Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft
File:                     badIHjljLTOANmkPe0OixINj22g.mft (raw, json)
Hash identifier:          DSZiudMm+LWZ0fgxxs17lm48JcT95Q4Xj/D+MpEDjDg=
Subject key identifier:   6A:70:9E:A1:AF:F6:19:44:FA:0D:55:13:DB:C1:F6:2F:80:D0:72:9F
Authority key identifier: 6D:A7:48:1E:39:63:2D:33:80:36:69:0F:7B:43:A2:C4:83:63:DB:68
Certificate issuer:       /CN=A9156854/serialNumber=6DA7481E39632D338036690F7B43A2C48363DB68
Certificate serial:       0127
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/badIHjljLTOANmkPe0OixINj22g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft
Manifest number:          0123
Signing time:             Thu 23 Jul 2026 07:24:21 +0000
Manifest this update:     Thu 23 Jul 2026 07:24:20 +0000
Manifest next update:     Thu 30 Jul 2026 07:24:20 +0000
Files and hashes:         1: badIHjljLTOANmkPe0OixINj22g.crl (hash: P812GA0FipimFQw4KtRY9A4+ahHaTFtRHEY7EpU+Eds=)
                          2: CCE068D6CB2411EF93F63631C4F9AE02.roa (hash: kVyhvgjxUwUSm0wPasDIxMkRKwNbqO3guIkhR0YMhkI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.crl
                          rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/badIHjljLTOANmkPe0OixINj22g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:24:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156854, serialNumber=6DA7481E39632D338036690F7B43A2C48363DB68
        Validity
            Not Before: Jul 23 07:24:20 2026 GMT
            Not After : Jul 30 07:24:20 2026 GMT
        Subject: CN=6a61c1a4-84f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:02:83:15:4e:e7:8c:5c:49:13:6b:90:21:74:
                    bf:62:16:02:d1:e0:a4:ad:2b:65:2e:af:28:23:9a:
                    59:0c:56:b1:d8:7d:29:76:e4:99:26:7f:c0:8b:38:
                    68:c8:67:92:0e:9b:55:9e:35:6a:05:97:80:a9:74:
                    0d:d1:c2:6e:52:95:eb:37:c0:af:25:cc:28:f4:95:
                    53:fd:ee:c0:fb:26:17:0d:7e:cf:04:3d:2c:5b:09:
                    09:91:7e:88:8f:69:f0:e6:4a:21:4a:43:20:e3:8c:
                    8e:d8:72:23:9f:a2:7e:5f:00:53:c2:26:16:2c:52:
                    07:3e:ca:e6:4a:0a:f5:c7:4b:af:07:f6:75:ef:d1:
                    c4:f5:69:2a:3d:d8:4f:e1:21:e6:47:2f:86:6e:be:
                    69:1f:f1:b5:19:88:fd:fe:30:87:6a:6b:ed:0c:5c:
                    ea:f1:1a:9c:34:08:07:f1:47:58:be:46:52:e2:ae:
                    f8:2c:6b:72:2f:11:9d:1a:2d:2f:de:1c:c9:bc:4a:
                    35:f0:21:29:b3:91:7c:0d:eb:90:fa:06:67:ea:1b:
                    ad:11:dc:8f:37:bb:24:32:26:55:0d:2e:57:41:4a:
                    f9:05:12:54:60:95:b0:06:ea:b8:7a:05:80:83:d2:
                    67:ba:27:69:b0:37:99:0c:6c:7a:7c:65:82:67:0d:
                    ec:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:70:9E:A1:AF:F6:19:44:FA:0D:55:13:DB:C1:F6:2F:80:D0:72:9F
            X509v3 Authority Key Identifier:
                keyid:6D:A7:48:1E:39:63:2D:33:80:36:69:0F:7B:43:A2:C4:83:63:DB:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/badIHjljLTOANmkPe0OixINj22g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:aa:f1:8a:01:50:c8:9b:74:f4:df:f6:12:fb:90:55:dc:fe:
         9e:07:b1:bf:c2:c2:9e:6f:11:0f:5e:d2:1b:19:82:e1:a6:b3:
         50:f7:21:3a:82:64:90:66:46:79:fd:58:eb:0e:3b:56:56:af:
         51:4d:ed:f0:d3:3d:11:df:68:91:0c:2b:77:43:cc:29:18:65:
         8a:a5:01:65:f8:d4:2d:33:2d:38:79:18:93:ac:e2:c6:7b:34:
         a2:f2:64:72:e9:41:35:49:b9:96:48:c3:1c:df:42:4d:5b:4b:
         dc:25:66:9c:68:db:ba:d2:83:b8:ba:0d:58:b3:51:1c:e6:22:
         02:d0:20:73:2d:f3:6f:70:1b:65:78:96:91:e9:7e:1f:d7:9c:
         4f:71:94:41:84:25:1c:52:0f:10:98:59:7d:81:87:56:3b:96:
         e7:7a:9c:fd:93:cf:46:93:a0:2c:e0:2c:9a:0c:12:2a:6a:cf:
         07:b2:9a:a2:9f:2c:f5:e6:1e:a9:05:5c:07:03:22:27:29:d1:
         a0:19:f1:3d:89:a7:b8:3d:2b:e3:c9:02:47:da:7d:35:68:41:
         20:3f:54:a0:53:90:a2:f6:6c:b7:0f:2b:24:bc:fe:e5:22:8a:
         44:3f:c4:88:b0:99:99:1c:c6:2d:71:d1:3f:a0:48:fe:04:44:
         8d:4c:b3:45
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY4NTQxMTAvBgNVBAUTKDZEQTc0ODFFMzk2MzJEMzM4MDM2NjkwRjdCNDNBMkM0
ODM2M0RCNjgwHhcNMjYwNzIzMDcyNDIwWhcNMjYwNzMwMDcyNDIwWjAYMRYwFAYD
VQQDEw02YTYxYzFhNC04NGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAswKDFU7njFxJE2uQIXS/YhYC0eCkrStlLq8oI5pZDFax2H0pduSZJn/Aizho
yGeSDptVnjVqBZeAqXQN0cJuUpXrN8CvJcwo9JVT/e7A+yYXDX7PBD0sWwkJkX6I
j2nw5kohSkMg44yO2HIjn6J+XwBTwiYWLFIHPsrmSgr1x0uvB/Z179HE9WkqPdhP
4SHmRy+Gbr5pH/G1GYj9/jCHamvtDFzq8RqcNAgH8UdYvkZS4q74LGtyLxGdGi0v
3hzJvEo18CEps5F8DeuQ+gZn6hutEdyPN7skMiZVDS5XQUr5BRJUYJWwBuq4egWA
g9JnuidpsDeZDGx6fGWCZw3sOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGpwnqGv
9hlE+g1VE9vB9i+A0HKfMB8GA1UdIwQYMBaAFG2nSB45Yy0zgDZpD3tDosSDY9to
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njg1NC9ERDkwQzNDMENC
MjMxMUVGOUU4NjY4MkVDNEY5QUUwMi9iYWRJSGpsakxUT0FObWtQZTBPaXhJTmoy
MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JhZElIamxqTFRPQU5ta1BlME9peElOajIyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Njg1NC9ERDkwQzNDMENCMjMxMUVGOUU4NjY4MkVDNEY5QUUwMi9iYWRJSGpsakxU
T0FObWtQZTBPaXhJTmoyMmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQKrxigFQyJt09N/2EvuQVdz+ngexv8LCnm8RD17SGxmC4aazUPchOoJkkGZG
ef1Y6w47VlavUU3t8NM9Ed9okQwrd0PMKRhliqUBZfjULTMtOHkYk6zixns0ovJk
culBNUm5lkjDHN9CTVtL3CVmnGjbutKDuLoNWLNRHOYiAtAgcy3zb3AbZXiWkel+
H9ecT3GUQYQlHFIPEJhZfYGHVjuW53qc/ZPPRpOgLOAsmgwSKmrPB7Kaop8s9eYe
qQVcBwMiJynRoBnxPYmnuD0r48kCR9p9NWhBID9UoFOQovZstw8rJLz+5SKKRD/E
iLCZmRzGLXHRP6BI/gREjUyzRQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:29:11 2026 by rpki-client