Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
File:                     cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft (raw, json)
Hash identifier:          T7cT19wai7jbwUaLJwuTDEQC311/XM0J1w16YfECQs0=
Subject key identifier:   82:9C:24:F8:83:4C:40:73:98:BE:B5:B4:33:37:9B:BA:8F:84:90:6C
Authority key identifier: 70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E
Certificate issuer:       /CN=A918B936/serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E
Certificate serial:       21E2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
Manifest number:          21E0
Signing time:             Wed 22 Jul 2026 15:58:10 +0000
Manifest this update:     Wed 22 Jul 2026 15:58:09 +0000
Manifest next update:     Wed 29 Jul 2026 15:58:09 +0000
Files and hashes:         1: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl (hash: cxj+TEHKxuf0iua3ASfuxPLyKuBkYf7YwHyt7pzuFW8=)
                          2: 84C953D2688011F1B19CA9CF6847A888.roa (hash: 6p0x8a/sW0cuz0t+yiNt7P8tcCswaeB+PccYir2+uEc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl
                          rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:58:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8674 (0x21e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B936, serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E
        Validity
            Not Before: Jul 22 15:58:09 2026 GMT
            Not After : Jul 29 15:58:09 2026 GMT
        Subject: CN=6a60e892-9972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1b:06:00:b5:05:1b:13:be:0e:e9:23:83:fd:
                    2f:2c:17:1f:6d:72:79:9a:ce:89:f3:b4:b0:8d:2e:
                    89:ed:00:15:9b:01:5b:f5:46:0a:88:f5:fa:fb:b9:
                    13:29:48:5f:08:dd:51:79:0c:63:63:ec:cd:36:33:
                    72:13:a8:9a:bc:12:35:87:36:8d:b7:50:c8:24:77:
                    35:8a:80:43:13:65:7e:af:53:a2:7b:16:7d:88:21:
                    00:cd:bd:02:0d:be:02:41:fa:5f:34:17:6c:88:35:
                    52:14:bc:6f:2c:c8:81:1e:46:a8:51:26:40:e2:a9:
                    46:70:46:bd:00:98:16:dc:13:50:c2:cc:b4:8f:c1:
                    cb:15:07:08:6a:42:2a:00:0b:5e:2a:7e:f4:49:db:
                    21:82:95:c3:b0:71:a8:3b:14:a4:83:c0:8d:83:ef:
                    7f:e2:38:8c:97:90:ba:dc:e0:d1:8b:18:68:1b:04:
                    34:53:15:7f:b6:37:71:aa:9b:f6:71:cc:37:19:aa:
                    dc:cd:6b:e6:63:33:28:00:8a:94:b5:95:b7:6a:d4:
                    40:2a:54:ae:c5:83:8c:d8:73:ad:30:ab:62:dc:80:
                    ac:69:0b:d0:f6:28:9f:09:cc:87:45:cd:38:b7:87:
                    96:c3:99:eb:2e:22:9c:3f:4c:77:c7:ef:d0:24:f8:
                    06:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9C:24:F8:83:4C:40:73:98:BE:B5:B4:33:37:9B:BA:8F:84:90:6C
            X509v3 Authority Key Identifier:
                keyid:70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:4d:d9:d5:c8:18:41:7e:6f:fb:c4:45:eb:c6:34:55:47:04:
         46:33:d3:50:e2:cc:61:17:d1:09:ff:92:b1:02:e4:73:e1:00:
         b4:9b:91:35:54:e3:30:6e:ab:13:e8:38:26:f4:94:b2:ca:63:
         1d:41:78:2c:91:10:73:b1:66:01:31:01:35:75:71:32:61:29:
         fe:71:0f:50:c2:54:99:2a:d9:78:6b:fa:35:c0:1d:d8:a8:64:
         d5:7f:85:bd:cb:55:be:13:03:db:5f:f6:9e:fb:07:bb:ee:b6:
         c3:9a:63:21:30:5a:0a:ca:bd:46:c3:fe:6c:41:82:8c:84:4e:
         fa:13:9c:3b:bc:f0:bb:82:e9:61:89:88:d0:0e:39:5b:ed:ff:
         13:32:a2:d8:69:d8:1d:92:b4:a6:48:07:ab:4a:ba:af:ad:3b:
         88:f9:44:59:f3:87:0a:d3:73:9b:d9:bb:b7:08:04:f3:13:27:
         6a:4a:65:b9:68:ba:51:23:30:4c:05:2d:55:2c:01:7f:ae:37:
         53:15:66:ae:fc:06:fc:98:a9:b0:ab:1a:de:33:d8:f1:71:45:
         0f:f8:2b:1e:f0:da:b5:41:f1:84:78:64:27:18:f3:4c:47:c4:
         f4:d4:95:4f:25:3e:f3:7b:be:74:1a:dc:9b:38:85:3c:98:1a:
         01:5d:ab:16
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICIeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEI5MzYxMTAvBgNVBAUTKDcwNDVBNzE4QkJFQjI4OUYxOEQxRjkzMEZBMzMyRDYz
MzJEOTU1NUUwHhcNMjYwNzIyMTU1ODA5WhcNMjYwNzI5MTU1ODA5WjAYMRYwFAYD
VQQDEw02YTYwZTg5Mi05OTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0hsGALUFGxO+Dukjg/0vLBcfbXJ5ms6J87SwjS6J7QAVmwFb9UYKiPX6+7kT
KUhfCN1ReQxjY+zNNjNyE6iavBI1hzaNt1DIJHc1ioBDE2V+r1OiexZ9iCEAzb0C
Db4CQfpfNBdsiDVSFLxvLMiBHkaoUSZA4qlGcEa9AJgW3BNQwsy0j8HLFQcIakIq
AAteKn70SdshgpXDsHGoOxSkg8CNg+9/4jiMl5C63ODRixhoGwQ0UxV/tjdxqpv2
ccw3GarczWvmYzMoAIqUtZW3atRAKlSuxYOM2HOtMKti3ICsaQvQ9iifCcyHRc04
t4eWw5nrLiKcP0x3x+/QJPgGEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIKcJPiD
TEBzmL61tDM3m7qPhJBsMB8GA1UdIwQYMBaAFHBFpxi76yifGNH5MPozLWMy2VVe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjkzNi80MDc1MTIxQUYw
Q0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9jRVduR0x2cktKOFkwZmt3LWpNdFl6TFpW
VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2NFV25HTHZyS0o4WTBma3ctak10WXpMWlZWNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QjkzNi80MDc1MTIxQUYwQ0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9jRVduR0x2cktK
OFkwZmt3LWpNdFl6TFpWVjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb03Z1cgYQX5v+8RF68Y0VUcERjPTUOLMYRfRCf+SsQLkc+EAtJuRNVTjMG6r
E+g4JvSUsspjHUF4LJEQc7FmATEBNXVxMmEp/nEPUMJUmSrZeGv6NcAd2Khk1X+F
vctVvhMD21/2nvsHu+62w5pjITBaCsq9RsP+bEGCjIRO+hOcO7zwu4LpYYmI0A45
W+3/EzKi2GnYHZK0pkgHq0q6r607iPlEWfOHCtNzm9m7twgE8xMnakpluWi6USMw
TAUtVSwBf643UxVmrvwG/JipsKsa3jPY8XFFD/grHvDatUHxhHhkJxjzTEfE9NSV
TyU+83u+dBrcmziFPJgaAV2rFg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:59:36 2026 by rpki-client