Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
File:                     2RBlAbU10PfK1XyOenR8oGnQTVk.mft (raw, json)
Hash identifier:          XVmfEW3uj2MiAlUuaKeO2UzNvGZ5gLt0y8gXz2OK8a8=
Subject key identifier:   06:8B:25:19:F2:2D:79:AD:D5:49:12:2C:A5:5C:96:AF:CF:3F:53:6C
Authority key identifier: D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59
Certificate issuer:       /CN=A916FACB/serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59
Certificate serial:       0496
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
Manifest number:          048E
Signing time:             Thu 23 Jul 2026 00:51:38 +0000
Manifest this update:     Thu 23 Jul 2026 00:51:38 +0000
Manifest next update:     Thu 30 Jul 2026 00:51:38 +0000
Files and hashes:         1: 2RBlAbU10PfK1XyOenR8oGnQTVk.crl (hash: VMB16PdBs2SrzUv/+GGfa7WDZUKX6SBNzNVySHLcWPo=)
                          2: 97D35382924311EC927C972FC4F9AE02.roa (hash: aAWOfNb/dnXkGDMyjT0RYtdEn0OfU/UmCUamSuOloZs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl
                          rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:51:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1174 (0x496)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916FACB, serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59
        Validity
            Not Before: Jul 23 00:51:38 2026 GMT
            Not After : Jul 30 00:51:38 2026 GMT
        Subject: CN=6a61659a-ccdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:78:3d:99:aa:93:14:93:75:f9:b7:54:9c:16:
                    11:62:66:d3:ec:d8:9d:55:c7:5b:58:3f:83:54:70:
                    82:a8:51:c6:4b:52:0c:a0:79:c1:5e:47:24:71:5d:
                    c8:fb:4d:5e:6f:6f:26:22:cb:5a:d9:e7:a3:b9:66:
                    31:2d:13:68:b0:4e:0e:4e:ab:38:e4:2d:71:ef:68:
                    7d:5d:61:f9:f2:02:1c:47:c8:0c:e3:49:4c:72:7e:
                    f3:b2:ab:10:19:49:e1:d1:1b:eb:c9:7f:ef:2b:c0:
                    5c:e0:8c:2d:42:b3:ea:12:da:31:5e:b3:b2:bb:c3:
                    0a:1c:fd:48:41:99:62:68:6e:16:6c:3c:4b:ce:31:
                    fe:63:f2:cc:56:71:17:b8:7e:73:17:76:ba:f4:06:
                    52:99:4f:8e:6a:b3:9e:ae:03:6d:37:f6:f9:98:fd:
                    64:09:4d:7f:c3:f3:bc:7c:65:8f:12:56:72:e8:15:
                    b5:0a:87:c2:50:7c:64:63:5f:7e:b0:6d:8c:85:f6:
                    ce:dd:58:55:13:3e:d7:97:bb:bb:2c:0b:4c:5e:a7:
                    f5:ff:7c:ec:d5:23:b4:2c:7b:39:d1:ff:f2:83:f0:
                    39:35:2c:96:cd:f6:b5:c2:e5:e6:ee:97:45:f1:09:
                    5c:23:e1:f6:5d:62:66:85:bc:a6:a1:6d:7a:58:b3:
                    6f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8B:25:19:F2:2D:79:AD:D5:49:12:2C:A5:5C:96:AF:CF:3F:53:6C
            X509v3 Authority Key Identifier:
                keyid:D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:d4:e9:7e:7b:eb:cb:03:a7:27:e0:5e:e9:69:8c:f0:4d:c6:
         0a:1f:93:42:dc:b4:09:b8:d1:1c:ba:f4:8a:17:e8:b9:66:df:
         3c:c9:7b:43:a0:b6:9b:ca:3b:c3:83:da:bd:a7:3c:4a:30:c0:
         40:43:9b:c2:66:ca:8c:21:b8:a4:91:c7:e3:27:27:80:03:69:
         b9:8a:41:c3:cb:58:cf:87:76:5d:16:03:4d:90:67:a4:6f:ee:
         af:6e:f8:49:b6:7d:01:cb:be:72:79:9d:6c:14:da:68:e2:ae:
         5c:7c:22:06:47:9d:f5:cc:b6:97:c6:21:d7:22:f6:53:41:54:
         4b:40:08:98:ad:3b:0e:84:c5:b2:a9:2a:a1:cb:d5:4c:6a:b9:
         42:59:8e:2d:ba:f6:7e:67:1e:b2:08:c8:7c:64:68:b0:92:66:
         b7:6d:58:cc:63:21:ef:59:bb:02:8e:1c:54:7c:5e:d4:42:f6:
         61:ca:82:04:7f:57:b3:43:b7:1e:d1:48:05:22:a5:b8:0c:57:
         e5:58:da:26:d7:38:d3:99:c6:82:02:29:34:f5:66:03:08:bd:
         6e:19:43:0f:8f:24:41:88:8c:15:09:01:17:cd:71:66:4e:30:
         0c:21:a5:15:d3:82:bc:9a:f9:c8:ec:32:11:37:30:11:38:8a:
         78:df:76:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkZBQ0IxMTAvBgNVBAUTKEQ5MTA2NTAxQjUzNUQwRjdDQUQ1N0M4RTdBNzQ3Q0Ew
NjlEMDRENTkwHhcNMjYwNzIzMDA1MTM4WhcNMjYwNzMwMDA1MTM4WjAYMRYwFAYD
VQQDEw02YTYxNjU5YS1jY2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoHg9maqTFJN1+bdUnBYRYmbT7NidVcdbWD+DVHCCqFHGS1IMoHnBXkckcV3I
+01eb28mIsta2eejuWYxLRNosE4OTqs45C1x72h9XWH58gIcR8gM40lMcn7zsqsQ
GUnh0RvryX/vK8Bc4IwtQrPqEtoxXrOyu8MKHP1IQZliaG4WbDxLzjH+Y/LMVnEX
uH5zF3a69AZSmU+OarOergNtN/b5mP1kCU1/w/O8fGWPElZy6BW1CofCUHxkY19+
sG2MhfbO3VhVEz7Xl7u7LAtMXqf1/3zs1SO0LHs50f/yg/A5NSyWzfa1wuXm7pdF
8QlcI+H2XWJmhbymoW16WLNv4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAaLJRny
LXmt1UkSLKVclq/PP1NsMB8GA1UdIwQYMBaAFNkQZQG1NdD3ytV8jnp0fKBp0E1Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkFDQi9GNTU5OEQwODky
NDAxMUVDQkVENERBMkNDNEY5QUUwMi8yUkJsQWJVMTBQZksxWHlPZW5SOG9HblFU
VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJSQmxBYlUxMFBmSzFYeU9lblI4b0duUVRWay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RkFDQi9GNTU5OEQwODkyNDAxMUVDQkVENERBMkNDNEY5QUUwMi8yUkJsQWJVMTBQ
ZksxWHlPZW5SOG9HblFUVmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlNTpfnvrywOnJ+Be6WmM8E3GCh+TQty0CbjRHLr0ihfouWbfPMl7Q6C2m8o7
w4Pavac8SjDAQEObwmbKjCG4pJHH4ycngANpuYpBw8tYz4d2XRYDTZBnpG/ur274
SbZ9Acu+cnmdbBTaaOKuXHwiBked9cy2l8Yh1yL2U0FUS0AImK07DoTFsqkqocvV
TGq5QlmOLbr2fmcesgjIfGRosJJmt21YzGMh71m7Ao4cVHxe1EL2YcqCBH9Xs0O3
HtFIBSKluAxX5VjaJtc405nGggIpNPVmAwi9bhlDD48kQYiMFQkBF81xZk4wDCGl
FdOCvJr5yOwyETcwETiKeN92ag==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:38:57 2026 by rpki-client