Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
File:                     zEJAcHQQNjc16_bvsZT7Zw80X0I.mft (raw, json)
Hash identifier:          v85ZploL1/2fosULGb98id5NYMctmuCyVhLGYNW1+fQ=
Subject key identifier:   EC:74:1E:AC:51:3B:71:F0:1D:30:66:31:64:19:A1:43:FA:11:92:E6
Authority key identifier: CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42
Certificate issuer:       /CN=A9160AEE/serialNumber=CC4240707410363735EBF6EFB194FB670F345F42
Certificate serial:       BB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
Manifest number:          AB
Signing time:             Thu 23 Jul 2026 09:16:19 +0000
Manifest this update:     Thu 23 Jul 2026 09:16:19 +0000
Manifest next update:     Thu 30 Jul 2026 09:16:19 +0000
Files and hashes:         1: zEJAcHQQNjc16_bvsZT7Zw80X0I.crl (hash: KGO84f3FF2+kue3hpYrX3tuT5e7rF4QnJYT++6Mi6GI=)
                          2: 6FBBA45AFD2711F0B1802E18426F56BC.roa (hash: InU5YhYgQdECTfOQlDj5F02bMyaCjuUJFEGGYk6O1Jc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl
                          rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:16:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160AEE, serialNumber=CC4240707410363735EBF6EFB194FB670F345F42
        Validity
            Not Before: Jul 23 09:16:19 2026 GMT
            Not After : Jul 30 09:16:19 2026 GMT
        Subject: CN=6a61dbe3-1752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6b:96:6d:6e:19:ee:76:cd:28:4c:26:17:d8:
                    d4:a8:73:4a:70:6f:ab:22:6f:4f:5b:ed:91:b2:df:
                    a4:7c:59:ce:0a:e5:50:95:b3:2c:d3:19:f6:0c:71:
                    e3:48:c0:fe:b9:70:0c:e7:b1:7c:f6:3b:39:9d:f5:
                    67:d6:da:fb:c5:3c:63:34:b3:3a:86:19:c0:a3:d0:
                    bc:0a:20:d9:9e:e4:26:88:36:1f:b6:04:82:58:72:
                    dc:42:e2:1a:67:e8:b0:ca:59:9f:38:59:bc:bd:d3:
                    16:dc:ba:9e:a6:bd:6c:76:a4:cf:13:81:42:fb:b2:
                    9a:b4:26:1d:a4:b5:6e:30:1c:4c:33:aa:54:a6:18:
                    3d:9a:4f:d7:a7:80:27:db:46:67:8d:08:d5:8e:20:
                    56:c5:00:43:90:32:a7:58:e5:aa:14:b6:51:3d:58:
                    38:8d:6e:c0:8c:99:d1:78:26:30:4a:fd:00:23:53:
                    06:c8:2f:ff:00:ec:9b:ad:72:dd:bd:ab:e2:a9:57:
                    d7:f7:82:97:90:3d:4b:3b:59:63:71:c4:80:02:e6:
                    20:0a:d9:c0:47:0e:ad:a0:ed:31:7e:1d:aa:e0:45:
                    be:a5:a9:ad:2b:cd:88:34:02:98:14:86:b7:e2:58:
                    34:66:7b:64:31:de:9f:40:71:d2:31:e3:24:af:23:
                    49:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:74:1E:AC:51:3B:71:F0:1D:30:66:31:64:19:A1:43:FA:11:92:E6
            X509v3 Authority Key Identifier:
                keyid:CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:43:e8:97:bf:d3:9e:47:c5:51:3a:94:ca:0c:44:26:a2:53:
         38:fc:e7:e0:12:de:4f:0e:36:85:b8:d0:e0:d5:2b:6e:7e:30:
         ea:4b:82:bc:9b:46:97:48:b4:a1:48:99:3b:a9:32:2b:23:c4:
         75:c6:dd:c3:92:4a:2c:d1:c2:8b:3a:97:35:e6:8a:65:26:03:
         56:f5:e7:b9:0f:74:a3:97:fb:42:32:d3:8c:b8:48:56:90:30:
         a4:89:10:11:2a:d5:3d:b2:f8:e0:64:42:98:8c:06:a7:46:b6:
         1c:31:4f:4f:33:cb:0d:4c:27:7c:7a:84:aa:54:68:a2:3d:4f:
         fa:3d:79:ae:e4:07:e5:1c:19:a8:36:d0:2e:ea:55:13:ec:ae:
         9c:29:c6:3a:1e:fc:e6:16:1e:62:76:6d:e2:bc:60:03:3b:44:
         24:93:f8:fd:40:18:94:86:f7:4c:f9:a0:68:dd:af:72:6f:35:
         f1:41:4f:99:59:58:a6:b6:6c:76:6a:19:6e:a5:7f:fe:89:7c:
         48:8e:7f:27:7e:03:92:ff:b2:57:7c:5c:e7:f6:68:37:eb:51:
         03:37:72:56:fe:02:af:d3:c8:f6:9e:71:89:19:bb:56:27:63:
         53:16:0b:67:7f:85:82:6f:72:bf:0b:21:a7:2f:49:e4:2e:b5:
         db:cb:c0:72
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjBBRUUxMTAvBgNVBAUTKENDNDI0MDcwNzQxMDM2MzczNUVCRjZFRkIxOTRGQjY3
MEYzNDVGNDIwHhcNMjYwNzIzMDkxNjE5WhcNMjYwNzMwMDkxNjE5WjAYMRYwFAYD
VQQDEw02YTYxZGJlMy0xNzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo2uWbW4Z7nbNKEwmF9jUqHNKcG+rIm9PW+2Rst+kfFnOCuVQlbMs0xn2DHHj
SMD+uXAM57F89js5nfVn1tr7xTxjNLM6hhnAo9C8CiDZnuQmiDYftgSCWHLcQuIa
Z+iwylmfOFm8vdMW3Lqepr1sdqTPE4FC+7KatCYdpLVuMBxMM6pUphg9mk/Xp4An
20ZnjQjVjiBWxQBDkDKnWOWqFLZRPVg4jW7AjJnReCYwSv0AI1MGyC//AOybrXLd
vaviqVfX94KXkD1LO1ljccSAAuYgCtnARw6toO0xfh2q4EW+pamtK82INAKYFIa3
4lg0ZntkMd6fQHHSMeMkryNJ4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOx0HqxR
O3HwHTBmMWQZoUP6EZLmMB8GA1UdIwQYMBaAFMxCQHB0EDY3Nev277GU+2cPNF9C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEFFRS8xODhDQUYwNkEz
RUMxMUYwQjhFOTdGMzdDNEY5QUUwMi96RUpBY0hRUU5qYzE2X2J2c1pUN1p3ODBY
MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3pFSkFjSFFRTmpjMTZfYnZzWlQ3Wnc4MFgwSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MEFFRS8xODhDQUYwNkEzRUMxMUYwQjhFOTdGMzdDNEY5QUUwMi96RUpBY0hRUU5q
YzE2X2J2c1pUN1p3ODBYMEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUEPol7/TnkfFUTqUygxEJqJTOPzn4BLeTw42hbjQ4NUrbn4w6kuCvJtGl0i0
oUiZO6kyKyPEdcbdw5JKLNHCizqXNeaKZSYDVvXnuQ90o5f7QjLTjLhIVpAwpIkQ
ESrVPbL44GRCmIwGp0a2HDFPTzPLDUwnfHqEqlRooj1P+j15ruQH5RwZqDbQLupV
E+yunCnGOh785hYeYnZt4rxgAztEJJP4/UAYlIb3TPmgaN2vcm818UFPmVlYprZs
dmoZbqV//ol8SI5/J34Dkv+yV3xc5/ZoN+tRAzdyVv4Cr9PI9p5xiRm7VidjUxYL
Z3+Fgm9yvwshpy9J5C6128vAcg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:59:33 2026 by rpki-client