Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
File:                     h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft (raw, json)
Hash identifier:          NGnjl98UvBI77wZcQXCvq4iXIwoLXiQkb43uI1vJdsM=
Subject key identifier:   46:34:39:5D:9A:79:2F:C8:1D:6A:BC:A2:40:3F:34:7A:C9:A5:3C:FE
Authority key identifier: 87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9
Certificate issuer:       /CN=A919D180/serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9
Certificate serial:       013B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
Manifest number:          0129
Signing time:             Thu 23 Jul 2026 07:33:00 +0000
Manifest this update:     Thu 23 Jul 2026 07:32:59 +0000
Manifest next update:     Thu 30 Jul 2026 07:32:59 +0000
Files and hashes:         1: h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl (hash: ZzsHfT0l6N3yZrvy8V8DX5aIBpz2YpsBuB8uWJ8AaAM=)
                          2: 8A991E5AD6DC11EF9E9B2B15C4F9AE02.roa (hash: XNgGFgwjyc461p4JNKdvJk4zW9gJQhSshCp4+fjMbAY=)
                          3: C8D5160AE75E11EF97E59E40C4F9AE02.roa (hash: P4tVkKssSKb9dDeUTAtVa6Ci3IKXk3pij9DywFDumYU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl
                          rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D180, serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9
        Validity
            Not Before: Jul 23 07:32:59 2026 GMT
            Not After : Jul 30 07:32:59 2026 GMT
        Subject: CN=6a61c3ac-37dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f5:a5:03:79:f9:6c:e4:d9:70:8c:d6:59:b2:
                    14:0c:54:e5:57:25:55:0c:14:e2:99:00:57:1b:9d:
                    dd:91:3d:40:f1:ee:26:27:c3:1e:63:21:3d:e7:12:
                    97:58:1c:e5:f1:aa:12:51:24:7f:04:46:6b:0f:b6:
                    ed:58:fa:75:e5:52:51:78:61:34:77:df:a4:02:48:
                    ab:d4:1f:fb:e0:cc:0e:e3:3b:cc:f7:ce:ea:56:c6:
                    8d:88:d7:d9:40:5a:62:d3:36:1f:c4:7c:bb:09:8f:
                    19:84:04:92:19:5b:2d:0c:f1:d9:e2:5b:c3:62:fb:
                    45:ea:71:bc:eb:b9:08:91:0f:61:80:8a:02:76:db:
                    ce:67:8b:8b:30:66:77:62:0c:a8:26:18:ba:64:44:
                    75:4e:80:95:ba:3b:82:ed:2c:b3:54:1b:76:a0:8f:
                    0f:90:3e:87:f6:f2:a4:66:b0:32:6c:04:e5:4e:c7:
                    2b:89:e4:fd:27:cb:b2:2c:07:0e:2b:64:d3:2b:c7:
                    78:94:57:30:e4:bc:61:f2:84:38:75:09:59:31:40:
                    50:1e:4f:22:07:a3:19:15:d3:60:63:34:7a:85:fc:
                    ee:6d:99:b0:19:3f:e3:38:c1:f1:51:9c:50:bf:ab:
                    c1:ce:6b:72:4a:70:40:20:19:53:60:46:78:cc:91:
                    19:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:34:39:5D:9A:79:2F:C8:1D:6A:BC:A2:40:3F:34:7A:C9:A5:3C:FE
            X509v3 Authority Key Identifier:
                keyid:87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:79:99:e3:ee:b4:cf:4a:60:a6:21:c0:9f:b7:32:16:fc:c6:
         53:61:d1:03:6a:af:a9:08:ec:17:33:9c:05:56:9b:a3:95:5b:
         ab:64:ad:15:a1:26:fc:d1:3b:27:c6:77:8f:d5:7c:80:10:4d:
         9b:7b:1a:2e:60:c2:36:c4:2e:db:30:8d:97:72:de:3d:30:68:
         4b:56:81:31:0a:8c:fd:6d:12:cc:10:a5:69:79:32:6f:88:da:
         36:e5:50:57:0f:d1:0b:b5:c2:d4:59:a2:d8:ef:40:0a:cf:ff:
         2e:d5:87:03:7d:8e:ce:d5:4b:36:f0:64:9b:0f:1b:67:54:27:
         27:90:09:4d:50:80:39:d0:c7:1b:35:15:d7:6a:e2:7d:60:35:
         cf:40:a0:db:69:0a:2e:73:92:5f:37:ef:48:e9:7c:50:16:a6:
         f1:f2:d3:42:5f:f7:f9:65:33:30:f5:52:3c:87:e1:bc:d5:2f:
         60:50:c9:ee:54:6e:cb:7a:90:45:89:27:59:2a:ed:e9:b5:5b:
         bb:87:d2:8e:2f:c1:48:0c:80:da:a0:85:89:16:b6:55:03:c3:
         53:5a:a6:08:9e:85:2a:5f:74:c2:cb:db:07:7d:14:3c:a0:ec:
         fa:06:3f:f1:6a:0c:8e:b8:1c:8d:1f:3b:96:a5:4f:ae:86:23:
         e8:73:3c:45
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQxODAxMTAvBgNVBAUTKDg3REE0NEE0Q0Y4MzlDMzg4MUM2QkMzODY4M0NDREMz
MDhDQTdDRTkwHhcNMjYwNzIzMDczMjU5WhcNMjYwNzMwMDczMjU5WjAYMRYwFAYD
VQQDEw02YTYxYzNhYy0zN2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr/WlA3n5bOTZcIzWWbIUDFTlVyVVDBTimQBXG53dkT1A8e4mJ8MeYyE95xKX
WBzl8aoSUSR/BEZrD7btWPp15VJReGE0d9+kAkir1B/74MwO4zvM987qVsaNiNfZ
QFpi0zYfxHy7CY8ZhASSGVstDPHZ4lvDYvtF6nG867kIkQ9hgIoCdtvOZ4uLMGZ3
YgyoJhi6ZER1ToCVujuC7SyzVBt2oI8PkD6H9vKkZrAybATlTscrieT9J8uyLAcO
K2TTK8d4lFcw5Lxh8oQ4dQlZMUBQHk8iB6MZFdNgYzR6hfzubZmwGT/jOMHxUZxQ
v6vBzmtySnBAIBlTYEZ4zJEZzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEY0OV2a
eS/IHWq8okA/NHrJpTz+MB8GA1UdIwQYMBaAFIfaRKTPg5w4gca8OGg8zcMIynzp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDE4MC83NzQyODdGMkQ2
QzcxMUVGQTNFMUQ4MUNDNEY5QUUwMi9oOXBFcE0tRG5EaUJ4cnc0YUR6Tnd3aktm
T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2g5cEVwTS1EbkRpQnhydzRhRHpOd3dqS2ZPay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDE4MC83NzQyODdGMkQ2QzcxMUVGQTNFMUQ4MUNDNEY5QUUwMi9oOXBFcE0tRG5E
aUJ4cnc0YUR6Tnd3aktmT2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcHmZ4+60z0pgpiHAn7cyFvzGU2HRA2qvqQjsFzOcBVabo5Vbq2StFaEm/NE7
J8Z3j9V8gBBNm3saLmDCNsQu2zCNl3LePTBoS1aBMQqM/W0SzBClaXkyb4jaNuVQ
Vw/RC7XC1Fmi2O9ACs//LtWHA32OztVLNvBkmw8bZ1QnJ5AJTVCAOdDHGzUV12ri
fWA1z0Cg22kKLnOSXzfvSOl8UBam8fLTQl/3+WUzMPVSPIfhvNUvYFDJ7lRuy3qQ
RYknWSrt6bVbu4fSji/BSAyA2qCFiRa2VQPDU1qmCJ6FKl90wsvbB30UPKDs+gY/
8WoMjrgcjR87lqVProYj6HM8RQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:25:11 2026 by rpki-client