Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft
File:                     jLK71ktqd04WwQ_cplCnrcWzjXg.mft (raw, json)
Hash identifier:          XUT+Em2JHAJLjrfppniZ1PRaxz6w2EL/lktjRlPqvO0=
Subject key identifier:   C3:0D:F9:66:C0:D2:F7:AD:D3:45:E0:C9:4A:B3:8F:52:23:F7:FF:BB
Authority key identifier: 8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78
Certificate issuer:       /CN=A914749C/serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78
Certificate serial:       1CF1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft
Manifest number:          1CD6
Signing time:             Fri 24 Jul 2026 16:16:50 +0000
Manifest this update:     Fri 24 Jul 2026 16:16:49 +0000
Manifest next update:     Fri 31 Jul 2026 16:16:49 +0000
Files and hashes:         1: jLK71ktqd04WwQ_cplCnrcWzjXg.crl (hash: JPHbLDDkAGC9culD4MfJ8zQLUrONyiiFgioAWpG9uD4=)
                          2: 433FBBECF1A511E6BE0A844EC4F9AE02.roa (hash: WL85dPtJ+Rmno9CWdZLXpdoXzpJ7FKS7hpAe8UEzwn0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl
                          rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 16:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7409 (0x1cf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914749C, serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78
        Validity
            Not Before: Jul 24 16:16:49 2026 GMT
            Not After : Jul 31 16:16:49 2026 GMT
        Subject: CN=6a638ff2-c5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:80:41:23:f4:ea:34:02:8e:41:92:65:76:47:
                    aa:1b:94:a8:0e:df:47:32:fd:e0:54:9f:3e:0d:27:
                    5d:7a:6f:07:72:53:9b:a1:9b:05:1c:d7:04:c6:22:
                    65:24:8f:dd:a8:1b:c3:5f:d5:3a:7e:97:1b:27:cb:
                    5f:be:86:bf:07:0f:66:45:fb:dc:5f:3d:7d:8d:9b:
                    96:47:f0:27:58:42:31:15:56:9f:41:97:31:f6:5c:
                    21:36:29:6c:d6:b0:11:6a:bc:d6:ea:78:62:95:7d:
                    e0:4c:65:57:8b:f4:7c:c0:38:75:3e:b2:1f:47:bd:
                    50:cf:01:ee:c4:70:90:52:f0:f7:74:35:43:15:a1:
                    98:85:18:de:63:7d:65:89:1f:11:5a:ab:a5:7a:78:
                    82:96:65:04:48:00:3d:17:68:72:f2:0e:09:2b:f6:
                    c4:e7:fa:f2:d4:37:75:e9:ce:70:ae:bd:3d:fe:4a:
                    e0:db:c2:83:51:34:23:35:b2:7d:1f:6b:c4:fe:de:
                    0b:cf:b2:5c:80:be:b3:e4:ba:9b:e1:ca:12:4d:51:
                    7e:80:4d:65:3e:c2:20:81:32:48:56:b5:17:6a:4f:
                    5e:97:56:db:a2:d7:02:b7:ab:70:c3:76:47:00:ee:
                    7b:7c:24:25:eb:45:91:70:98:f2:9e:43:1d:25:28:
                    60:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0D:F9:66:C0:D2:F7:AD:D3:45:E0:C9:4A:B3:8F:52:23:F7:FF:BB
            X509v3 Authority Key Identifier:
                keyid:8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:f7:bb:99:63:ce:23:35:00:d1:86:06:b3:6b:4f:80:e3:9b:
         83:6f:e6:51:c6:7f:1d:a5:b7:d5:9e:5b:72:17:07:6b:df:e7:
         06:bb:49:10:b3:b6:f1:32:27:d6:61:de:3d:7b:2d:af:09:16:
         81:15:0d:78:e4:42:41:75:bd:7a:44:e1:9a:34:66:e5:cd:aa:
         1b:c6:3d:8b:12:69:fa:71:13:3e:27:1a:58:91:40:42:09:34:
         55:e2:75:54:07:5b:04:3b:eb:50:7c:c8:60:22:2b:ee:75:e6:
         74:cb:28:3a:54:59:b0:fc:85:59:bf:a2:be:88:50:63:ab:15:
         81:63:95:0a:b9:3c:60:73:eb:5d:ac:dd:9e:59:50:5a:0b:f1:
         72:8d:64:75:0e:62:ab:2e:74:d2:63:f2:cb:bf:56:0f:6c:06:
         f5:80:cf:e3:43:ad:d5:1f:1f:e1:fa:c4:93:16:9c:b6:2c:c4:
         85:e4:5b:5e:93:82:70:13:54:7a:0a:c3:f1:6c:b3:78:f9:0e:
         27:5c:88:2e:2e:17:8f:5e:1b:7d:38:56:09:7d:a5:51:9d:fc:
         84:b6:6f:83:e4:39:09:06:34:48:6b:2d:fa:4e:14:b9:08:71:
         d6:b5:17:6a:86:06:1c:12:5f:dc:e7:78:6a:ba:2b:fc:f0:22:
         93:e7:12:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc0OUMxMTAvBgNVBAUTKDhDQjJCQkQ2NEI2QTc3NEUxNkMxMEZEQ0E2NTBBN0FE
QzVCMzhENzgwHhcNMjYwNzI0MTYxNjQ5WhcNMjYwNzMxMTYxNjQ5WjAYMRYwFAYD
VQQDEw02YTYzOGZmMi1jNWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAroBBI/TqNAKOQZJldkeqG5SoDt9HMv3gVJ8+DSddem8HclOboZsFHNcExiJl
JI/dqBvDX9U6fpcbJ8tfvoa/Bw9mRfvcXz19jZuWR/AnWEIxFVafQZcx9lwhNils
1rARarzW6nhilX3gTGVXi/R8wDh1PrIfR71QzwHuxHCQUvD3dDVDFaGYhRjeY31l
iR8RWquleniClmUESAA9F2hy8g4JK/bE5/ry1Dd16c5wrr09/krg28KDUTQjNbJ9
H2vE/t4Lz7JcgL6z5Lqb4coSTVF+gE1lPsIggTJIVrUXak9el1bbotcCt6tww3ZH
AO57fCQl60WRcJjynkMdJShghQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMMN+WbA
0vet00XgyUqzj1Ij9/+7MB8GA1UdIwQYMBaAFIyyu9ZLandOFsEP3KZQp63Fs414
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5Qy84RDc4RTU3RUYx
QTIxMUU2OTQyMUI1NDVDNEY5QUUwMi9qTEs3MWt0cWQwNFd3UV9jcGxDbnJjV3pq
WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pMSzcxa3RxZDA0V3dRX2NwbENucmNXempYZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzQ5Qy84RDc4RTU3RUYxQTIxMUU2OTQyMUI1NDVDNEY5QUUwMi9qTEs3MWt0cWQw
NFd3UV9jcGxDbnJjV3pqWGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcfe7mWPOIzUA0YYGs2tPgOObg2/mUcZ/HaW31Z5bchcHa9/nBrtJELO28TIn
1mHePXstrwkWgRUNeORCQXW9ekThmjRm5c2qG8Y9ixJp+nETPicaWJFAQgk0VeJ1
VAdbBDvrUHzIYCIr7nXmdMsoOlRZsPyFWb+ivohQY6sVgWOVCrk8YHPrXazdnllQ
Wgvxco1kdQ5iqy500mPyy79WD2wG9YDP40Ot1R8f4frEkxactizEheRbXpOCcBNU
egrD8WyzePkOJ1yILi4Xj14bfThWCX2lUZ38hLZvg+Q5CQY0SGst+k4UuQhx1rUX
aoYGHBJf3Od4aror/PAik+cSPQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:29:02 2026 by rpki-client