Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
File:                     9fHi3rMlVisihf-LXeJd8srfdwc.mft (raw, json)
Hash identifier:          90SwzZl/QI1F2e9jiL/6LTOmtFbR5XsxnKPJ3hlc6QA=
Subject key identifier:   B4:0E:FC:F5:07:42:68:D1:F0:AC:54:7A:86:73:B3:80:65:D7:B4:FC
Authority key identifier: F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07
Certificate issuer:       /CN=A915B4B5/serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707
Certificate serial:       01B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
Manifest number:          01AE
Signing time:             Thu 23 Jul 2026 05:26:10 +0000
Manifest this update:     Thu 23 Jul 2026 05:26:09 +0000
Manifest next update:     Thu 30 Jul 2026 05:26:09 +0000
Files and hashes:         1: 9fHi3rMlVisihf-LXeJd8srfdwc.crl (hash: NcwLTdDznhGtVxPfVHkeQu3cZgY2IAtvA7KZtW+X59A=)
                          2: E0207030F13611EE869F9E34C4F9AE02.roa (hash: yGCwpeHPW0bX2imG5e3bAmsS3SLMwwArtfpt+k0YYa4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl
                          rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436 (0x1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B4B5, serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707
        Validity
            Not Before: Jul 23 05:26:09 2026 GMT
            Not After : Jul 30 05:26:09 2026 GMT
        Subject: CN=6a61a5f1-c4b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:54:9b:22:9b:ae:82:18:cc:3a:2d:d3:b0:a8:
                    6b:9f:11:bf:f0:94:7a:7b:c5:0e:20:89:61:c7:45:
                    52:cd:37:a7:0a:22:57:49:c3:97:10:5c:a8:01:5e:
                    b5:6c:dc:68:68:87:9c:40:89:c0:57:11:ee:dc:f8:
                    0f:79:4e:10:1f:fa:96:82:14:1c:bb:f7:5a:59:37:
                    f2:c6:d1:73:f6:a9:c9:38:77:5f:b1:99:c4:b3:20:
                    ff:1e:ab:05:dc:b9:ae:12:a8:e3:8a:3c:16:f3:de:
                    2c:09:6f:74:ae:da:f9:6b:92:67:10:5f:e6:79:56:
                    a4:92:7d:3d:6c:9e:ce:a8:87:e1:7a:38:4e:6c:7b:
                    92:fb:82:4e:fa:27:cb:4e:fe:a3:bc:dc:6d:66:4d:
                    f2:d8:25:d2:4f:62:a2:c8:b8:a2:84:f3:27:cc:59:
                    20:8b:83:3c:8f:4b:86:24:1b:0e:c6:54:97:74:0f:
                    a7:e2:6f:02:cb:c1:98:1b:79:2f:ad:93:f5:7c:1b:
                    9b:ed:10:c2:ce:e3:07:47:ce:94:b6:92:19:d1:50:
                    f1:8c:bd:58:58:6a:02:9d:44:e6:1d:84:b2:c0:86:
                    26:78:c3:83:37:f9:0c:f9:56:4c:5a:d9:68:e3:08:
                    28:ce:1c:9b:10:7f:2d:c9:88:b4:36:1a:7c:62:35:
                    56:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0E:FC:F5:07:42:68:D1:F0:AC:54:7A:86:73:B3:80:65:D7:B4:FC
            X509v3 Authority Key Identifier:
                keyid:F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:32:6f:af:89:4c:d1:44:8e:0a:13:16:25:29:47:41:ec:4b:
         66:f7:ca:18:04:d0:7b:c8:85:31:65:70:27:35:bd:a8:70:d0:
         82:ae:23:89:9a:a1:8d:73:22:31:a0:b3:fa:4b:e1:ad:7f:4f:
         fd:6c:37:71:70:6c:34:50:63:d8:fc:a2:ff:a0:bd:c0:ed:01:
         34:ca:6c:43:d5:e5:2f:4b:89:75:00:d9:06:bc:b1:ed:a4:28:
         ff:2d:69:b7:04:b7:ed:6d:8f:7f:f5:74:97:9d:ed:7e:3f:d5:
         80:99:6c:57:47:03:1f:53:a5:8a:7b:17:75:33:04:29:59:60:
         33:52:8f:97:e1:42:c9:65:67:e6:a8:95:06:e6:a9:03:7d:08:
         b3:4c:1f:0f:5d:89:44:52:0a:5e:39:34:f4:d0:40:9a:04:72:
         c7:41:77:bb:74:07:dd:23:f5:5b:11:0f:d0:44:1d:dd:7a:bb:
         d4:d5:c0:fa:c0:89:25:be:35:14:43:fb:a4:ac:17:33:e1:d8:
         a3:2e:5f:c9:0e:2e:91:e8:65:3b:84:aa:05:3d:33:91:1c:24:
         ce:fa:f9:b7:90:7c:0a:77:dc:e8:b7:5e:65:cf:4a:5b:7f:34:
         36:df:50:5b:06:63:62:ae:b6:98:63:16:a2:1e:cb:f5:77:b0:
         b2:3b:d8:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUI0QjUxMTAvBgNVBAUTKEY1RjFFMkRFQjMyNTU2MkIyMjg1RkY4QjVERTI1REYy
Q0FERjc3MDcwHhcNMjYwNzIzMDUyNjA5WhcNMjYwNzMwMDUyNjA5WjAYMRYwFAYD
VQQDEw02YTYxYTVmMS1jNGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoFSbIpuughjMOi3TsKhrnxG/8JR6e8UOIIlhx0VSzTenCiJXScOXEFyoAV61
bNxoaIecQInAVxHu3PgPeU4QH/qWghQcu/daWTfyxtFz9qnJOHdfsZnEsyD/HqsF
3LmuEqjjijwW894sCW90rtr5a5JnEF/meVakkn09bJ7OqIfhejhObHuS+4JO+ifL
Tv6jvNxtZk3y2CXST2KiyLiihPMnzFkgi4M8j0uGJBsOxlSXdA+n4m8Cy8GYG3kv
rZP1fBub7RDCzuMHR86UtpIZ0VDxjL1YWGoCnUTmHYSywIYmeMODN/kM+VZMWtlo
4wgozhybEH8tyYi0Nhp8YjVW+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLQO/PUH
QmjR8KxUeoZzs4Bl17T8MB8GA1UdIwQYMBaAFPXx4t6zJVYrIoX/i13iXfLK33cH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjRCNS80MENFOUYyQUYx
MzYxMUVFOTA4QkYwMzJDNEY5QUUwMi85ZkhpM3JNbFZpc2loZi1MWGVKZDhzcmZk
d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlmSGkzck1sVmlzaWhmLUxYZUpkOHNyZmR3Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QjRCNS80MENFOUYyQUYxMzYxMUVFOTA4QkYwMzJDNEY5QUUwMi85ZkhpM3JNbFZp
c2loZi1MWGVKZDhzcmZkd2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALzJvr4lM0USOChMWJSlHQexLZvfKGATQe8iFMWVwJzW9qHDQgq4jiZqhjXMi
MaCz+kvhrX9P/Ww3cXBsNFBj2Pyi/6C9wO0BNMpsQ9XlL0uJdQDZBryx7aQo/y1p
twS37W2Pf/V0l53tfj/VgJlsV0cDH1OlinsXdTMEKVlgM1KPl+FCyWVn5qiVBuap
A30Is0wfD12JRFIKXjk09NBAmgRyx0F3u3QH3SP1WxEP0EQd3Xq71NXA+sCJJb41
FEP7pKwXM+HYoy5fyQ4ukehlO4SqBT0zkRwkzvr5t5B8Cnfc6LdeZc9KW380Nt9Q
WwZjYq62mGMWoh7L9XewsjvYwQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:16:29 2026 by rpki-client