Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft
File:                     mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft (raw, json)
Hash identifier:          gowexd7TtNxf1YdMNWNweHnOkM1vNSGjeeRd/xf3tLY=
Subject key identifier:   52:D3:A9:FA:2A:C0:25:16:46:3D:F6:5F:BA:BA:9E:CC:DD:42:7F:4B
Authority key identifier: 98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B
Certificate issuer:       /CN=A9161322/serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B
Certificate serial:       01DC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft
Manifest number:          01D9
Signing time:             Thu 23 Jul 2026 04:52:48 +0000
Manifest this update:     Thu 23 Jul 2026 04:52:48 +0000
Manifest next update:     Thu 30 Jul 2026 04:52:48 +0000
Files and hashes:         1: mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl (hash: ri1UoYPQTntxyUzQWqSrXpDDHQa6DPC0hqSYOGXjARk=)
                          2: A023DD56B12F11EEB1221E32C4F9AE02.roa (hash: 70legGmeGWDJLjLTpZoQ9AL6l+i0i0dYyab0cFhZx6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl
                          rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161322, serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B
        Validity
            Not Before: Jul 23 04:52:48 2026 GMT
            Not After : Jul 30 04:52:48 2026 GMT
        Subject: CN=6a619e20-4585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b6:03:9a:ae:ba:ef:d3:45:34:00:c0:7e:0a:
                    06:af:b4:1f:e2:10:6d:e5:cb:6f:20:34:ca:b5:8b:
                    63:7c:ff:47:8b:9c:23:e0:a9:e1:06:34:6e:17:3f:
                    67:43:3b:21:86:77:97:de:d4:ff:0d:de:94:7d:63:
                    b4:d1:8c:ba:34:7d:c5:d3:32:62:32:d8:e0:b8:f8:
                    5a:9f:63:44:08:8c:95:b9:14:0e:00:d3:3a:d2:20:
                    1c:f5:83:8e:b4:ae:81:c4:11:a4:22:3a:09:60:30:
                    f9:ea:84:e8:1b:f4:13:69:c9:c2:76:e8:e9:f4:5f:
                    b8:7d:2e:2c:28:c8:c3:86:55:db:08:6e:ae:f2:46:
                    da:58:f6:e3:ae:18:d8:11:86:bd:17:15:08:de:40:
                    ce:d4:46:c7:90:71:f8:b5:f0:ac:fb:1c:0d:b8:92:
                    0e:f3:29:61:35:c0:15:36:10:77:db:c9:a2:fe:54:
                    81:6b:d4:f2:b2:76:6b:16:bc:ca:64:ff:08:4d:69:
                    61:3c:a4:0b:27:18:06:45:03:82:9f:ae:2f:93:91:
                    4f:86:63:b2:e3:0e:ac:63:f6:eb:e4:31:cc:14:9c:
                    c4:55:05:ca:86:20:8a:97:ee:4a:c7:98:5c:9e:62:
                    40:82:84:4c:87:ed:8e:95:0c:00:82:91:37:4e:d9:
                    9a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D3:A9:FA:2A:C0:25:16:46:3D:F6:5F:BA:BA:9E:CC:DD:42:7F:4B
            X509v3 Authority Key Identifier:
                keyid:98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:e5:15:76:86:23:12:0f:09:e2:13:d3:11:3d:27:b3:ac:5d:
         1f:70:03:45:61:27:d6:5f:bd:35:3f:ad:c3:e4:10:28:31:d6:
         6a:f6:28:ee:9f:d0:e9:a5:81:ee:33:a9:c4:34:aa:97:cd:f8:
         1d:25:da:b5:3a:7c:15:0e:55:5f:25:9d:92:84:49:a7:75:35:
         66:8c:67:42:d7:0f:d5:1f:5c:f5:fb:41:aa:62:f8:af:3d:8b:
         b5:95:04:97:d4:00:46:64:3f:84:3e:cf:02:e7:9f:79:b8:f8:
         ec:87:48:44:58:e3:07:9d:62:28:21:fe:92:65:7e:8a:f9:e0:
         e2:f8:42:92:fd:b9:33:d0:35:3d:f4:12:0e:44:eb:a0:fa:c8:
         e0:54:5c:e3:3c:98:55:8f:73:53:71:09:f0:32:01:88:cd:f5:
         90:c6:43:36:7e:a4:29:69:73:44:ee:1f:73:83:d2:44:23:db:
         c8:fc:54:56:a3:43:6e:7b:b5:31:89:dc:72:c5:19:ad:cd:e9:
         79:cb:de:67:a5:de:6f:4a:49:4a:db:da:e0:09:05:83:ab:85:
         57:b8:fa:e1:01:ed:d9:80:a1:4e:c7:9a:60:13:12:b1:14:14:
         62:04:dc:11:8d:59:cc:7d:af:f8:7d:ee:d8:7e:24:c7:b0:87:
         4f:f3:0d:c8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjEzMjIxMTAvBgNVBAUTKDk4NzM4ODk3ODNGNzUzMEVCNDRCRTAwOTdBQTM2MThC
MDcxNjhGM0IwHhcNMjYwNzIzMDQ1MjQ4WhcNMjYwNzMwMDQ1MjQ4WjAYMRYwFAYD
VQQDEw02YTYxOWUyMC00NTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmLYDmq6679NFNADAfgoGr7Qf4hBt5ctvIDTKtYtjfP9Hi5wj4KnhBjRuFz9n
QzshhneX3tT/Dd6UfWO00Yy6NH3F0zJiMtjguPhan2NECIyVuRQOANM60iAc9YOO
tK6BxBGkIjoJYDD56oToG/QTacnCdujp9F+4fS4sKMjDhlXbCG6u8kbaWPbjrhjY
EYa9FxUI3kDO1EbHkHH4tfCs+xwNuJIO8ylhNcAVNhB328mi/lSBa9TysnZrFrzK
ZP8ITWlhPKQLJxgGRQOCn64vk5FPhmOy4w6sY/br5DHMFJzEVQXKhiCKl+5Kx5hc
nmJAgoRMh+2OlQwAgpE3TtmaGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFLTqfoq
wCUWRj32X7q6nszdQn9LMB8GA1UdIwQYMBaAFJhziJeD91MOtEvgCXqjYYsHFo87
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTMyMi80OUU0QjAwOEIw
RUIxMUVFQjY5ODlGNTRDNEY5QUUwMi9tSE9JbDRQM1V3NjBTLUFKZXFOaGl3Y1dq
enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21IT0lsNFAzVXc2MFMtQUplcU5oaXdjV2p6cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MTMyMi80OUU0QjAwOEIwRUIxMUVFQjY5ODlGNTRDNEY5QUUwMi9tSE9JbDRQM1V3
NjBTLUFKZXFOaGl3Y1dqenMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjuUVdoYjEg8J4hPTET0ns6xdH3ADRWEn1l+9NT+tw+QQKDHWavYo7p/Q6aWB
7jOpxDSql834HSXatTp8FQ5VXyWdkoRJp3U1ZoxnQtcP1R9c9ftBqmL4rz2LtZUE
l9QARmQ/hD7PAuefebj47IdIRFjjB51iKCH+kmV+ivng4vhCkv25M9A1PfQSDkTr
oPrI4FRc4zyYVY9zU3EJ8DIBiM31kMZDNn6kKWlzRO4fc4PSRCPbyPxUVqNDbnu1
MYnccsUZrc3pecveZ6Xeb0pJStva4AkFg6uFV7j64QHt2YChTseaYBMSsRQUYgTc
EY1ZzH2v+H3u2H4kx7CHT/MNyA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:29:15 2026 by rpki-client