Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft
File:                     98T1xyjQwEdsUy6sGMKSfB1bgzs.mft (raw, json)
Hash identifier:          6YIk92ILiYwUvUhePEm1oGmm5aM6MSbA65Dl8HhZV9g=
Subject key identifier:   79:95:41:17:D3:3F:22:D4:B7:66:7D:F0:CF:3F:05:D1:F9:71:77:4F
Authority key identifier: F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B
Certificate issuer:       /CN=A9185D4E/serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B
Certificate serial:       015C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft
Manifest number:          0154
Signing time:             Thu 23 Jul 2026 06:41:35 +0000
Manifest this update:     Thu 23 Jul 2026 06:41:34 +0000
Manifest next update:     Thu 30 Jul 2026 06:41:34 +0000
Files and hashes:         1: 98T1xyjQwEdsUy6sGMKSfB1bgzs.crl (hash: EmT3oPormfszv4ocD4KRhp20Boucx+TbnXpD+mG2G/Y=)
                          2: 5495EE5C9B4311EF87E5073DC4F9AE02.roa (hash: A1NTD7h2xgDeyXadTLZEojHNP4VwUiQbYlMzYMHSPLQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl
                          rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:41:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D4E, serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B
        Validity
            Not Before: Jul 23 06:41:34 2026 GMT
            Not After : Jul 30 06:41:34 2026 GMT
        Subject: CN=6a61b79e-d198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:63:8b:fd:a6:dd:ff:fe:c1:2d:54:36:20:e6:
                    f7:88:f8:15:20:8e:29:81:48:53:26:52:04:9b:d0:
                    86:74:fe:f6:71:c8:3a:74:73:ee:ff:f5:b3:1e:f5:
                    e0:c0:1c:4a:25:e1:52:e9:2e:cb:7d:02:0f:f7:88:
                    b2:69:44:d5:73:8b:85:ee:cf:ea:78:76:71:b8:77:
                    7c:37:19:5b:ea:de:52:c1:37:6b:e8:79:a7:6e:87:
                    aa:56:0b:af:bb:8b:72:cd:e7:3b:7a:9e:c7:c0:af:
                    67:46:53:e8:f0:49:ed:cd:b3:68:63:14:68:d0:78:
                    f8:0c:dc:ab:4f:34:93:a0:74:82:ff:8e:3a:e3:e1:
                    79:e8:de:3d:c7:b9:ec:2c:a0:c8:d7:45:32:6b:db:
                    4f:b2:5d:c6:10:d4:9e:35:aa:25:08:f2:1e:b1:3a:
                    14:fd:50:8b:fa:e9:86:0e:d1:b8:e6:86:1c:db:cc:
                    9d:60:b7:41:b9:97:45:11:a7:96:6c:1d:7b:ea:69:
                    47:1c:9c:7f:03:b7:a1:c6:18:2c:5d:81:78:ad:1d:
                    ef:d2:c9:ac:0b:c7:3d:35:a9:df:5b:a2:15:b8:ac:
                    60:aa:69:19:c9:e0:1e:a8:eb:80:69:d7:dd:07:f1:
                    d6:bd:7d:b8:12:79:41:aa:b4:51:b1:f7:7f:d9:75:
                    82:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:95:41:17:D3:3F:22:D4:B7:66:7D:F0:CF:3F:05:D1:F9:71:77:4F
            X509v3 Authority Key Identifier:
                keyid:F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:1d:52:29:28:10:a9:c0:3c:e4:70:ef:ab:4e:62:20:f8:7a:
         2b:1e:79:2d:7c:d0:19:8c:8b:5f:93:16:42:02:7b:4f:00:90:
         ce:b2:c4:6a:ff:35:49:8a:b0:08:48:66:a7:c4:8f:6c:35:24:
         5f:9c:2d:2e:d3:18:63:f2:45:2c:87:3d:d6:a9:5c:52:d8:6b:
         70:19:5f:6a:ce:b7:39:7b:c1:3d:4d:bd:4d:f1:8d:f5:05:5c:
         5f:de:7b:1d:0e:5b:76:d8:e3:67:9d:b0:d4:04:1a:0b:a8:2a:
         bf:37:0f:e3:ca:e8:c2:82:67:0d:c0:ea:95:20:8f:d9:08:e2:
         81:10:ac:c4:00:3f:3d:55:91:f4:ec:af:36:a7:fb:0d:07:ef:
         e3:96:ff:63:c9:1d:ac:f5:76:16:5d:29:db:c6:1c:b8:b9:59:
         5a:b8:77:d1:4d:c8:96:d5:60:9f:f9:73:37:f9:76:15:3d:9f:
         f9:93:e7:90:0c:b4:91:fd:e7:25:13:4c:74:cc:7c:ce:f8:ea:
         54:4d:15:51:0b:15:f2:39:65:b2:08:6a:02:3e:d2:4f:1c:56:
         74:4c:42:e6:a3:bb:5a:5e:42:78:2f:bd:69:ef:44:67:85:c5:
         9b:f7:ae:05:d2:b0:1e:c6:a9:a0:ef:b9:12:65:da:52:96:18:
         9f:11:35:71
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVENEUxMTAvBgNVBAUTKEY3QzRGNUM3MjhEMEMwNDc2QzUzMkVBQzE4QzI5MjdD
MUQ1QjgzM0IwHhcNMjYwNzIzMDY0MTM0WhcNMjYwNzMwMDY0MTM0WjAYMRYwFAYD
VQQDEw02YTYxYjc5ZS1kMTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApGOL/abd//7BLVQ2IOb3iPgVII4pgUhTJlIEm9CGdP72ccg6dHPu//WzHvXg
wBxKJeFS6S7LfQIP94iyaUTVc4uF7s/qeHZxuHd8Nxlb6t5SwTdr6HmnboeqVguv
u4tyzec7ep7HwK9nRlPo8EntzbNoYxRo0Hj4DNyrTzSToHSC/4464+F56N49x7ns
LKDI10Uya9tPsl3GENSeNaolCPIesToU/VCL+umGDtG45oYc28ydYLdBuZdFEaeW
bB176mlHHJx/A7ehxhgsXYF4rR3v0smsC8c9NanfW6IVuKxgqmkZyeAeqOuAadfd
B/HWvX24EnlBqrRRsfd/2XWCPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHmVQRfT
PyLUt2Z98M8/BdH5cXdPMB8GA1UdIwQYMBaAFPfE9cco0MBHbFMurBjCknwdW4M7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ0RS81Qjg0NDIwMjdG
RjIxMUVGOTBFMTRGNjBDNEY5QUUwMi85OFQxeHlqUXdFZHNVeTZzR01LU2ZCMWJn
enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzk4VDF4eWpRd0Vkc1V5NnNHTUtTZkIxYmd6cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NUQ0RS81Qjg0NDIwMjdGRjIxMUVGOTBFMTRGNjBDNEY5QUUwMi85OFQxeHlqUXdF
ZHNVeTZzR01LU2ZCMWJnenMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlB1SKSgQqcA85HDvq05iIPh6Kx55LXzQGYyLX5MWQgJ7TwCQzrLEav81SYqw
CEhmp8SPbDUkX5wtLtMYY/JFLIc91qlcUthrcBlfas63OXvBPU29TfGN9QVcX957
HQ5bdtjjZ52w1AQaC6gqvzcP48rowoJnDcDqlSCP2QjigRCsxAA/PVWR9OyvNqf7
DQfv45b/Y8kdrPV2Fl0p28YcuLlZWrh30U3IltVgn/lzN/l2FT2f+ZPnkAy0kf3n
JRNMdMx8zvjqVE0VUQsV8jllsghqAj7STxxWdExC5qO7Wl5CeC+9ae9EZ4XFm/eu
BdKwHsapoO+5EmXaUpYYnxE1cQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:59:51 2026 by rpki-client