Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
File:                     h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft (raw, json)
Hash identifier:          9sNHydRuxZJGDL4xiWlUwp/AL3FaDvYe3v9aJ62i3Tc=
Subject key identifier:   14:64:F4:31:D4:64:DC:FC:2D:EC:6E:1D:F8:AA:A8:94:3C:B1:06:82
Authority key identifier: 87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C
Certificate issuer:       /CN=A916BCDF/serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C
Certificate serial:       1317
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
Manifest number:          12F3
Signing time:             Wed 22 Jul 2026 17:09:35 +0000
Manifest this update:     Wed 22 Jul 2026 17:09:34 +0000
Manifest next update:     Wed 29 Jul 2026 17:09:34 +0000
Files and hashes:         1: h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl (hash: cibjH4xqa5goU0woO+Yrwrke1SPcA0+PQ2INSXj+V0M=)
                          2: 3BA64F0AF22611F094D5D2AE526F56BC.roa (hash: gjQ8EjTh4YTn2TSGcxeqBGmNj2WHRb5bDlBbyu/0FTk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl
                          rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4887 (0x1317)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BCDF, serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C
        Validity
            Not Before: Jul 22 17:09:34 2026 GMT
            Not After : Jul 29 17:09:34 2026 GMT
        Subject: CN=6a60f94f-5a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4f:75:1e:07:b8:0c:53:4e:fb:31:45:7f:a9:
                    d4:9d:e5:43:8c:76:d2:7e:7f:d6:28:c2:3a:95:30:
                    a9:f7:83:9e:60:09:19:90:60:b9:ba:9e:03:74:5b:
                    a8:92:8b:99:50:87:d7:bf:4c:98:79:00:91:07:52:
                    f8:2e:f0:77:10:5e:cc:a4:d6:25:d8:7f:fd:b4:48:
                    07:fb:22:74:f0:a1:5f:24:2f:4f:45:c5:26:12:ae:
                    5a:db:e7:29:0b:cb:24:83:9a:49:ca:fb:63:29:32:
                    fc:50:32:25:5d:04:4a:f8:71:bb:d9:81:36:47:d3:
                    56:49:66:99:71:e9:ae:43:26:22:d4:ec:75:05:8d:
                    49:98:0f:07:4a:f4:86:a9:5b:74:30:9b:63:b0:98:
                    80:c9:cc:7a:3e:ed:38:54:74:89:b3:93:89:6e:db:
                    84:32:bb:5b:31:f5:0c:bb:ba:e7:ec:c4:bc:73:01:
                    b4:2d:a7:a6:7f:7a:f0:d2:70:f3:c2:4d:02:5f:24:
                    42:a5:02:9c:8a:39:93:a4:74:a8:6c:e5:68:c1:0d:
                    14:f4:96:e8:0b:06:7f:ae:e6:4c:a5:d0:c3:1a:94:
                    17:b7:0b:f8:56:65:25:8c:ca:4f:0a:0e:d2:fe:3f:
                    f8:81:6c:a6:20:18:90:03:1f:31:ce:47:ab:40:82:
                    fa:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:64:F4:31:D4:64:DC:FC:2D:EC:6E:1D:F8:AA:A8:94:3C:B1:06:82
            X509v3 Authority Key Identifier:
                keyid:87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:86:aa:ba:ef:b0:cf:eb:4f:c5:da:33:03:51:57:3f:51:3d:
         55:f7:2c:5a:b2:a6:d1:c1:99:41:d7:c0:47:b1:eb:a8:99:fe:
         9f:3f:2e:7b:f3:1c:6b:ac:ab:10:b7:41:ad:a9:88:c3:c4:84:
         08:5c:7f:82:ed:51:43:1f:1a:f6:b3:ec:4a:ea:f5:69:6a:c1:
         b4:cd:16:e6:79:0a:0f:90:69:f9:b5:ea:b0:06:45:4b:0c:b7:
         a5:54:5f:26:82:95:8e:a2:89:73:78:ba:a1:8e:f0:39:c4:ab:
         0d:5a:a2:a8:70:ff:a3:80:4e:06:d9:21:95:f5:61:f5:80:c3:
         2e:6c:c0:e3:78:33:58:c8:07:30:46:7e:fa:6b:3f:cc:ac:80:
         bb:90:fc:7e:70:30:bf:cf:f9:0e:cf:7d:44:92:35:52:17:22:
         57:fa:44:8e:2b:82:22:fb:e5:7c:b1:1a:90:90:b9:89:44:03:
         c5:bc:11:28:d9:dd:e1:1e:2f:c5:68:a8:60:98:43:1a:40:23:
         f2:5d:19:b9:b7:d9:fc:3b:3b:c1:16:f7:ae:21:4e:3d:cb:38:
         0b:8e:03:a1:04:1a:b8:17:7d:b0:38:3c:92:e0:05:c9:0e:18:
         61:ec:76:48:1d:7f:19:e2:16:81:0e:9e:93:48:25:5f:59:c9:
         bf:f6:12:8d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICExcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkJDREYxMTAvBgNVBAUTKDg3OTU0QzAyMzFDQUFDQjJCRTJERkRCNTY3Qzc0QUY1
RUNCNzVCMEMwHhcNMjYwNzIyMTcwOTM0WhcNMjYwNzI5MTcwOTM0WjAYMRYwFAYD
VQQDEw02YTYwZjk0Zi01YTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmU91Hge4DFNO+zFFf6nUneVDjHbSfn/WKMI6lTCp94OeYAkZkGC5up4DdFuo
kouZUIfXv0yYeQCRB1L4LvB3EF7MpNYl2H/9tEgH+yJ08KFfJC9PRcUmEq5a2+cp
C8skg5pJyvtjKTL8UDIlXQRK+HG72YE2R9NWSWaZcemuQyYi1Ox1BY1JmA8HSvSG
qVt0MJtjsJiAycx6Pu04VHSJs5OJbtuEMrtbMfUMu7rn7MS8cwG0Laemf3rw0nDz
wk0CXyRCpQKcijmTpHSobOVowQ0U9JboCwZ/ruZMpdDDGpQXtwv4VmUljMpPCg7S
/j/4gWymIBiQAx8xzkerQIL6MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBRk9DHU
ZNz8LexuHfiqqJQ8sQaCMB8GA1UdIwQYMBaAFIeVTAIxyqyyvi39tWfHSvXst1sM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkNERi9FQ0UwRkJFNkUz
NkQxMUU4OTU2RjM1MTZDNEY5QUUwMi9oNVZNQWpIS3JMSy1MZjIxWjhkSzlleTNX
d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2g1Vk1BakhLckxLLUxmMjFaOGRLOWV5M1d3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QkNERi9FQ0UwRkJFNkUzNkQxMUU4OTU2RjM1MTZDNEY5QUUwMi9oNVZNQWpIS3JM
Sy1MZjIxWjhkSzlleTNXd3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJIaquu+wz+tPxdozA1FXP1E9VfcsWrKm0cGZQdfAR7HrqJn+nz8ue/Mca6yr
ELdBramIw8SECFx/gu1RQx8a9rPsSur1aWrBtM0W5nkKD5Bp+bXqsAZFSwy3pVRf
JoKVjqKJc3i6oY7wOcSrDVqiqHD/o4BOBtkhlfVh9YDDLmzA43gzWMgHMEZ++ms/
zKyAu5D8fnAwv8/5Ds99RJI1UhciV/pEjiuCIvvlfLEakJC5iUQDxbwRKNnd4R4v
xWioYJhDGkAj8l0ZubfZ/Ds7wRb3riFOPcs4C44DoQQauBd9sDg8kuAFyQ4YYex2
SB1/GeIWgQ6ek0glX1nJv/YSjQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:47:31 2026 by rpki-client