Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft
File:                     UnWd41wCZ5226TLqiGidwQ1czK4.mft (raw, json)
Hash identifier:          Wa4ghGzchguw3QvMja6zhaurn3RJDLKmWQgMPSy6j5U=
Subject key identifier:   61:6D:C9:45:BB:43:EF:57:ED:3B:46:40:D2:34:1A:E5:81:B0:EB:2E
Authority key identifier: 52:75:9D:E3:5C:02:67:9D:B6:E9:32:EA:88:68:9D:C1:0D:5C:CC:AE
Certificate issuer:       /CN=A919014C/serialNumber=52759DE35C02679DB6E932EA88689DC10D5CCCAE
Certificate serial:       021D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft
Manifest number:          0217
Signing time:             Thu 23 Jul 2026 04:09:26 +0000
Manifest this update:     Thu 23 Jul 2026 04:09:25 +0000
Manifest next update:     Thu 30 Jul 2026 04:09:25 +0000
Files and hashes:         1: UnWd41wCZ5226TLqiGidwQ1czK4.crl (hash: kBPgqrYiGwADuiiXvP2dDeRNkmnBHAaRlB28Yy0X3ow=)
                          2: 503DC7FA547F11EE9512EE75C4F9AE02.roa (hash: 9NOvh4xlPVRSfSWTuNbA/nSCtcSOmekA1WPpJANxarM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.crl
                          rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:09:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919014C, serialNumber=52759DE35C02679DB6E932EA88689DC10D5CCCAE
        Validity
            Not Before: Jul 23 04:09:25 2026 GMT
            Not After : Jul 30 04:09:25 2026 GMT
        Subject: CN=6a6193f6-57a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d5:fe:a4:a1:c1:cb:a9:99:43:e3:8b:8a:27:
                    74:71:6c:fc:3c:7a:00:d6:7d:3d:72:4b:de:12:ea:
                    86:dc:9f:68:28:9a:24:b9:2e:0e:e5:39:7b:72:3a:
                    07:2e:af:eb:40:ca:86:df:18:fa:53:db:7b:a0:db:
                    a1:f8:0d:c3:8b:8a:ba:dc:44:b5:26:62:4e:e8:6d:
                    3e:30:84:48:7e:0d:94:01:0b:4e:0e:df:b3:e0:77:
                    7c:16:3a:dd:03:97:49:55:19:6a:b6:61:d4:46:86:
                    1a:a7:e0:3d:f2:a9:e8:43:ec:84:42:ce:00:58:1f:
                    d7:2e:9e:eb:7d:1e:8c:88:40:12:96:f7:dc:2c:33:
                    43:bb:03:80:1e:1b:11:71:07:82:69:67:80:4a:3f:
                    10:04:45:7c:24:f7:17:52:c5:77:56:ec:19:b9:59:
                    6d:b2:20:7b:58:36:72:61:7b:4b:c8:46:1b:35:f7:
                    0f:ba:41:64:c1:6f:a2:56:c0:41:2b:c7:70:87:77:
                    b7:86:31:78:60:09:92:4c:ab:15:35:f2:89:80:ab:
                    33:22:e8:bd:4d:ca:5a:04:08:81:63:ad:80:7c:8f:
                    cf:4a:b8:b7:29:e8:6d:40:b1:0a:2a:97:5b:a0:23:
                    41:23:1b:c5:50:91:0c:af:85:02:29:0d:79:78:15:
                    47:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6D:C9:45:BB:43:EF:57:ED:3B:46:40:D2:34:1A:E5:81:B0:EB:2E
            X509v3 Authority Key Identifier:
                keyid:52:75:9D:E3:5C:02:67:9D:B6:E9:32:EA:88:68:9D:C1:0D:5C:CC:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UnWd41wCZ5226TLqiGidwQ1czK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919014C/154FAC2C547E11EE8E710074C4F9AE02/UnWd41wCZ5226TLqiGidwQ1czK4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:21:29:93:9c:84:51:e5:9f:d9:5e:65:53:7b:eb:0f:7f:98:
         cf:2c:41:60:32:5b:35:8a:9e:3e:e6:10:85:3e:1a:ed:f0:12:
         cf:6e:0e:74:9d:19:a2:5f:af:e2:13:eb:1a:1e:dd:32:ac:05:
         34:73:e9:ce:e2:7e:06:18:15:21:85:f5:6d:0e:33:97:9d:47:
         50:70:57:15:57:13:87:40:5d:73:eb:b7:90:17:9d:52:ef:50:
         c5:69:03:0b:62:97:8b:36:d5:87:94:7f:e8:2b:7b:30:d1:b3:
         4a:d3:ff:a7:61:41:39:99:5b:17:ea:4c:20:bb:48:3c:04:9a:
         50:24:c2:37:75:e6:a2:0f:92:e9:44:1f:a7:a3:9b:8d:f6:46:
         c0:8f:dd:4d:f0:f8:a7:54:0f:8c:13:f3:fc:72:96:af:a7:26:
         db:a1:30:2e:bf:3f:79:de:d9:18:b7:a5:c0:53:63:8c:32:7f:
         31:39:72:e4:81:d0:99:3f:a8:c7:38:8f:7a:7c:df:c8:28:6c:
         c0:e0:95:a7:8e:29:ff:6a:c9:21:7a:22:fd:8e:06:f5:aa:a5:
         01:62:f3:2c:c2:6e:32:7d:b0:9e:79:ba:ed:8c:c7:8d:84:63:
         3f:ec:9a:98:54:b2:15:f5:34:44:83:35:dd:7f:aa:98:9d:ea:
         4a:e1:a8:49
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTAxNEMxMTAvBgNVBAUTKDUyNzU5REUzNUMwMjY3OURCNkU5MzJFQTg4Njg5REMx
MEQ1Q0NDQUUwHhcNMjYwNzIzMDQwOTI1WhcNMjYwNzMwMDQwOTI1WjAYMRYwFAYD
VQQDEw02YTYxOTNmNi01N2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAytX+pKHBy6mZQ+OLiid0cWz8PHoA1n09ckveEuqG3J9oKJokuS4O5Tl7cjoH
Lq/rQMqG3xj6U9t7oNuh+A3Di4q63ES1JmJO6G0+MIRIfg2UAQtODt+z4Hd8Fjrd
A5dJVRlqtmHURoYap+A98qnoQ+yEQs4AWB/XLp7rfR6MiEASlvfcLDNDuwOAHhsR
cQeCaWeASj8QBEV8JPcXUsV3VuwZuVltsiB7WDZyYXtLyEYbNfcPukFkwW+iVsBB
K8dwh3e3hjF4YAmSTKsVNfKJgKszIui9TcpaBAiBY62AfI/PSri3KehtQLEKKpdb
oCNBIxvFUJEMr4UCKQ15eBVHtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGFtyUW7
Q+9X7TtGQNI0GuWBsOsuMB8GA1UdIwQYMBaAFFJ1neNcAmedtuky6ohoncENXMyu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDE0Qy8xNTRGQUMyQzU0
N0UxMUVFOEU3MTAwNzRDNEY5QUUwMi9VbldkNDF3Q1o1MjI2VExxaUdpZHdRMWN6
SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VuV2Q0MXdDWjUyMjZUTHFpR2lkd1ExY3pLNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MDE0Qy8xNTRGQUMyQzU0N0UxMUVFOEU3MTAwNzRDNEY5QUUwMi9VbldkNDF3Q1o1
MjI2VExxaUdpZHdRMWN6SzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgiEpk5yEUeWf2V5lU3vrD3+YzyxBYDJbNYqePuYQhT4a7fASz24OdJ0Zol+v
4hPrGh7dMqwFNHPpzuJ+BhgVIYX1bQ4zl51HUHBXFVcTh0Bdc+u3kBedUu9QxWkD
C2KXizbVh5R/6Ct7MNGzStP/p2FBOZlbF+pMILtIPASaUCTCN3Xmog+S6UQfp6Ob
jfZGwI/dTfD4p1QPjBPz/HKWr6cm26EwLr8/ed7ZGLelwFNjjDJ/MTly5IHQmT+o
xziPenzfyChswOCVp44p/2rJIXoi/Y4G9aqlAWLzLMJuMn2wnnm67YzHjYRjP+ya
mFSyFfU0RIM13X+qmJ3qSuGoSQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:20:53 2026 by rpki-client