Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
File:                     MsmO2NT8cwga_uVSIcRCR1xNzDA.mft (raw, json)
Hash identifier:          UF0LLypFZ7MWdV4/enloSoxnUwHUdGJCH5UkoreP1Yk=
Subject key identifier:   0D:BF:D4:0F:29:17:86:68:66:FA:C3:D2:09:28:C1:1B:DC:2B:60:0A
Authority key identifier: 32:C9:8E:D8:D4:FC:73:08:1A:FE:E5:52:21:C4:42:47:5C:4D:CC:30
Certificate issuer:       /CN=A9199606/serialNumber=32C98ED8D4FC73081AFEE55221C442475C4DCC30
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
Manifest number:          67
Signing time:             Thu 23 Jul 2026 09:55:39 +0000
Manifest this update:     Thu 23 Jul 2026 09:55:39 +0000
Manifest next update:     Thu 30 Jul 2026 09:55:39 +0000
Files and hashes:         1: MsmO2NT8cwga_uVSIcRCR1xNzDA.crl (hash: MKpG2quM7OcFm1R22yloMc2yIoU+qYR89DOykNlWTMQ=)
                          2: 41A28B42EBB111F0AF3889F3606F56BC.roa (hash: sYeLNL3T3Y0IoxBgp4l6jxzmh3sw3CZxXvB5Mj0h7DA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.crl
                          rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199606, serialNumber=32C98ED8D4FC73081AFEE55221C442475C4DCC30
        Validity
            Not Before: Jul 23 09:55:39 2026 GMT
            Not After : Jul 30 09:55:39 2026 GMT
        Subject: CN=6a61e51b-f43c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:64:86:b4:de:0b:45:d6:88:7a:e5:3f:8e:15:
                    e3:5b:b0:02:35:86:9e:64:ce:4b:15:a0:70:fe:3a:
                    65:ef:ff:15:ff:49:08:dd:40:ff:da:8c:81:18:f0:
                    81:00:2b:bc:6a:b6:f5:2c:be:5e:9a:58:cf:43:ab:
                    42:34:f2:dc:3e:72:96:dd:e4:cd:44:ff:af:1c:88:
                    18:0b:73:49:4e:1e:f4:b1:83:ed:a3:52:62:2f:e0:
                    2d:18:4a:51:e1:da:15:6f:01:bd:32:e2:0c:15:77:
                    11:fd:27:8c:de:72:42:8a:9e:f2:ec:2b:2a:0d:82:
                    14:5f:f0:6e:a7:a6:80:23:62:86:df:4e:ce:31:7b:
                    86:9f:56:d1:5d:84:6b:0f:f9:0e:a9:a3:8f:c3:80:
                    29:88:a8:cb:22:71:02:83:e1:f2:c4:f0:f7:24:09:
                    9e:f1:1a:5b:52:9e:3f:d9:62:9b:bc:19:f1:ae:33:
                    8a:84:d2:f3:1b:a8:7c:0a:f6:77:d6:4b:35:48:25:
                    5e:69:33:04:36:e2:b6:7b:99:3f:56:17:29:40:07:
                    fa:7b:14:03:5a:27:2d:ce:6a:ed:b5:75:a2:c9:52:
                    59:55:1b:01:49:ff:22:d9:18:36:24:b0:ad:7a:0e:
                    72:a0:43:b0:33:01:9c:bb:ce:32:24:5c:d7:da:66:
                    d9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:BF:D4:0F:29:17:86:68:66:FA:C3:D2:09:28:C1:1B:DC:2B:60:0A
            X509v3 Authority Key Identifier:
                keyid:32:C9:8E:D8:D4:FC:73:08:1A:FE:E5:52:21:C4:42:47:5C:4D:CC:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsmO2NT8cwga_uVSIcRCR1xNzDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199606/F7782478EBB011F089216E7C606F56BC/MsmO2NT8cwga_uVSIcRCR1xNzDA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:a6:f1:ef:92:47:ca:8c:6c:bc:df:23:0a:1c:a0:61:b8:10:
         ae:4b:bd:ab:41:6b:7f:cc:2e:ff:e6:50:e5:f0:e6:9b:2f:4a:
         09:03:60:43:9e:98:0d:97:c8:67:bc:ac:6b:f2:5c:83:a3:02:
         92:48:a2:46:87:29:6c:dc:d3:8a:32:69:a3:bd:ff:70:3d:fa:
         5f:19:52:68:0e:d9:40:e8:40:cf:45:fa:6a:d8:e3:33:0e:12:
         2a:98:a3:eb:b1:34:9a:ff:15:bd:9a:21:32:2c:a5:26:83:33:
         fb:53:d1:28:d5:83:1d:10:29:d7:83:ed:67:07:b6:7d:66:0b:
         1a:65:36:5c:83:a4:d5:07:76:08:51:36:fc:87:6a:79:97:ef:
         67:be:35:52:38:66:f7:8d:56:6a:b2:eb:cd:2c:83:16:77:58:
         b6:e5:4b:ea:c5:ae:af:01:ba:73:16:6b:2c:63:c2:c7:85:61:
         d8:55:e1:b6:1f:e8:04:6f:cd:b7:85:a4:fe:73:4b:fa:93:e6:
         73:60:9a:02:7b:cb:ec:38:99:35:77:09:c1:cb:73:49:29:5c:
         e4:f5:d1:9e:19:44:8b:bb:32:fc:20:fb:cb:69:54:35:46:4a:
         ed:bb:0a:48:15:fe:2d:56:e2:e5:11:9a:7f:9f:3e:60:6c:9e:
         4d:42:b7:4b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
OTYwNjExMC8GA1UEBRMoMzJDOThFRDhENEZDNzMwODFBRkVFNTUyMjFDNDQyNDc1
QzREQ0MzMDAeFw0yNjA3MjMwOTU1MzlaFw0yNjA3MzAwOTU1MzlaMBgxFjAUBgNV
BAMTDTZhNjFlNTFiLWY0M2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD5ZIa03gtF1oh65T+OFeNbsAI1hp5kzksVoHD+OmXv/xX/SQjdQP/ajIEY8IEA
K7xqtvUsvl6aWM9Dq0I08tw+cpbd5M1E/68ciBgLc0lOHvSxg+2jUmIv4C0YSlHh
2hVvAb0y4gwVdxH9J4zeckKKnvLsKyoNghRf8G6npoAjYobfTs4xe4afVtFdhGsP
+Q6po4/DgCmIqMsicQKD4fLE8PckCZ7xGltSnj/ZYpu8GfGuM4qE0vMbqHwK9nfW
SzVIJV5pMwQ24rZ7mT9WFylAB/p7FANaJy3Oau21daLJUllVGwFJ/yLZGDYksK16
DnKgQ7AzAZy7zjIkXNfaZtk1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDb/UDykX
hmhm+sPSCSjBG9wrYAowHwYDVR0jBBgwFoAUMsmO2NT8cwga/uVSIcRCR1xNzDAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5NjA2L0Y3NzgyNDc4RUJC
MDExRjA4OTIxNkU3QzYwNkY1NkJDL01zbU8yTlQ4Y3dnYV91VlNJY1JDUjF4TnpE
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvTXNtTzJOVDhjd2dhX3VWU0ljUkNSMXhOekRBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5
NjA2L0Y3NzgyNDc4RUJCMDExRjA4OTIxNkU3QzYwNkY1NkJDL01zbU8yTlQ4Y3dn
YV91VlNJY1JDUjF4TnpEQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCkpvHvkkfKjGy83yMKHKBhuBCuS72rQWt/zC7/5lDl8OabL0oJA2BDnpgNl8hn
vKxr8lyDowKSSKJGhyls3NOKMmmjvf9wPfpfGVJoDtlA6EDPRfpq2OMzDhIqmKPr
sTSa/xW9miEyLKUmgzP7U9Eo1YMdECnXg+1nB7Z9ZgsaZTZcg6TVB3YIUTb8h2p5
l+9nvjVSOGb3jVZqsuvNLIMWd1i25Uvqxa6vAbpzFmssY8LHhWHYVeG2H+gEb823
haT+c0v6k+ZzYJoCe8vsOJk1dwnBy3NJKVzk9dGeGUSLuzL8IPvLaVQ1RkrtuwpI
Ff4tVuLlEZp/nz5gbJ5NQrdL
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:12:57 2026 by rpki-client