Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft
File:                     1pe7bz-Z6USA7gu609JoAKtBYmA.mft (raw, json)
Hash identifier:          bjKJzamboXTJIjg4yu8MkfzpZFi6xWy27+XxM+/fmj4=
Subject key identifier:   F7:8C:77:65:79:AC:BC:AA:8C:AE:2B:B8:F3:9E:2B:09:A8:BB:04:53
Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60
Certificate issuer:       /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260
Certificate serial:       3628
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft
Manifest number:          35C0
Signing time:             Mon 20 Jul 2026 14:23:21 +0000
Manifest this update:     Mon 20 Jul 2026 14:23:21 +0000
Manifest next update:     Mon 27 Jul 2026 14:23:21 +0000
Files and hashes:         1: 1pe7bz-Z6USA7gu609JoAKtBYmA.crl (hash: Sm6ddRmTybArFZuovQ36N7kVFyksS4ahvf/iYsZRh84=)
                          2: 971866124AEC11EF91EC775FC4F9AE02.roa (hash: miyLWYgYPiIrjadnA/ajcwQwWySLZgNpGX1hIK6+8R8=)
                          3: 12FAF07EA47B11E9867CBF58C4F9AE02.roa (hash: MYkxmSgNqElOC649o48S0knsIyj3lMRaNDNnlUpUZq0=)
                          4: D2E6AC6A60F111EFB97DD57AC4F9AE02.roa (hash: koD82jw36I+xWb3bPAEdg+F1Q76GNEtMpLiUjPTIbC8=)
                          5: 3D4BA7444FF811F19502E84FB7833773.roa (hash: ys3eo2RG00Y0R7mM882Xhkg1RsSrKZcQi4Q23KdM4xg=)
                          6: 146766F4A47B11E9867CBF58C4F9AE02.roa (hash: Uh2S60yWKTmm2Qb90d4nnPWXxzqNf1Hs/lAeQzk6ZVY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13864 (0x3628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C, serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260
        Validity
            Not Before: Jul 20 14:23:21 2026 GMT
            Not After : Jul 27 14:23:21 2026 GMT
        Subject: CN=6a5e2f59-d32e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:60:f8:65:9e:b2:f0:8d:cc:46:e8:4e:62:24:
                    69:5b:22:02:2c:de:65:a4:94:96:c0:51:40:0b:e8:
                    00:02:20:96:e1:71:98:2c:97:3c:c4:54:84:31:c7:
                    8f:6c:bd:7a:4f:af:1f:a8:63:18:2d:bc:64:9f:d8:
                    0c:52:ad:f1:d5:cd:ba:bd:76:f2:f6:75:ec:19:67:
                    50:ff:22:d2:3b:bc:6c:e5:8b:34:0a:71:ce:3e:dc:
                    bb:64:cd:6f:45:15:40:66:c4:ca:6b:b3:32:1d:0c:
                    51:92:c6:0b:55:c8:74:8f:f2:3c:0c:4e:b4:36:06:
                    f1:b1:bf:61:98:1b:84:da:b8:63:e4:f2:b9:2d:c7:
                    52:63:90:f2:f2:76:ff:f1:54:5b:ea:b6:83:17:bf:
                    97:f2:77:c9:87:4d:5b:c0:f4:87:94:86:51:f1:2e:
                    fa:b4:ac:09:a6:fc:e5:d8:2b:28:65:2a:2b:27:e9:
                    33:e8:93:d0:47:2c:28:5e:0b:e1:ed:29:bf:a2:4a:
                    1d:9c:c1:36:5d:df:68:33:3a:80:58:90:0a:91:33:
                    8a:59:f3:f2:ab:d6:94:91:d0:b3:21:6c:fe:39:f5:
                    6f:66:19:c4:76:8b:0e:fe:59:fd:25:aa:88:d3:67:
                    7f:25:f3:c6:a7:66:f2:5a:7f:34:84:24:5a:7b:06:
                    49:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8C:77:65:79:AC:BC:AA:8C:AE:2B:B8:F3:9E:2B:09:A8:BB:04:53
            X509v3 Authority Key Identifier:
                keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:28:da:2a:9e:63:0c:85:72:94:b0:51:b1:08:93:4c:2e:a8:
         d9:4d:d2:23:aa:d0:62:71:14:a3:43:19:95:d7:b1:98:c8:8b:
         01:d0:10:7b:e9:b7:fc:a3:e3:62:90:9e:e2:37:d7:d2:d0:55:
         f1:11:f7:e5:e3:a2:c3:62:dc:7f:77:2f:88:07:96:ae:0e:eb:
         e5:42:2c:d1:d9:85:46:da:c2:c4:5a:8d:7c:30:25:5e:be:8e:
         56:a4:06:a4:49:90:22:4e:12:ee:d2:03:75:79:b1:15:c1:cf:
         9b:54:fe:31:63:ee:0f:88:e1:79:0d:61:b9:bf:c4:5e:b1:b8:
         c6:b6:f6:40:2b:45:9e:9e:ce:06:91:c5:40:7e:e6:d9:c9:61:
         cf:d0:d1:2f:d0:00:04:e3:f9:4f:ab:ff:c6:ae:6a:7f:e8:57:
         d9:12:38:b2:a4:aa:a8:ca:bc:2c:01:32:c9:26:d3:38:d0:a5:
         55:ec:6b:87:ea:40:e5:78:98:79:4b:38:d0:e5:dc:0c:34:a0:
         2c:c7:09:d2:c6:37:39:09:a4:da:70:79:af:be:87:9e:a8:66:
         70:3b:e8:17:2b:0c:c0:10:e3:c1:a8:d5:18:57:f3:38:0c:b9:
         74:43:78:84:19:b3:85:3a:36:cb:38:2a:e6:e8:57:5b:fe:a6:
         29:b4:a7:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUY4OUMxMTAvBgNVBAUTKEQ2OTdCQjZGM0Y5OUU5NDQ4MEVFMEJCQUQzRDI2ODAw
QUI0MTYyNjAwHhcNMjYwNzIwMTQyMzIxWhcNMjYwNzI3MTQyMzIxWjAYMRYwFAYD
VQQDEw02YTVlMmY1OS1kMzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnmD4ZZ6y8I3MRuhOYiRpWyICLN5lpJSWwFFAC+gAAiCW4XGYLJc8xFSEMceP
bL16T68fqGMYLbxkn9gMUq3x1c26vXby9nXsGWdQ/yLSO7xs5Ys0CnHOPty7ZM1v
RRVAZsTKa7MyHQxRksYLVch0j/I8DE60Ngbxsb9hmBuE2rhj5PK5LcdSY5Dy8nb/
8VRb6raDF7+X8nfJh01bwPSHlIZR8S76tKwJpvzl2CsoZSorJ+kz6JPQRywoXgvh
7Sm/okodnME2Xd9oMzqAWJAKkTOKWfPyq9aUkdCzIWz+OfVvZhnEdosO/ln9JaqI
02d/JfPGp2byWn80hCRaewZJ+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPeMd2V5
rLyqjK4ruPOeKwmouwRTMB8GA1UdIwQYMBaAFNaXu28/melEgO4LutPSaACrQWJg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy81QjA3RjNBQzFE
ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZVU0E3Z3U2MDlKb0FLdEJZ
bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzFwZTdiei1aNlVTQTdndTYwOUpvQUt0QlltQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Rjg5Qy81QjA3RjNBQzFEODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZV
U0E3Z3U2MDlKb0FLdEJZbUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADSjaKp5jDIVylLBRsQiTTC6o2U3SI6rQYnEUo0MZldexmMiLAdAQe+m3/KPj
YpCe4jfX0tBV8RH35eOiw2Lcf3cviAeWrg7r5UIs0dmFRtrCxFqNfDAlXr6OVqQG
pEmQIk4S7tIDdXmxFcHPm1T+MWPuD4jheQ1hub/EXrG4xrb2QCtFnp7OBpHFQH7m
2clhz9DRL9AABOP5T6v/xq5qf+hX2RI4sqSqqMq8LAEyySbTONClVexrh+pA5XiY
eUs40OXcDDSgLMcJ0sY3OQmk2nB5r76HnqhmcDvoFysMwBDjwajVGFfzOAy5dEN4
hBmzhTo2yzgq5uhXW/6mKbSnww==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:50:58 2026 by rpki-client