Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.mft
File:                     s4Q_FBVTnelR6maApOmQCK-DeHQ.mft (raw, json)
Hash identifier:          IkVgG0lWCL6tU2MGXsQU/BmIm0qT3INxdT6UQrPZ1+A=
Subject key identifier:   B9:C0:2A:8C:EE:AC:B2:74:73:2A:21:E8:E7:3D:21:89:6C:4C:AD:C9
Authority key identifier: B3:84:3F:14:15:53:9D:E9:51:EA:66:80:A4:E9:90:08:AF:83:78:74
Certificate issuer:       /CN=A914E6AA/serialNumber=B3843F1415539DE951EA6680A4E99008AF837874
Certificate serial:       2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s4Q_FBVTnelR6maApOmQCK-DeHQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.mft
Manifest number:          0C73
Signing time:             Wed 22 Jul 2026 22:58:42 +0000
Manifest this update:     Wed 22 Jul 2026 22:58:41 +0000
Manifest next update:     Wed 29 Jul 2026 22:58:41 +0000
Files and hashes:         1: s4Q_FBVTnelR6maApOmQCK-DeHQ.crl (hash: X7Z9x/BcQYYn4K8vXnRliY+ooBbIHfVJ8QPyj0rI+qU=)
                          2: 6017E5BE54FB11F1B81DC57BA3833773.roa (hash: P+pna3FadF29aa6apDihcWdlag9aJJPNQ/+Y5gHcH4s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.crl
                          rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s4Q_FBVTnelR6maApOmQCK-DeHQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:58:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E6AA, serialNumber=B3843F1415539DE951EA6680A4E99008AF837874
        Validity
            Not Before: Jul 22 22:58:41 2026 GMT
            Not After : Jul 29 22:58:41 2026 GMT
        Subject: CN=6a614b21-7c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5f:4e:6a:ef:08:d8:f3:6d:bf:b7:4c:08:16:
                    52:3e:cb:01:08:54:8f:86:b2:bb:69:89:d0:6d:53:
                    5c:73:e2:4b:ed:f7:1c:26:32:a1:08:ce:61:3b:10:
                    92:f8:f5:71:4a:96:c2:e0:96:20:8b:d5:f5:14:cd:
                    e6:ba:1d:51:24:b7:65:f8:6b:25:8d:05:35:31:bd:
                    e8:83:2d:72:0e:11:a5:0a:84:d5:38:9e:ac:b7:0e:
                    98:c6:91:5a:30:55:ef:cf:ca:b8:6f:39:70:c8:2f:
                    86:ff:fa:e3:52:84:27:01:e1:46:e9:94:1e:e0:d2:
                    d2:27:3e:c8:d0:61:28:ac:e0:cb:4b:db:b3:54:17:
                    0a:42:05:2f:15:7e:85:00:e5:52:01:1c:ae:e0:94:
                    af:d0:14:45:d6:43:11:d4:e1:2a:d5:f4:3a:3a:2b:
                    79:b4:52:d2:03:42:8b:c3:03:eb:2b:a5:c7:fb:d4:
                    c1:cb:f5:61:fb:d3:e8:4b:9b:da:70:31:32:cb:02:
                    9e:b0:bb:92:d7:7b:e8:bc:a9:33:5c:87:cf:df:39:
                    b9:c9:82:84:2f:b2:98:84:4d:aa:4a:92:40:b9:8f:
                    31:47:8f:d6:48:10:7f:a7:47:73:0c:d9:db:89:36:
                    23:35:b9:ea:65:9a:9c:bb:74:e2:01:6f:f4:61:b2:
                    1a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C0:2A:8C:EE:AC:B2:74:73:2A:21:E8:E7:3D:21:89:6C:4C:AD:C9
            X509v3 Authority Key Identifier:
                keyid:B3:84:3F:14:15:53:9D:E9:51:EA:66:80:A4:E9:90:08:AF:83:78:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s4Q_FBVTnelR6maApOmQCK-DeHQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:04:c9:42:95:dd:78:f3:6d:04:9c:af:8a:1c:b7:6b:cf:3c:
         1a:ae:c2:93:c5:4d:bc:ef:ed:a7:3c:01:06:d7:4b:fd:1c:2e:
         a5:64:0c:52:47:87:8b:0a:a6:6f:33:b3:d6:af:9a:5b:95:3d:
         dd:04:b5:ff:e5:88:11:a0:f6:a7:3a:81:c8:06:a5:08:f0:17:
         77:63:3c:3a:8a:f6:5f:43:f9:48:b1:39:13:45:f4:de:4f:f4:
         e4:16:ae:6b:51:6f:79:d6:8a:cf:ea:66:16:3d:bf:47:25:09:
         88:3f:ae:dd:fa:10:ca:04:b9:1e:36:b3:35:e4:b0:d3:6f:c2:
         22:b1:76:4a:7e:51:4e:39:a0:ff:80:65:fc:2b:5f:15:db:1d:
         ae:b5:30:0b:5e:da:74:69:53:6f:80:f6:1e:05:2d:25:00:48:
         6d:ee:60:a6:49:be:08:ea:9e:22:ee:20:e3:f0:ff:2e:09:43:
         06:98:b7:55:46:52:7a:17:6c:0e:40:ef:0c:6a:65:86:40:27:
         bf:4e:f7:1b:51:0c:e6:03:08:ed:93:7c:6c:c2:76:b2:02:cd:
         c8:97:b4:54:72:19:11:3c:25:6e:05:c7:59:cd:4b:8b:4d:5d:
         0d:d7:19:56:f5:47:b6:e3:56:c4:90:6d:26:58:79:15:29:99:
         e8:ac:b7:f0
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
RTZBQTExMC8GA1UEBRMoQjM4NDNGMTQxNTUzOURFOTUxRUE2NjgwQTRFOTkwMDhB
RjgzNzg3NDAeFw0yNjA3MjIyMjU4NDFaFw0yNjA3MjkyMjU4NDFaMBgxFjAUBgNV
BAMTDTZhNjE0YjIxLTdjNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCyX05q7wjY822/t0wIFlI+ywEIVI+GsrtpidBtU1xz4kvt9xwmMqEIzmE7EJL4
9XFKlsLgliCL1fUUzea6HVEkt2X4ayWNBTUxveiDLXIOEaUKhNU4nqy3DpjGkVow
Ve/PyrhvOXDIL4b/+uNShCcB4UbplB7g0tInPsjQYSis4MtL27NUFwpCBS8VfoUA
5VIBHK7glK/QFEXWQxHU4SrV9Do6K3m0UtIDQovDA+srpcf71MHL9WH70+hLm9pw
MTLLAp6wu5LXe+i8qTNch8/fObnJgoQvspiETapKkkC5jzFHj9ZIEH+nR3MM2duJ
NiM1ueplmpy7dOIBb/RhshqbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUucAqjO6s
snRzKiHo5z0hiWxMrckwHwYDVR0jBBgwFoAUs4Q/FBVTnelR6maApOmQCK+DeHQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFNkFBLzhFREIxMDdFQURB
ODExRUJBN0M5RjU2N0M0RjlBRTAyL3M0UV9GQlZUbmVsUjZtYUFwT21RQ0stRGVI
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvczRRX0ZCVlRuZWxSNm1hQXBPbVFDSy1EZUhRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF
NkFBLzhFREIxMDdFQURBODExRUJBN0M5RjU2N0M0RjlBRTAyL3M0UV9GQlZUbmVs
UjZtYUFwT21RQ0stRGVIUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBjBMlCld14820EnK+KHLdrzzwarsKTxU287+2nPAEG10v9HC6lZAxSR4eLCqZv
M7PWr5pblT3dBLX/5YgRoPanOoHIBqUI8Bd3Yzw6ivZfQ/lIsTkTRfTeT/TkFq5r
UW951orP6mYWPb9HJQmIP67d+hDKBLkeNrM15LDTb8IisXZKflFOOaD/gGX8K18V
2x2utTALXtp0aVNvgPYeBS0lAEht7mCmSb4I6p4i7iDj8P8uCUMGmLdVRlJ6F2wO
QO8MamWGQCe/TvcbUQzmAwjtk3xswnayAs3Il7RUchkRPCVuBcdZzUuLTV0N1xlW
9Ue241bEkG0mWHkVKZnorLfw
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:31 2026 by rpki-client