Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
File:                     CViGFDhyEOi2mtPDGnNhnXVe0MA.mft (raw, json)
Hash identifier:          ScfHgFImcBxnvSwt4N9lpU9462a612XkI6u0f7v3Zpc=
Subject key identifier:   6E:AC:4F:A2:5C:D9:61:A4:42:F8:FC:42:81:CE:22:B8:8C:0A:8F:15
Authority key identifier: 09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0
Certificate issuer:       /CN=A914CB22/serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0
Certificate serial:       01F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
Manifest number:          01F2
Signing time:             Thu 23 Jul 2026 04:36:19 +0000
Manifest this update:     Thu 23 Jul 2026 04:36:18 +0000
Manifest next update:     Thu 30 Jul 2026 04:36:18 +0000
Files and hashes:         1: CViGFDhyEOi2mtPDGnNhnXVe0MA.crl (hash: ykDbGtGWXUI+6GTu89bNngT83dg3KUEqUUD9dEd9qpc=)
                          2: 2F996DC6C77311EEBD6F2D2BC4F9AE02.roa (hash: AWmRUUuHw7qvkIYfsKHsasjQBa7Xv/yb5/iOLvXpkFs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl
                          rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504 (0x1f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CB22, serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0
        Validity
            Not Before: Jul 23 04:36:18 2026 GMT
            Not After : Jul 30 04:36:18 2026 GMT
        Subject: CN=6a619a42-2c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ae:33:11:15:fe:97:0a:4e:c1:c9:4c:89:8e:
                    10:c1:3e:af:2c:30:43:85:78:bf:c6:38:fc:3f:3f:
                    4e:11:d7:33:19:7d:2d:ae:e8:9f:b8:c5:b7:78:7b:
                    f6:36:b2:80:62:0a:e7:91:b4:72:a3:bf:2f:77:dd:
                    d4:1e:a5:c5:89:db:5c:2a:1d:95:32:20:b0:2f:80:
                    be:73:bc:90:04:3b:2b:c3:f1:06:89:3f:e9:82:ca:
                    12:37:f6:5f:54:7a:b3:08:62:e0:03:69:39:53:ad:
                    a4:c3:aa:c4:1b:6e:60:a3:b5:54:58:bd:b4:8f:e1:
                    ea:f3:4d:b2:e4:81:af:9c:59:d8:ee:b7:ba:2c:fc:
                    92:99:e1:a5:00:f7:b5:0c:67:7c:0e:3a:bf:98:54:
                    5b:4c:a7:6c:dd:c8:28:7f:ce:f8:c2:b8:07:21:f0:
                    4c:b5:d2:7c:e8:b4:0a:67:dd:a0:4c:5c:88:bf:70:
                    78:45:63:9f:cb:18:bc:3d:78:d8:9e:01:f8:53:62:
                    da:89:2e:4d:7b:b9:3b:8e:0b:42:3c:64:34:b8:8d:
                    76:a7:4d:da:3f:ae:83:f5:29:46:8f:b4:ec:13:30:
                    6a:07:a4:ec:8b:dd:66:be:1f:90:10:42:43:11:ca:
                    c1:2f:38:ff:a6:6b:ee:9f:9b:b1:2f:f6:e8:15:82:
                    e2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AC:4F:A2:5C:D9:61:A4:42:F8:FC:42:81:CE:22:B8:8C:0A:8F:15
            X509v3 Authority Key Identifier:
                keyid:09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d9:ad:9e:e8:9d:35:d6:0b:02:92:22:a7:1f:78:30:a9:1b:
         4e:a6:4f:3a:c4:c6:f3:5c:d8:0a:7b:0a:61:ec:25:a3:73:fd:
         7c:e4:d5:4f:7e:bd:9c:78:99:56:c7:ac:6d:ad:ad:e4:70:b3:
         8e:ff:be:98:65:44:e3:7c:24:ea:19:89:9d:35:08:72:67:a6:
         6d:81:ba:27:9c:8e:9c:d8:d7:4e:53:76:97:f0:80:47:0d:09:
         0c:c3:fe:f8:5e:fe:49:45:5d:f1:c9:b3:f3:57:4b:dd:4d:f6:
         7d:fd:29:00:81:e8:8b:b2:ec:9d:04:4c:50:9a:ab:a3:0a:b6:
         be:11:5f:72:a3:13:5f:80:3d:ed:9c:df:34:90:03:f8:ed:90:
         96:d5:98:8b:8f:d7:b3:cf:ba:8d:0e:84:7a:fe:ff:36:0f:4d:
         61:e6:66:77:ca:88:e9:26:c1:6f:3f:ee:cc:39:84:4a:63:32:
         38:f6:aa:05:16:dc:82:54:bd:06:48:a4:f0:c8:39:56:2f:9d:
         64:d1:f2:e8:8b:fc:38:0b:98:1a:40:78:36:87:5b:32:a4:f2:
         be:58:bc:dd:0d:96:cf:b0:8e:7b:4c:f3:0f:35:49:c7:0a:c5:
         f5:52:d4:7b:2c:55:7b:2e:0b:13:0b:9a:7b:05:41:69:c1:29:
         6b:5a:f6:66
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NENCMjIxMTAvBgNVBAUTKDA5NTg4NjE0Mzg3MjEwRThCNjlBRDNDMzFBNzM2MTlE
NzU1RUQwQzAwHhcNMjYwNzIzMDQzNjE4WhcNMjYwNzMwMDQzNjE4WjAYMRYwFAYD
VQQDEw02YTYxOWE0Mi0yYzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAva4zERX+lwpOwclMiY4QwT6vLDBDhXi/xjj8Pz9OEdczGX0truifuMW3eHv2
NrKAYgrnkbRyo78vd93UHqXFidtcKh2VMiCwL4C+c7yQBDsrw/EGiT/pgsoSN/Zf
VHqzCGLgA2k5U62kw6rEG25go7VUWL20j+Hq802y5IGvnFnY7re6LPySmeGlAPe1
DGd8Djq/mFRbTKds3cgof874wrgHIfBMtdJ86LQKZ92gTFyIv3B4RWOfyxi8PXjY
ngH4U2LaiS5Ne7k7jgtCPGQ0uI12p03aP66D9SlGj7TsEzBqB6Tsi91mvh+QEEJD
EcrBLzj/pmvun5uxL/boFYLihQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG6sT6Jc
2WGkQvj8QoHOIriMCo8VMB8GA1UdIwQYMBaAFAlYhhQ4chDotprTwxpzYZ11XtDA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0IyMi82NjAyRTk3ODhD
RDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVPaTJtdFBER25OaG5YVmUw
TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NWaUdGRGh5RU9pMm10UERHbk5oblhWZTBNQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Q0IyMi82NjAyRTk3ODhDRDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVP
aTJtdFBER25OaG5YVmUwTUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJdmtnuidNdYLApIipx94MKkbTqZPOsTG81zYCnsKYewlo3P9fOTVT369nHiZ
Vsesba2t5HCzjv++mGVE43wk6hmJnTUIcmembYG6J5yOnNjXTlN2l/CARw0JDMP+
+F7+SUVd8cmz81dL3U32ff0pAIHoi7LsnQRMUJqrowq2vhFfcqMTX4A97ZzfNJAD
+O2QltWYi4/Xs8+6jQ6Eev7/Ng9NYeZmd8qI6SbBbz/uzDmESmMyOPaqBRbcglS9
Bkik8Mg5Vi+dZNHy6Iv8OAuYGkB4NodbMqTyvli83Q2Wz7COe0zzDzVJxwrF9VLU
eyxVey4LEwuaewVBacEpa1r2Zg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:08 2026 by rpki-client