Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
File:                     Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft (raw, json)
Hash identifier:          JqbBWdQbL/uZEJjsoRuPVV3f9OWpkPYFGNa8pbJ8NoY=
Subject key identifier:   08:46:47:FE:F0:C6:4C:B7:0E:66:B3:54:62:C4:ED:55:47:76:FA:39
Authority key identifier: 29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83
Certificate issuer:       /CN=A917F241/serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283
Certificate serial:       01B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
Manifest number:          01A5
Signing time:             Thu 23 Jul 2026 05:37:05 +0000
Manifest this update:     Thu 23 Jul 2026 05:37:04 +0000
Manifest next update:     Thu 30 Jul 2026 05:37:04 +0000
Files and hashes:         1: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl (hash: FwmMx0ApFXvdIhzZvVDzCtoZ5sqaUmJnPJI4OdzcTWQ=)
                          2: A0B44D9C60E211EFB1283930C4F9AE02.roa (hash: 0cQ7lL+Dgw4MdHfwJ/NaEJmV6pZpv3TD2ijoWRCbMbA=)
                          3: 7434811060E211EFBAE0C52FC4F9AE02.roa (hash: XulmFJ+sIF5UMyQAz/MmaZcZch5QE26KdzQqhFjBUzg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl
                          rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:37:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F241, serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283
        Validity
            Not Before: Jul 23 05:37:04 2026 GMT
            Not After : Jul 30 05:37:04 2026 GMT
        Subject: CN=6a61a880-dd1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:99:57:19:c4:fc:d9:fd:9c:22:b7:8c:79:e2:
                    13:e2:f4:65:97:7c:02:0c:d7:1e:a0:ad:97:a6:85:
                    e8:9d:53:22:32:36:5f:d1:77:1c:2c:b9:06:01:23:
                    e8:cf:27:8f:4f:ca:12:fd:68:77:e9:41:8c:e3:32:
                    72:98:21:47:81:9c:43:27:eb:50:52:f3:d9:4d:e3:
                    fa:89:00:99:53:5f:2c:ed:67:8f:5e:37:b9:55:55:
                    a4:4b:80:33:0c:2e:d2:94:1e:00:2c:68:55:53:0b:
                    3b:78:65:7c:a1:3d:5a:d0:d9:29:25:61:a1:cd:b3:
                    51:1b:51:51:90:08:b3:64:f7:28:89:6f:f6:38:6c:
                    64:ef:3c:03:96:43:c4:7a:ec:af:e8:b0:0f:c2:a9:
                    be:cf:c1:c3:4c:18:3a:ce:d5:1e:33:d8:1d:81:70:
                    66:28:7b:cc:b4:4e:93:9d:bf:2a:3f:85:25:f8:a6:
                    c9:ee:5d:48:38:67:0d:67:44:c5:f2:4e:b6:08:33:
                    70:19:b7:71:68:6b:99:d2:fd:8d:fa:64:89:ad:74:
                    8c:7b:8d:e0:0e:1c:11:97:ee:59:fe:89:32:d1:81:
                    44:7f:b6:4d:6f:15:96:a1:63:28:a5:06:df:2b:d6:
                    ed:b1:b6:65:35:6e:57:36:b7:09:d3:a5:9b:15:2d:
                    74:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:46:47:FE:F0:C6:4C:B7:0E:66:B3:54:62:C4:ED:55:47:76:FA:39
            X509v3 Authority Key Identifier:
                keyid:29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:15:74:a6:3e:88:c3:04:ed:0a:09:d9:45:bc:d2:e9:ec:08:
         e8:5a:05:e6:3f:d4:45:f8:c8:6f:1d:c4:2c:40:f1:b7:27:d4:
         fb:a6:65:9c:04:78:03:a1:5b:e6:09:32:c9:00:d5:e5:f6:64:
         65:de:95:17:d0:51:28:8f:d2:83:4f:9a:35:d4:0c:88:12:74:
         25:7e:b6:39:2f:41:0e:8e:00:c6:c2:68:30:70:b5:41:2b:da:
         8b:77:a7:56:bb:a2:19:af:4d:3f:ba:12:56:78:47:ec:ad:93:
         3f:7c:01:38:d2:4b:13:a8:80:69:c5:dc:05:7c:8f:18:9c:89:
         84:99:5b:5d:e9:3f:ac:fe:e5:70:85:b5:de:ba:34:07:7b:80:
         3b:39:b7:5d:b5:9b:fe:49:46:1e:42:db:16:19:0f:0e:75:b9:
         e0:7f:73:62:d8:44:cd:ac:91:99:a1:25:57:91:f4:a4:78:af:
         97:09:7f:56:d5:e0:2e:c7:fa:c6:ad:a7:6f:39:36:60:cd:20:
         f0:30:da:77:c5:e8:8c:73:10:2b:57:4e:6e:ae:bd:a7:0a:87:
         48:ea:7a:e0:41:65:96:58:33:c6:1e:6f:77:5f:83:a4:aa:2b:
         31:95:43:ae:f7:38:48:4c:f7:1e:19:0c:04:89:38:29:44:e6:
         2f:80:9f:86
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0YyNDExMTAvBgNVBAUTKDI5Q0Q4REY4ODA2RTExNjc0Q0JDNUY5REY0REJGOEQy
M0UwQzIyODMwHhcNMjYwNzIzMDUzNzA0WhcNMjYwNzMwMDUzNzA0WjAYMRYwFAYD
VQQDEw02YTYxYTg4MC1kZDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApZlXGcT82f2cIreMeeIT4vRll3wCDNceoK2XpoXonVMiMjZf0XccLLkGASPo
zyePT8oS/Wh36UGM4zJymCFHgZxDJ+tQUvPZTeP6iQCZU18s7WePXje5VVWkS4Az
DC7SlB4ALGhVUws7eGV8oT1a0NkpJWGhzbNRG1FRkAizZPcoiW/2OGxk7zwDlkPE
euyv6LAPwqm+z8HDTBg6ztUeM9gdgXBmKHvMtE6Tnb8qP4Ul+KbJ7l1IOGcNZ0TF
8k62CDNwGbdxaGuZ0v2N+mSJrXSMe43gDhwRl+5Z/oky0YFEf7ZNbxWWoWMopQbf
K9btsbZlNW5XNrcJ06WbFS10oQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAhGR/7w
xky3DmazVGLE7VVHdvo5MB8GA1UdIwQYMBaAFCnNjfiAbhFnTLxfnfTb+NI+DCKD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0MS9FQjIxMzY4ODBC
RjYxMUVGOUNBOUMxNTFDNEY5QUUwMi9LYzJOLUlCdUVXZE12Ri1kOU52NDBqNE1J
b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tjMk4tSUJ1RVdkTXZGLWQ5TnY0MGo0TUlvTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RjI0MS9FQjIxMzY4ODBCRjYxMUVGOUNBOUMxNTFDNEY5QUUwMi9LYzJOLUlCdUVX
ZE12Ri1kOU52NDBqNE1Jb00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAABV0pj6IwwTtCgnZRbzS6ewI6FoF5j/URfjIbx3ELEDxtyfU+6ZlnAR4A6Fb
5gkyyQDV5fZkZd6VF9BRKI/Sg0+aNdQMiBJ0JX62OS9BDo4AxsJoMHC1QSvai3en
VruiGa9NP7oSVnhH7K2TP3wBONJLE6iAacXcBXyPGJyJhJlbXek/rP7lcIW13ro0
B3uAOzm3XbWb/klGHkLbFhkPDnW54H9zYthEzayRmaElV5H0pHivlwl/VtXgLsf6
xq2nbzk2YM0g8DDad8XojHMQK1dObq69pwqHSOp64EFlllgzxh5vd1+DpKorMZVD
rvc4SEz3HhkMBIk4KUTmL4Cfhg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:59 2026 by rpki-client