Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft
File:                     ihHrdksVeFOdbtOykDv2H0wIAHw.mft (raw, json)
Hash identifier:          83nigO+8HNMUVKhboJsWA/mZrdGp5nmzlDtpwVptRjc=
Subject key identifier:   BA:EE:8F:CC:E2:83:97:44:60:11:86:19:91:AC:0D:1E:FC:09:BC:C5
Authority key identifier: 8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C
Certificate issuer:       /CN=A914CC0F/serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C
Certificate serial:       E8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft
Manifest number:          E8
Signing time:             Wed 22 Jul 2026 20:08:24 +0000
Manifest this update:     Wed 22 Jul 2026 20:08:23 +0000
Manifest next update:     Wed 29 Jul 2026 20:08:23 +0000
Files and hashes:         1: ihHrdksVeFOdbtOykDv2H0wIAHw.crl (hash: MRYU4BOZWhfyJ83oPTqD35UO5QQUXfv/0Sg72H4bMdA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl
                          rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:08:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CC0F, serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C
        Validity
            Not Before: Jul 22 20:08:23 2026 GMT
            Not After : Jul 29 20:08:23 2026 GMT
        Subject: CN=6a612337-009a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2e:2b:25:bb:09:8c:7b:4f:3f:03:b4:23:53:
                    69:9d:ad:62:88:0a:45:9c:0c:ea:df:63:1a:fa:ea:
                    bc:87:2c:c3:71:e8:27:7b:c8:58:60:a3:fb:7d:08:
                    23:2c:41:14:a7:27:ee:32:8c:9f:47:e2:04:b7:6b:
                    89:90:e8:57:ef:b6:96:0a:04:5f:f5:03:23:28:20:
                    17:e4:0b:cc:4f:7b:9c:d2:62:a6:d5:22:8f:c2:8a:
                    a7:8a:aa:27:40:d0:cd:15:e5:2b:51:e7:78:d0:13:
                    c0:30:47:6f:b8:b5:1d:f8:10:da:df:72:6d:78:1c:
                    52:fb:c2:2a:46:8c:0c:4b:ae:48:67:11:50:2d:4f:
                    05:bd:08:3c:95:3d:57:e9:3a:8e:ba:9c:b1:49:63:
                    a1:38:67:7a:f4:d0:8f:8d:1f:cd:48:8f:32:a6:2e:
                    aa:c9:d6:2e:3c:58:0f:51:d7:f4:64:0d:4a:3f:cc:
                    6e:2e:0a:8b:55:2a:52:17:46:42:9a:19:2f:2e:2a:
                    b7:c9:f8:db:29:3d:64:37:92:74:81:1f:a9:f2:ec:
                    05:86:a1:0c:2f:95:2d:65:3e:3b:5e:96:b4:b2:e5:
                    73:3a:22:ff:40:d6:0e:38:29:2d:6f:f7:58:cd:b8:
                    14:7e:c3:f8:fe:f3:92:f9:dc:95:83:86:7d:4b:75:
                    5b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EE:8F:CC:E2:83:97:44:60:11:86:19:91:AC:0D:1E:FC:09:BC:C5
            X509v3 Authority Key Identifier:
                keyid:8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:e1:7e:fb:b3:c0:0f:c5:38:13:bc:79:63:ca:5c:f7:fa:f5:
         6d:5d:0e:92:31:7e:28:c3:a5:69:38:f2:7f:a5:9f:3c:46:24:
         05:df:30:c1:12:3f:58:4a:46:c1:61:57:55:95:e7:73:6d:e4:
         92:ad:0d:38:ea:05:e9:88:8c:85:08:4d:dc:ba:4c:f7:bd:47:
         00:c0:f8:2d:d3:a6:b2:2a:f8:5d:e3:57:13:5f:a5:10:a5:9d:
         b0:f4:6b:fa:fb:db:12:2c:4c:a2:8b:00:10:5f:a8:71:d9:48:
         16:7b:95:7e:f0:3f:a9:ba:0a:a2:88:ec:eb:0e:8e:12:1d:ec:
         79:09:1f:d5:4b:82:d8:d4:f2:f7:ea:a0:5f:d9:fb:42:27:ec:
         df:d7:41:6f:fc:b7:af:0d:36:f4:ab:60:55:74:44:1d:bf:32:
         c3:5e:67:16:f1:95:69:d9:52:ab:62:58:9d:09:77:5d:a0:d0:
         0f:74:3c:21:85:ab:4c:f2:8c:40:45:12:b0:cb:c2:ed:9e:b5:
         33:3f:8c:97:4b:6c:e1:f9:56:24:9c:cc:ab:8c:8b:15:a3:ad:
         59:d1:3e:1d:00:d8:53:b7:5e:16:43:0b:e3:50:e4:ad:e8:af:
         d1:28:90:37:49:d7:c0:af:93:03:df:a2:cc:34:26:3b:e3:bd:
         41:fc:7a:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NENDMEYxMTAvBgNVBAUTKDhBMTFFQjc2NEIxNTc4NTM5RDZFRDNCMjkwM0JGNjFG
NEMwODAwN0MwHhcNMjYwNzIyMjAwODIzWhcNMjYwNzI5MjAwODIzWjAYMRYwFAYD
VQQDEw02YTYxMjMzNy0wMDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwS4rJbsJjHtPPwO0I1Npna1iiApFnAzq32Ma+uq8hyzDcegne8hYYKP7fQgj
LEEUpyfuMoyfR+IEt2uJkOhX77aWCgRf9QMjKCAX5AvMT3uc0mKm1SKPwoqniqon
QNDNFeUrUed40BPAMEdvuLUd+BDa33JteBxS+8IqRowMS65IZxFQLU8FvQg8lT1X
6TqOupyxSWOhOGd69NCPjR/NSI8ypi6qydYuPFgPUdf0ZA1KP8xuLgqLVSpSF0ZC
mhkvLiq3yfjbKT1kN5J0gR+p8uwFhqEML5UtZT47Xpa0suVzOiL/QNYOOCktb/dY
zbgUfsP4/vOS+dyVg4Z9S3Vb6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLruj8zi
g5dEYBGGGZGsDR78CbzFMB8GA1UdIwQYMBaAFIoR63ZLFXhTnW7TspA79h9MCAB8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0MwRi80OUU5OTZDNDJD
NjIxMUYwQTlCMUM2NUFDNEY5QUUwMi9paEhyZGtzVmVGT2RidE95a0R2Mkgwd0lB
SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2loSHJka3NWZUZPZGJ0T3lrRHYySDB3SUFIdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Q0MwRi80OUU5OTZDNDJDNjIxMUYwQTlCMUM2NUFDNEY5QUUwMi9paEhyZGtzVmVG
T2RidE95a0R2Mkgwd0lBSHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzOF++7PAD8U4E7x5Y8pc9/r1bV0OkjF+KMOlaTjyf6WfPEYkBd8wwRI/WEpG
wWFXVZXnc23kkq0NOOoF6YiMhQhN3LpM971HAMD4LdOmsir4XeNXE1+lEKWdsPRr
+vvbEixMoosAEF+ocdlIFnuVfvA/qboKoojs6w6OEh3seQkf1UuC2NTy9+qgX9n7
Qifs39dBb/y3rw029KtgVXREHb8yw15nFvGVadlSq2JYnQl3XaDQD3Q8IYWrTPKM
QEUSsMvC7Z61Mz+Ml0ts4flWJJzMq4yLFaOtWdE+HQDYU7deFkML41Dkreiv0SiQ
N0nXwK+TA9+izDQmO+O9Qfx6pg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:15:30 2026 by rpki-client