Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft
File:                     CrPxFJz1w7raaFscahN5tojXQ4Q.mft (raw, json)
Hash identifier:          KRuQS8ORuHUjC1sZoOX/Wa6Gbn1rj8CL9C5M4CGy7c4=
Subject key identifier:   D2:D2:0F:4F:04:8F:86:09:A9:30:EB:6F:4D:3A:62:28:F9:DC:65:D0
Authority key identifier: 0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84
Certificate issuer:       /CN=A913DF1E/serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384
Certificate serial:       033D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft
Manifest number:          0329
Signing time:             Thu 23 Jul 2026 02:03:37 +0000
Manifest this update:     Thu 23 Jul 2026 02:03:37 +0000
Manifest next update:     Thu 30 Jul 2026 02:03:37 +0000
Files and hashes:         1: CrPxFJz1w7raaFscahN5tojXQ4Q.crl (hash: kU3QjHH4RpOzZWzlrzTG+m+lqL7tiM6Za5cUfpMKMmg=)
                          2: 899B070834D511ED99B1921FC4F9AE02.roa (hash: LSg6DX28WaeWtngQ2Zn9zwO7f5A+q2ZTTUwMeuMJ6JY=)
                          3: D58286CA1F9D11EDA5DD9842C4F9AE02.roa (hash: GLugrqwwQZmmzbcCNZXH5Ie9zKy10oZO0jW/+Bq1pvo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl
                          rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 829 (0x33d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DF1E, serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384
        Validity
            Not Before: Jul 23 02:03:37 2026 GMT
            Not After : Jul 30 02:03:37 2026 GMT
        Subject: CN=6a617679-a999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0a:dd:0f:a9:a7:d5:7d:21:5f:fc:44:8d:5b:
                    91:f2:3b:8f:d8:10:33:d3:42:20:08:47:32:7f:8f:
                    ea:15:07:e5:0a:c8:02:c5:4d:89:77:ac:be:c5:ba:
                    d6:52:06:6e:1b:65:71:86:41:04:66:3d:d6:f6:46:
                    dc:b1:15:3b:59:c9:9e:5d:9d:28:ac:ec:6d:a9:06:
                    d3:7a:1b:58:9d:fa:e2:f0:27:8c:71:23:cb:49:2d:
                    10:63:b9:9b:38:87:09:2f:4e:23:e4:87:79:07:a9:
                    fc:96:68:ec:4d:c8:ea:bc:79:8b:2d:30:ae:f4:a9:
                    58:c8:ad:5b:24:34:8a:d2:1c:f9:1d:1b:e3:0d:54:
                    44:4e:cd:4b:77:62:5b:f4:2e:10:89:62:3e:f1:e4:
                    46:e7:fe:eb:6a:6d:3a:c0:1d:04:c2:8a:0d:e7:ad:
                    ef:e3:cf:b1:3d:a4:bc:32:40:a9:80:5c:94:99:32:
                    e6:4d:25:7d:c6:90:8f:64:48:e7:e9:a4:a8:c9:aa:
                    0c:2f:ca:6a:71:3b:65:f6:79:64:c7:dd:da:04:26:
                    16:92:7d:59:59:28:2b:0f:b7:28:7e:b3:49:dd:b0:
                    49:4a:61:d3:20:4b:3c:f0:03:af:e7:7f:30:32:ae:
                    e1:96:e6:97:57:72:eb:00:a6:36:95:23:55:ce:24:
                    9c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D2:0F:4F:04:8F:86:09:A9:30:EB:6F:4D:3A:62:28:F9:DC:65:D0
            X509v3 Authority Key Identifier:
                keyid:0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:56:b4:07:de:8e:2f:93:87:f6:d5:e8:d4:d3:af:1b:37:d5:
         40:4b:45:1a:f9:fd:1f:40:81:3b:ac:83:8d:61:de:28:37:2b:
         8a:8e:7f:65:ce:c4:d0:17:ca:7e:12:db:35:8c:3e:1d:5a:3d:
         5e:58:16:6e:91:6e:12:36:bc:c5:42:6b:5d:ba:0c:65:95:78:
         2b:c4:6b:53:bd:0d:18:b9:c1:25:ef:f2:86:24:02:be:12:e5:
         e0:85:20:0a:46:80:5a:1c:7f:25:56:47:c5:f4:e3:b4:35:4f:
         04:60:55:45:4f:12:86:15:ea:4b:88:07:4b:ff:79:0f:02:9c:
         8f:3f:de:16:0e:d8:e2:09:eb:e8:0e:44:73:66:6e:3c:c6:0c:
         31:70:60:b5:26:fb:3f:ea:4b:e1:3f:5a:6c:6a:f9:0c:7e:a9:
         3a:48:f5:c4:d2:61:02:e0:6e:e8:eb:ac:98:67:da:38:c5:15:
         b1:74:eb:7a:00:58:7c:ad:1e:51:a1:fd:51:05:fc:8e:37:85:
         7b:c3:07:21:eb:3c:2b:80:18:74:03:14:4e:a6:48:cc:d0:c4:
         61:84:ab:9b:c7:fe:12:1d:bf:3a:fe:64:41:b8:48:f9:5d:72:
         63:c6:6d:c1:77:6a:d2:7a:c4:8c:10:97:62:63:98:f0:61:5c:
         10:21:f1:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0RGMUUxMTAvBgNVBAUTKDBBQjNGMTE0OUNGNUMzQkFEQTY4NUIxQzZBMTM3OUI2
ODhENzQzODQwHhcNMjYwNzIzMDIwMzM3WhcNMjYwNzMwMDIwMzM3WjAYMRYwFAYD
VQQDEw02YTYxNzY3OS1hOTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwwrdD6mn1X0hX/xEjVuR8juP2BAz00IgCEcyf4/qFQflCsgCxU2Jd6y+xbrW
UgZuG2VxhkEEZj3W9kbcsRU7WcmeXZ0orOxtqQbTehtYnfri8CeMcSPLSS0QY7mb
OIcJL04j5Id5B6n8lmjsTcjqvHmLLTCu9KlYyK1bJDSK0hz5HRvjDVRETs1Ld2Jb
9C4QiWI+8eRG5/7ram06wB0EwooN563v48+xPaS8MkCpgFyUmTLmTSV9xpCPZEjn
6aSoyaoML8pqcTtl9nlkx93aBCYWkn1ZWSgrD7cofrNJ3bBJSmHTIEs88AOv538w
Mq7hluaXV3LrAKY2lSNVziScHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNLSD08E
j4YJqTDrb006Yij53GXQMB8GA1UdIwQYMBaAFAqz8RSc9cO62mhbHGoTebaI10OE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREYxRS9DQzY1QTY2QTFG
OUExMUVEODM1Q0FBM0ZDNEY5QUUwMi9DclB4Rkp6MXc3cmFhRnNjYWhONXRvalhR
NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NyUHhGSnoxdzdyYWFGc2NhaE41dG9qWFE0US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
REYxRS9DQzY1QTY2QTFGOUExMUVEODM1Q0FBM0ZDNEY5QUUwMi9DclB4Rkp6MXc3
cmFhRnNjYWhONXRvalhRNFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfFa0B96OL5OH9tXo1NOvGzfVQEtFGvn9H0CBO6yDjWHeKDcrio5/Zc7E0BfK
fhLbNYw+HVo9XlgWbpFuEja8xUJrXboMZZV4K8RrU70NGLnBJe/yhiQCvhLl4IUg
CkaAWhx/JVZHxfTjtDVPBGBVRU8ShhXqS4gHS/95DwKcjz/eFg7Y4gnr6A5Ec2Zu
PMYMMXBgtSb7P+pL4T9abGr5DH6pOkj1xNJhAuBu6OusmGfaOMUVsXTregBYfK0e
UaH9UQX8jjeFe8MHIes8K4AYdAMUTqZIzNDEYYSrm8f+Eh2/Ov5kQbhI+V1yY8Zt
wXdq0nrEjBCXYmOY8GFcECHx/g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:43:35 2026 by rpki-client