Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft
File:                     rCP1TTAVC0YAnBoCnl7s224FVlY.mft (raw, json)
Hash identifier:          y9I+XmtPWelnz9zF5ZRar4OC6T7UpeYSGekrRBWoYc4=
Subject key identifier:   E0:D8:C5:04:95:1B:48:9A:C5:37:4C:82:6E:07:84:D2:5F:79:CE:26
Authority key identifier: AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56
Certificate issuer:       /CN=A9141586/serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656
Certificate serial:       035E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft
Manifest number:          0358
Signing time:             Thu 23 Jul 2026 01:51:01 +0000
Manifest this update:     Thu 23 Jul 2026 01:51:01 +0000
Manifest next update:     Thu 30 Jul 2026 01:51:01 +0000
Files and hashes:         1: rCP1TTAVC0YAnBoCnl7s224FVlY.crl (hash: BYCj2G+0ME2t8e7PNciZb3B+mU8BOl0qihq3HGdcyM8=)
                          2: CA08C348098D11EDAB30E934C4F9AE02.roa (hash: UvlKwQqXfNX6TNtFAKTDpqec7TKizL2BqsLfAWubGJU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl
                          rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862 (0x35e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141586, serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656
        Validity
            Not Before: Jul 23 01:51:01 2026 GMT
            Not After : Jul 30 01:51:01 2026 GMT
        Subject: CN=6a617385-a01d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f3:e4:d1:90:07:16:1b:ab:9f:06:80:8f:05:
                    cc:0d:07:94:ab:7a:cd:da:a0:94:d8:44:12:0e:7a:
                    65:b2:62:2e:50:29:90:5a:f2:e1:34:6f:3a:3d:cf:
                    a4:3d:35:df:1b:a9:0b:e6:1b:2e:e2:48:c2:b8:c5:
                    3c:e0:5d:da:55:e1:ee:41:21:23:5c:94:33:71:12:
                    8a:b4:43:6a:e5:47:f8:b4:fe:db:56:ed:ad:76:12:
                    3b:6e:01:12:97:2b:54:45:23:17:45:15:ee:3b:97:
                    06:a4:4c:73:14:0a:64:41:18:74:10:d5:55:01:66:
                    44:36:4d:39:3a:83:e1:b7:21:a3:4b:c1:b3:ab:b6:
                    ba:f9:36:cd:1d:ec:5d:b9:cc:2a:2c:fa:92:c4:d6:
                    d3:d5:99:2a:af:e4:d9:dc:97:0b:8c:4a:1d:6e:ce:
                    50:a9:c4:98:27:1e:ac:fc:fd:0c:5b:83:9b:98:b4:
                    a4:5a:f2:34:e4:c8:5c:ec:af:10:eb:82:d4:c3:8e:
                    6f:7d:45:3c:01:f4:e3:24:7b:49:19:fe:26:e0:17:
                    d2:62:4b:25:8a:18:ef:cb:9b:be:cf:c2:63:4b:fc:
                    67:4f:7c:1a:62:12:45:33:21:78:6c:ca:5b:e6:78:
                    50:89:c8:46:55:a4:83:e3:0f:41:6e:00:69:96:e0:
                    c8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D8:C5:04:95:1B:48:9A:C5:37:4C:82:6E:07:84:D2:5F:79:CE:26
            X509v3 Authority Key Identifier:
                keyid:AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:5f:e7:c9:b1:6c:08:24:c6:6c:cf:d1:88:6a:5a:b6:27:a5:
         84:8e:07:79:fa:e1:7c:7e:a5:e2:1a:dc:f3:00:37:5f:b3:72:
         fb:14:b4:ca:d8:4a:3f:9f:e7:3b:2d:9d:36:9f:5e:f7:d4:50:
         43:ad:15:5d:fa:fa:52:35:e3:f1:28:78:a8:96:d5:47:12:9f:
         52:b0:69:79:21:ce:4f:c7:44:5d:bf:a4:82:8b:ff:ec:2b:fe:
         aa:78:50:72:32:b3:4e:fb:a5:41:2b:31:0a:a8:69:f4:68:19:
         38:a3:b3:50:40:c6:26:0f:fe:82:01:e8:f3:af:4b:97:41:e6:
         ff:98:5c:b6:73:ba:eb:a6:92:03:e6:01:6a:e2:0b:3d:5f:c1:
         1a:66:a3:f0:ae:8b:95:f9:bf:30:b9:3f:e4:b5:d1:30:d5:1b:
         43:f3:e0:d4:39:f1:0e:66:80:bb:77:ae:2c:a2:6e:00:11:b8:
         55:c1:7b:47:9a:98:6f:a4:c3:ea:20:d6:6e:79:2f:7d:be:bf:
         14:20:b2:40:f9:12:40:bf:6e:d5:62:e4:cb:5e:4a:03:22:8c:
         20:93:cf:9c:4c:02:c6:6e:f5:17:23:49:41:84:c6:72:28:be:
         de:ca:91:f0:88:ef:1f:e6:2b:5c:69:a9:9c:36:2a:34:b5:bf:
         91:fb:f1:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDE1ODYxMTAvBgNVBAUTKEFDMjNGNTREMzAxNTBCNDYwMDlDMUEwMjlFNUVFQ0RC
NkUwNTU2NTYwHhcNMjYwNzIzMDE1MTAxWhcNMjYwNzMwMDE1MTAxWjAYMRYwFAYD
VQQDEw02YTYxNzM4NS1hMDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqPPk0ZAHFhurnwaAjwXMDQeUq3rN2qCU2EQSDnplsmIuUCmQWvLhNG86Pc+k
PTXfG6kL5hsu4kjCuMU84F3aVeHuQSEjXJQzcRKKtENq5Uf4tP7bVu2tdhI7bgES
lytURSMXRRXuO5cGpExzFApkQRh0ENVVAWZENk05OoPhtyGjS8Gzq7a6+TbNHexd
ucwqLPqSxNbT1Zkqr+TZ3JcLjEodbs5QqcSYJx6s/P0MW4ObmLSkWvI05Mhc7K8Q
64LUw45vfUU8AfTjJHtJGf4m4BfSYkslihjvy5u+z8JjS/xnT3waYhJFMyF4bMpb
5nhQichGVaSD4w9BbgBpluDI2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFODYxQSV
G0iaxTdMgm4HhNJfec4mMB8GA1UdIwQYMBaAFKwj9U0wFQtGAJwaAp5e7NtuBVZW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTU4Ni8wRDYxOTE2ODA5
OEIxMUVEQUM4RkNGMkZDNEY5QUUwMi9yQ1AxVFRBVkMwWUFuQm9Dbmw3czIyNEZW
bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JDUDFUVEFWQzBZQW5Cb0NubDdzMjI0RlZsWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MTU4Ni8wRDYxOTE2ODA5OEIxMUVEQUM4RkNGMkZDNEY5QUUwMi9yQ1AxVFRBVkMw
WUFuQm9Dbmw3czIyNEZWbFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVl/nybFsCCTGbM/RiGpatielhI4HefrhfH6l4hrc8wA3X7Ny+xS0ythKP5/n
Oy2dNp9e99RQQ60VXfr6UjXj8Sh4qJbVRxKfUrBpeSHOT8dEXb+kgov/7Cv+qnhQ
cjKzTvulQSsxCqhp9GgZOKOzUEDGJg/+ggHo869Ll0Hm/5hctnO666aSA+YBauIL
PV/BGmaj8K6Llfm/MLk/5LXRMNUbQ/Pg1DnxDmaAu3euLKJuABG4VcF7R5qYb6TD
6iDWbnkvfb6/FCCyQPkSQL9u1WLky15KAyKMIJPPnEwCxm71FyNJQYTGcii+3sqR
8IjvH+YrXGmpnDYqNLW/kfvxkw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:21:02 2026 by rpki-client