Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft
File:                     A3iO4rrk2AXrzcpmGOLsGhilxOI.mft (raw, json)
Hash identifier:          b+dG1lwNyHQnaMJWRpjKzO/BKrCUMAEg34pnFZV9Q9g=
Subject key identifier:   F7:34:0D:24:6B:B4:61:DD:71:68:1A:63:E2:02:A0:69:01:32:09:2B
Authority key identifier: 03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2
Certificate issuer:       /CN=A915FDD9/serialNumber=03788EE2BAE4D805EBCDCA6618E2EC1A18A5C4E2
Certificate serial:       0148
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft
Manifest number:          0126
Signing time:             Thu 23 Jul 2026 07:33:11 +0000
Manifest this update:     Thu 23 Jul 2026 07:33:11 +0000
Manifest next update:     Thu 30 Jul 2026 07:33:11 +0000
Files and hashes:         1: A3iO4rrk2AXrzcpmGOLsGhilxOI.crl (hash: /D7ZHXlg+8d7Xdtg4NV0ECHiJM0EYO7g+32k3LBXOOo=)
                          2: 279A9510AB7811F09488DF65C4F9AE02.roa (hash: a66FJVblEQHdrFJ6maL/blKyTJ7uVgdnmuKz3wA+9Uc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.crl
                          rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:33:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FDD9, serialNumber=03788EE2BAE4D805EBCDCA6618E2EC1A18A5C4E2
        Validity
            Not Before: Jul 23 07:33:11 2026 GMT
            Not After : Jul 30 07:33:11 2026 GMT
        Subject: CN=6a61c3b7-249f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b8:62:c3:49:a6:ea:3b:eb:4c:e3:99:eb:ca:
                    34:4c:41:f0:95:52:58:6e:e6:76:bd:9a:e4:15:4a:
                    c1:fe:70:c2:fb:13:1e:58:e3:f9:42:f9:24:4f:1a:
                    27:3d:1d:d4:a1:07:4d:70:f1:78:d7:c0:f9:5b:ea:
                    b7:b5:30:9b:71:21:77:5f:94:b0:8d:a6:0a:c7:47:
                    97:89:ac:03:d4:78:f4:16:27:34:a6:d0:e9:e7:77:
                    a2:8e:c6:a6:ac:2e:e9:68:36:81:13:b1:8d:b8:ed:
                    fa:ba:bb:70:55:de:4f:91:ec:82:d5:84:31:81:fb:
                    a9:ba:56:71:df:25:a3:e9:66:3e:7c:c8:dd:38:a0:
                    d8:aa:fa:ad:b2:1f:d5:99:0b:fa:2d:b6:b6:ab:d3:
                    6e:2e:5a:e4:55:26:0b:27:1b:fd:b7:a7:29:e9:8d:
                    81:ca:27:7d:38:22:d9:92:0e:0a:a6:35:1e:f6:f1:
                    73:b1:9d:e9:80:87:56:ec:f3:4e:cd:69:70:ef:05:
                    59:a3:5e:d1:9e:38:23:c7:cf:67:7b:ec:8d:d0:fb:
                    ab:df:c8:fe:d8:fb:ef:6b:54:cd:48:07:fa:ce:d8:
                    a9:8a:e2:12:30:ab:a8:37:a2:65:8a:c9:7e:8d:c3:
                    1c:f8:07:e7:1d:15:61:81:27:8f:82:33:8a:f0:60:
                    64:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:34:0D:24:6B:B4:61:DD:71:68:1A:63:E2:02:A0:69:01:32:09:2B
            X509v3 Authority Key Identifier:
                keyid:03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ee:7b:9e:1c:78:b0:1f:98:1a:36:75:8c:02:7a:ce:f9:48:
         91:9a:89:47:63:06:87:84:fa:77:25:0a:ca:51:f9:37:ff:85:
         5b:ee:38:e2:c4:b8:4e:d8:9d:e5:07:97:52:18:19:ff:ac:f4:
         a0:3d:a1:d3:3e:66:e7:0e:be:6d:c7:d0:bb:62:27:58:13:28:
         ed:e1:bc:34:7e:fe:08:66:9e:c8:96:cb:a8:fb:2c:c6:f5:47:
         30:83:16:4f:9a:c7:91:97:74:cb:fe:4e:8b:48:23:c2:33:c6:
         8e:30:26:06:27:7b:ce:4c:0c:f6:80:0b:70:d8:1b:da:fe:c4:
         0e:5a:61:07:12:5b:27:c3:71:cc:f6:fb:ec:ab:7a:e2:93:f7:
         d5:bd:2e:fc:c0:c5:2b:08:9f:70:97:27:1e:df:ad:1e:c9:28:
         d6:78:55:d1:c4:58:b8:61:cc:f1:f9:fb:05:4f:e3:1d:68:e0:
         c1:36:28:b8:a1:77:60:28:71:85:b0:84:d8:58:76:7b:e9:50:
         2e:da:b0:cb:fb:f0:08:42:8a:b6:e9:3c:58:88:c9:fc:5f:54:
         64:2e:70:ea:5c:32:c3:d1:22:be:47:a0:8b:d0:38:22:59:8e:
         fe:98:ee:f3:b8:94:cb:33:ec:46:49:de:23:6b:e3:70:40:cd:
         14:2e:6d:d0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZERDkxMTAvBgNVBAUTKDAzNzg4RUUyQkFFNEQ4MDVFQkNEQ0E2NjE4RTJFQzFB
MThBNUM0RTIwHhcNMjYwNzIzMDczMzExWhcNMjYwNzMwMDczMzExWjAYMRYwFAYD
VQQDEw02YTYxYzNiNy0yNDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Lhiw0mm6jvrTOOZ68o0TEHwlVJYbuZ2vZrkFUrB/nDC+xMeWOP5QvkkTxon
PR3UoQdNcPF418D5W+q3tTCbcSF3X5SwjaYKx0eXiawD1Hj0Fic0ptDp53eijsam
rC7paDaBE7GNuO36urtwVd5PkeyC1YQxgfupulZx3yWj6WY+fMjdOKDYqvqtsh/V
mQv6Lba2q9NuLlrkVSYLJxv9t6cp6Y2Byid9OCLZkg4KpjUe9vFzsZ3pgIdW7PNO
zWlw7wVZo17Rnjgjx89ne+yN0Pur38j+2Pvva1TNSAf6ztipiuISMKuoN6Jlisl+
jcMc+AfnHRVhgSePgjOK8GBkpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPc0DSRr
tGHdcWgaY+ICoGkBMgkrMB8GA1UdIwQYMBaAFAN4juK65NgF683KZhji7BoYpcTi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkREOS9CRTdDQUMxMkQ2
REUxMUVGQjA0NzRFMUJDNEY5QUUwMi9BM2lPNHJyazJBWHJ6Y3BtR09Mc0doaWx4
T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0EzaU80cnJrMkFYcnpjcG1HT0xzR2hpbHhPSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RkREOS9CRTdDQUMxMkQ2REUxMUVGQjA0NzRFMUJDNEY5QUUwMi9BM2lPNHJyazJB
WHJ6Y3BtR09Mc0doaWx4T0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb+57nhx4sB+YGjZ1jAJ6zvlIkZqJR2MGh4T6dyUKylH5N/+FW+444sS4Ttid
5QeXUhgZ/6z0oD2h0z5m5w6+bcfQu2InWBMo7eG8NH7+CGaeyJbLqPssxvVHMIMW
T5rHkZd0y/5Oi0gjwjPGjjAmBid7zkwM9oALcNgb2v7EDlphBxJbJ8NxzPb77Kt6
4pP31b0u/MDFKwifcJcnHt+tHsko1nhV0cRYuGHM8fn7BU/jHWjgwTYouKF3YChx
hbCE2Fh2e+lQLtqwy/vwCEKKtuk8WIjJ/F9UZC5w6lwyw9Eivkegi9A4IlmO/pju
87iUyzPsRkneI2vjcEDNFC5t0A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:33:56 2026 by rpki-client