Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft
File:                     CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft (raw, json)
Hash identifier:          5HskazETLtX2g172kB4rqNDch+zhl+rMMr+OxnjrZ70=
Subject key identifier:   F8:B8:3E:2A:40:0B:9A:9D:07:CA:24:9C:1F:33:25:FB:7D:9F:DF:D9
Authority key identifier: 0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46
Certificate issuer:       /CN=A9128C53/serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946
Certificate serial:       01FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft
Manifest number:          01F6
Signing time:             Mon 03 Aug 2026 04:26:19 +0000
Manifest this update:     Mon 03 Aug 2026 04:26:18 +0000
Manifest next update:     Mon 10 Aug 2026 04:26:18 +0000
Files and hashes:         1: CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl (hash: XBsbCIbLkfSz/nNPPc/eqppcZm3a+u1YO6YAW9jiT3A=)
                          2: 04A9BC6EDAC011EE94B8705AC4F9AE02.roa (hash: CCRIx6xx0eQTTafK35qMinnGOYOtSbUUlnFtAWNi/ek=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl
                          rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Aug 2026 04:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 507 (0x1fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128C53, serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946
        Validity
            Not Before: Aug  3 04:26:18 2026 GMT
            Not After : Aug 10 04:26:18 2026 GMT
        Subject: CN=6a70186a-4a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f8:71:57:de:9f:80:3d:89:61:74:29:86:34:
                    c2:94:ae:f5:86:23:c1:ff:32:8d:b8:35:01:2f:17:
                    87:85:90:c1:66:91:8d:de:7b:d8:50:23:c9:32:0c:
                    83:83:78:03:4c:e9:cd:11:db:9b:78:f8:72:f1:d0:
                    75:26:0a:d4:1d:50:50:45:0a:94:e2:eb:fb:21:72:
                    8e:d2:bd:01:eb:a9:65:33:7f:ee:07:78:bf:16:5f:
                    fb:39:de:6d:3c:4e:3d:08:c5:09:4d:50:e2:bb:b1:
                    4f:46:01:bb:d8:fc:86:51:11:4f:41:05:94:da:8f:
                    ce:90:62:ab:47:2a:da:25:e6:a3:8b:1e:f2:44:5d:
                    e8:00:b7:1f:0d:48:9a:03:6c:2d:fb:85:6f:6e:85:
                    ec:a3:d1:43:06:ce:b6:9a:52:86:22:13:2f:e2:46:
                    ea:24:f1:5d:3f:1f:90:89:dc:a4:13:f7:86:2f:9f:
                    2e:5a:fb:71:c8:a9:e4:63:11:cd:70:78:d5:07:e3:
                    26:0d:d4:af:0a:98:17:ae:38:6b:d3:19:1f:d7:11:
                    a3:a9:5f:7b:16:16:e8:8d:43:98:2c:69:57:3e:ca:
                    a8:8f:eb:c7:93:30:54:57:56:5c:53:e5:b9:63:0c:
                    88:68:5a:97:a5:6b:70:d0:5f:fc:e2:ca:97:ab:1c:
                    d0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B8:3E:2A:40:0B:9A:9D:07:CA:24:9C:1F:33:25:FB:7D:9F:DF:D9
            X509v3 Authority Key Identifier:
                keyid:0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:f1:a9:5e:ed:04:df:61:34:d4:cb:e2:a5:05:ce:3c:43:72:
         c4:4d:40:3d:1f:6c:6b:2b:10:64:4e:10:06:70:19:84:62:22:
         96:10:d7:82:9f:f2:0e:22:7f:78:20:28:32:88:3f:4c:d4:5c:
         eb:2e:af:2d:76:bc:4d:e8:d3:88:50:c0:a7:c9:65:e2:36:bf:
         90:82:01:a1:a1:32:2a:f9:bc:b6:6e:97:11:4e:c3:c7:e7:cb:
         8b:6e:ee:e8:de:06:d6:a8:85:20:01:5f:cc:10:69:48:45:43:
         76:cc:ab:70:7f:f2:66:5f:bc:42:e1:29:8e:81:d9:d8:36:d4:
         ec:1c:75:4b:a3:56:4c:b8:fa:71:1f:0b:55:b4:a6:bd:c9:ce:
         fe:97:20:a7:3f:47:10:9b:85:ea:0a:9d:60:30:34:c9:74:87:
         21:f1:49:ad:6a:48:2b:72:0e:a8:5d:f1:f5:9f:8b:4b:f4:38:
         50:0f:3b:17:09:82:60:65:dd:f8:c3:48:c5:c4:ad:e6:34:0d:
         45:a3:40:af:fc:3e:61:42:91:f4:f5:71:31:3b:bb:05:bb:18:
         2e:3b:8c:1f:6b:bd:a1:03:51:c3:72:2f:3b:7d:22:cd:0c:a1:
         3f:86:a4:28:bf:01:46:93:09:af:3a:d8:25:55:85:70:9e:dc:
         e6:10:f3:57
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjhDNTMxMTAvBgNVBAUTKDBBNDVDNTBFMzcyMzVBMkFBMjIzRTlGMzEzMzFGNjk0
MjhFMEQ5NDYwHhcNMjYwODAzMDQyNjE4WhcNMjYwODEwMDQyNjE4WjAYMRYwFAYD
VQQDEw02YTcwMTg2YS00YTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuvhxV96fgD2JYXQphjTClK71hiPB/zKNuDUBLxeHhZDBZpGN3nvYUCPJMgyD
g3gDTOnNEdubePhy8dB1JgrUHVBQRQqU4uv7IXKO0r0B66llM3/uB3i/Fl/7Od5t
PE49CMUJTVDiu7FPRgG72PyGURFPQQWU2o/OkGKrRyraJeajix7yRF3oALcfDUia
A2wt+4VvboXso9FDBs62mlKGIhMv4kbqJPFdPx+QidykE/eGL58uWvtxyKnkYxHN
cHjVB+MmDdSvCpgXrjhr0xkf1xGjqV97FhbojUOYLGlXPsqoj+vHkzBUV1ZcU+W5
YwyIaFqXpWtw0F/84sqXqxzQjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPi4PipA
C5qdB8oknB8zJft9n9/ZMB8GA1UdIwQYMBaAFApFxQ43I1oqoiPp8xMx9pQo4NlG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEM1My9FQTZFQ0UwQTkz
ODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldpcWlJLW56RXpIMmxDamcy
VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NrWEZEamNqV2lxaUktbnpFekgybENqZzJVWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OEM1My9FQTZFQ0UwQTkzODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldp
cWlJLW56RXpIMmxDamcyVVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuPGpXu0E32E01MvipQXOPENyxE1APR9saysQZE4QBnAZhGIilhDXgp/yDiJ/
eCAoMog/TNRc6y6vLXa8TejTiFDAp8ll4ja/kIIBoaEyKvm8tm6XEU7Dx+fLi27u
6N4G1qiFIAFfzBBpSEVDdsyrcH/yZl+8QuEpjoHZ2DbU7Bx1S6NWTLj6cR8LVbSm
vcnO/pcgpz9HEJuF6gqdYDA0yXSHIfFJrWpIK3IOqF3x9Z+LS/Q4UA87FwmCYGXd
+MNIxcSt5jQNRaNAr/w+YUKR9PVxMTu7BbsYLjuMH2u9oQNRw3IvO30izQyhP4ak
KL8BRpMJrzrYJVWFcJ7c5hDzVw==
-----END CERTIFICATE-----
Generated at Tue Aug 4 13:41:36 2026 by rpki-client