Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft
File:                     xw3ieKt3JtKco6jAJAeqW64S7Ao.mft (raw, json)
Hash identifier:          O0BTP4FnLh12fGojDPdsuc966ugWuTL01SB8zPapqiU=
Subject key identifier:   8F:A0:FA:1A:D6:B1:2D:7F:B1:63:05:B3:5F:F7:B9:DE:E0:92:27:3F
Authority key identifier: C7:0D:E2:78:AB:77:26:D2:9C:A3:A8:C0:24:07:AA:5B:AE:12:EC:0A
Certificate issuer:       /CN=A918D323/serialNumber=C70DE278AB7726D29CA3A8C02407AA5BAE12EC0A
Certificate serial:       01B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft
Manifest number:          01A6
Signing time:             Thu 23 Jul 2026 05:36:56 +0000
Manifest this update:     Thu 23 Jul 2026 05:36:56 +0000
Manifest next update:     Thu 30 Jul 2026 05:36:56 +0000
Files and hashes:         1: xw3ieKt3JtKco6jAJAeqW64S7Ao.crl (hash: qp+8ouzD/Fg7HsJKf88r6/hcgJGBAPtRyWEEL/09sFs=)
                          2: CC166DAC0A0811EFBE7E465EC4F9AE02.roa (hash: 6+bY61LdDlam0PC7GuKMwEXRvre/3cSdh3l+aLkv2pc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.crl
                          rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:36:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D323, serialNumber=C70DE278AB7726D29CA3A8C02407AA5BAE12EC0A
        Validity
            Not Before: Jul 23 05:36:56 2026 GMT
            Not After : Jul 30 05:36:56 2026 GMT
        Subject: CN=6a61a878-9f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3e:fb:59:ce:f6:2a:00:e0:67:79:3d:49:54:
                    64:59:a5:61:ac:17:c0:1b:e7:fb:b5:72:30:90:cc:
                    14:f1:ef:48:06:ce:e6:e2:7d:b1:7f:54:47:31:09:
                    b1:57:d4:c5:66:ad:4c:7d:8e:dc:6e:52:38:79:57:
                    65:68:be:4a:cc:97:b7:eb:7c:54:6a:d7:cb:91:66:
                    ec:15:d3:92:a8:e1:01:0e:26:92:88:ee:4f:9c:6f:
                    8c:64:48:cb:ac:8b:23:d3:22:24:ab:64:73:04:e0:
                    1e:b7:ef:2c:63:20:2b:e3:c7:bc:ef:92:82:90:69:
                    e4:ed:66:4f:99:f7:7a:8a:18:c8:fc:cc:57:1a:5e:
                    9a:49:e1:e0:f4:b0:22:06:1b:0d:a6:e5:24:f9:9f:
                    20:9d:3b:d6:53:31:b1:34:9f:c4:5b:4d:97:60:88:
                    3e:7d:4a:c2:fe:35:dd:f1:66:f8:e0:d3:44:6f:95:
                    a8:4e:5c:a2:46:82:06:5d:5c:18:f9:19:c4:22:85:
                    37:84:c0:23:82:4d:08:57:44:92:71:0a:39:dd:7f:
                    aa:7e:d5:d0:b2:cf:dc:91:36:20:45:5b:a1:aa:d8:
                    8e:ef:38:bb:7c:16:bf:ab:3d:ae:19:ad:66:cb:7d:
                    f6:43:33:dd:55:9b:5a:a1:3d:c6:0b:a5:71:f9:a0:
                    8f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A0:FA:1A:D6:B1:2D:7F:B1:63:05:B3:5F:F7:B9:DE:E0:92:27:3F
            X509v3 Authority Key Identifier:
                keyid:C7:0D:E2:78:AB:77:26:D2:9C:A3:A8:C0:24:07:AA:5B:AE:12:EC:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:95:e0:fd:32:85:b2:be:84:17:e3:cc:96:bf:db:77:b3:14:
         78:eb:b7:45:04:d4:6d:31:71:6d:a5:aa:41:ca:9f:42:56:08:
         07:77:b0:38:a4:0b:0d:49:c5:1f:f7:4a:75:76:3b:a7:2d:56:
         20:c8:3a:e1:b3:f9:ca:99:4a:bd:8a:b8:08:93:fa:79:99:8f:
         00:3f:02:24:14:9e:60:2f:c1:81:40:21:cc:8a:35:f0:b0:a3:
         a0:90:66:7f:2c:8d:fb:24:1b:cc:a2:45:46:0c:f5:0e:b0:e2:
         94:04:4c:df:0f:00:b5:6e:c1:f9:b3:1f:3c:13:52:45:98:97:
         fc:9c:22:65:62:da:9d:c9:9b:fe:99:8b:e4:db:9f:6d:ca:c1:
         f2:1d:48:5a:8b:e1:b7:14:06:e6:f7:3a:be:c0:2e:92:ef:e4:
         d3:9f:2e:c2:d4:9e:5f:f7:8f:d7:3f:2e:93:de:8d:fa:50:58:
         5b:e5:f0:53:f8:78:9b:8c:df:6b:b1:54:3e:26:ce:bd:1c:46:
         20:74:82:bd:3b:33:9f:21:08:9a:c7:98:f0:c8:2d:bf:c5:03:
         e3:b3:76:60:35:19:61:c9:09:08:07:bc:64:0f:0f:1f:19:70:
         ef:a2:fb:6a:c4:17:f4:9e:c3:87:bb:31:b7:4d:08:ed:2d:45:
         2d:9c:1a:c9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQzMjMxMTAvBgNVBAUTKEM3MERFMjc4QUI3NzI2RDI5Q0EzQThDMDI0MDdBQTVC
QUUxMkVDMEEwHhcNMjYwNzIzMDUzNjU2WhcNMjYwNzMwMDUzNjU2WjAYMRYwFAYD
VQQDEw02YTYxYTg3OC05ZjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1T77Wc72KgDgZ3k9SVRkWaVhrBfAG+f7tXIwkMwU8e9IBs7m4n2xf1RHMQmx
V9TFZq1MfY7cblI4eVdlaL5KzJe363xUatfLkWbsFdOSqOEBDiaSiO5PnG+MZEjL
rIsj0yIkq2RzBOAet+8sYyAr48e875KCkGnk7WZPmfd6ihjI/MxXGl6aSeHg9LAi
BhsNpuUk+Z8gnTvWUzGxNJ/EW02XYIg+fUrC/jXd8Wb44NNEb5WoTlyiRoIGXVwY
+RnEIoU3hMAjgk0IV0SScQo53X+qftXQss/ckTYgRVuhqtiO7zi7fBa/qz2uGa1m
y332QzPdVZtaoT3GC6Vx+aCPhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI+g+hrW
sS1/sWMFs1/3ud7gkic/MB8GA1UdIwQYMBaAFMcN4nirdybSnKOowCQHqluuEuwK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDMyMy8yMjBBMUZEODA5
RUIxMUVGQkM0RDE1MzRDNEY5QUUwMi94dzNpZUt0M0p0S2NvNmpBSkFlcVc2NFM3
QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h3M2llS3QzSnRLY282akFKQWVxVzY0UzdBby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDMyMy8yMjBBMUZEODA5RUIxMUVGQkM0RDE1MzRDNEY5QUUwMi94dzNpZUt0M0p0
S2NvNmpBSkFlcVc2NFM3QW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUZXg/TKFsr6EF+PMlr/bd7MUeOu3RQTUbTFxbaWqQcqfQlYIB3ewOKQLDUnF
H/dKdXY7py1WIMg64bP5yplKvYq4CJP6eZmPAD8CJBSeYC/BgUAhzIo18LCjoJBm
fyyN+yQbzKJFRgz1DrDilARM3w8AtW7B+bMfPBNSRZiX/JwiZWLancmb/pmL5Nuf
bcrB8h1IWovhtxQG5vc6vsAuku/k058uwtSeX/eP1z8uk96N+lBYW+XwU/h4m4zf
a7FUPibOvRxGIHSCvTsznyEImseY8Mgtv8UD47N2YDUZYckJCAe8ZA8PHxlw76L7
asQX9J7Dh7sxt00I7S1FLZwayQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:55:43 2026 by rpki-client