Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CD86/88E4D8503F8211F1B898E551B0833773/-mAalrTnqFTJ8SflGdb-adTWa2Q.mft
File:                     -mAalrTnqFTJ8SflGdb-adTWa2Q.mft (raw, json)
Hash identifier:          /FhRNw5J9EesIoZI9q5/f7ufY0mg5BQgQQ3B9+kHt2g=
Subject key identifier:   33:86:EA:37:88:D6:70:16:8A:BD:B3:1E:CA:49:56:AD:29:A4:A0:A9
Authority key identifier: FA:60:1A:96:B4:E7:A8:54:C9:F1:27:E5:19:D6:FE:69:D4:D6:6B:64
Certificate issuer:       /CN=A919CD86/serialNumber=FA601A96B4E7A854C9F127E519D6FE69D4D66B64
Certificate serial:       30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mAalrTnqFTJ8SflGdb-adTWa2Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CD86/88E4D8503F8211F1B898E551B0833773/-mAalrTnqFTJ8SflGdb-adTWa2Q.mft
Manifest number:          2F
Signing time:             Thu 23 Jul 2026 10:23:22 +0000
Manifest this update:     Thu 23 Jul 2026 10:23:22 +0000
Manifest next update:     Thu 30 Jul 2026 10:23:22 +0000
Files and hashes:         1: -mAalrTnqFTJ8SflGdb-adTWa2Q.crl (hash: iULEHM4czYfu2/QpTRHxTX0TmpDgnMa9kUKS66eli5k=)
                          2: 90D7D3723F8311F18CBDD8DAB0833773.roa (hash: P6a6wR+MfhCWdAFG07wpqZk3513aDze1znpd7LlZfvk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CD86/88E4D8503F8211F1B898E551B0833773/-mAalrTnqFTJ8SflGdb-adTWa2Q.crl
                          rsync://rpki.apnic.net/member_repository/A919CD86/88E4D8503F8211F1B898E551B0833773/-mAalrTnqFTJ8SflGdb-adTWa2Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mAalrTnqFTJ8SflGdb-adTWa2Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:23:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CD86, serialNumber=FA601A96B4E7A854C9F127E519D6FE69D4D66B64
        Validity
            Not Before: Jul 23 10:23:22 2026 GMT
            Not After : Jul 30 10:23:22 2026 GMT
        Subject: CN=6a61eb9a-06fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:81:dd:04:7b:57:02:55:3d:fa:64:8c:03:e1:
                    d1:0d:81:ab:73:31:30:86:ac:5e:03:7d:ad:b4:9e:
                    20:da:12:02:24:e8:1e:3d:29:9d:bc:35:e9:9e:01:
                    77:48:ae:e1:79:af:24:7d:29:a8:d0:b5:82:a2:fb:
                    ab:75:80:92:13:27:37:cb:fe:ed:14:31:ac:4e:1e:
                    9f:b4:8c:30:16:50:73:3c:5a:8f:6a:fc:8c:33:1a:
                    5c:e2:f6:d8:d0:98:86:5e:c4:2f:33:4e:87:42:a7:
                    a0:07:07:58:24:ce:2e:ae:4d:e4:a0:8c:a4:c6:54:
                    c5:b8:25:b6:53:0a:e8:42:b5:48:1f:47:fc:c0:e6:
                    0a:4c:de:36:0e:12:7f:40:ab:e8:67:9c:99:a0:3c:
                    ff:e2:e1:6e:15:13:eb:03:89:b0:56:8b:5e:1e:bf:
                    cb:e1:68:85:cf:9c:cb:a2:84:36:56:89:c6:27:75:
                    b2:b2:88:9f:c0:51:8c:12:9c:33:6f:c1:27:58:8f:
                    a2:00:31:e1:5a:71:1e:ca:8b:cb:49:90:06:66:83:
                    91:d8:ca:30:d2:60:b0:80:e8:f4:9f:4b:fd:a5:f7:
                    20:47:72:ef:ea:2a:f1:eb:af:c5:d6:cd:fb:7d:c9:
                    6a:86:99:b6:d0:f3:e0:90:6a:dd:a3:7c:ff:e9:17:
                    7f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:86:EA:37:88:D6:70:16:8A:BD:B3:1E:CA:49:56:AD:29:A4:A0:A9
            X509v3 Authority Key Identifier:
                keyid:FA:60:1A:96:B4:E7:A8:54:C9:F1:27:E5:19:D6:FE:69:D4:D6:6B:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CD86/88E4D8503F8211F1B898E551B0833773/-mAalrTnqFTJ8SflGdb-adTWa2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mAalrTnqFTJ8SflGdb-adTWa2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CD86/88E4D8503F8211F1B898E551B0833773/-mAalrTnqFTJ8SflGdb-adTWa2Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:f0:67:16:c6:7b:ba:ce:be:b6:2c:6e:3e:10:de:22:51:43:
         e8:44:5a:c0:ad:22:4f:99:11:21:49:8d:51:e9:5b:da:5c:10:
         d2:02:0e:bf:20:d4:0f:84:68:7a:80:ad:24:eb:18:38:ff:d9:
         ee:f3:75:40:df:fc:49:19:9f:9a:b9:a8:ae:38:75:5e:4e:9e:
         e7:33:49:76:57:59:f2:86:d0:6a:f9:f8:66:f6:aa:2c:3a:b1:
         f7:64:11:12:ee:f0:53:33:f7:56:62:26:25:c7:1c:6c:29:1f:
         3c:f3:61:e1:cf:a7:13:4b:86:5a:72:73:d1:88:53:df:ec:02:
         f3:cc:29:3e:4c:1e:d7:6f:67:99:84:5c:c5:f7:b6:eb:2b:ec:
         7b:92:9b:f8:32:71:09:e1:75:a1:32:55:56:6f:8e:6d:33:74:
         08:d8:1d:84:8b:51:78:b9:cc:5f:3d:25:7c:1d:c3:7a:ff:e9:
         92:4e:c7:80:67:f5:9b:e0:d6:5c:b4:83:72:96:ba:43:64:89:
         be:23:93:16:e2:4e:d3:3a:8a:e0:b0:71:c9:04:67:f2:71:4f:
         39:7a:a8:28:3a:0e:47:90:a0:6a:b8:d8:8b:ac:55:6f:2f:8e:
         46:1e:b1:57:e1:80:33:cb:67:01:8f:69:18:95:14:35:54:06:
         29:97:ed:ea
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
Q0Q4NjExMC8GA1UEBRMoRkE2MDFBOTZCNEU3QTg1NEM5RjEyN0U1MTlENkZFNjlE
NEQ2NkI2NDAeFw0yNjA3MjMxMDIzMjJaFw0yNjA3MzAxMDIzMjJaMBgxFjAUBgNV
BAMTDTZhNjFlYjlhLTA2ZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCogd0Ee1cCVT36ZIwD4dENgatzMTCGrF4Dfa20niDaEgIk6B49KZ28NemeAXdI
ruF5ryR9KajQtYKi+6t1gJITJzfL/u0UMaxOHp+0jDAWUHM8Wo9q/IwzGlzi9tjQ
mIZexC8zTodCp6AHB1gkzi6uTeSgjKTGVMW4JbZTCuhCtUgfR/zA5gpM3jYOEn9A
q+hnnJmgPP/i4W4VE+sDibBWi14ev8vhaIXPnMuihDZWicYndbKyiJ/AUYwSnDNv
wSdYj6IAMeFacR7Ki8tJkAZmg5HYyjDSYLCA6PSfS/2l9yBHcu/qKvHrr8XWzft9
yWqGmbbQ8+CQat2jfP/pF38HAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUM4bqN4jW
cBaKvbMeyklWrSmkoKkwHwYDVR0jBBgwFoAU+mAalrTnqFTJ8SflGdb+adTWa2Qw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlDRDg2Lzg4RTREODUwM0Y4
MjExRjFCODk4RTU1MUIwODMzNzczLy1tQWFsclRucUZUSjhTZmxHZGItYWRUV2Ey
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvLW1BYWxyVG5xRlRKOFNmbEdkYi1hZFRXYTJRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlD
RDg2Lzg4RTREODUwM0Y4MjExRjFCODk4RTU1MUIwODMzNzczLy1tQWFsclRucUZU
SjhTZmxHZGItYWRUV2EyUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCM8GcWxnu6zr62LG4+EN4iUUPoRFrArSJPmREhSY1R6VvaXBDSAg6/INQPhGh6
gK0k6xg4/9nu83VA3/xJGZ+auaiuOHVeTp7nM0l2V1nyhtBq+fhm9qosOrH3ZBES
7vBTM/dWYiYlxxxsKR8882Hhz6cTS4ZacnPRiFPf7ALzzCk+TB7Xb2eZhFzF97br
K+x7kpv4MnEJ4XWhMlVWb45tM3QI2B2Ei1F4ucxfPSV8HcN6/+mSTseAZ/Wb4NZc
tINylrpDZIm+I5MW4k7TOorgsHHJBGfycU85eqgoOg5HkKBquNiLrFVvL45GHrFX
4YAzy2cBj2kYlRQ1VAYpl+3q
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:40:38 2026 by rpki-client