Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
File:                     BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft (raw, json)
Hash identifier:          Ut17/OFgNT596irCQI3IFeOnkqxWroHFgXZRq3DVfuc=
Subject key identifier:   30:F3:05:13:44:6E:09:42:83:C1:A8:7E:0F:9A:EB:27:1D:00:4B:BC
Authority key identifier: 06:55:E2:91:5C:AD:E9:16:77:AA:B4:8C:23:C1:E2:24:B4:3D:BA:A5
Certificate issuer:       /CN=A9178D35/serialNumber=0655E2915CADE91677AAB48C23C1E224B43DBAA5
Certificate serial:       3560
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
Manifest number:          3560
Signing time:             Wed 22 Jul 2026 14:38:44 +0000
Manifest this update:     Wed 22 Jul 2026 14:38:44 +0000
Manifest next update:     Wed 29 Jul 2026 14:38:44 +0000
Files and hashes:         1: BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl (hash: cNa7TqOpMT3Q3kMk6pxjqyY+CWfWNxYsySlK6HZbg1w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl
                          rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:38:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13664 (0x3560)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178D35, serialNumber=0655E2915CADE91677AAB48C23C1E224B43DBAA5
        Validity
            Not Before: Jul 22 14:38:44 2026 GMT
            Not After : Jul 29 14:38:44 2026 GMT
        Subject: CN=6a60d5f4-0a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f4:08:69:05:49:5e:68:58:b6:de:60:8a:ca:
                    0f:d2:6e:e5:63:07:e5:49:e6:20:c7:ce:c2:6d:98:
                    c5:d8:75:51:00:e6:02:48:7a:34:4e:eb:0b:eb:48:
                    6b:e7:6c:2b:74:0b:19:a4:64:b2:05:84:82:55:d4:
                    a6:e0:67:01:b5:4a:d3:67:90:85:ad:fb:ac:24:a8:
                    73:c0:d3:00:10:92:99:2e:89:1b:37:d1:8e:da:19:
                    b1:11:ac:0c:cd:a7:95:3d:20:b7:f8:e3:bf:b0:19:
                    17:bc:88:fb:85:f6:1a:06:b2:c0:29:bd:9c:33:9a:
                    84:c1:eb:34:ff:90:65:38:97:ae:b8:3b:80:12:a7:
                    c9:50:ce:7c:bc:8d:4f:d3:9b:9e:c9:79:90:ed:cc:
                    5b:ee:72:f4:d5:a2:4e:7a:ac:40:30:bb:a1:18:29:
                    5e:37:09:47:f0:93:21:ff:af:ea:92:98:06:ac:c6:
                    0f:8c:f3:7c:20:79:30:36:33:89:c0:f6:37:2a:32:
                    81:eb:ae:57:8f:ae:23:03:8b:db:a0:e6:98:9c:d5:
                    33:9b:a4:df:7d:6f:78:a0:95:86:d3:61:50:44:9c:
                    13:38:31:24:50:49:ad:46:7d:45:f7:e3:0b:20:b2:
                    a7:83:ef:bc:36:3d:d9:87:0b:c4:a2:38:88:77:6e:
                    ae:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F3:05:13:44:6E:09:42:83:C1:A8:7E:0F:9A:EB:27:1D:00:4B:BC
            X509v3 Authority Key Identifier:
                keyid:06:55:E2:91:5C:AD:E9:16:77:AA:B4:8C:23:C1:E2:24:B4:3D:BA:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:46:12:ec:28:0b:90:3a:80:de:bf:e0:2e:7f:46:f8:d9:ab:
         93:7f:4e:10:9d:7d:57:36:e1:27:2a:ef:96:e3:a6:55:21:60:
         28:44:66:4c:92:6c:84:45:ed:d2:ae:97:3e:fd:bb:69:29:03:
         c2:3b:51:7f:ca:58:a6:d9:62:92:2c:95:9b:ec:05:1e:70:7c:
         0a:1b:72:82:44:aa:da:13:31:39:d4:d6:94:bc:82:9b:d5:22:
         76:0a:e0:64:24:78:36:56:92:16:61:11:36:2f:aa:7e:67:30:
         ac:3a:b3:80:9c:9b:9b:55:4b:0f:41:fe:fb:28:7f:49:6b:2a:
         af:d5:e3:e1:1e:ad:9b:b6:10:2a:ca:b7:ed:b9:6c:58:f9:71:
         3b:15:f0:87:8e:e3:a9:7b:f8:a5:79:9e:c1:23:4a:d5:1d:a7:
         f4:3d:30:4e:85:77:d3:88:0c:da:ee:53:43:28:03:b5:68:53:
         6e:11:96:24:4b:ee:ba:9b:92:c2:a5:c0:65:5f:dc:3e:76:d9:
         e5:d5:7a:91:18:01:03:f4:6f:79:69:d0:c9:77:43:cf:5d:28:
         22:a5:77:b2:b1:ee:89:a0:5b:f1:45:c7:29:81:65:52:4e:8a:
         db:0d:64:23:53:c9:8e:10:ff:09:14:e2:b0:88:ef:5e:3c:f4:
         3d:cf:d8:84
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhEMzUxMTAvBgNVBAUTKDA2NTVFMjkxNUNBREU5MTY3N0FBQjQ4QzIzQzFFMjI0
QjQzREJBQTUwHhcNMjYwNzIyMTQzODQ0WhcNMjYwNzI5MTQzODQ0WjAYMRYwFAYD
VQQDEw02YTYwZDVmNC0wYTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm/QIaQVJXmhYtt5gisoP0m7lYwflSeYgx87CbZjF2HVRAOYCSHo0TusL60hr
52wrdAsZpGSyBYSCVdSm4GcBtUrTZ5CFrfusJKhzwNMAEJKZLokbN9GO2hmxEawM
zaeVPSC3+OO/sBkXvIj7hfYaBrLAKb2cM5qEwes0/5BlOJeuuDuAEqfJUM58vI1P
05ueyXmQ7cxb7nL01aJOeqxAMLuhGCleNwlH8JMh/6/qkpgGrMYPjPN8IHkwNjOJ
wPY3KjKB665Xj64jA4vboOaYnNUzm6TffW94oJWG02FQRJwTODEkUEmtRn1F9+ML
ILKng++8Nj3ZhwvEojiId26uqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDDzBRNE
bglCg8Gofg+a6ycdAEu8MB8GA1UdIwQYMBaAFAZV4pFcrekWd6q0jCPB4iS0Pbql
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEQzNS9ENkY4ODVBNDFE
OEMxMUUyOUZBNjIzRUEwOEIwMkNEMi9CbFhpa1Z5dDZSWjNxclNNSThIaUpMUTl1
cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JsWGlrVnl0NlJaM3FyU01JOEhpSkxROXVxVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OEQzNS9ENkY4ODVBNDFEOEMxMUUyOUZBNjIzRUEwOEIwMkNEMi9CbFhpa1Z5dDZS
WjNxclNNSThIaUpMUTl1cVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARkYS7CgLkDqA3r/gLn9G+Nmrk39OEJ19VzbhJyrvluOmVSFgKERmTJJshEXt
0q6XPv27aSkDwjtRf8pYptlikiyVm+wFHnB8ChtygkSq2hMxOdTWlLyCm9Uidgrg
ZCR4NlaSFmERNi+qfmcwrDqzgJybm1VLD0H++yh/SWsqr9Xj4R6tm7YQKsq37bls
WPlxOxXwh47jqXv4pXmewSNK1R2n9D0wToV304gM2u5TQygDtWhTbhGWJEvuupuS
wqXAZV/cPnbZ5dV6kRgBA/RveWnQyXdDz10oIqV3srHuiaBb8UXHKYFlUk6K2w1k
I1PJjhD/CRTisIjvXjz0Pc/YhA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:01:37 2026 by rpki-client