Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft
File:                     PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft (raw, json)
Hash identifier:          drNSo2cH8t2DpBbFZBZSB+C7AhAyi2c7kbRoS4/jdBQ=
Subject key identifier:   07:A6:2D:9B:F2:94:52:4C:06:91:78:D1:B6:92:DB:EF:D9:83:47:0A
Authority key identifier: 3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56
Certificate issuer:       /CN=A914E0B6/serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56
Certificate serial:       01D8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft
Manifest number:          01D3
Signing time:             Thu 23 Jul 2026 05:01:47 +0000
Manifest this update:     Thu 23 Jul 2026 05:01:46 +0000
Manifest next update:     Thu 30 Jul 2026 05:01:46 +0000
Files and hashes:         1: PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl (hash: GbBTNhkoGOw53+WURmiIMVK5guic0RuN1f7VnN61q/0=)
                          2: 36FC37FABF3111EE886C313CC4F9AE02.roa (hash: 6A3uQ575OB8LX3eqmYdyVlzTZlW6pTp9MJ+vD3i9Vf4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl
                          rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E0B6, serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56
        Validity
            Not Before: Jul 23 05:01:46 2026 GMT
            Not After : Jul 30 05:01:46 2026 GMT
        Subject: CN=6a61a03b-38ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:78:cc:ca:b7:73:a8:5a:e0:d0:c9:94:f2:2f:
                    66:e9:a4:82:26:b1:c1:d0:ef:bc:43:02:a5:67:1c:
                    83:39:33:2e:0b:aa:3d:ba:19:5b:f0:f1:97:fd:3b:
                    ef:40:2f:78:48:fb:2b:7b:c1:4a:e2:be:0c:68:6c:
                    36:e1:28:e3:28:35:78:4b:4a:26:82:ce:cb:9f:df:
                    ad:a1:89:fd:9b:fa:3f:6c:fa:cb:54:0e:04:01:b9:
                    af:c6:49:ef:1d:e5:63:03:02:5d:89:6c:3c:75:0a:
                    f7:e6:a7:40:dd:92:d5:bb:42:f2:3c:a3:71:8a:20:
                    d6:a1:85:bf:7a:8b:54:17:79:3b:14:98:e0:8f:22:
                    a6:0c:a4:fd:77:b8:13:0e:91:3f:56:63:47:f3:e2:
                    14:9a:ed:5d:35:a2:62:4b:4a:fd:84:d9:02:93:fa:
                    4a:58:94:f9:ad:59:14:6f:76:02:e6:d7:49:f9:66:
                    30:e2:ff:37:6e:c2:85:9b:5d:bf:1c:77:ea:bc:d7:
                    0c:f4:15:3e:13:f3:0a:29:2d:5b:e9:44:00:38:c9:
                    e5:ac:2b:76:07:ad:82:08:60:56:32:3e:42:03:a0:
                    9f:7d:9d:34:e0:0a:af:89:ab:63:51:e2:c3:ae:91:
                    bd:37:39:a5:39:64:4e:96:94:9c:aa:de:97:b5:20:
                    d0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A6:2D:9B:F2:94:52:4C:06:91:78:D1:B6:92:DB:EF:D9:83:47:0A
            X509v3 Authority Key Identifier:
                keyid:3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:12:60:af:80:d8:71:f5:5a:16:fb:bf:19:66:b8:85:49:64:
         d9:96:ba:46:7b:14:94:e6:d2:3b:2d:6f:28:96:15:31:17:e3:
         1b:2c:c4:16:1c:22:53:8e:98:9b:e8:ad:e4:69:6e:74:03:78:
         9d:34:d7:1b:1e:a9:c3:ea:92:a7:3b:a6:94:6b:93:6b:5b:65:
         b0:46:34:e2:e7:bc:33:34:4a:a6:22:8a:f5:c6:f9:0d:be:35:
         c7:07:f0:82:ed:2b:91:45:93:76:8d:e8:0f:56:96:0c:da:86:
         16:e2:5b:ce:0f:f4:19:6d:e1:e2:1d:66:a4:1e:0d:e4:16:c6:
         17:21:73:30:c3:06:7f:e1:c3:d6:ac:70:3d:ba:81:45:b1:f7:
         27:e1:47:30:dd:a6:9c:db:e1:fa:11:06:2c:98:23:05:80:4b:
         49:97:7b:ae:8d:13:6c:28:5f:20:f6:27:ac:80:b0:11:c9:5d:
         dc:3a:da:0d:ef:f5:35:55:fb:7e:50:18:15:3b:8d:52:5e:9b:
         d1:b1:4c:45:70:30:e0:f5:af:b7:a0:36:a5:75:dc:f4:33:db:
         75:7a:e7:2e:ce:aa:ee:31:8e:c6:23:79:a2:83:69:bf:63:c3:
         fe:24:d2:62:37:fd:b3:f7:27:fd:cf:e6:ea:2e:0b:45:ec:c5:
         77:ba:d1:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEUwQjYxMTAvBgNVBAUTKDNFQzRGNzVFNjRCNzJBODg3ODZBRjRCOTdDOTg0ODZD
QkQ2RDJGNTYwHhcNMjYwNzIzMDUwMTQ2WhcNMjYwNzMwMDUwMTQ2WjAYMRYwFAYD
VQQDEw02YTYxYTAzYi0zOGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAinjMyrdzqFrg0MmU8i9m6aSCJrHB0O+8QwKlZxyDOTMuC6o9uhlb8PGX/Tvv
QC94SPsre8FK4r4MaGw24SjjKDV4S0omgs7Ln9+toYn9m/o/bPrLVA4EAbmvxknv
HeVjAwJdiWw8dQr35qdA3ZLVu0LyPKNxiiDWoYW/eotUF3k7FJjgjyKmDKT9d7gT
DpE/VmNH8+IUmu1dNaJiS0r9hNkCk/pKWJT5rVkUb3YC5tdJ+WYw4v83bsKFm12/
HHfqvNcM9BU+E/MKKS1b6UQAOMnlrCt2B62CCGBWMj5CA6CffZ004AqviatjUeLD
rpG9NzmlOWROlpScqt6XtSDQ7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAemLZvy
lFJMBpF40baS2+/Zg0cKMB8GA1UdIwQYMBaAFD7E915ktyqIeGr0uXyYSGy9bS9W
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBCNi81RkJFNDNCNEJG
MzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tvaDRhdlM1ZkpoSWJMMXRM
MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BzVDNYbVMzS29oNGF2UzVmSmhJYkwxdEwxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTBCNi81RkJFNDNCNEJGMzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tv
aDRhdlM1ZkpoSWJMMXRMMVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXhJgr4DYcfVaFvu/GWa4hUlk2Za6RnsUlObSOy1vKJYVMRfjGyzEFhwiU46Y
m+it5GludAN4nTTXGx6pw+qSpzumlGuTa1tlsEY04ue8MzRKpiKK9cb5Db41xwfw
gu0rkUWTdo3oD1aWDNqGFuJbzg/0GW3h4h1mpB4N5BbGFyFzMMMGf+HD1qxwPbqB
RbH3J+FHMN2mnNvh+hEGLJgjBYBLSZd7ro0TbChfIPYnrICwEcld3DraDe/1NVX7
flAYFTuNUl6b0bFMRXAw4PWvt6A2pXXc9DPbdXrnLs6q7jGOxiN5ooNpv2PD/iTS
Yjf9s/cn/c/m6i4LRezFd7rRqA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:08:21 2026 by rpki-client