Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft
File:                     eERZpLZsg1_PXW5aVoctkkfUZYo.mft (raw, json)
Hash identifier:          zbEl+IFOyexQN8LqlXlKWZT+oeT+OHwU5HoZ1tqCK9M=
Subject key identifier:   6C:D6:A5:AC:54:D0:3C:F3:72:3F:81:31:6E:AF:02:89:3E:E4:8F:AC
Authority key identifier: 78:44:59:A4:B6:6C:83:5F:CF:5D:6E:5A:56:87:2D:92:47:D4:65:8A
Certificate issuer:       /CN=A9145258/serialNumber=784459A4B66C835FCF5D6E5A56872D9247D4658A
Certificate serial:       0128
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft
Manifest number:          011A
Signing time:             Thu 23 Jul 2026 07:38:47 +0000
Manifest this update:     Thu 23 Jul 2026 07:38:47 +0000
Manifest next update:     Thu 30 Jul 2026 07:38:47 +0000
Files and hashes:         1: eERZpLZsg1_PXW5aVoctkkfUZYo.crl (hash: cPBGN+8LIR+fBOFmcQXdMxPw6aoAu2jZ0LymGQvARiI=)
                          2: 2C7AE786042711F0BCEB4A75C4F9AE02.roa (hash: yY5W8QHlOVcNFdNHN5tf5xhCqQSWa5PPR1EloS7CLPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.crl
                          rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:38:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145258, serialNumber=784459A4B66C835FCF5D6E5A56872D9247D4658A
        Validity
            Not Before: Jul 23 07:38:47 2026 GMT
            Not After : Jul 30 07:38:47 2026 GMT
        Subject: CN=6a61c507-4b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e9:dd:9a:dc:f5:23:af:1c:db:fe:7c:71:21:
                    c2:68:ad:61:e9:e3:8a:6e:56:34:06:1e:70:22:1b:
                    ba:24:c3:27:58:53:6f:d0:9b:96:89:e7:02:75:fd:
                    b8:36:50:bb:18:de:98:a4:e2:a8:52:6e:00:7f:93:
                    99:0d:15:67:60:8a:45:25:c4:cc:08:57:79:af:3b:
                    65:9e:b3:2a:a9:d9:90:39:c9:ab:4b:88:2b:07:f0:
                    e6:16:38:77:eb:04:16:77:30:0e:99:7a:76:f0:0b:
                    54:df:c1:f5:a3:bb:5f:1c:96:6a:2c:3d:c0:43:b0:
                    e2:74:c5:4a:c8:f0:d7:e9:f7:cb:3c:e0:59:74:6f:
                    57:11:13:b9:95:b4:a6:fa:1e:f7:64:40:a3:d8:ba:
                    53:a9:9f:a7:a2:a5:2e:94:1d:9e:a4:5b:42:c0:e9:
                    b6:27:b7:3c:93:78:05:7a:41:13:20:b0:83:be:9a:
                    e4:79:a7:80:ce:0f:f5:64:49:08:15:7d:e0:36:50:
                    17:7f:ad:4f:cf:71:15:b8:72:be:49:1b:37:02:18:
                    90:a8:b9:c7:c9:f1:b5:8c:a5:4c:93:e2:d6:2e:cb:
                    78:b3:d8:3f:a8:0b:70:64:ac:5e:f0:0d:4b:42:74:
                    cb:d3:06:bb:b6:f8:dd:31:24:cf:41:a8:74:c3:82:
                    49:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D6:A5:AC:54:D0:3C:F3:72:3F:81:31:6E:AF:02:89:3E:E4:8F:AC
            X509v3 Authority Key Identifier:
                keyid:78:44:59:A4:B6:6C:83:5F:CF:5D:6E:5A:56:87:2D:92:47:D4:65:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:91:b0:54:d0:ce:d6:37:5f:99:a6:28:e6:5b:35:d7:c8:36:
         d7:3a:91:f2:94:db:40:76:d5:fe:1b:43:43:bd:fa:4b:c7:d3:
         06:0c:6c:80:eb:16:44:6d:50:92:35:c9:b1:8e:e7:21:1f:ed:
         2a:af:0d:e4:2f:b8:ba:f8:71:3f:03:75:92:c6:e8:27:9e:09:
         a7:df:1e:a1:11:f7:04:47:c7:c1:95:a0:dc:a3:7c:51:9e:e8:
         74:72:93:a7:a1:a1:01:f4:85:52:3b:31:67:42:fc:8d:d9:cb:
         ab:90:0d:f0:da:c5:c5:7c:4d:d9:a7:8d:78:d2:31:06:5c:62:
         0c:da:ac:e9:61:2b:fd:82:de:eb:b5:45:39:24:66:71:69:6a:
         f3:de:12:4e:1e:db:24:71:0e:28:eb:f6:96:57:df:c8:0b:8a:
         06:5c:be:2c:76:8b:95:25:ee:c2:6d:85:30:6e:47:e8:8a:78:
         8c:a4:b8:a2:21:9b:ba:56:86:ad:af:f2:8f:3f:62:1d:32:78:
         b3:31:31:18:b4:78:75:37:d9:33:4f:9d:d4:c1:0a:4d:31:59:
         f3:80:69:8a:9b:e6:34:33:3a:7a:11:0b:85:42:9c:38:06:78:
         33:07:8f:f5:36:ec:2e:8a:82:c5:0b:8b:fa:39:93:9e:dc:e8:
         00:f7:c6:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDUyNTgxMTAvBgNVBAUTKDc4NDQ1OUE0QjY2QzgzNUZDRjVENkU1QTU2ODcyRDky
NDdENDY1OEEwHhcNMjYwNzIzMDczODQ3WhcNMjYwNzMwMDczODQ3WjAYMRYwFAYD
VQQDEw02YTYxYzUwNy00YjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApendmtz1I68c2/58cSHCaK1h6eOKblY0Bh5wIhu6JMMnWFNv0JuWiecCdf24
NlC7GN6YpOKoUm4Af5OZDRVnYIpFJcTMCFd5rztlnrMqqdmQOcmrS4grB/DmFjh3
6wQWdzAOmXp28AtU38H1o7tfHJZqLD3AQ7DidMVKyPDX6ffLPOBZdG9XERO5lbSm
+h73ZECj2LpTqZ+noqUulB2epFtCwOm2J7c8k3gFekETILCDvprkeaeAzg/1ZEkI
FX3gNlAXf61Pz3EVuHK+SRs3AhiQqLnHyfG1jKVMk+LWLst4s9g/qAtwZKxe8A1L
QnTL0wa7tvjdMSTPQah0w4JJywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGzWpaxU
0Dzzcj+BMW6vAok+5I+sMB8GA1UdIwQYMBaAFHhEWaS2bINfz11uWlaHLZJH1GWK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTI1OC9BQzA5QzZFRUUz
MDYxMUVGQTgwN0IwNTNDNEY5QUUwMi9lRVJacExac2cxX1BYVzVhVm9jdGtrZlVa
WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VFUlpwTFpzZzFfUFhXNWFWb2N0a2tmVVpZby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTI1OC9BQzA5QzZFRUUzMDYxMUVGQTgwN0IwNTNDNEY5QUUwMi9lRVJacExac2cx
X1BYVzVhVm9jdGtrZlVaWW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVJGwVNDO1jdfmaYo5ls118g21zqR8pTbQHbV/htDQ736S8fTBgxsgOsWRG1Q
kjXJsY7nIR/tKq8N5C+4uvhxPwN1ksboJ54Jp98eoRH3BEfHwZWg3KN8UZ7odHKT
p6GhAfSFUjsxZ0L8jdnLq5AN8NrFxXxN2aeNeNIxBlxiDNqs6WEr/YLe67VFOSRm
cWlq894STh7bJHEOKOv2llffyAuKBly+LHaLlSXuwm2FMG5H6Ip4jKS4oiGbulaG
ra/yjz9iHTJ4szExGLR4dTfZM0+d1MEKTTFZ84BpipvmNDM6ehELhUKcOAZ4MweP
9TbsLoqCxQuL+jmTntzoAPfGiQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:26:01 2026 by rpki-client