Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
File:                     ezpr3tL3tMBYRWjAZKuANDKHI6A.mft (raw, json)
Hash identifier:          tP8p2kYQ3Gd94czsqHkmKV21Z5kTCZd2byilLAodCzQ=
Subject key identifier:   85:F8:BE:3B:F5:18:74:95:B6:2C:00:CC:D7:F9:F7:F8:F6:13:43:5A
Authority key identifier: 7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0
Certificate issuer:       /CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
Certificate serial:       0262
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
Manifest number:          0256
Signing time:             Mon 27 Jul 2026 03:49:13 +0000
Manifest this update:     Mon 27 Jul 2026 03:49:12 +0000
Manifest next update:     Mon 03 Aug 2026 03:49:12 +0000
Files and hashes:         1: ezpr3tL3tMBYRWjAZKuANDKHI6A.crl (hash: pwVBUwjhZ6ujpcme/7QtfxM3A0XFh8hHjmIO+PxxAvI=)
                          2: 0CB9AF5C200E11EF91F18D75C4F9AE02.roa (hash: pL7TsTQ2Nm3m6VOrPtjdoQ/AUSEeALli0uk6St9i4To=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl
                          rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:49:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 610 (0x262)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116190, serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
        Validity
            Not Before: Jul 27 03:49:12 2026 GMT
            Not After : Aug  3 03:49:12 2026 GMT
        Subject: CN=6a66d539-8477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1b:a7:29:7e:38:8e:89:a5:b7:99:81:1a:c5:
                    27:f4:c1:d8:ae:eb:f2:1f:3a:e3:ac:a8:1b:68:81:
                    02:cc:f0:cf:ce:56:b3:98:83:70:32:f1:fc:a3:db:
                    ad:d5:0d:a1:c2:0d:81:02:b1:e1:3c:61:9d:bc:fa:
                    86:5b:49:35:9d:cf:24:b8:55:28:ee:09:88:60:de:
                    8a:0c:e4:14:dd:84:d3:f9:6c:50:45:84:02:e4:1a:
                    12:5d:f4:68:04:cf:7a:63:35:ba:75:53:1c:b1:d6:
                    34:ce:d2:7c:80:fb:65:16:5f:2c:fc:e5:8a:5e:54:
                    ae:4c:17:7d:a6:3c:00:a0:49:12:22:3b:3f:d9:18:
                    0d:c4:04:4d:12:1c:d6:28:e4:b6:88:0a:27:87:5b:
                    72:eb:5a:5e:36:91:3a:7b:78:1a:16:29:16:3c:77:
                    8a:a5:f2:58:24:ad:5a:8d:8a:eb:0c:17:ad:0a:2e:
                    76:21:c1:77:75:81:48:59:16:85:8f:ac:f9:4b:fb:
                    06:32:d9:88:c4:a6:89:b7:9b:1a:0b:74:8b:b6:b3:
                    af:8a:aa:72:43:0d:e3:24:79:5e:8d:b4:1b:5b:2b:
                    34:b5:18:d1:54:4a:d2:60:de:54:99:1a:5d:ae:c4:
                    a2:70:a2:fb:aa:b0:06:27:8d:cd:7f:bb:dc:54:df:
                    30:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F8:BE:3B:F5:18:74:95:B6:2C:00:CC:D7:F9:F7:F8:F6:13:43:5A
            X509v3 Authority Key Identifier:
                keyid:7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:8d:a0:89:9c:6e:9d:0c:f6:00:33:68:38:9a:17:d0:de:0e:
         1a:91:69:82:69:35:83:00:47:d1:24:ba:2d:84:e5:75:c6:b0:
         2c:cd:d5:9b:63:15:60:aa:fb:2d:6c:78:64:84:ea:7a:80:a8:
         05:33:b2:a3:c9:32:2a:72:27:4e:38:cc:20:2f:e4:c8:1a:26:
         27:63:0b:58:16:78:c1:29:e7:ce:2e:73:73:3f:ab:d8:a3:44:
         08:c9:84:a5:ed:b6:7d:59:d4:1e:c3:9f:ea:fa:c8:e0:7f:d3:
         73:a1:03:65:7b:82:61:23:99:11:18:94:66:e7:f0:87:8d:7d:
         67:96:ae:7b:cb:7b:59:76:77:92:73:d3:f9:6f:d6:b8:b7:ec:
         21:9c:62:eb:eb:ac:59:84:05:e8:cc:5f:5a:48:54:96:d4:25:
         c5:fd:29:31:b9:75:6f:07:d0:10:a4:d8:00:21:7f:b5:55:8d:
         29:94:19:31:28:c2:56:6b:a9:3a:5c:2e:10:69:b5:fa:b5:7b:
         0c:96:68:d6:ca:db:4c:e0:cb:8b:d9:e5:1f:b7:3b:3a:14:6f:
         32:f6:19:25:ad:c2:48:f9:96:83:04:23:96:bf:ed:70:03:45:
         b3:1d:82:f8:fc:94:59:a3:60:d4:5b:de:7b:1f:65:5a:27:7b:
         21:bb:5a:7b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTYxOTAxMTAvBgNVBAUTKDdCM0E2QkRFRDJGN0I0QzA1ODQ1NjhDMDY0QUI4MDM0
MzI4NzIzQTAwHhcNMjYwNzI3MDM0OTEyWhcNMjYwODAzMDM0OTEyWjAYMRYwFAYD
VQQDEw02YTY2ZDUzOS04NDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxhunKX44jomlt5mBGsUn9MHYruvyHzrjrKgbaIECzPDPzlazmINwMvH8o9ut
1Q2hwg2BArHhPGGdvPqGW0k1nc8kuFUo7gmIYN6KDOQU3YTT+WxQRYQC5BoSXfRo
BM96YzW6dVMcsdY0ztJ8gPtlFl8s/OWKXlSuTBd9pjwAoEkSIjs/2RgNxARNEhzW
KOS2iAonh1ty61peNpE6e3gaFikWPHeKpfJYJK1ajYrrDBetCi52IcF3dYFIWRaF
j6z5S/sGMtmIxKaJt5saC3SLtrOviqpyQw3jJHlejbQbWys0tRjRVErSYN5UmRpd
rsSicKL7qrAGJ43Nf7vcVN8wLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIX4vjv1
GHSVtiwAzNf59/j2E0NaMB8GA1UdIwQYMBaAFHs6a97S97TAWEVowGSrgDQyhyOg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjE5MC8wQkIzOTY1MjA0
OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RNQllSV2pBWkt1QU5ES0hJ
NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V6cHIzdEwzdE1CWVJXakFaS3VBTkRLSEk2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjE5MC8wQkIzOTY1MjA0OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RN
QllSV2pBWkt1QU5ES0hJNkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGY2giZxunQz2ADNoOJoX0N4OGpFpgmk1gwBH0SS6LYTldcawLM3Vm2MVYKr7
LWx4ZITqeoCoBTOyo8kyKnInTjjMIC/kyBomJ2MLWBZ4wSnnzi5zcz+r2KNECMmE
pe22fVnUHsOf6vrI4H/Tc6EDZXuCYSOZERiUZufwh419Z5aue8t7WXZ3knPT+W/W
uLfsIZxi6+usWYQF6MxfWkhUltQlxf0pMbl1bwfQEKTYACF/tVWNKZQZMSjCVmup
OlwuEGm1+rV7DJZo1srbTODLi9nlH7c7OhRvMvYZJa3CSPmWgwQjlr/tcANFsx2C
+PyUWaNg1Fveex9lWid7Ibtaew==
-----END CERTIFICATE-----
Generated at Tue Jul 28 02:28:05 2026 by rpki-client