Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
File:                     4rutOTFYoGdMaUnsO4oLc_hgKaI.mft (raw, json)
Hash identifier:          NiEgpWWFdkP7s6uiDPP4MQBlmS4XC2p68hnCWw/zv6U=
Subject key identifier:   4A:F5:8F:D3:F8:84:3E:1A:C7:79:AF:0A:04:8F:F9:74:38:17:25:34
Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2
Certificate issuer:       /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
Certificate serial:       0378
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
Manifest number:          033F
Signing time:             Thu 23 Jul 2026 01:59:37 +0000
Manifest this update:     Thu 23 Jul 2026 01:59:36 +0000
Manifest next update:     Thu 30 Jul 2026 01:59:36 +0000
Files and hashes:         1: 4rutOTFYoGdMaUnsO4oLc_hgKaI.crl (hash: RcJ6lcGXeeM5DDZm5sbDLAruX3G4Un0Im6bIPhvsyuc=)
                          2: EC75126616CA11ED8E290A59C4F9AE02.roa (hash: qxr1xAZVPVy5IH5flTFbZouBg69ZSR0F1Rre519E1ps=)
                          3: 4EEAF1DAE96211ED9A14B935C4F9AE02.roa (hash: AInTRm364fWSsEgGDzFSbiLVDp6l9PBB3u+vGg6CfFw=)
                          4: C3CAF2B45FA411F1BEAC166C6447A888.roa (hash: eWIo7kbVQkKc0K9IfxrOFYr5X4owiTYv5hYN6CSCNfY=)
                          5: BBF0DD5216CD11EDBB046C79C4F9AE02.roa (hash: pXbpkuqiutX+PAfcE6/HkNxLhVyYjefCmA1YJyvlDKU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl
                          rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:59:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888 (0x378)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156740, serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
        Validity
            Not Before: Jul 23 01:59:36 2026 GMT
            Not After : Jul 30 01:59:36 2026 GMT
        Subject: CN=6a617589-3666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:70:e0:89:93:39:a5:e0:72:c0:f6:a8:3e:88:
                    c5:bb:e9:74:4b:96:56:6c:7c:63:7d:68:70:4a:e5:
                    6c:20:32:a6:82:06:5f:77:d8:4f:00:cc:78:40:96:
                    f2:bc:b1:48:98:f1:21:a7:91:9e:1f:a4:b2:f6:49:
                    ac:ac:4d:dc:01:75:d2:50:a3:18:36:85:15:de:65:
                    3b:b5:38:87:37:6f:51:e7:c2:af:1c:b6:c9:c6:92:
                    72:a7:d6:64:2c:02:92:a9:97:c5:ec:48:5a:ea:40:
                    54:74:e4:1e:e1:fd:a2:44:d5:3f:ea:68:d0:66:ef:
                    70:0f:db:08:d0:07:6f:2c:2e:62:ff:66:55:81:da:
                    b1:16:4b:f3:4d:4a:84:4c:08:05:e3:5f:19:c6:d8:
                    81:80:e7:a7:1f:2c:b0:58:48:b5:60:be:da:8c:9f:
                    4b:a0:7b:f8:97:5c:3c:7c:19:ea:0f:52:c1:4d:0b:
                    e2:28:65:d1:dd:ea:41:79:80:4b:e2:b8:e2:42:c2:
                    0f:24:e4:cb:8f:7a:62:5e:ec:c3:a4:f8:7e:19:a8:
                    9f:a6:37:cf:a6:9f:90:22:b1:53:cb:5c:70:23:5e:
                    eb:4c:ec:13:41:9b:e8:b0:41:0f:99:b9:b8:ea:55:
                    48:7d:bb:de:82:dc:4a:b6:bd:59:40:23:46:da:01:
                    54:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F5:8F:D3:F8:84:3E:1A:C7:79:AF:0A:04:8F:F9:74:38:17:25:34
            X509v3 Authority Key Identifier:
                keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:f3:80:34:23:7d:9a:3c:fc:89:c1:fa:ce:d8:9f:93:9c:66:
         e8:42:d3:c2:5d:eb:25:a3:4f:fb:40:5a:48:00:76:92:62:64:
         a6:52:57:15:73:06:c3:e6:30:23:e2:a1:50:50:a4:c5:f9:27:
         49:1a:e1:45:7e:69:96:1f:9b:2c:e3:71:06:53:15:e4:d8:b6:
         4a:ff:93:bb:25:0b:03:bd:fe:6e:ec:a5:6d:89:ad:a1:de:34:
         81:04:45:77:1d:72:bf:88:32:a1:cd:4c:da:7c:fc:48:a4:ea:
         7b:9e:cb:87:78:a2:d0:21:4b:71:2a:1c:e6:18:6a:40:ac:ff:
         cf:67:34:eb:fb:a7:a3:fe:89:ec:3d:30:d7:f6:df:63:2e:69:
         0b:a3:e6:97:36:65:ec:77:4c:fa:fb:a1:11:ad:be:e7:90:f6:
         71:15:e6:86:93:a9:f0:dd:de:ed:28:9a:1c:0c:ad:20:0d:14:
         89:17:7a:e6:81:4b:c7:14:40:a0:2e:13:d1:3e:3d:d1:b9:08:
         a9:9d:e7:4b:a9:7e:10:41:02:1f:a4:9d:ce:5d:8a:15:56:9a:
         41:25:e0:12:a8:3f:b5:45:ab:20:9e:a4:29:59:0e:cf:e9:a7:
         71:16:af:d7:25:7d:2f:a2:74:77:96:ab:e8:db:04:0b:de:1b:
         d3:70:3d:62
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY3NDAxMTAvBgNVBAUTKEUyQkJBRDM5MzE1OEEwNjc0QzY5NDlFQzNCOEEwQjcz
Rjg2MDI5QTIwHhcNMjYwNzIzMDE1OTM2WhcNMjYwNzMwMDE1OTM2WjAYMRYwFAYD
VQQDEw02YTYxNzU4OS0zNjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqXDgiZM5peBywPaoPojFu+l0S5ZWbHxjfWhwSuVsIDKmggZfd9hPAMx4QJby
vLFImPEhp5GeH6Sy9kmsrE3cAXXSUKMYNoUV3mU7tTiHN29R58KvHLbJxpJyp9Zk
LAKSqZfF7Eha6kBUdOQe4f2iRNU/6mjQZu9wD9sI0AdvLC5i/2ZVgdqxFkvzTUqE
TAgF418ZxtiBgOenHyywWEi1YL7ajJ9LoHv4l1w8fBnqD1LBTQviKGXR3epBeYBL
4rjiQsIPJOTLj3piXuzDpPh+GaifpjfPpp+QIrFTy1xwI17rTOwTQZvosEEPmbm4
6lVIfbvegtxKtr1ZQCNG2gFU8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEr1j9P4
hD4ax3mvCgSP+XQ4FyU0MB8GA1UdIwQYMBaAFOK7rTkxWKBnTGlJ7DuKC3P4YCmi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njc0MC8zNTI4QjBDQzE2
QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9HZE1hVW5zTzRvTGNfaGdL
YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRydXRPVEZZb0dkTWFVbnNPNG9MY19oZ0thSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Njc0MC8zNTI4QjBDQzE2QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9H
ZE1hVW5zTzRvTGNfaGdLYUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApfOANCN9mjz8icH6ztifk5xm6ELTwl3rJaNP+0BaSAB2kmJkplJXFXMGw+Yw
I+KhUFCkxfknSRrhRX5plh+bLONxBlMV5Ni2Sv+TuyULA73+buylbYmtod40gQRF
dx1yv4gyoc1M2nz8SKTqe57Lh3ii0CFLcSoc5hhqQKz/z2c06/uno/6J7D0w1/bf
Yy5pC6PmlzZl7HdM+vuhEa2+55D2cRXmhpOp8N3e7SiaHAytIA0UiRd65oFLxxRA
oC4T0T490bkIqZ3nS6l+EEECH6Sdzl2KFVaaQSXgEqg/tUWrIJ6kKVkOz+mncRav
1yV9L6J0d5ar6NsEC94b03A9Yg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:29:01 2026 by rpki-client