Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
File:                     XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft (raw, json)
Hash identifier:          gPzwaBciNTQRpUlQnsile/WBtqcgP4vv2yt3NVViRa0=
Subject key identifier:   51:E3:84:87:2C:15:E4:74:6B:AB:72:7F:D4:CE:4D:88:CE:B8:4B:FB
Authority key identifier: 5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0
Certificate issuer:       /CN=A9142812/serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0
Certificate serial:       074E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
Manifest number:          073E
Signing time:             Mon 20 Jul 2026 22:27:17 +0000
Manifest this update:     Mon 20 Jul 2026 22:27:17 +0000
Manifest next update:     Mon 27 Jul 2026 22:27:17 +0000
Files and hashes:         1: XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl (hash: CrfHko2DDEJboQuAOxttcJ2YA5kPXj7AYHrz6HWrTHs=)
                          2: 9ADBEC30DA6411EF95F32A7FC4F9AE02.roa (hash: C0leLcL5XAeuq6qwaXMLO1xziKzhUjhh+w08AfqJr64=)
                          3: 9BE20420DA6411EF95F32A7FC4F9AE02.roa (hash: b8Yrg5yhwwS9mUXMLcQ3eIUl5GT4DbquZ+/h34i5hc0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl
                          rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 22:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1870 (0x74e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142812, serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0
        Validity
            Not Before: Jul 20 22:27:17 2026 GMT
            Not After : Jul 27 22:27:17 2026 GMT
        Subject: CN=6a5ea0c5-9240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:99:a7:f4:97:3e:34:0a:56:07:ce:79:8a:4c:
                    5b:d6:74:07:e6:81:bf:04:8c:6a:cd:16:5e:91:d9:
                    8e:93:df:c4:36:8f:96:8f:66:b5:e2:29:d1:04:ef:
                    fc:b8:e3:15:71:07:40:13:d5:32:83:11:18:bc:80:
                    75:8a:0d:a5:ae:58:e0:d0:78:b6:35:c3:bf:7f:d6:
                    b2:40:f1:22:10:58:80:48:fb:d5:05:a0:c5:b9:32:
                    42:d7:4d:f1:39:75:db:cb:69:9a:ee:77:0e:9a:45:
                    15:27:dd:3c:d5:2e:c5:df:94:e6:67:93:35:13:a1:
                    14:0a:32:be:db:64:a0:8e:5d:86:55:e0:ab:1a:0e:
                    04:e7:c7:d0:a9:98:dd:6b:4e:b1:f7:8e:93:95:8f:
                    c2:44:fa:8f:1e:97:69:5a:0a:f5:e9:8b:dc:54:4a:
                    fc:57:68:3e:18:f5:ba:35:18:0c:c0:e9:20:9b:86:
                    22:c0:7b:9e:e1:21:51:42:3e:d3:37:f9:34:dd:69:
                    f2:93:20:0f:6b:fb:4e:11:23:a3:2b:6a:f0:eb:9c:
                    5c:db:6d:43:a7:0b:94:6d:fe:d7:c4:bc:97:14:b5:
                    7d:07:50:ec:67:3d:28:27:b2:02:5c:07:22:54:72:
                    1a:35:8e:b0:eb:eb:fa:30:9c:cf:37:05:54:e2:1b:
                    67:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E3:84:87:2C:15:E4:74:6B:AB:72:7F:D4:CE:4D:88:CE:B8:4B:FB
            X509v3 Authority Key Identifier:
                keyid:5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:31:d2:50:25:b1:71:42:21:01:3e:9f:17:a0:13:07:39:19:
         ac:22:46:3e:25:98:2c:dd:ac:a0:96:a9:9b:a1:f5:90:89:6b:
         aa:27:54:b4:93:91:09:a7:b5:23:8c:d5:f1:ac:b1:96:02:0c:
         15:35:a0:81:88:7a:28:87:7b:f1:10:d6:b4:28:da:10:24:57:
         be:17:4e:83:92:ea:96:11:50:df:9e:08:72:39:e3:01:cc:eb:
         6e:17:eb:d0:df:2e:a5:b4:cf:8c:9c:3a:f4:e8:93:83:61:2a:
         0a:3e:f5:73:eb:6c:67:81:56:2f:78:7e:b7:af:0a:e7:be:11:
         18:74:0d:f9:4e:bc:72:e0:e3:0f:6c:53:05:a7:8d:a3:ae:84:
         f1:62:07:c9:2e:ec:81:ab:dd:33:ce:dc:f9:d8:1d:a6:92:f4:
         4c:ee:3d:9c:f0:73:fe:bc:53:a0:cc:93:0c:f6:62:56:ec:1a:
         c6:91:cb:94:d0:a1:a9:c5:51:ad:9d:c5:85:88:56:5a:79:1a:
         15:0e:21:1e:d9:73:5f:48:e0:e8:f0:cd:27:6d:5d:21:e5:cf:
         b9:e1:b0:dd:37:43:cd:66:80:38:71:96:a1:21:7b:0d:f0:c2:
         03:36:93:27:d1:9e:82:d5:f1:5d:6c:2f:d9:9e:fb:a1:10:3f:
         1e:f5:2e:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI4MTIxMTAvBgNVBAUTKDVDNDVBRDAwMEJCRDUwQTcwRjkzQTVDQjcwQjY2Njgw
QTUyOEVEQzAwHhcNMjYwNzIwMjIyNzE3WhcNMjYwNzI3MjIyNzE3WjAYMRYwFAYD
VQQDEw02YTVlYTBjNS05MjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj5mn9Jc+NApWB855ikxb1nQH5oG/BIxqzRZekdmOk9/ENo+Wj2a14inRBO/8
uOMVcQdAE9UygxEYvIB1ig2lrljg0Hi2NcO/f9ayQPEiEFiASPvVBaDFuTJC103x
OXXby2ma7ncOmkUVJ9081S7F35TmZ5M1E6EUCjK+22Sgjl2GVeCrGg4E58fQqZjd
a06x946TlY/CRPqPHpdpWgr16YvcVEr8V2g+GPW6NRgMwOkgm4YiwHue4SFRQj7T
N/k03WnykyAPa/tOESOjK2rw65xc221DpwuUbf7XxLyXFLV9B1DsZz0oJ7ICXAci
VHIaNY6w6+v6MJzPNwVU4htn3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFHjhIcs
FeR0a6tyf9TOTYjOuEv7MB8GA1UdIwQYMBaAFFxFrQALvVCnD5Oly3C2ZoClKO3A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjgxMi9DMUU1REQxRTgw
N0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVLY1BrNlhMY0xabWdLVW83
Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hFV3RBQXU5VUtjUGs2WExjTFptZ0tVbzdjQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjgxMi9DMUU1REQxRTgwN0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVL
Y1BrNlhMY0xabWdLVW83Y0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIjHSUCWxcUIhAT6fF6ATBzkZrCJGPiWYLN2soJapm6H1kIlrqidUtJORCae1
I4zV8ayxlgIMFTWggYh6KId78RDWtCjaECRXvhdOg5LqlhFQ354IcjnjAczrbhfr
0N8upbTPjJw69OiTg2EqCj71c+tsZ4FWL3h+t68K574RGHQN+U68cuDjD2xTBaeN
o66E8WIHyS7sgavdM87c+dgdppL0TO49nPBz/rxToMyTDPZiVuwaxpHLlNChqcVR
rZ3FhYhWWnkaFQ4hHtlzX0jg6PDNJ21dIeXPueGw3TdDzWaAOHGWoSF7DfDCAzaT
J9GegtXxXWwv2Z77oRA/HvUuVQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:48:44 2026 by rpki-client