Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
File:                     K08yPFindrTnU4be6Dci4EViMsY.mft (raw, json)
Hash identifier:          shuV+6wm72nSSbTBX3eDDDnmalIbbDSlQzjcUp4DOt8=
Subject key identifier:   11:43:86:36:40:C9:FB:13:54:D5:02:33:71:47:BF:E3:29:37:7E:EA
Authority key identifier: 2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6
Certificate issuer:       /CN=A911BC62/serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6
Certificate serial:       0EC4
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
Manifest number:          0EB4
Signing time:             Mon 20 Jul 2026 15:40:41 +0000
Manifest this update:     Mon 20 Jul 2026 15:40:40 +0000
Manifest next update:     Mon 27 Jul 2026 15:40:40 +0000
Files and hashes:         1: K08yPFindrTnU4be6Dci4EViMsY.crl (hash: pMfoWh3oU2zjTb/URfNTWFAr2oYkYWfvT93K8t9eQNg=)
                          2: EE1EA292EA6A11E98F16FE30C4F9AE02.roa (hash: +AnMnxmKTZyscWe5AeUEPNU2Nvb8Uu/NJlADVWANwr4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl
                          rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:40:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3780 (0xec4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BC62, serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6
        Validity
            Not Before: Jul 20 15:40:40 2026 GMT
            Not After : Jul 27 15:40:40 2026 GMT
        Subject: CN=6a5e4178-8d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3c:bd:20:1d:22:ab:83:0b:ff:3b:37:42:e5:
                    e6:a5:27:0c:e3:b3:15:2a:a4:8d:d6:c0:60:e6:25:
                    52:37:8b:b7:1c:43:a5:bc:0a:7c:c0:12:24:76:db:
                    f2:a7:c9:e2:96:c5:89:e4:a1:dc:d5:c1:4e:f8:23:
                    34:46:db:9c:96:b0:6f:a2:af:e5:7c:b2:8b:6c:db:
                    b6:42:33:b1:44:40:43:96:c8:2e:0c:ec:eb:4f:ff:
                    d4:85:6a:7c:e0:71:d0:43:41:b9:33:2d:1b:fa:a5:
                    19:d7:64:30:f2:2c:e5:40:f4:a4:58:2e:b0:63:86:
                    2b:8e:9c:22:a4:df:7d:0d:a6:83:09:62:d8:8e:aa:
                    a5:6c:de:7e:91:6d:de:20:0f:13:ec:ed:c0:ef:60:
                    e5:a5:17:34:dc:cd:4d:fc:39:a5:4a:11:11:17:14:
                    45:bc:d3:24:59:08:99:e6:d2:c4:09:84:cb:28:ef:
                    81:29:ff:d6:60:16:b4:dc:f4:54:de:d5:05:35:69:
                    69:b8:2f:b0:2f:9e:f5:ad:83:87:f4:f8:ed:1c:1b:
                    3b:0d:90:32:4a:32:68:d2:05:21:c2:56:27:0c:76:
                    fe:0a:ca:f0:01:d4:4a:f7:66:58:fa:de:08:22:2b:
                    6a:b6:08:60:35:a3:f4:aa:fc:50:6b:e8:1f:58:46:
                    5e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:43:86:36:40:C9:FB:13:54:D5:02:33:71:47:BF:E3:29:37:7E:EA
            X509v3 Authority Key Identifier:
                keyid:2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:47:6c:fe:83:da:58:ea:62:1a:66:f6:6c:5c:52:c3:05:c0:
         2f:aa:24:28:33:45:ab:1d:ec:1e:fa:58:13:94:db:ce:49:59:
         d6:fa:15:35:fc:21:e5:95:e4:06:6d:50:84:9c:c1:a5:e8:48:
         b3:7a:d8:01:86:7f:5f:2c:6e:13:97:2e:4d:3b:19:ae:8f:62:
         a4:6e:1f:06:40:c7:eb:0f:e3:3e:f0:71:2e:e9:b1:13:df:85:
         70:e6:41:9e:b6:07:60:1a:0b:22:5e:62:53:59:2e:bf:59:1e:
         2f:ce:e2:cb:65:bc:f1:29:79:90:0b:72:d7:a3:79:7a:2e:4a:
         0c:9d:8a:9e:fa:b5:27:01:48:b6:c9:04:a2:a0:e5:60:ae:ea:
         0c:66:7d:13:0b:a9:b5:53:ce:0c:1e:68:f2:84:0b:4f:c6:5b:
         41:48:5b:be:70:e5:4f:06:3f:0d:5a:b3:e3:8e:6c:ab:1b:21:
         76:d0:97:3f:e3:db:0f:63:57:ea:d6:ff:f0:a3:ed:04:a5:af:
         78:f3:a9:25:1b:79:7a:22:15:62:f6:61:90:16:e9:5f:18:4f:
         fb:ba:c2:d7:1d:3b:b5:db:e2:ab:a6:3e:f2:f4:65:8b:be:0d:
         84:d8:54:f3:5b:fe:7b:25:16:c9:19:f3:01:f1:d1:e5:e4:b1:
         fc:99:9c:e6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJDNjIxMTAvBgNVBAUTKDJCNEYzMjNDNThBNzc2QjRFNzUzODZERUU4MzcyMkUw
NDU2MjMyQzYwHhcNMjYwNzIwMTU0MDQwWhcNMjYwNzI3MTU0MDQwWjAYMRYwFAYD
VQQDEw02YTVlNDE3OC04ZDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtjy9IB0iq4ML/zs3QuXmpScM47MVKqSN1sBg5iVSN4u3HEOlvAp8wBIkdtvy
p8nilsWJ5KHc1cFO+CM0RtuclrBvoq/lfLKLbNu2QjOxREBDlsguDOzrT//UhWp8
4HHQQ0G5My0b+qUZ12Qw8izlQPSkWC6wY4YrjpwipN99DaaDCWLYjqqlbN5+kW3e
IA8T7O3A72DlpRc03M1N/DmlShERFxRFvNMkWQiZ5tLECYTLKO+BKf/WYBa03PRU
3tUFNWlpuC+wL571rYOH9PjtHBs7DZAySjJo0gUhwlYnDHb+CsrwAdRK92ZY+t4I
IitqtghgNaP0qvxQa+gfWEZeOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBFDhjZA
yfsTVNUCM3FHv+MpN37qMB8GA1UdIwQYMBaAFCtPMjxYp3a051OG3ug3IuBFYjLG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkM2Mi9FRTk1RkQ0MkI3
NjYxMUU5ODZDMEU1MTRDNEY5QUUwMi9LMDh5UEZpbmRyVG5VNGJlNkRjaTRFVmlN
c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0swOHlQRmluZHJUblU0YmU2RGNpNEVWaU1zWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QkM2Mi9FRTk1RkQ0MkI3NjYxMUU5ODZDMEU1MTRDNEY5QUUwMi9LMDh5UEZpbmRy
VG5VNGJlNkRjaTRFVmlNc1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA0ds/oPaWOpiGmb2bFxSwwXAL6okKDNFqx3sHvpYE5TbzklZ1voVNfwh5ZXk
Bm1QhJzBpehIs3rYAYZ/XyxuE5cuTTsZro9ipG4fBkDH6w/jPvBxLumxE9+FcOZB
nrYHYBoLIl5iU1kuv1keL87iy2W88Sl5kAty16N5ei5KDJ2Knvq1JwFItskEoqDl
YK7qDGZ9EwuptVPODB5o8oQLT8ZbQUhbvnDlTwY/DVqz445sqxshdtCXP+PbD2NX
6tb/8KPtBKWvePOpJRt5eiIVYvZhkBbpXxhP+7rC1x07tdviq6Y+8vRli74NhNhU
81v+eyUWyRnzAfHR5eSx/Jmc5g==
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:50:38 2026 by rpki-client