Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft
File:                     4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft (raw, json)
Hash identifier:          OpWfbXlZBfEzttV8JrosAedFeTcjL9Ko+qKeNYcbw1k=
Subject key identifier:   77:72:62:CA:AF:51:6A:BF:03:E5:0B:BF:F3:D1:F2:03:B9:C1:39:0F
Authority key identifier: E2:31:D3:09:27:E4:9A:6A:22:D9:F6:AC:D7:06:10:3B:E3:E5:DC:16
Certificate issuer:       /CN=A9188CCC/serialNumber=E231D30927E49A6A22D9F6ACD706103BE3E5DC16
Certificate serial:       0231
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft
Manifest number:          0228
Signing time:             Thu 23 Jul 2026 04:01:11 +0000
Manifest this update:     Thu 23 Jul 2026 04:01:11 +0000
Manifest next update:     Thu 30 Jul 2026 04:01:11 +0000
Files and hashes:         1: 4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl (hash: CixlgiDgQFZY6tjwzH9QTA/SQl13MTssoW32t9tlx7U=)
                          2: 9B2C760CD89B11EF8D75534EC4F9AE02.roa (hash: hyI/PoaRKntL7XpUGJIJnV0DfJsuOHooYB61GtF+kzU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl
                          rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 561 (0x231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188CCC, serialNumber=E231D30927E49A6A22D9F6ACD706103BE3E5DC16
        Validity
            Not Before: Jul 23 04:01:11 2026 GMT
            Not After : Jul 30 04:01:11 2026 GMT
        Subject: CN=6a619207-1bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2b:50:aa:fa:56:e0:35:52:ec:8c:55:2e:7a:
                    18:b4:1f:85:33:e6:8e:d5:af:ef:ef:40:ff:4e:7b:
                    20:9f:98:43:e1:2d:8a:c5:84:f6:32:e4:05:24:eb:
                    0a:ab:11:6d:fc:48:bb:c9:58:45:8f:30:77:b8:35:
                    0b:9c:5f:bc:3f:cb:26:69:9e:b3:11:87:c3:c8:17:
                    dd:f7:e5:70:3b:20:80:a3:7d:9d:cf:54:31:dc:1b:
                    b4:e7:d1:e0:99:b4:11:b3:b6:19:cc:95:3b:42:d5:
                    c0:6f:76:c1:cc:89:13:de:8e:13:14:65:3a:29:74:
                    72:1f:26:f4:2e:54:74:a7:84:32:fb:8b:8a:01:4c:
                    99:4e:ea:13:3a:a1:15:34:89:37:e7:87:ae:24:1e:
                    cc:68:0d:4b:10:00:d5:de:af:0b:88:2b:52:2b:51:
                    ef:ee:e7:14:58:3c:57:bc:56:d1:a2:1f:29:78:f3:
                    e2:aa:2f:80:b9:eb:0f:8c:f2:2f:ad:f3:26:c0:d8:
                    f9:51:f7:ce:f3:32:21:76:4a:07:eb:7f:98:d0:62:
                    45:9f:19:4f:ce:69:a4:90:a1:fe:bc:59:32:f0:61:
                    34:f1:99:72:e8:51:6c:7f:61:60:ab:07:81:3e:0b:
                    d0:8c:87:f4:9f:21:b2:89:7e:7f:cf:e0:02:84:d0:
                    9d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:72:62:CA:AF:51:6A:BF:03:E5:0B:BF:F3:D1:F2:03:B9:C1:39:0F
            X509v3 Authority Key Identifier:
                keyid:E2:31:D3:09:27:E4:9A:6A:22:D9:F6:AC:D7:06:10:3B:E3:E5:DC:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ff:ee:fb:de:3f:b7:e3:94:21:18:eb:24:29:a3:1b:35:76:
         dc:f3:06:fb:22:a3:a6:8a:06:62:b8:1a:75:e0:23:f7:92:be:
         5e:2d:97:19:da:79:01:d6:1f:58:17:8f:a3:9d:6f:49:94:91:
         05:89:a3:f6:51:52:20:ae:76:82:3f:dd:24:da:ff:18:92:f0:
         03:f1:32:dd:26:f6:97:68:63:39:d0:67:98:2c:af:df:68:85:
         b0:c0:a9:91:de:b0:41:bf:ff:1c:cc:fd:a1:a5:67:7d:2a:e0:
         b8:9c:7b:f5:73:d6:b8:54:04:0e:10:8c:a9:bd:45:c7:72:6b:
         53:a3:9a:2e:bc:15:74:36:5c:7b:c3:dd:c6:ed:b5:5b:bb:36:
         9b:cc:99:38:d3:b2:dc:2a:20:e9:2b:2c:79:3f:47:37:33:89:
         98:34:54:ae:9f:6c:e4:f8:3e:24:69:b9:34:9d:2d:bd:54:24:
         dc:fd:35:7c:0f:3a:67:30:30:e6:b5:db:12:5e:c6:15:eb:59:
         11:88:22:96:a4:4d:d5:36:9e:87:f8:9d:0b:48:2e:93:b1:6d:
         f8:18:71:73:af:47:83:99:6d:f4:d8:b3:cc:8e:dd:a7:10:2b:
         fe:3e:1f:59:b1:9b:a2:23:98:67:5f:47:ec:d4:f6:cf:21:66:
         20:99:42:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODhDQ0MxMTAvBgNVBAUTKEUyMzFEMzA5MjdFNDlBNkEyMkQ5RjZBQ0Q3MDYxMDNC
RTNFNURDMTYwHhcNMjYwNzIzMDQwMTExWhcNMjYwNzMwMDQwMTExWjAYMRYwFAYD
VQQDEw02YTYxOTIwNy0xYmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuCtQqvpW4DVS7IxVLnoYtB+FM+aO1a/v70D/Tnsgn5hD4S2KxYT2MuQFJOsK
qxFt/Ei7yVhFjzB3uDULnF+8P8smaZ6zEYfDyBfd9+VwOyCAo32dz1Qx3Bu059Hg
mbQRs7YZzJU7QtXAb3bBzIkT3o4TFGU6KXRyHyb0LlR0p4Qy+4uKAUyZTuoTOqEV
NIk354euJB7MaA1LEADV3q8LiCtSK1Hv7ucUWDxXvFbRoh8pePPiqi+AuesPjPIv
rfMmwNj5UffO8zIhdkoH63+Y0GJFnxlPzmmkkKH+vFky8GE08Zly6FFsf2FgqweB
PgvQjIf0nyGyiX5/z+AChNCdYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHdyYsqv
UWq/A+ULv/PR8gO5wTkPMB8GA1UdIwQYMBaAFOIx0wkn5JpqItn2rNcGEDvj5dwW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OENDQy83RTZFMDAxNDQ1
NDcxMUVFQUNEMzVGNDFDNEY5QUUwMi80akhUQ1Nma21tb2kyZmFzMXdZUU8tUGwz
QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRqSFRDU2ZrbW1vaTJmYXMxd1lRTy1QbDNCWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OENDQy83RTZFMDAxNDQ1NDcxMUVFQUNEMzVGNDFDNEY5QUUwMi80akhUQ1Nma21t
b2kyZmFzMXdZUU8tUGwzQlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ//u+94/t+OUIRjrJCmjGzV23PMG+yKjpooGYrgadeAj95K+Xi2XGdp5AdYf
WBePo51vSZSRBYmj9lFSIK52gj/dJNr/GJLwA/Ey3Sb2l2hjOdBnmCyv32iFsMCp
kd6wQb//HMz9oaVnfSrguJx79XPWuFQEDhCMqb1Fx3JrU6OaLrwVdDZce8Pdxu21
W7s2m8yZONOy3Cog6SsseT9HNzOJmDRUrp9s5Pg+JGm5NJ0tvVQk3P01fA86ZzAw
5rXbEl7GFetZEYgilqRN1Taeh/idC0guk7Ft+Bhxc69Hg5lt9NizzI7dpxAr/j4f
WbGboiOYZ19H7NT2zyFmIJlC1A==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:56 2026 by rpki-client