Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
File:                     zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft (raw, json)
Hash identifier:          Rr9kkFJRcQ6Dl1D9ljL1+4xcalycKSJBIZ1MQISUiBI=
Subject key identifier:   AC:4F:17:5B:F8:F0:08:74:63:AC:F3:EC:3B:57:1A:DB:9F:66:06:69
Authority key identifier: CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
Certificate issuer:       /CN=A918054D/serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Certificate serial:       0865
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
Manifest number:          0848
Signing time:             Wed 22 Jul 2026 21:32:15 +0000
Manifest this update:     Wed 22 Jul 2026 21:32:15 +0000
Manifest next update:     Wed 29 Jul 2026 21:32:15 +0000
Files and hashes:         1: zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl (hash: Fh57SrPNdcQ/dj/DXGOvvacJyE26s5DYfPbJcklGE7Y=)
                          2: 303C97563EB611EBA4FCB055C4F9AE02.roa (hash: NBqcYaP1mLGHLtPIUim7xHYRFSA/kjEWSIQ+kAnV1V0=)
                          3: 78AFDDB84A8211EB8760D667C4F9AE02.roa (hash: mvrD5QWvYKdwFr7tS3PDXY6y+EhDGbDH0RckK+Dej1Q=)
                          4: 0CACB5AC198E11EBBDF60275C4F9AE02.roa (hash: GobLIlYBkGNU9uPWpdV+qAlmLQ7h40rrOVM904qVtaE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
                          rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2149 (0x865)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918054D, serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
        Validity
            Not Before: Jul 22 21:32:15 2026 GMT
            Not After : Jul 29 21:32:15 2026 GMT
        Subject: CN=6a6136df-7431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:43:20:bc:39:89:ca:06:ab:33:c5:3d:0f:57:
                    be:ad:7e:1e:ba:75:7e:12:80:ea:81:26:af:7c:9b:
                    79:64:1e:00:3b:56:7d:02:a8:5e:fb:8f:0d:b3:b0:
                    4d:52:63:96:c9:64:14:9a:b5:59:8a:39:9b:30:e7:
                    ab:6b:18:0e:48:6c:c7:9f:f9:d8:2d:9a:1f:33:0d:
                    a4:09:44:c8:df:9c:43:57:0a:aa:53:ce:5d:02:4b:
                    cf:ca:09:d7:c1:ad:13:4c:9a:34:bd:49:f7:b2:e9:
                    ae:6b:35:e9:25:c3:e4:fe:72:c9:e1:23:ce:b4:d3:
                    08:41:aa:2a:ac:49:93:e4:bd:2c:53:0a:95:b8:ca:
                    d3:22:44:ff:9a:1a:ce:83:ba:82:a0:89:cf:84:d7:
                    1e:cd:49:e7:18:12:79:c9:a3:3d:30:21:8f:34:bc:
                    7e:58:f8:52:b7:7c:76:22:b2:24:34:d9:54:6a:53:
                    44:b2:ab:14:ed:0c:ee:96:31:95:ed:3e:a4:98:a3:
                    20:65:a9:23:fe:e4:46:ce:50:63:85:47:8a:55:4b:
                    ad:52:af:4a:e2:1f:80:69:0e:48:77:6c:b6:65:3b:
                    90:60:68:78:cd:fa:aa:52:85:7b:1a:79:20:75:ac:
                    b2:d1:df:53:2c:4b:af:88:c8:66:1b:7c:0b:51:bb:
                    29:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4F:17:5B:F8:F0:08:74:63:AC:F3:EC:3B:57:1A:DB:9F:66:06:69
            X509v3 Authority Key Identifier:
                keyid:CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:c2:96:7a:29:7d:45:bb:da:63:63:0e:a2:17:9c:d1:4c:48:
         b7:03:5c:0f:a9:20:ae:bc:98:42:84:e3:a4:83:ac:4e:26:93:
         a2:e3:26:9c:75:3b:5b:01:77:6e:dc:d6:dd:a0:3d:66:5c:11:
         79:db:3b:32:97:26:73:c3:10:26:9c:39:fc:20:dd:28:af:e1:
         c1:1a:02:e1:f4:96:7d:3b:4c:f4:07:3b:4e:f6:66:6a:39:95:
         06:c8:d2:fb:5d:57:22:61:52:6d:d2:de:7e:0b:4f:8f:37:7b:
         46:91:f5:66:56:15:88:a8:04:75:f2:4d:7a:bc:15:0f:60:10:
         f1:11:58:25:ed:6e:f3:62:f1:67:28:db:eb:64:cc:18:00:46:
         c5:5d:04:f6:80:ba:6a:4d:2f:45:0b:8c:be:6a:41:68:8e:bc:
         2b:3f:f0:67:2f:11:5d:96:a7:66:f2:61:ed:96:7a:b8:6a:64:
         df:d6:70:9e:00:08:2e:bf:35:76:19:eb:c0:e8:f7:9f:2a:b7:
         93:60:14:73:6a:d7:e6:3a:4e:da:1a:95:2c:e0:24:f6:9a:11:
         89:63:d6:5e:46:5b:6c:de:af:1a:37:03:65:96:f1:f3:82:55:
         d4:7d:44:ea:ec:49:11:cb:b7:84:e8:41:6a:cf:98:70:03:36:
         5c:98:89:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA1NEQxMTAvBgNVBAUTKENEODI3QkY5NjQ1ODM2MUY2MDk4QjIyRjc1ODU0OEQ3
RUFFRkExNjgwHhcNMjYwNzIyMjEzMjE1WhcNMjYwNzI5MjEzMjE1WjAYMRYwFAYD
VQQDEw02YTYxMzZkZi03NDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqUMgvDmJygarM8U9D1e+rX4eunV+EoDqgSavfJt5ZB4AO1Z9Aqhe+48Ns7BN
UmOWyWQUmrVZijmbMOeraxgOSGzHn/nYLZofMw2kCUTI35xDVwqqU85dAkvPygnX
wa0TTJo0vUn3sumuazXpJcPk/nLJ4SPOtNMIQaoqrEmT5L0sUwqVuMrTIkT/mhrO
g7qCoInPhNcezUnnGBJ5yaM9MCGPNLx+WPhSt3x2IrIkNNlUalNEsqsU7QzuljGV
7T6kmKMgZakj/uRGzlBjhUeKVUutUq9K4h+AaQ5Id2y2ZTuQYGh4zfqqUoV7Gnkg
dayy0d9TLEuviMhmG3wLUbspcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKxPF1v4
8Ah0Y6zz7DtXGtufZgZpMB8GA1UdIwQYMBaAFM2Ce/lkWDYfYJiyL3WFSNfq76Fo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU0RC82RTA4MjNCMDE5
OEMxMUVCQUZDQjk0NTlDNEY5QUUwMi96WUo3LVdSWU5oOWdtTEl2ZFlWSTEtcnZv
V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pZSjctV1JZTmg5Z21MSXZkWVZJMS1ydm9XZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDU0RC82RTA4MjNCMDE5OEMxMUVCQUZDQjk0NTlDNEY5QUUwMi96WUo3LVdSWU5o
OWdtTEl2ZFlWSTEtcnZvV2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmMKWeil9RbvaY2MOohec0UxItwNcD6kgrryYQoTjpIOsTiaTouMmnHU7WwF3
btzW3aA9ZlwReds7Mpcmc8MQJpw5/CDdKK/hwRoC4fSWfTtM9Ac7TvZmajmVBsjS
+11XImFSbdLefgtPjzd7RpH1ZlYViKgEdfJNerwVD2AQ8RFYJe1u82LxZyjb62TM
GABGxV0E9oC6ak0vRQuMvmpBaI68Kz/wZy8RXZanZvJh7ZZ6uGpk39ZwngAILr81
dhnrwOj3nyq3k2AUc2rX5jpO2hqVLOAk9poRiWPWXkZbbN6vGjcDZZbx84JV1H1E
6uxJEcu3hOhBas+YcAM2XJiJQA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:12:40 2026 by rpki-client