Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
File:                     EItwxYRvnQdVxcbbmN0maEDgWmU.mft (raw, json)
Hash identifier:          cpzvHO/6UJI49RRqf9n/1cRUq4WAK4BsnG/s99Kcaf4=
Subject key identifier:   1C:6E:0B:1C:3D:76:66:3C:01:97:43:EE:36:F4:29:42:BC:92:29:6B
Authority key identifier: 10:8B:70:C5:84:6F:9D:07:55:C5:C6:DB:98:DD:26:68:40:E0:5A:65
Certificate issuer:       /CN=A918FE64/serialNumber=108B70C5846F9D0755C5C6DB98DD266840E05A65
Certificate serial:       1B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
Manifest number:          1A
Signing time:             Thu 23 Jul 2026 11:01:11 +0000
Manifest this update:     Thu 23 Jul 2026 11:01:09 +0000
Manifest next update:     Thu 30 Jul 2026 11:01:09 +0000
Files and hashes:         1: EItwxYRvnQdVxcbbmN0maEDgWmU.crl (hash: VZybtkopMf9t2/RTByzHwKjUtgWu9Cwo/EQbS+m4vJc=)
                          2: A8DB81885E3911F1AE025C80017AAC22.roa (hash: iqMAWetYjvjnn5VbOnaERsf5lh+EVkjU6KxJWxQvoqc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.crl
                          rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FE64, serialNumber=108B70C5846F9D0755C5C6DB98DD266840E05A65
        Validity
            Not Before: Jul 23 11:01:09 2026 GMT
            Not After : Jul 30 11:01:09 2026 GMT
        Subject: CN=6a61f476-ec72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a9:fc:4d:d7:41:56:8d:c8:cd:9f:21:59:eb:
                    06:0e:37:b7:c2:a1:7e:07:a7:c6:5e:c3:da:a4:1e:
                    fa:7e:fb:9f:71:db:68:bc:66:de:64:c5:e2:35:bf:
                    c7:42:97:9e:e2:02:a8:a9:55:6e:16:b1:db:78:56:
                    e1:21:9d:18:7d:db:71:15:07:09:8e:66:e2:87:b8:
                    17:69:60:f0:4b:8d:8e:b1:44:c1:d8:4e:ac:f4:21:
                    d3:af:aa:51:2c:58:8a:17:1c:e6:af:7f:9f:ff:53:
                    45:80:86:0c:0a:b4:5b:d1:24:e7:d9:62:c9:4c:91:
                    73:93:7f:f7:e0:c9:3c:9c:e1:31:e6:e1:53:9e:d9:
                    42:0d:c8:76:b2:ae:d2:43:52:28:49:eb:70:4f:76:
                    48:35:8e:8f:6a:ce:36:ca:38:e7:18:53:34:ed:10:
                    77:e5:5b:eb:b1:df:19:00:2a:17:8f:02:70:51:b9:
                    92:6e:64:c9:73:8f:bb:f4:f6:69:21:72:24:00:4a:
                    42:36:9f:c9:0e:09:c0:21:60:3d:62:d1:ea:e4:ac:
                    e2:dd:8a:35:65:f7:b0:50:93:25:21:0d:4d:1f:88:
                    97:f8:a2:69:e3:1e:ac:32:a4:e4:85:6b:90:49:50:
                    42:bd:e7:b1:12:c4:23:af:04:06:1d:e0:f9:ef:10:
                    95:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:6E:0B:1C:3D:76:66:3C:01:97:43:EE:36:F4:29:42:BC:92:29:6B
            X509v3 Authority Key Identifier:
                keyid:10:8B:70:C5:84:6F:9D:07:55:C5:C6:DB:98:DD:26:68:40:E0:5A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:48:c9:1f:95:c4:4b:5f:43:d3:46:ea:c9:8e:c7:73:cd:af:
         6e:ef:c1:ed:08:b8:de:2d:44:fb:96:46:a3:1c:6e:52:de:87:
         5e:41:41:b2:03:9f:7f:30:c6:94:95:90:01:c3:eb:85:46:1e:
         28:99:12:29:cd:00:e6:98:00:54:a8:e5:66:b7:58:98:9b:c5:
         73:f4:0b:69:b3:35:41:3c:1a:d5:69:d9:34:2f:e9:36:d5:6f:
         a3:b5:55:61:66:9a:57:0b:d0:03:62:df:33:84:a7:aa:f1:4c:
         26:76:82:49:fb:9c:38:3e:39:e4:40:9a:1f:01:05:a5:7d:1a:
         28:0d:70:47:af:6a:ed:31:a2:ee:29:5c:bb:3e:fd:a3:3c:24:
         d7:39:35:ec:16:29:66:df:31:d5:3f:46:6b:7a:5c:0b:69:8a:
         54:27:dd:fd:22:83:7b:2e:ba:52:9e:5a:bf:83:09:aa:92:f4:
         63:a5:16:0b:3c:02:59:e8:29:ba:c1:65:ca:ff:01:6b:11:b3:
         39:3d:9b:27:e7:87:ea:ac:ee:20:6d:8b:e2:38:67:48:4c:95:
         e6:c8:5b:ee:a3:37:43:f3:62:ca:68:ef:c5:22:29:8d:58:91:
         ec:60:4b:5c:9b:48:60:be:53:93:8d:0f:b2:6b:ae:b5:c8:9d:
         04:ab:8d:e3
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
RkU2NDExMC8GA1UEBRMoMTA4QjcwQzU4NDZGOUQwNzU1QzVDNkRCOThERDI2Njg0
MEUwNUE2NTAeFw0yNjA3MjMxMTAxMDlaFw0yNjA3MzAxMTAxMDlaMBgxFjAUBgNV
BAMTDTZhNjFmNDc2LWVjNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC6qfxN10FWjcjNnyFZ6wYON7fCoX4Hp8Zew9qkHvp++59x22i8Zt5kxeI1v8dC
l57iAqipVW4Wsdt4VuEhnRh923EVBwmOZuKHuBdpYPBLjY6xRMHYTqz0IdOvqlEs
WIoXHOavf5//U0WAhgwKtFvRJOfZYslMkXOTf/fgyTyc4THm4VOe2UINyHayrtJD
UihJ63BPdkg1jo9qzjbKOOcYUzTtEHflW+ux3xkAKhePAnBRuZJuZMlzj7v09mkh
ciQASkI2n8kOCcAhYD1i0erkrOLdijVl97BQkyUhDU0fiJf4omnjHqwypOSFa5BJ
UEK957ESxCOvBAYd4PnvEJU9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHG4LHD12
ZjwBl0PuNvQpQrySKWswHwYDVR0jBBgwFoAUEItwxYRvnQdVxcbbmN0maEDgWmUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGRTY0LzBDRUFGNjgyNUUz
OTExRjFCMTA0OTlDRjAwN0FBQzIyL0VJdHd4WVJ2blFkVnhjYmJtTjBtYUVEZ1dt
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvRUl0d3hZUnZuUWRWeGNiYm1OMG1hRURnV21VLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG
RTY0LzBDRUFGNjgyNUUzOTExRjFCMTA0OTlDRjAwN0FBQzIyL0VJdHd4WVJ2blFk
VnhjYmJtTjBtYUVEZ1dtVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAWSMkflcRLX0PTRurJjsdzza9u78HtCLjeLUT7lkajHG5S3odeQUGyA59/MMaU
lZABw+uFRh4omRIpzQDmmABUqOVmt1iYm8Vz9AtpszVBPBrVadk0L+k21W+jtVVh
ZppXC9ADYt8zhKeq8UwmdoJJ+5w4PjnkQJofAQWlfRooDXBHr2rtMaLuKVy7Pv2j
PCTXOTXsFilm3zHVP0ZrelwLaYpUJ939IoN7LrpSnlq/gwmqkvRjpRYLPAJZ6Cm6
wWXK/wFrEbM5PZsn54fqrO4gbYviOGdITJXmyFvuozdD82LKaO/FIimNWJHsYEtc
m0hgvlOTjQ+ya661yJ0Eq43j
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:59 2026 by rpki-client