Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B795/BD032E04634011EAACCF0262C4F9AE02/STM5VHszADpYWZg2-0yZ55RJzfI.mft
File:                     STM5VHszADpYWZg2-0yZ55RJzfI.mft (raw, json)
Hash identifier:          L1yGGQ0PS2GESky/DaNyfA1a0KKR42oRZQYa0x7+vnI=
Subject key identifier:   7C:FB:16:AA:7E:22:CF:34:1C:28:4D:BC:3F:1D:0E:01:38:99:98:15
Authority key identifier: 49:33:39:54:7B:33:00:3A:58:59:98:36:FB:4C:99:E7:94:49:CD:F2
Certificate issuer:       /CN=A916B795/serialNumber=493339547B33003A58599836FB4C99E79449CDF2
Certificate serial:       0B90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STM5VHszADpYWZg2-0yZ55RJzfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B795/BD032E04634011EAACCF0262C4F9AE02/STM5VHszADpYWZg2-0yZ55RJzfI.mft
Manifest number:          0B6A
Signing time:             Wed 22 Jul 2026 19:35:46 +0000
Manifest this update:     Wed 22 Jul 2026 19:35:45 +0000
Manifest next update:     Wed 29 Jul 2026 19:35:45 +0000
Files and hashes:         1: STM5VHszADpYWZg2-0yZ55RJzfI.crl (hash: 6UgiSxL2zK/udG2/lRGv6ghtJG+HAzOJnla7QXn1mCM=)
                          2: 28BBBAA2634211EABE282367C4F9AE02.roa (hash: 87ruUamCetqhSgYD0RcbOPf8uxPRNusOY0RxdgFfa4k=)
                          3: 04281A2C6E8211F0A2E51335C4F9AE02.roa (hash: bvbNtF0AY2UdGflEtQc3rZe1CpDIiWe7q6JZWQcMBNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B795/BD032E04634011EAACCF0262C4F9AE02/STM5VHszADpYWZg2-0yZ55RJzfI.crl
                          rsync://rpki.apnic.net/member_repository/A916B795/BD032E04634011EAACCF0262C4F9AE02/STM5VHszADpYWZg2-0yZ55RJzfI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STM5VHszADpYWZg2-0yZ55RJzfI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2960 (0xb90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B795, serialNumber=493339547B33003A58599836FB4C99E79449CDF2
        Validity
            Not Before: Jul 22 19:35:45 2026 GMT
            Not After : Jul 29 19:35:45 2026 GMT
        Subject: CN=6a611b91-a9a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:30:bd:44:63:e9:d5:a8:29:82:ee:51:db:c2:
                    9a:82:ba:cc:b5:a3:02:ad:4f:cd:88:af:22:97:4d:
                    00:cf:b6:3b:62:f4:ff:a0:e8:5c:3d:18:a9:85:e0:
                    3f:01:54:6a:9d:36:55:fe:a2:27:e6:88:ee:b0:34:
                    a5:65:4c:34:3c:c5:9c:d9:11:6e:ba:6f:55:99:f2:
                    59:10:f7:30:07:a2:f7:a5:8f:8c:85:2b:f6:23:6e:
                    d0:90:59:ac:e2:9e:33:10:6c:b7:0a:b1:a6:d2:7a:
                    bc:e9:bf:f2:d2:fc:3c:9d:ac:a1:0f:ce:be:08:87:
                    ae:f8:54:fa:e9:1f:e1:fa:e5:6a:41:6c:79:86:64:
                    d0:5f:cd:37:37:c0:88:61:c7:bd:33:e5:1b:ad:0a:
                    a7:09:db:b8:8d:0a:83:5b:fa:fd:cb:b7:43:86:05:
                    86:19:d0:8c:b4:74:3c:14:17:25:a4:c0:f7:b8:b4:
                    d5:8a:61:89:6d:62:af:d0:8f:46:c7:93:55:56:d8:
                    65:63:4a:84:7a:94:ec:b7:63:92:f0:ae:0f:90:1c:
                    a2:25:e4:5c:e5:ff:4f:f6:94:2b:a6:a4:6f:85:36:
                    e0:17:61:1d:f1:00:42:0d:ee:9c:00:dd:04:5f:44:
                    b3:2f:20:68:59:6f:65:2c:a0:27:22:50:76:ce:c9:
                    5c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FB:16:AA:7E:22:CF:34:1C:28:4D:BC:3F:1D:0E:01:38:99:98:15
            X509v3 Authority Key Identifier:
                keyid:49:33:39:54:7B:33:00:3A:58:59:98:36:FB:4C:99:E7:94:49:CD:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B795/BD032E04634011EAACCF0262C4F9AE02/STM5VHszADpYWZg2-0yZ55RJzfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STM5VHszADpYWZg2-0yZ55RJzfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B795/BD032E04634011EAACCF0262C4F9AE02/STM5VHszADpYWZg2-0yZ55RJzfI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:5a:74:9c:fc:7c:33:56:f6:a4:c2:66:dc:99:bd:10:a3:b1:
         82:d0:85:5d:d4:8d:03:84:85:82:d6:24:94:be:b1:c4:08:87:
         11:71:c2:ca:48:7c:60:47:ae:eb:6f:2b:e0:63:b8:cc:37:6c:
         e8:7b:4a:0f:39:f4:94:c7:23:24:b8:7d:07:85:94:dc:81:98:
         8b:e4:01:04:e2:49:1c:77:3a:35:ae:a9:e1:23:8c:4a:9f:2a:
         98:c3:c5:71:9e:82:70:9c:0c:29:be:83:46:2d:01:6a:89:d2:
         0f:d4:72:8c:45:82:1e:32:77:95:0d:c6:8a:79:cc:e9:d7:ad:
         fe:e7:ac:66:bf:bd:1c:df:43:23:86:4c:39:8a:a3:c0:d7:09:
         4f:fa:00:11:f3:cb:f8:62:1e:2d:af:76:c4:18:02:95:a8:95:
         01:fc:3d:ee:17:f2:c4:2b:b4:ed:26:6c:d3:f3:d3:fd:88:cc:
         9c:64:b1:50:ff:43:3e:b7:49:75:16:24:d2:f1:b4:17:15:6d:
         fa:95:53:9c:bf:fc:ca:40:76:bf:1a:0f:b6:12:5e:97:0a:20:
         61:ed:26:75:c1:e9:ee:fa:5e:60:04:13:5d:02:d2:27:ea:0d:
         c9:73:47:26:07:0d:2a:80:ca:f9:e2:d7:06:aa:53:13:c5:88:
         fc:da:6d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:07:13 2026 by rpki-client