Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
File:                     iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft (raw, json)
Hash identifier:          S79XRPQiNQ86m9fpwu1uN1whzc5dGA3NQbzOfXkzsLI=
Subject key identifier:   EA:31:1A:8F:61:12:49:2B:93:16:74:E1:04:9A:7D:87:D4:AA:64:B4
Authority key identifier: 88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93
Certificate issuer:       /CN=A919821D/serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993
Certificate serial:       01FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
Manifest number:          01F4
Signing time:             Thu 23 Jul 2026 04:35:00 +0000
Manifest this update:     Thu 23 Jul 2026 04:34:59 +0000
Manifest next update:     Thu 30 Jul 2026 04:34:59 +0000
Files and hashes:         1: iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl (hash: pwU8QYWM7UmkRkoHvo9rDA+76bw8tgfjQkV/8BnD4uw=)
                          2: 51D4585A89B211EE9ADA615EC4F9AE02.roa (hash: mMNzjo+KW1b2ntUt0cKXNQz80BGQiuXIwjeasUtwgcM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl
                          rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:34:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 506 (0x1fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919821D, serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993
        Validity
            Not Before: Jul 23 04:34:59 2026 GMT
            Not After : Jul 30 04:34:59 2026 GMT
        Subject: CN=6a6199f3-80bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:29:2c:12:a7:51:2f:43:cb:37:13:a2:1a:f3:
                    20:36:8c:76:f0:eb:44:c0:b4:24:0e:27:a8:00:d8:
                    88:85:be:c2:07:bb:30:cb:82:64:27:3d:9a:af:ab:
                    72:87:c7:49:06:88:ff:c8:40:8a:51:4e:79:7b:d7:
                    74:17:6e:5c:f9:76:cf:1f:74:0e:d2:f4:9c:ed:56:
                    fa:60:f3:19:1f:22:1c:b7:7f:61:76:14:82:8e:d2:
                    1a:c1:5e:16:e0:d1:b9:28:7e:74:2f:87:d5:23:b9:
                    36:6e:21:e3:9e:02:8c:b7:b5:b2:29:f3:bd:e0:4b:
                    2e:67:3e:2c:e5:5b:2c:17:15:f0:f5:02:0f:cf:da:
                    79:a4:b5:b9:63:75:ce:a3:17:06:ea:54:3c:6b:43:
                    ff:b4:bb:67:dd:2e:15:34:2a:f6:37:f4:e7:3e:ee:
                    80:c6:52:fa:1f:40:00:e0:5f:d4:f5:20:a1:36:1d:
                    47:a1:c9:90:d9:06:cf:0a:94:83:11:0a:f7:c7:f0:
                    24:db:e1:7b:55:13:36:dc:38:d9:b8:d9:9f:16:b9:
                    54:4d:67:09:8b:57:59:dd:5e:76:26:fc:18:c5:6e:
                    cc:f8:a8:bb:3b:47:b6:54:81:68:d7:51:d5:25:35:
                    56:50:ae:ae:25:8b:e3:7e:aa:48:54:3a:ef:7a:cd:
                    b4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:31:1A:8F:61:12:49:2B:93:16:74:E1:04:9A:7D:87:D4:AA:64:B4
            X509v3 Authority Key Identifier:
                keyid:88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:94:a5:c7:0a:8c:2f:ab:93:a3:dc:4d:b7:ee:a7:50:fa:67:
         59:03:af:b2:a0:6e:6d:a2:72:2d:c5:31:6d:db:ec:db:c6:f9:
         3c:74:23:eb:a9:10:21:b3:0f:ac:ab:a4:8e:9c:19:de:8e:f3:
         15:9f:03:e2:54:06:f7:22:d0:6c:2c:19:6a:bf:52:1e:0e:0d:
         3c:3c:e0:db:ad:fd:52:ef:78:78:91:47:61:09:d4:77:3c:0d:
         98:b0:94:8b:2b:16:b0:49:f1:1a:89:13:c4:65:ed:e7:a4:8e:
         15:65:40:89:ed:31:93:f8:32:20:e9:18:6d:83:1f:b7:a2:7e:
         34:59:11:b6:b2:8e:20:93:00:be:04:48:e6:84:93:8c:87:4b:
         2b:1a:bb:10:da:de:c7:ba:23:42:23:a0:38:6a:04:d9:ca:63:
         13:4e:78:ed:71:8e:6b:50:8d:9d:58:72:4e:71:85:59:74:3d:
         42:e1:5a:33:02:e0:9a:09:e8:d1:92:7b:9b:d1:18:94:2e:fb:
         c7:7c:4e:dd:56:00:d0:78:9f:ce:34:08:5c:7b:da:47:66:be:
         a3:73:33:ca:05:9d:96:e6:6c:4a:90:76:d4:63:e7:d3:89:5d:
         9e:3d:4d:b3:cf:c0:11:1a:af:d2:5a:4c:35:66:a9:ae:c3:7c:
         80:02:9b:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTgyMUQxMTAvBgNVBAUTKDg4QzE1NDREN0U2N0JDRDkxRDQ4REY1RDExRkNEMTAy
MUY4NTM5OTMwHhcNMjYwNzIzMDQzNDU5WhcNMjYwNzMwMDQzNDU5WjAYMRYwFAYD
VQQDEw02YTYxOTlmMy04MGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4SksEqdRL0PLNxOiGvMgNox28OtEwLQkDieoANiIhb7CB7swy4JkJz2ar6ty
h8dJBoj/yECKUU55e9d0F25c+XbPH3QO0vSc7Vb6YPMZHyIct39hdhSCjtIawV4W
4NG5KH50L4fVI7k2biHjngKMt7WyKfO94EsuZz4s5VssFxXw9QIPz9p5pLW5Y3XO
oxcG6lQ8a0P/tLtn3S4VNCr2N/TnPu6AxlL6H0AA4F/U9SChNh1HocmQ2QbPCpSD
EQr3x/Ak2+F7VRM23DjZuNmfFrlUTWcJi1dZ3V52JvwYxW7M+Ki7O0e2VIFo11HV
JTVWUK6uJYvjfqpIVDrves20fwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOoxGo9h
EkkrkxZ04QSafYfUqmS0MB8GA1UdIwQYMBaAFIjBVE1+Z7zZHUjfXRH80QIfhTmT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODIxRC9CMkEwNzRFRTg5
QjExMUVFOTg2Q0E2NUNDNEY5QUUwMi9pTUZVVFg1bnZOa2RTTjlkRWZ6UkFoLUZP
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lNRlVUWDVudk5rZFNOOWRFZnpSQWgtRk9aTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
ODIxRC9CMkEwNzRFRTg5QjExMUVFOTg2Q0E2NUNDNEY5QUUwMi9pTUZVVFg1bnZO
a2RTTjlkRWZ6UkFoLUZPWk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgpSlxwqML6uTo9xNt+6nUPpnWQOvsqBubaJyLcUxbdvs28b5PHQj66kQIbMP
rKukjpwZ3o7zFZ8D4lQG9yLQbCwZar9SHg4NPDzg2639Uu94eJFHYQnUdzwNmLCU
iysWsEnxGokTxGXt56SOFWVAie0xk/gyIOkYbYMft6J+NFkRtrKOIJMAvgRI5oST
jIdLKxq7ENrex7ojQiOgOGoE2cpjE0547XGOa1CNnVhyTnGFWXQ9QuFaMwLgmgno
0ZJ7m9EYlC77x3xO3VYA0HifzjQIXHvaR2a+o3MzygWdluZsSpB21GPn04ldnj1N
s8/AERqv0lpMNWaprsN8gAKbkw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:18 2026 by rpki-client