Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft
File:                     9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft (raw, json)
Hash identifier:          8u27NmfnlRUjVXl93wsCvOfSGmIVj+i9Mn/GlV36Cww=
Subject key identifier:   A5:52:BA:02:ED:CF:3F:9E:E2:E6:C2:5F:30:36:4C:A5:5B:F2:C0:30
Authority key identifier: F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6
Certificate issuer:       /CN=A911911C/serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6
Certificate serial:       36A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft
Manifest number:          3617
Signing time:             Thu 16 Jul 2026 14:23:23 +0000
Manifest this update:     Thu 16 Jul 2026 14:23:22 +0000
Manifest next update:     Thu 23 Jul 2026 14:23:22 +0000
Files and hashes:         1: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl (hash: zQwVaXTXRd+o0srwU6ha3iiQ6e8HH1YnJxk1t5sE9wM=)
                          2: 6E340B9C4EA811EFA593A24CC4F9AE02.roa (hash: AHP5y6NUQXUIuJTsf7FmuzfZjDZN51hNfIjWN43DXmk=)
                          3: 8EEE648AE63811EB91D48033C4F9AE02.roa (hash: TmhPKiWm/UW/+IU6pO/3fWv32TwJDDiTp7ZwTLIEVr8=)
                          4: 24D0960C4AFA11EFB1EEA481C4F9AE02.roa (hash: dELYOmUkyXR2lffYdfhWu0IaeYl2ykn5uFM1NfTC4i8=)
                          5: 1A938A72619D11F0B4D0AB3BC4F9AE02.roa (hash: M/q2QKcNvW+wfQnP42dw/G6rqrpqSTWPv6nOQjLIFt4=)
                          6: 3217A18E809711EFB1A3805FC4F9AE02.roa (hash: auSN852h6GKZGfnGT0WksuI9Fj9DYVbRwz9rqojMuu4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl
                          rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 14:23:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13992 (0x36a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911911C, serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6
        Validity
            Not Before: Jul 16 14:23:22 2026 GMT
            Not After : Jul 23 14:23:22 2026 GMT
        Subject: CN=6a58e95b-3e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1b:7e:39:71:06:10:ea:94:01:17:7d:37:da:
                    d9:a2:cd:48:d4:d0:2a:30:8d:97:fc:a1:8e:b3:bf:
                    6e:85:b5:54:72:9c:05:fb:1a:96:f6:bb:10:8c:9f:
                    cb:9b:88:8d:b2:29:b3:f9:89:09:d6:d1:b4:db:d1:
                    d0:f4:ee:33:0b:8a:c3:20:10:f4:70:2b:ab:c9:d2:
                    6d:30:f8:17:22:40:dd:86:83:65:81:5f:fc:21:0b:
                    8a:9f:43:06:f0:d4:51:b4:1b:b9:3d:24:ef:23:e3:
                    a7:28:24:f9:f0:af:ab:6a:22:f1:68:a3:4a:d2:15:
                    a3:15:6b:2f:cc:93:a5:0b:df:0c:9a:94:9f:4b:e5:
                    4d:41:54:df:f0:54:6f:31:8a:8d:e5:15:c4:36:7f:
                    43:91:02:29:be:cd:2c:a1:76:d1:59:05:44:89:0d:
                    7e:9e:0d:cc:c3:00:50:45:79:9a:00:b1:ac:68:10:
                    f6:c2:06:57:8f:70:3e:07:74:88:d4:85:db:d9:ba:
                    d6:56:56:4a:2a:2f:07:f7:0a:fb:8a:d2:09:44:cf:
                    11:54:1a:20:9d:d7:55:3e:23:6a:db:a8:51:a9:45:
                    b9:18:e3:88:f0:df:2d:b5:75:24:87:ae:3e:4a:d9:
                    ca:cc:7e:a0:67:d2:34:3d:5c:e2:8e:c9:61:fa:8d:
                    15:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:52:BA:02:ED:CF:3F:9E:E2:E6:C2:5F:30:36:4C:A5:5B:F2:C0:30
            X509v3 Authority Key Identifier:
                keyid:F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:0b:e7:4a:84:0b:1d:7e:22:b7:84:03:2a:96:d6:53:56:22:
         3b:01:81:b8:4d:dc:1a:7d:d6:df:5c:46:2c:f5:7e:35:bd:aa:
         25:44:ed:3e:6c:a8:14:e5:4e:2f:a5:2e:95:8a:9d:fe:87:6e:
         2d:81:bc:b3:04:2b:57:43:fe:69:ec:ff:f6:4f:32:04:38:8f:
         e3:c1:5e:b9:5b:2b:50:6a:e2:b7:f5:af:61:f5:b9:04:db:10:
         d4:4c:20:91:ed:01:2c:cc:ff:7d:96:4d:69:4b:8b:e2:d2:e7:
         e2:3d:7d:c5:20:e2:fb:11:b9:c7:05:0b:2f:7c:f9:5b:5f:4a:
         a7:b8:cc:23:fb:b2:c3:06:41:16:8d:48:ac:55:27:97:3d:c1:
         d5:86:fa:42:ff:0f:f1:15:2c:ff:cc:49:46:05:a9:e8:af:bb:
         f3:75:82:4a:88:07:e6:96:72:5a:74:36:c2:65:f1:e5:40:54:
         db:6f:d5:d4:66:3e:a3:d4:78:9b:93:21:61:c8:53:a1:94:ec:
         e0:d0:cd:84:09:40:90:61:74:33:fb:21:ab:4c:48:e6:5b:6a:
         81:e3:ad:16:be:c8:7b:b8:15:f9:d4:1c:f4:7d:c7:1b:9c:dc:
         4f:26:14:4f:a9:f2:69:d3:dc:de:73:9f:d1:34:f4:a4:62:c9:
         4a:8e:2a:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTkxMUMxMTAvBgNVBAUTKEY0NTdFRjhDMTlBQTA5NzZDRTA0NTlBNUZGNzA5QzVE
Q0E0RkM3RDYwHhcNMjYwNzE2MTQyMzIyWhcNMjYwNzIzMTQyMzIyWjAYMRYwFAYD
VQQDEw02YTU4ZTk1Yi0zZTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0ht+OXEGEOqUARd9N9rZos1I1NAqMI2X/KGOs79uhbVUcpwF+xqW9rsQjJ/L
m4iNsimz+YkJ1tG029HQ9O4zC4rDIBD0cCurydJtMPgXIkDdhoNlgV/8IQuKn0MG
8NRRtBu5PSTvI+OnKCT58K+raiLxaKNK0hWjFWsvzJOlC98MmpSfS+VNQVTf8FRv
MYqN5RXENn9DkQIpvs0soXbRWQVEiQ1+ng3MwwBQRXmaALGsaBD2wgZXj3A+B3SI
1IXb2brWVlZKKi8H9wr7itIJRM8RVBognddVPiNq26hRqUW5GOOI8N8ttXUkh64+
StnKzH6gZ9I0PVzijslh+o0VpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKVSugLt
zz+e4ubCXzA2TKVb8sAwMB8GA1UdIwQYMBaAFPRX74wZqgl2zgRZpf9wnF3KT8fW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTExQy9CQkM1NEJBNDFE
ODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNYYk9CRm1sXzNDY1hjcFB4
OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlGZnZqQm1xQ1hiT0JGbWxfM0NjWGNwUHg5WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTExQy9CQkM1NEJBNDFEODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNY
Yk9CRm1sXzNDY1hjcFB4OVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABAvnSoQLHX4it4QDKpbWU1YiOwGBuE3cGn3W31xGLPV+Nb2qJUTtPmyoFOVO
L6UulYqd/oduLYG8swQrV0P+aez/9k8yBDiP48FeuVsrUGrit/WvYfW5BNsQ1Ewg
ke0BLMz/fZZNaUuL4tLn4j19xSDi+xG5xwULL3z5W19Kp7jMI/uywwZBFo1IrFUn
lz3B1Yb6Qv8P8RUs/8xJRgWp6K+783WCSogH5pZyWnQ2wmXx5UBU22/V1GY+o9R4
m5MhYchToZTs4NDNhAlAkGF0M/shq0xI5ltqgeOtFr7Ie7gV+dQc9H3HG5zcTyYU
T6nyadPc3nOf0TT0pGLJSo4q/Q==
-----END CERTIFICATE-----
Generated at Sat Jul 18 08:19:53 2026 by rpki-client