Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft
File:                     IEZaOpwIN-e2iDBzNx26CSIvv0o.mft (raw, json)
Hash identifier:          2Qzcl/x7l8d8AaxEmsGSfdQkdxV0DXYGbXBfWDimv/0=
Subject key identifier:   9F:54:E8:70:49:A6:15:37:C1:F8:11:E9:15:9F:6B:65:51:ED:CF:81
Authority key identifier: 20:46:5A:3A:9C:08:37:E7:B6:88:30:73:37:1D:BA:09:22:2F:BF:4A
Certificate issuer:       /CN=A915D897/serialNumber=20465A3A9C0837E7B6883073371DBA09222FBF4A
Certificate serial:       07AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft
Manifest number:          07A0
Signing time:             Wed 22 Jul 2026 22:06:19 +0000
Manifest this update:     Wed 22 Jul 2026 22:06:18 +0000
Manifest next update:     Wed 29 Jul 2026 22:06:18 +0000
Files and hashes:         1: IEZaOpwIN-e2iDBzNx26CSIvv0o.crl (hash: XVg+YhPzgh8Or0sECmnVwcan0Y7cedX0mNDZ05xi4hU=)
                          2: 45490AB25AD611EB946A2C37C4F9AE02.roa (hash: 1PxoUc76XWXkL998OGNeqeLJhJOsgUexrDcQlkjdiNM=)
                          3: 9CC98174539711EEA9B2324DC4F9AE02.roa (hash: uacZ0uLJA7NcUgf5BEG6bnuqXCkNz+VfZ3kDotldilw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.crl
                          rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1966 (0x7ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D897, serialNumber=20465A3A9C0837E7B6883073371DBA09222FBF4A
        Validity
            Not Before: Jul 22 22:06:18 2026 GMT
            Not After : Jul 29 22:06:18 2026 GMT
        Subject: CN=6a613edb-f406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b3:8d:04:9c:6c:a2:c1:16:a3:42:22:cc:e1:
                    ac:6b:ea:de:70:6d:8b:51:f9:43:1b:ce:6e:c3:e0:
                    97:f6:20:50:19:c1:9d:18:a3:79:02:1e:3d:7f:a7:
                    d7:b5:65:7a:94:ac:a6:a4:0a:9d:4b:cf:67:7d:37:
                    7f:df:26:50:1d:ec:56:0a:6e:6c:72:5b:76:26:8e:
                    98:30:1c:0a:20:b2:1a:69:78:36:fe:97:f7:2f:f8:
                    72:fb:15:f5:d7:4d:51:b1:28:62:ae:e8:91:34:97:
                    b9:9a:1f:b9:bf:97:82:c7:19:cb:8c:01:05:57:46:
                    f2:26:78:8a:97:36:69:19:87:7a:45:60:9b:51:27:
                    9f:d7:20:c5:6a:64:20:2d:46:14:b8:28:d9:37:d8:
                    3b:4b:c8:ed:71:f8:50:f4:84:28:b5:90:5c:24:11:
                    18:a0:ba:c8:d7:f3:ba:82:98:6e:bb:20:f6:de:ad:
                    e6:f8:7c:f8:3a:8b:c8:24:ca:83:84:96:65:af:ef:
                    2d:0d:da:d3:27:0c:50:35:13:f9:47:64:63:ab:13:
                    29:ef:4b:f4:0c:2f:78:aa:a4:69:f3:c2:a6:4b:41:
                    94:36:e0:3a:c6:25:06:3b:6f:82:19:b4:82:65:5c:
                    d3:e2:ff:7e:ff:c2:38:2f:3c:ec:16:f9:d6:42:3a:
                    a3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:54:E8:70:49:A6:15:37:C1:F8:11:E9:15:9F:6B:65:51:ED:CF:81
            X509v3 Authority Key Identifier:
                keyid:20:46:5A:3A:9C:08:37:E7:B6:88:30:73:37:1D:BA:09:22:2F:BF:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:37:91:96:ff:31:76:8e:2b:47:68:65:f4:21:b4:16:5f:d7:
         e7:ba:24:27:74:65:6a:fb:87:12:59:10:8c:9f:1e:a5:9e:e4:
         d1:50:8d:07:a4:bc:8e:80:fc:58:d0:c2:f9:e5:05:d2:30:fa:
         c0:d9:75:5c:7b:06:15:d7:da:6f:57:c2:94:5f:8f:ab:57:59:
         81:d6:15:3d:1f:1a:2c:88:b3:17:86:cc:d9:27:a5:d6:dd:74:
         70:f8:9c:c5:80:ab:bd:95:40:bd:65:e0:07:e0:db:ea:50:bc:
         67:ce:e6:02:be:97:52:c8:32:71:53:96:04:ee:45:7f:f0:40:
         1e:de:8f:95:c5:74:99:0d:0c:7e:f4:c6:09:04:91:73:c2:95:
         9a:fe:c4:1d:d9:c2:cf:ff:3e:1a:16:fa:02:9d:80:1d:3c:e5:
         93:44:49:3e:46:37:12:50:ff:91:38:11:ea:38:eb:ab:a7:b4:
         12:8c:2c:ff:3e:82:41:2c:69:69:1d:bc:88:fd:90:5e:77:05:
         c5:b1:d9:a6:b7:55:88:5d:fb:c6:93:25:19:b6:be:e0:71:2e:
         fd:52:fa:d4:8e:4c:90:64:9b:d8:23:5b:51:d0:69:71:dd:10:
         bb:dd:63:2e:f5:1d:bc:97:2d:56:67:2a:1c:0f:bc:0e:57:9c:
         73:84:65:99
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ4OTcxMTAvBgNVBAUTKDIwNDY1QTNBOUMwODM3RTdCNjg4MzA3MzM3MURCQTA5
MjIyRkJGNEEwHhcNMjYwNzIyMjIwNjE4WhcNMjYwNzI5MjIwNjE4WjAYMRYwFAYD
VQQDEw02YTYxM2VkYi1mNDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApbONBJxsosEWo0IizOGsa+recG2LUflDG85uw+CX9iBQGcGdGKN5Ah49f6fX
tWV6lKympAqdS89nfTd/3yZQHexWCm5sclt2Jo6YMBwKILIaaXg2/pf3L/hy+xX1
101RsShiruiRNJe5mh+5v5eCxxnLjAEFV0byJniKlzZpGYd6RWCbUSef1yDFamQg
LUYUuCjZN9g7S8jtcfhQ9IQotZBcJBEYoLrI1/O6gphuuyD23q3m+Hz4OovIJMqD
hJZlr+8tDdrTJwxQNRP5R2RjqxMp70v0DC94qqRp88KmS0GUNuA6xiUGO2+CGbSC
ZVzT4v9+/8I4LzzsFvnWQjqjSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ9U6HBJ
phU3wfgR6RWfa2VR7c+BMB8GA1UdIwQYMBaAFCBGWjqcCDfntogwczcdugkiL79K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDg5Ny8wOTc3MTE5MjVB
RDUxMUVCOTQ1QzRCMzZDNEY5QUUwMi9JRVphT3B3SU4tZTJpREJ6TngyNkNTSXZ2
MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lFWmFPcHdJTi1lMmlEQnpOeDI2Q1NJdnYwby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDg5Ny8wOTc3MTE5MjVBRDUxMUVCOTQ1QzRCMzZDNEY5QUUwMi9JRVphT3B3SU4t
ZTJpREJ6TngyNkNTSXZ2MG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjDeRlv8xdo4rR2hl9CG0Fl/X57okJ3RlavuHElkQjJ8epZ7k0VCNB6S8joD8
WNDC+eUF0jD6wNl1XHsGFdfab1fClF+Pq1dZgdYVPR8aLIizF4bM2Sel1t10cPic
xYCrvZVAvWXgB+Db6lC8Z87mAr6XUsgycVOWBO5Ff/BAHt6PlcV0mQ0MfvTGCQSR
c8KVmv7EHdnCz/8+Ghb6Ap2AHTzlk0RJPkY3ElD/kTgR6jjrq6e0Eows/z6CQSxp
aR28iP2QXncFxbHZprdViF37xpMlGba+4HEu/VL61I5MkGSb2CNbUdBpcd0Qu91j
LvUdvJctVmcqHA+8Dlecc4RlmQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:44:10 2026 by rpki-client