Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
File:                     bifP0YnuRkQx1LkBO8wHWKgCZOY.mft (raw, json)
Hash identifier:          c0evrixj4CWhutXIaOikVcbB+L5GRcRJ+yZuWF/x5vU=
Subject key identifier:   B2:8B:74:DC:8A:BD:AF:37:39:CD:16:A7:2D:46:E5:74:4D:EA:A1:4B
Authority key identifier: 6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6
Certificate issuer:       /CN=A9157D13/serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6
Certificate serial:       1995
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
Manifest number:          197C
Signing time:             Wed 22 Jul 2026 16:30:30 +0000
Manifest this update:     Wed 22 Jul 2026 16:30:29 +0000
Manifest next update:     Wed 29 Jul 2026 16:30:29 +0000
Files and hashes:         1: bifP0YnuRkQx1LkBO8wHWKgCZOY.crl (hash: f300i9PFbrABWz5oGzkrcw4hCg90MtouESfUTdHL9hs=)
                          2: 33E73FAAE50B11EF838B6642C4F9AE02.roa (hash: d+TSvpxly3k8El4+pV6d2wdav1wdXrK2Z6zZMFeDKxk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl
                          rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6549 (0x1995)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157D13, serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6
        Validity
            Not Before: Jul 22 16:30:29 2026 GMT
            Not After : Jul 29 16:30:29 2026 GMT
        Subject: CN=6a60f026-0ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:aa:19:a2:5f:c2:a8:b2:68:ad:20:2c:c6:a7:
                    b4:81:89:28:bb:a4:72:bf:f0:18:e9:31:48:4c:41:
                    c6:8d:fb:4e:3d:7a:9b:9d:b7:5c:f4:b7:d8:ef:2f:
                    23:7d:96:f8:c7:7d:89:9b:57:65:7c:5e:f5:ae:6a:
                    79:c3:82:79:e6:d0:eb:4a:12:5a:65:51:ea:a6:2c:
                    72:91:d2:2c:dd:12:c2:5c:1e:30:b5:fe:b4:e4:c0:
                    be:0f:4b:73:f8:51:fe:44:c1:cd:9d:05:e5:e1:5c:
                    e8:b5:3f:98:fb:19:28:be:1c:2d:c3:09:00:cb:03:
                    0f:91:48:90:f5:1e:83:b1:a2:6e:c6:23:be:d9:ee:
                    20:bf:34:b1:d4:bc:dc:15:3b:0a:3a:ab:5b:ae:d9:
                    7a:a3:f1:a9:b7:e6:30:ad:b7:62:2b:d1:c6:09:79:
                    9a:58:4a:06:04:b5:6e:75:02:79:b5:60:0b:63:1f:
                    c2:85:b4:81:ab:3a:33:e3:1f:dd:a4:88:8b:be:ed:
                    6e:54:65:41:60:40:e3:25:a4:87:2d:99:84:0e:14:
                    92:bc:8b:3d:a2:c3:49:53:c2:e4:1a:f6:77:5d:5a:
                    0d:32:1f:b5:56:f7:1a:2e:88:1c:59:0d:9a:7a:34:
                    be:6e:b8:4f:4d:38:aa:1f:e3:67:18:2d:0a:d2:e6:
                    c6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:8B:74:DC:8A:BD:AF:37:39:CD:16:A7:2D:46:E5:74:4D:EA:A1:4B
            X509v3 Authority Key Identifier:
                keyid:6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:62:31:3f:80:8b:34:3a:b4:d7:53:8d:fd:4d:b5:34:98:8c:
         af:d3:6f:4b:ba:5b:b2:eb:38:39:9c:93:9a:15:af:d0:50:41:
         7d:d0:30:7b:7c:2b:fd:20:d9:49:49:4d:5d:2d:1f:b0:2b:b9:
         f0:57:bf:ab:78:d4:45:da:62:20:ca:4b:83:33:42:e2:dc:c4:
         b7:f3:3f:e7:b0:37:6d:d7:0c:bf:28:5d:b1:4b:45:94:64:9a:
         40:a3:e4:64:3a:a6:94:be:20:69:b5:45:9e:a9:4b:9e:c1:66:
         6c:6d:14:07:fc:3a:eb:68:7d:9f:3e:4e:b2:10:51:a4:30:92:
         a8:5c:f8:a9:ea:bd:94:be:ec:c7:32:a4:bc:39:0a:b7:6c:04:
         c8:db:64:6c:d8:e6:c9:df:0b:be:af:8c:7f:b0:6c:2c:d1:2f:
         d9:70:c9:b8:89:c7:0d:67:b5:86:40:b0:b9:85:8d:c6:f1:81:
         7a:9f:84:0c:f2:88:7e:08:b0:76:a0:d7:28:4f:10:cb:9a:52:
         f5:47:8e:1a:fd:be:09:06:3a:05:8e:cc:6c:a3:b7:c3:a3:c8:
         51:7c:48:a6:46:1d:85:13:f0:ce:69:7d:1a:f1:e2:55:b9:fc:
         61:ed:12:07:aa:ec:0f:19:77:6b:1b:e8:c6:da:a1:2a:29:01:
         d7:d2:21:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdEMTMxMTAvBgNVBAUTKDZFMjdDRkQxODlFRTQ2NDQzMUQ0QjkwMTNCQ0MwNzU4
QTgwMjY0RTYwHhcNMjYwNzIyMTYzMDI5WhcNMjYwNzI5MTYzMDI5WjAYMRYwFAYD
VQQDEw02YTYwZjAyNi0wYmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu6oZol/CqLJorSAsxqe0gYkou6Ryv/AY6TFITEHGjftOPXqbnbdc9LfY7y8j
fZb4x32Jm1dlfF71rmp5w4J55tDrShJaZVHqpixykdIs3RLCXB4wtf605MC+D0tz
+FH+RMHNnQXl4VzotT+Y+xkovhwtwwkAywMPkUiQ9R6DsaJuxiO+2e4gvzSx1Lzc
FTsKOqtbrtl6o/Gpt+YwrbdiK9HGCXmaWEoGBLVudQJ5tWALYx/ChbSBqzoz4x/d
pIiLvu1uVGVBYEDjJaSHLZmEDhSSvIs9osNJU8LkGvZ3XVoNMh+1VvcaLogcWQ2a
ejS+brhPTTiqH+NnGC0K0ubGkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLKLdNyK
va83Oc0Wpy1G5XRN6qFLMB8GA1UdIwQYMBaAFG4nz9GJ7kZEMdS5ATvMB1ioAmTm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0QxMy9BQTI1REYxQzk4
RkQxMUU3QTgxNDU1NjBDNEY5QUUwMi9iaWZQMFludVJrUXgxTGtCTzh3SFdLZ0Na
T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JpZlAwWW51UmtReDFMa0JPOHdIV0tnQ1pPWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
N0QxMy9BQTI1REYxQzk4RkQxMUU3QTgxNDU1NjBDNEY5QUUwMi9iaWZQMFludVJr
UXgxTGtCTzh3SFdLZ0NaT1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeGIxP4CLNDq011ON/U21NJiMr9NvS7pbsus4OZyTmhWv0FBBfdAwe3wr/SDZ
SUlNXS0fsCu58Fe/q3jURdpiIMpLgzNC4tzEt/M/57A3bdcMvyhdsUtFlGSaQKPk
ZDqmlL4gabVFnqlLnsFmbG0UB/w662h9nz5OshBRpDCSqFz4qeq9lL7sxzKkvDkK
t2wEyNtkbNjmyd8Lvq+Mf7BsLNEv2XDJuInHDWe1hkCwuYWNxvGBep+EDPKIfgiw
dqDXKE8Qy5pS9UeOGv2+CQY6BY7MbKO3w6PIUXxIpkYdhRPwzml9GvHiVbn8Ye0S
B6rsDxl3axvoxtqhKikB19Ihgw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:36 2026 by rpki-client