d:4d:e2:1b:36:5e:ea:cc:af:6e:4e:29:
                    41:99:e9:df:11:a5:42:5f:78:85:34:2d:94:b6:1d:
                    24:f6:64:22:7c:17:53:ab:88:6c:63:95:e3:47:75:
                    47:f5:73:a5:d6:38:c0:b8:ac:5d:e5:f7:39:28:11:
                    a4:49:0e:8b:e5:63:90:60:0b:37:35:31:b4:ae:a5:
                    f4:e6:3b:e8:06:e3:3b:7e:0c:da:bb:22:b8:b4:d0:
                    52:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BA:AA:D3:43:2A:71:FD:CD:F4:C1:28:D4:A7:40:03:F1:21:10:66
            X509v3 Authority Key Identifier:
                keyid:9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:44:52:ab:9c:20:7f:72:d2:73:ce:ab:a8:52:01:80:cc:aa:
         ba:b2:78:6c:f6:5d:78:1b:76:c1:46:67:1b:9b:dc:0f:a7:a3:
         dd:6d:dc:f4:c1:49:fe:bb:4d:36:62:9c:bf:8c:d1:65:24:51:
         76:97:33:aa:e9:54:ae:eb:e6:f4:36:f3:6a:b1:dc:f3:65:f5:
         fb:04:02:72:03:da:50:44:29:1b:7d:b3:b5:f3:70:05:52:d4:
         1e:e5:7c:c6:28:c7:b4:10:d7:5d:b4:a3:ed:3e:62:5d:9e:a7:
         1f:77:82:6e:81:0a:15:d1:23:39:61:2b:89:a4:b6:ec:ac:cb:
         56:45:9a:d3:6f:80:d7:0a:92:43:cf:34:30:c9:5c:d6:1e:6c:
         57:4a:0d:88:4f:51:c6:fb:08:d3:e1:dc:9c:f9:68:12:89:74:
         21:83:e6:7d:9b:2d:bc:2a:bf:77:a2:90:2b:d2:66:fb:df:51:
         5f:75:ec:26:ac:4b:52:e4:a9:b3:61:ea:03:f9:0b:64:d6:53:
         58:04:93:39:50:a2:79:19:36:17:f4:90:fe:a5:1d:85:8b:b1:
         ae:80:8a:c5:1a:11:fa:a0:e3:47:53:34:34:d5:d5:6c:6c:aa:
         89:54:e4:cf:28:bb:99:73:c5:69:2c:1c:36:8c:35:d6:39:5e:
         f1:3f:01:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0E3QTYxMTAvBgNVBAUTKDlGMkU1Nzg4RUY3OTU4NUJBQjc2MTk4NzdEMzk2MjdB
QjJFNUQ1MTkwHhcNMjYwNzIyMTk0NTIxWhcNMjYwNzI5MTk0NTIxWjAYMRYwFAYD
VQQDEw02YTYxMWRkMi05M2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxg3iBGGa+g50I29zOFkiv+Ar743KuOQXOfEGSMNUOM+m3+wSb0jYJVTLsaih
DWMozqdqQNasKGH8OLJiIt6OMC/Lvj4D59B1Z39dcIS9LrpugSeX2jBKbJI669Pd
uKZEiPocJdQkZPNzq6kq7quZdhKH08ZDZRXJ5v/1cI4DtNZ3Hc/uBRJcmFhb8vTt
Np40vfRcgVLS8s4Flch+2f9q1A3ogIfjwWd9TeIbNl7qzK9uTilBmenfEaVCX3iF
NC2Uth0k9mQifBdTq4hsY5XjR3VH9XOl1jjAuKxd5fc5KBGkSQ6L5WOQYAs3NTG0
rqX05jvoBuM7fgzauyK4tNBSwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB+6qtND
KnH9zfTBKNSnQAPxIRBmMB8GA1UdIwQYMBaAFJ8uV4jveVhbq3YZh305Ynqy5dUZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTdBNi80NTdBOEU4Mjcz
QjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9ueTVYaU85NVdGdXJkaG1IZlRsaWVyTGwx
UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL255NVhpTzk1V0Z1cmRobUhmVGxpZXJMbDFSay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QTdBNi80NTdBOEU4MjczQjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9ueTVYaU85NVdG
dXJkaG1IZlRsaWVyTGwxUmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAokRSq5wgf3LSc86rqFIBgMyqurJ4bPZdeBt2wUZnG5vcD6ej3W3c9MFJ/rtN
NmKcv4zRZSRRdpczqulUruvm9DbzarHc82X1+wQCcgPaUEQpG32ztfNwBVLUHuV8
xijHtBDXXbSj7T5iXZ6nH3eCboEKFdEjOWEriaS27KzLVkWa02+A1wqSQ880MMlc
1h5sV0oNiE9RxvsI0+HcnPloEol0IYPmfZstvCq/d6KQK9Jm+99RX3XsJqxLUuSp
s2HqA/kLZNZTWASTOVCieRk2F/SQ/qUdhYuxroCKxRoR+qDjR1M0NNXVbGyqiVTk
zyi7mXPFaSwcNow11jle8T8B/g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:21:06 2026 by rpki-client