Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
File:                     G395gdniwsMPbyw0hxophthfiQ4.mft (raw, json)
Hash identifier:          mWo2k2IwHUij6hyjtjKKa7GWPfkZaMAvSd/57uTkgQc=
Subject key identifier:   7D:46:B6:2E:DF:84:CA:E5:B1:29:3B:57:6E:E9:23:5E:52:32:7B:41
Authority key identifier: 1B:7F:79:81:D9:E2:C2:C3:0F:6F:2C:34:87:1A:29:86:D8:5F:89:0E
Certificate issuer:       /CN=A9170AE9/serialNumber=1B7F7981D9E2C2C30F6F2C34871A2986D85F890E
Certificate serial:       05D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
Manifest number:          05D1
Signing time:             Wed 22 Jul 2026 23:47:18 +0000
Manifest this update:     Wed 22 Jul 2026 23:47:18 +0000
Manifest next update:     Wed 29 Jul 2026 23:47:18 +0000
Files and hashes:         1: G395gdniwsMPbyw0hxophthfiQ4.crl (hash: hKWrEoImqf43D+eBd62NfxpctUk/aM3Wn9/Q2fgBFdM=)
                          2: 5D7779A6108A11EC9E1F3D49C4F9AE02.roa (hash: MARAw22DhIJFp/wfG19G5Gz01JcFPueQuJN4T376eTY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.crl
                          rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1496 (0x5d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170AE9, serialNumber=1B7F7981D9E2C2C30F6F2C34871A2986D85F890E
        Validity
            Not Before: Jul 22 23:47:18 2026 GMT
            Not After : Jul 29 23:47:18 2026 GMT
        Subject: CN=6a615686-6f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fa:6a:99:a8:04:90:41:f2:0e:0a:e7:af:ff:
                    1f:b5:fe:02:04:ab:f1:0c:48:02:b4:7e:9d:11:48:
                    fb:45:0c:4a:d8:4a:46:2b:b3:10:db:b8:41:53:e4:
                    9a:df:20:fe:9d:37:f7:54:45:e9:3e:c9:d0:9e:bf:
                    68:71:f9:c9:d1:24:83:b7:24:b0:bf:58:29:a4:9a:
                    1e:6e:26:30:01:ec:38:fc:d7:be:c8:46:07:f4:fb:
                    7a:b6:52:8b:4d:be:97:08:31:1d:65:d3:08:c2:42:
                    98:32:5b:56:71:28:cd:33:55:5d:2e:3b:2f:f9:0a:
                    13:77:04:db:9d:c0:35:3f:5d:29:ef:f9:94:bc:49:
                    e9:d8:66:6d:23:bb:b8:ab:bb:0f:dd:0e:9b:17:20:
                    83:2d:96:b5:87:c5:59:9c:33:95:ce:cd:df:45:4f:
                    ca:1b:ae:bf:a7:39:97:c9:8f:ae:cf:f9:ff:86:de:
                    54:53:81:98:05:3d:e5:73:1c:d1:b2:8e:b3:ee:21:
                    63:b6:e5:48:b3:97:ec:27:a5:60:77:93:20:9b:a1:
                    98:c3:4a:e2:b2:d5:c1:3d:9f:8b:48:60:16:93:e0:
                    84:e2:27:4f:3e:75:d6:9c:f7:ec:60:61:2d:0f:00:
                    44:68:a1:17:9c:cc:91:b9:e6:9e:0d:95:1b:ea:fd:
                    61:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:46:B6:2E:DF:84:CA:E5:B1:29:3B:57:6E:E9:23:5E:52:32:7B:41
            X509v3 Authority Key Identifier:
                keyid:1B:7F:79:81:D9:E2:C2:C3:0F:6F:2C:34:87:1A:29:86:D8:5F:89:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G395gdniwsMPbyw0hxophthfiQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170AE9/09120380108611EC81E7703FC4F9AE02/G395gdniwsMPbyw0hxophthfiQ4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:63:6f:e1:cd:07:00:e1:73:45:6e:16:16:64:13:39:29:85:
         a0:d9:fa:3c:fb:d3:9a:9e:a8:1c:24:e0:42:c5:09:91:96:40:
         3b:49:0c:60:9f:b6:70:85:da:e8:be:7a:d0:26:7e:68:e5:1d:
         c8:0c:18:3a:56:74:f0:ae:ae:da:fb:17:e6:44:92:28:e0:eb:
         5c:9b:57:92:32:50:fa:02:71:c4:7c:56:ae:00:1f:ea:42:f1:
         41:67:6c:f0:6b:b6:dd:93:f2:6f:f9:89:c0:c0:97:aa:c0:2c:
         1e:ca:b8:c3:25:14:f3:1f:00:93:4f:37:78:5b:73:47:11:09:
         3d:94:82:14:d5:6e:dc:f3:3c:68:fd:9a:be:ed:12:c0:12:4a:
         e3:d6:cc:e9:5a:3a:8b:87:b9:9c:cd:ed:61:71:15:57:bd:c6:
         3d:eb:67:a0:bb:0e:78:23:71:63:9e:ca:56:f9:e6:18:0e:cb:
         69:67:9c:bc:62:a2:e3:80:26:00:ec:69:9a:08:72:cd:29:fd:
         e8:02:fb:f4:69:77:d2:40:32:11:72:8d:66:67:15:e8:d6:e3:
         ba:c3:fc:28:4c:ba:b7:f0:52:39:dc:0f:6a:98:3a:de:cc:fa:
         30:4d:2e:cf:a7:b4:e1:19:68:71:18:7b:cd:d0:27:7e:d6:20:
         26:3f:9b:23
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzBBRTkxMTAvBgNVBAUTKDFCN0Y3OTgxRDlFMkMyQzMwRjZGMkMzNDg3MUEyOTg2
RDg1Rjg5MEUwHhcNMjYwNzIyMjM0NzE4WhcNMjYwNzI5MjM0NzE4WjAYMRYwFAYD
VQQDEw02YTYxNTY4Ni02ZjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuvpqmagEkEHyDgrnr/8ftf4CBKvxDEgCtH6dEUj7RQxK2EpGK7MQ27hBU+Sa
3yD+nTf3VEXpPsnQnr9ocfnJ0SSDtySwv1gppJoebiYwAew4/Ne+yEYH9Pt6tlKL
Tb6XCDEdZdMIwkKYMltWcSjNM1VdLjsv+QoTdwTbncA1P10p7/mUvEnp2GZtI7u4
q7sP3Q6bFyCDLZa1h8VZnDOVzs3fRU/KG66/pzmXyY+uz/n/ht5UU4GYBT3lcxzR
so6z7iFjtuVIs5fsJ6Vgd5Mgm6GYw0ristXBPZ+LSGAWk+CE4idPPnXWnPfsYGEt
DwBEaKEXnMyRueaeDZUb6v1hoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH1Gti7f
hMrlsSk7V27pI15SMntBMB8GA1UdIwQYMBaAFBt/eYHZ4sLDD28sNIcaKYbYX4kO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEFFOS8wOTEyMDM4MDEw
ODYxMUVDODFFNzcwM0ZDNEY5QUUwMi9HMzk1Z2RuaXdzTVBieXcwaHhvcGh0aGZp
UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0czOTVnZG5pd3NNUGJ5dzBoeG9waHRoZmlRNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MEFFOS8wOTEyMDM4MDEwODYxMUVDODFFNzcwM0ZDNEY5QUUwMi9HMzk1Z2RuaXdz
TVBieXcwaHhvcGh0aGZpUTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg2Nv4c0HAOFzRW4WFmQTOSmFoNn6PPvTmp6oHCTgQsUJkZZAO0kMYJ+2cIXa
6L560CZ+aOUdyAwYOlZ08K6u2vsX5kSSKODrXJtXkjJQ+gJxxHxWrgAf6kLxQWds
8Gu23ZPyb/mJwMCXqsAsHsq4wyUU8x8Ak083eFtzRxEJPZSCFNVu3PM8aP2avu0S
wBJK49bM6Vo6i4e5nM3tYXEVV73GPetnoLsOeCNxY57KVvnmGA7LaWecvGKi44Am
AOxpmghyzSn96AL79Gl30kAyEXKNZmcV6NbjusP8KEy6t/BSOdwPapg63sz6ME0u
z6e04RlocRh7zdAnftYgJj+bIw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:17:42 2026 by rpki-client