Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft
File:                     gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft (raw, json)
Hash identifier:          lhxGD/8FnajSIHLJ8MsSYQhE4dVAdB6t83B8NklnKrk=
Subject key identifier:   55:D8:B9:08:37:8A:49:35:5F:E3:6F:19:54:81:F1:28:6B:AA:D6:0D
Authority key identifier: 81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24
Certificate issuer:       /CN=A912096C/serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124
Certificate serial:       0843
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft
Manifest number:          0838
Signing time:             Tue 18 Aug 2026 21:25:21 +0000
Manifest this update:     Tue 18 Aug 2026 21:25:21 +0000
Manifest next update:     Tue 25 Aug 2026 21:25:21 +0000
Files and hashes:         1: gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl (hash: Nyc8VfgGaOYz5qCIuDUnhH1USgqW60qj3HeGcE9lkrE=)
                          2: 7D7B467CE06011EDBB10FD53C4F9AE02.roa (hash: tFjfeFvirq4K21vPq+LIVuacIhGqj3/ek6525SEORBM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl
                          rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2115 (0x843)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912096C, serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124
        Validity
            Not Before: Aug 18 21:25:21 2026 GMT
            Not After : Aug 25 21:25:21 2026 GMT
        Subject: CN=6a84cdc1-82b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c5:12:e5:54:c7:fc:39:b5:a1:6d:c7:35:2e:
                    37:cd:36:52:3a:e3:14:c7:b5:73:8b:fe:6c:9f:e2:
                    1a:b8:15:44:52:c8:d8:b9:28:f5:ac:cd:bd:93:c1:
                    14:a3:a0:02:37:2f:83:a6:8d:5a:4a:2f:89:f2:46:
                    36:7d:62:f8:b8:cf:1d:c3:05:12:ee:7d:85:eb:88:
                    01:4e:45:70:3e:80:2c:31:e6:b2:c8:11:83:71:bc:
                    35:c2:74:36:a5:0b:8d:32:e9:1f:00:53:70:2f:ed:
                    09:1d:8d:a1:3c:fa:aa:7b:50:f0:8a:c8:39:de:67:
                    3c:03:d9:2d:0a:d3:5d:25:18:d7:d3:b8:a5:62:e0:
                    9d:1c:44:a0:d7:0c:bb:39:28:c3:ab:ba:e4:02:b3:
                    fc:28:4a:bc:c2:4a:25:db:80:ca:74:2c:96:97:d6:
                    3e:fd:c1:73:b0:50:f2:e6:31:67:5a:eb:a8:17:88:
                    96:f1:81:fb:55:a8:4a:77:6d:8b:6a:5a:40:b1:af:
                    1d:82:6b:17:59:f7:a6:6a:b9:8a:79:fa:d1:e8:a8:
                    a1:3e:80:f9:01:a0:75:a1:9d:fb:7f:c9:3c:c5:e0:
                    4a:30:df:a4:04:23:46:ba:b1:0f:c6:64:bb:d7:37:
                    d0:c3:d5:eb:74:ce:25:46:89:3c:44:7b:32:65:8b:
                    60:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D8:B9:08:37:8A:49:35:5F:E3:6F:19:54:81:F1:28:6B:AA:D6:0D
            X509v3 Authority Key Identifier:
                keyid:81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:5b:38:bb:9c:3c:6b:bb:b7:3f:24:ce:ed:b8:ed:ea:88:53:
         ad:41:33:90:2a:84:f9:28:d1:ac:5b:55:2c:70:d0:83:f6:84:
         7b:bb:44:33:95:12:e5:ae:b6:0d:42:05:f1:26:7f:11:a6:84:
         c8:a0:ee:a6:69:b8:6c:d8:0e:df:2e:33:48:ad:e4:8b:ed:26:
         88:9d:9b:25:2f:26:08:af:e0:88:b3:6f:74:7b:5b:00:29:56:
         83:02:34:e1:32:f1:2a:da:d7:72:f9:b1:93:5e:dd:f9:cf:8f:
         6e:4f:af:11:48:7d:e8:c3:cb:3d:6f:db:85:22:9b:55:63:2e:
         3b:26:f5:b4:c4:9d:8c:28:17:ca:83:47:c2:90:86:e7:8c:6d:
         de:a0:98:04:c6:81:ad:6f:f9:f6:43:11:e8:6a:36:bf:6f:2a:
         51:ed:81:78:68:42:9f:0c:b5:c2:4c:a5:d1:22:47:e3:fd:73:
         3d:70:cd:9a:a5:1d:ae:81:5d:65:59:fa:ef:04:b6:6f:2e:1c:
         94:58:fa:55:89:5d:4f:70:e2:de:dc:de:76:ad:ba:39:5f:e4:
         e4:02:e3:c1:a3:04:b6:37:d7:cf:32:99:62:f3:9a:16:8c:6d:
         95:f9:46:1b:22:60:fb:fa:97:fe:31:59:61:90:6f:a2:e8:7b:
         9e:9a:51:5a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjA5NkMxMTAvBgNVBAUTKDgxOTc2NjNBN0Y2MzQ3RDU5MUI2QjJCOUFERDVBMkQ1
NzRFOTExMjQwHhcNMjYwODE4MjEyNTIxWhcNMjYwODI1MjEyNTIxWjAYMRYwFAYD
VQQDEw02YTg0Y2RjMS04MmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtsUS5VTH/Dm1oW3HNS43zTZSOuMUx7Vzi/5sn+IauBVEUsjYuSj1rM29k8EU
o6ACNy+Dpo1aSi+J8kY2fWL4uM8dwwUS7n2F64gBTkVwPoAsMeayyBGDcbw1wnQ2
pQuNMukfAFNwL+0JHY2hPPqqe1Dwisg53mc8A9ktCtNdJRjX07ilYuCdHESg1wy7
OSjDq7rkArP8KEq8wkol24DKdCyWl9Y+/cFzsFDy5jFnWuuoF4iW8YH7VahKd22L
alpAsa8dgmsXWfemarmKefrR6KihPoD5AaB1oZ37f8k8xeBKMN+kBCNGurEPxmS7
1zfQw9XrdM4lRok8RHsyZYtgTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFXYuQg3
ikk1X+NvGVSB8ShrqtYNMB8GA1UdIwQYMBaAFIGXZjp/Y0fVkbayua3VotV06REk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk2Qy8xRDMxQzE4NDI4
OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5V1J0cks1cmRXaTFYVHBF
U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2daZG1PbjlqUjlXUnRySzVyZFdpMVhUcEVTUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MDk2Qy8xRDMxQzE4NDI4OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5
V1J0cks1cmRXaTFYVHBFU1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfFs4u5w8a7u3PyTO7bjt6ohTrUEzkCqE+SjRrFtVLHDQg/aEe7tEM5US5a62
DUIF8SZ/EaaEyKDupmm4bNgO3y4zSK3ki+0miJ2bJS8mCK/giLNvdHtbAClWgwI0
4TLxKtrXcvmxk17d+c+Pbk+vEUh96MPLPW/bhSKbVWMuOyb1tMSdjCgXyoNHwpCG
54xt3qCYBMaBrW/59kMR6Go2v28qUe2BeGhCnwy1wkyl0SJH4/1zPXDNmqUdroFd
ZVn67wS2by4clFj6VYldT3Di3tzedq26OV/k5ALjwaMEtjfXzzKZYvOaFoxtlflG
GyJg+/qX/jFZYZBvouh7nppRWg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:02:00 2026 by rpki-client