Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
File:                     -XxrnwabbALLPY6tWvc-UGwIyjg.mft (raw, json)
Hash identifier:          Yigeoa3Zewn8LEsU8hLOKDSVTD0PnyEot0Pb8f4wi8c=
Subject key identifier:   DA:21:7F:0A:4F:E2:E9:49:9B:11:28:36:8E:F0:60:64:CA:0F:E9:FC
Authority key identifier: F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38
Certificate issuer:       /CN=A914DB69/serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
Certificate serial:       020F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
Manifest number:          0208
Signing time:             Thu 23 Jul 2026 04:22:43 +0000
Manifest this update:     Thu 23 Jul 2026 04:22:42 +0000
Manifest next update:     Thu 30 Jul 2026 04:22:42 +0000
Files and hashes:         1: -XxrnwabbALLPY6tWvc-UGwIyjg.crl (hash: tkz8u+3A5IX3HTFMA9mguHmDUThRUNKNVVCaN8OCc/Y=)
                          2: C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa (hash: kdzwoZAMh51JZsHZZa0HJnczi1+crw9wnyc8mMxvPFw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl
                          rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:22:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 527 (0x20f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DB69, serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
        Validity
            Not Before: Jul 23 04:22:42 2026 GMT
            Not After : Jul 30 04:22:42 2026 GMT
        Subject: CN=6a619712-7822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:83:4b:46:5f:c3:14:81:7a:82:c8:25:b1:7b:
                    01:a8:af:cb:6f:ae:4e:f6:be:40:93:30:ff:ac:a7:
                    72:d8:de:01:6a:0b:6b:b5:ef:ed:88:b8:d1:1c:8a:
                    f9:21:5c:47:ea:e2:66:6f:57:a2:f5:d8:3a:4b:cc:
                    24:28:04:50:04:95:6a:5d:69:92:35:f2:fb:2f:ff:
                    4a:4b:fc:cb:6b:55:a2:76:3b:ef:00:0a:96:09:95:
                    6c:30:c6:0a:ec:f7:51:6d:82:c9:e1:eb:af:39:04:
                    c2:55:c1:d2:f0:58:30:6d:1d:01:7a:24:9c:f2:9f:
                    bb:07:53:05:5c:6e:06:be:aa:c5:d4:46:e6:05:52:
                    f1:af:c2:e0:c1:c5:af:9e:ec:1a:3c:fd:40:7c:03:
                    6b:fe:d2:c9:da:64:f5:7a:dc:49:7d:4f:be:63:6f:
                    c5:59:30:9e:ba:ba:98:fb:a6:f3:ed:26:20:aa:ad:
                    84:28:3b:33:fd:5f:62:4a:c1:ff:71:2c:bc:6c:2f:
                    d7:78:fe:49:75:b0:40:6b:42:bb:2f:50:35:ef:d0:
                    53:58:09:f5:c3:ac:60:65:27:a8:5b:f9:d1:41:50:
                    4b:18:46:ba:2a:c7:18:be:ef:fb:ca:2d:c8:29:bf:
                    44:f4:68:2a:cb:f4:93:a4:60:e8:8d:c5:41:71:21:
                    ab:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:21:7F:0A:4F:E2:E9:49:9B:11:28:36:8E:F0:60:64:CA:0F:E9:FC
            X509v3 Authority Key Identifier:
                keyid:F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ad:61:83:54:64:f7:70:7f:55:0e:02:7f:75:99:99:bf:03:
         5f:eb:1b:d0:59:8f:9f:5f:9e:90:22:6b:3e:aa:a0:8f:84:15:
         9d:8d:d8:f9:a1:4b:17:28:58:6e:7d:2d:94:2a:58:5f:17:85:
         b3:34:de:1f:b2:43:df:cd:38:e2:9a:53:65:d6:0f:3b:93:79:
         81:a5:d1:71:b3:ce:c0:92:f5:b2:99:0b:26:5f:90:0c:4f:ca:
         e7:aa:bf:5c:85:56:35:31:9f:76:19:64:5c:f4:04:09:f3:1a:
         12:88:54:99:8c:7d:78:f1:68:7a:fc:a5:ab:ac:55:4f:21:3d:
         e7:d5:f1:d1:16:8e:d5:6e:d6:7d:9f:40:4c:30:dc:96:51:a3:
         d2:aa:8e:62:39:21:3f:8b:54:e2:de:a5:63:dc:9c:13:44:4d:
         31:4a:cc:e0:e6:9e:28:17:5f:b7:ac:c3:c6:43:3b:dc:16:a2:
         eb:83:b4:f6:5c:d7:85:df:0b:56:fd:37:e4:e2:2b:ef:04:35:
         c9:0d:71:cf:15:07:84:3c:73:5f:b6:30:02:5c:1b:33:03:de:
         a5:4b:e6:7d:0a:32:e0:60:00:af:74:2f:69:66:2d:84:ca:f0:
         b9:72:42:eb:ce:ef:e2:ec:77:89:22:14:1f:43:15:97:42:17:
         4d:6e:4f:c5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NERCNjkxMTAvBgNVBAUTKEY5N0M2QjlGMDY5QjZDMDJDQjNEOEVBRDVBRjczRTUw
NkMwOENBMzgwHhcNMjYwNzIzMDQyMjQyWhcNMjYwNzMwMDQyMjQyWjAYMRYwFAYD
VQQDEw02YTYxOTcxMi03ODIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmoNLRl/DFIF6gsglsXsBqK/Lb65O9r5AkzD/rKdy2N4Bagtrte/tiLjRHIr5
IVxH6uJmb1ei9dg6S8wkKARQBJVqXWmSNfL7L/9KS/zLa1WidjvvAAqWCZVsMMYK
7PdRbYLJ4euvOQTCVcHS8FgwbR0BeiSc8p+7B1MFXG4GvqrF1EbmBVLxr8LgwcWv
nuwaPP1AfANr/tLJ2mT1etxJfU++Y2/FWTCeurqY+6bz7SYgqq2EKDsz/V9iSsH/
cSy8bC/XeP5JdbBAa0K7L1A179BTWAn1w6xgZSeoW/nRQVBLGEa6KscYvu/7yi3I
Kb9E9Ggqy/STpGDojcVBcSGrCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNohfwpP
4ulJmxEoNo7wYGTKD+n8MB8GA1UdIwQYMBaAFPl8a58Gm2wCyz2OrVr3PlBsCMo4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REI2OS9EQTg2MENDODZF
NUMxMUVFOUMwMTMzNjFDNEY5QUUwMi8tWHhybndhYmJBTExQWTZ0V3ZjLVVHd0l5
amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1YeHJud2FiYkFMTFBZNnRXdmMtVUd3SXlqZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
REI2OS9EQTg2MENDODZFNUMxMUVFOUMwMTMzNjFDNEY5QUUwMi8tWHhybndhYmJB
TExQWTZ0V3ZjLVVHd0l5amcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlq1hg1Rk93B/VQ4Cf3WZmb8DX+sb0FmPn1+ekCJrPqqgj4QVnY3Y+aFLFyhY
bn0tlCpYXxeFszTeH7JD38044ppTZdYPO5N5gaXRcbPOwJL1spkLJl+QDE/K56q/
XIVWNTGfdhlkXPQECfMaEohUmYx9ePFoevylq6xVTyE959Xx0RaO1W7WfZ9ATDDc
llGj0qqOYjkhP4tU4t6lY9ycE0RNMUrM4OaeKBdft6zDxkM73Bai64O09lzXhd8L
Vv035OIr7wQ1yQ1xzxUHhDxzX7YwAlwbMwPepUvmfQoy4GAAr3QvaWYthMrwuXJC
687v4ux3iSIUH0MVl0IXTW5PxQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:24 2026 by rpki-client