Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft
File:                     4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft (raw, json)
Hash identifier:          heQ+D3GLQhfgwr19qnnDdQT5ozjBBOvfSkGX21b1+qA=
Subject key identifier:   96:E7:2E:21:43:C3:E4:82:61:3F:F0:AA:EF:B9:E3:A9:F4:DF:19:3D
Authority key identifier: E0:C8:92:8F:94:51:52:0E:64:D1:DE:D5:8F:07:19:6B:58:61:B2:86
Certificate issuer:       /CN=A917D4C4/serialNumber=E0C8928F9451520E64D1DED58F07196B5861B286
Certificate serial:       0734
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft
Manifest number:          072E
Signing time:             Wed 22 Jul 2026 14:49:39 +0000
Manifest this update:     Wed 22 Jul 2026 14:49:38 +0000
Manifest next update:     Wed 29 Jul 2026 14:49:38 +0000
Files and hashes:         1: 4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl (hash: 7qlEp3pmdTGNbld13RK4S9CA/rLROBSY+dIpqrZhdQE=)
                          2: 6E325DBC0E2F11EDB4659653C4F9AE02.roa (hash: nifz0lZY0B16BBA+MbGH96xeil4xf4rsxF/RU1Jcvug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl
                          rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:49:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1844 (0x734)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D4C4, serialNumber=E0C8928F9451520E64D1DED58F07196B5861B286
        Validity
            Not Before: Jul 22 14:49:38 2026 GMT
            Not After : Jul 29 14:49:38 2026 GMT
        Subject: CN=6a60d882-11a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:72:ed:0c:3f:f6:04:1e:2e:08:0b:2e:99:e3:
                    9c:0e:b0:f0:33:5d:fe:3b:12:3e:fc:42:c7:c6:a0:
                    b6:2a:2f:57:f8:a8:13:d4:e2:cf:06:53:1f:7b:bb:
                    55:9e:7a:37:4a:bd:2e:93:ac:bd:28:71:02:3f:7e:
                    cf:f7:4e:0a:68:40:fb:fb:1f:5b:d7:4f:e7:a9:57:
                    9e:1c:e0:99:95:d7:94:d9:fc:ba:81:16:8f:61:d7:
                    81:dc:1c:e4:88:3f:22:77:cb:da:4d:c6:d5:2f:d5:
                    d1:5e:b5:c8:75:45:8c:d1:93:74:41:c2:6f:87:40:
                    d9:6c:34:8f:84:05:eb:32:20:08:55:e2:05:35:83:
                    e4:6f:2e:12:67:6c:ca:72:99:f1:fc:ef:92:e0:3c:
                    8b:3f:68:82:2a:21:87:89:b7:2a:15:db:77:22:2f:
                    0e:ed:83:8b:47:ff:05:fc:8d:fa:5d:02:c3:fb:44:
                    4b:b0:9a:52:0e:1f:3e:31:64:4f:b1:0a:ec:cc:df:
                    6e:34:cd:5a:ba:2e:f7:1b:69:3c:d3:97:6a:7b:b4:
                    7f:ad:6d:b2:40:20:c8:75:d8:cd:d0:cd:6b:8a:60:
                    7b:cb:df:4b:44:95:31:0d:8a:63:91:de:78:bf:f2:
                    77:65:cb:d0:a4:e0:18:8e:61:6e:bc:1e:fb:b1:7d:
                    11:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E7:2E:21:43:C3:E4:82:61:3F:F0:AA:EF:B9:E3:A9:F4:DF:19:3D
            X509v3 Authority Key Identifier:
                keyid:E0:C8:92:8F:94:51:52:0E:64:D1:DE:D5:8F:07:19:6B:58:61:B2:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:e3:d1:75:aa:52:ed:9c:cf:d2:a7:a2:b0:33:81:99:b8:f0:
         d7:cb:8f:2d:e0:99:02:da:39:ef:6d:f9:fc:42:e3:58:4f:d0:
         5c:24:dc:35:e9:a7:48:60:64:92:f5:1e:e0:66:c5:ec:bc:ca:
         b0:fa:71:59:52:db:bf:87:ed:35:c3:76:49:de:df:ed:74:03:
         6d:c2:99:25:e4:a4:72:f5:6a:e3:31:e8:27:5c:d7:75:32:fb:
         e3:1c:ea:f4:8c:bd:75:3d:05:b5:e1:02:be:eb:7d:e3:a3:85:
         c8:fc:e4:20:69:c5:2b:bd:5a:d7:e6:9e:71:83:57:e0:cf:9a:
         90:e2:86:10:f1:dc:04:ab:56:2c:18:32:58:5d:be:bf:b5:9f:
         3e:44:82:1b:db:fe:e4:29:48:63:1c:c0:31:25:46:2e:e5:f9:
         9c:ae:20:be:4d:26:34:7d:d4:06:37:94:6f:2a:34:da:03:d9:
         64:3d:ad:cd:f3:67:bc:96:ed:f8:84:3d:4f:05:68:05:10:b4:
         52:06:23:ec:48:79:f2:95:60:7b:24:71:13:f8:c9:e6:f8:f5:
         c1:8b:9e:a8:35:e5:d1:71:17:75:65:cf:40:da:41:fd:a5:3c:
         d0:31:84:a9:e5:dc:74:51:91:a6:dc:80:d5:2d:da:f1:10:19:
         9d:ac:1b:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0Q0QzQxMTAvBgNVBAUTKEUwQzg5MjhGOTQ1MTUyMEU2NEQxREVENThGMDcxOTZC
NTg2MUIyODYwHhcNMjYwNzIyMTQ0OTM4WhcNMjYwNzI5MTQ0OTM4WjAYMRYwFAYD
VQQDEw02YTYwZDg4Mi0xMWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4nLtDD/2BB4uCAsumeOcDrDwM13+OxI+/ELHxqC2Ki9X+KgT1OLPBlMfe7tV
nno3Sr0uk6y9KHECP37P904KaED7+x9b10/nqVeeHOCZldeU2fy6gRaPYdeB3Bzk
iD8id8vaTcbVL9XRXrXIdUWM0ZN0QcJvh0DZbDSPhAXrMiAIVeIFNYPkby4SZ2zK
cpnx/O+S4DyLP2iCKiGHibcqFdt3Ii8O7YOLR/8F/I36XQLD+0RLsJpSDh8+MWRP
sQrszN9uNM1aui73G2k805dqe7R/rW2yQCDIddjN0M1rimB7y99LRJUxDYpjkd54
v/J3ZcvQpOAYjmFuvB77sX0RHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJbnLiFD
w+SCYT/wqu+546n03xk9MB8GA1UdIwQYMBaAFODIko+UUVIOZNHe1Y8HGWtYYbKG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDRDNC80MzlDRjg3QzhE
N0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi80TWlTajVSUlVnNWswZDdWandjWmExaGhz
b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRNaVNqNVJSVWc1azBkN1Zqd2NaYTFoaHNvWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RDRDNC80MzlDRjg3QzhEN0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi80TWlTajVSUlVn
NWswZDdWandjWmExaGhzb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA6+PRdapS7ZzP0qeisDOBmbjw18uPLeCZAto57235/ELjWE/QXCTcNemnSGBk
kvUe4GbF7LzKsPpxWVLbv4ftNcN2Sd7f7XQDbcKZJeSkcvVq4zHoJ1zXdTL74xzq
9Iy9dT0FteECvut946OFyPzkIGnFK71a1+aecYNX4M+akOKGEPHcBKtWLBgyWF2+
v7WfPkSCG9v+5ClIYxzAMSVGLuX5nK4gvk0mNH3UBjeUbyo02gPZZD2tzfNnvJbt
+IQ9TwVoBRC0UgYj7Eh58pVgeyRxE/jJ5vj1wYueqDXl0XEXdWXPQNpB/aU80DGE
qeXcdFGRptyA1S3a8RAZnawbtw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:27:57 2026 by rpki-client