Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft
File:                     P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft (raw, json)
Hash identifier:          JmnKDjBZYTInsOebYUsuCB+k0KJwajgXNQMd4B6x8J0=
Subject key identifier:   76:79:60:94:FA:10:2C:97:2E:09:CC:E0:EB:BF:68:77:37:D5:F8:CA
Authority key identifier: 3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8
Certificate issuer:       /CN=A914C59A/serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8
Certificate serial:       06BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft
Manifest number:          06B3
Signing time:             Wed 22 Jul 2026 23:02:19 +0000
Manifest this update:     Wed 22 Jul 2026 23:02:18 +0000
Manifest next update:     Wed 29 Jul 2026 23:02:18 +0000
Files and hashes:         1: P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl (hash: ULm4tYhlQRhtM5Ljdp+Jr8+QThn8DDNjqxIAMn6UZOY=)
                          2: 69559D4CB7AD11EBAA08131AC4F9AE02.roa (hash: 5KO2IAETTukFZk8M5PmVdnci+vv5do2kLW+1g1Vd9/M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl
                          rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1722 (0x6ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C59A, serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8
        Validity
            Not Before: Jul 22 23:02:18 2026 GMT
            Not After : Jul 29 23:02:18 2026 GMT
        Subject: CN=6a614bfa-5ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a1:79:18:fb:d0:cf:14:6e:da:58:cc:42:9f:
                    7f:ad:a1:f9:21:88:cc:7c:d2:5b:33:03:bb:78:0c:
                    55:34:3b:f7:ac:c8:be:56:36:11:32:ae:cb:cb:b2:
                    4a:39:a4:e5:bb:af:74:77:03:43:9c:41:8c:c5:c6:
                    6a:2a:77:21:93:2e:0b:b3:05:46:90:cf:c0:0e:98:
                    0e:e8:41:53:cf:c1:fa:f8:05:0a:ec:8f:b0:fb:69:
                    96:62:24:96:c6:25:da:eb:33:43:8e:7b:9d:44:d1:
                    0f:9d:1d:32:9a:db:a4:11:1b:d1:89:b3:b9:41:de:
                    2a:1e:da:2b:9e:ff:25:f0:0b:28:01:2d:41:59:76:
                    f6:e6:ad:7a:84:9e:9f:79:ec:da:cd:71:6a:34:98:
                    90:16:a5:3a:87:77:1e:84:b5:1c:78:f4:8a:6d:60:
                    9f:2b:88:e9:14:fc:1c:7a:5e:bb:f5:a0:1b:8f:ea:
                    88:10:a2:46:9f:64:2a:41:6f:fc:70:e9:e7:dd:3e:
                    b8:e2:db:ef:7b:b6:40:89:84:e3:66:4d:46:5d:87:
                    c4:22:39:83:84:a8:4e:d1:71:1d:a9:31:e3:b2:f6:
                    2f:8d:0d:54:38:4b:82:10:fe:f3:c2:24:72:c9:70:
                    60:71:b2:d5:f1:84:f4:97:36:0d:75:df:09:5f:0b:
                    4a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:79:60:94:FA:10:2C:97:2E:09:CC:E0:EB:BF:68:77:37:D5:F8:CA
            X509v3 Authority Key Identifier:
                keyid:3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:17:6c:a7:5a:bc:37:09:14:41:f1:6e:d4:13:38:52:d9:12:
         d7:0c:95:a6:8f:11:37:a0:bc:18:ae:3f:92:0d:4a:24:d3:cb:
         ea:e4:9d:77:e2:d9:1f:59:9a:24:a3:60:4a:f6:71:d3:ab:b1:
         70:af:57:e9:01:9f:dc:b1:72:23:52:fc:b2:9d:64:ac:67:e5:
         f3:b0:b4:dd:07:6d:0d:92:2b:b4:92:36:35:8f:5f:9a:35:43:
         bc:61:f3:c7:9f:e0:b8:75:61:87:ec:59:bf:47:6d:d2:49:38:
         a7:02:3a:a8:4e:c2:99:9a:ee:7b:f2:f9:b7:ef:4b:98:66:e7:
         76:ef:6d:01:1a:66:7c:33:19:3c:46:91:63:3e:09:d0:9e:ff:
         51:d0:8b:a7:4c:b2:5b:09:91:b8:44:87:76:2e:01:bf:a5:c4:
         20:31:76:09:73:89:dd:af:30:c5:f3:66:10:31:04:a6:ce:ca:
         16:a3:12:a9:7d:f8:96:3e:16:cc:f7:4e:27:10:d8:61:7d:37:
         b4:16:ff:b9:39:d3:80:21:de:64:25:e7:d7:c9:9e:65:a8:a0:
         68:1f:9e:b4:da:63:90:aa:76:91:07:91:93:1d:5e:33:21:37:
         13:22:65:c5:26:08:e2:7c:4d:78:e3:87:65:c7:33:38:b2:59:
         ee:ff:c0:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEM1OUExMTAvBgNVBAUTKDNGQ0ExOTFGMTU2OEFBN0E5REQxNjBGRDYwOTg5OTg5
MzM2QzgyQjgwHhcNMjYwNzIyMjMwMjE4WhcNMjYwNzI5MjMwMjE4WjAYMRYwFAYD
VQQDEw02YTYxNGJmYS01ZWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApqF5GPvQzxRu2ljMQp9/raH5IYjMfNJbMwO7eAxVNDv3rMi+VjYRMq7Ly7JK
OaTlu690dwNDnEGMxcZqKnchky4LswVGkM/ADpgO6EFTz8H6+AUK7I+w+2mWYiSW
xiXa6zNDjnudRNEPnR0ymtukERvRibO5Qd4qHtornv8l8AsoAS1BWXb25q16hJ6f
eezazXFqNJiQFqU6h3cehLUcePSKbWCfK4jpFPwcel679aAbj+qIEKJGn2QqQW/8
cOnn3T644tvve7ZAiYTjZk1GXYfEIjmDhKhO0XEdqTHjsvYvjQ1UOEuCEP7zwiRy
yXBgcbLV8YT0lzYNdd8JXwtKhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHZ5YJT6
ECyXLgnM4Ou/aHc31fjKMB8GA1UdIwQYMBaAFD/KGR8VaKp6ndFg/WCYmYkzbIK4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzU5QS9CRDI1NEVGMkI3
QUExMUVCQkI5MjIzMTVDNEY5QUUwMi9QOG9aSHhWb3FucWQwV0Q5WUppWmlUTnNn
cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1A4b1pIeFZvcW5xZDBXRDlZSmlaaVROc2dyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzU5QS9CRDI1NEVGMkI3QUExMUVCQkI5MjIzMTVDNEY5QUUwMi9QOG9aSHhWb3Fu
cWQwV0Q5WUppWmlUTnNncmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAChdsp1q8NwkUQfFu1BM4UtkS1wyVpo8RN6C8GK4/kg1KJNPL6uSdd+LZH1ma
JKNgSvZx06uxcK9X6QGf3LFyI1L8sp1krGfl87C03QdtDZIrtJI2NY9fmjVDvGHz
x5/guHVhh+xZv0dt0kk4pwI6qE7CmZrue/L5t+9LmGbndu9tARpmfDMZPEaRYz4J
0J7/UdCLp0yyWwmRuESHdi4Bv6XEIDF2CXOJ3a8wxfNmEDEEps7KFqMSqX34lj4W
zPdOJxDYYX03tBb/uTnTgCHeZCXn18meZaigaB+etNpjkKp2kQeRkx1eMyE3EyJl
xSYI4nxNeOOHZcczOLJZ7v/AJQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:31:14 2026 by rpki-client