Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft
File:                     mbcL8gJe3c35KkfQTLdWrLBz3EU.mft (raw, json)
Hash identifier:          vifjsnzimOULl2EphrsgU2TB4RmqmdGPrYpnld23bjM=
Subject key identifier:   4F:99:26:B9:15:1D:F7:84:73:47:85:7F:1D:B2:EA:6C:65:C8:8E:7B
Authority key identifier: 99:B7:0B:F2:02:5E:DD:CD:F9:2A:47:D0:4C:B7:56:AC:B0:73:DC:45
Certificate issuer:       /CN=A912C7DC/serialNumber=99B70BF2025EDDCDF92A47D04CB756ACB073DC45
Certificate serial:       012A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft
Manifest number:          0126
Signing time:             Fri 17 Jul 2026 06:52:41 +0000
Manifest this update:     Fri 17 Jul 2026 06:52:40 +0000
Manifest next update:     Fri 24 Jul 2026 06:52:40 +0000
Files and hashes:         1: mbcL8gJe3c35KkfQTLdWrLBz3EU.crl (hash: wa5WqH1ey9MA4WvET2Li1iBYZ6cwz06fMEfanqlnzgg=)
                          2: E310D7E2C58B11EFBA44DE34C4F9AE02.roa (hash: QYBewwq2Jnoq3XiFtkZ6uq7GsNeS7PlzqiYcUXNMoXc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.crl
                          rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 06:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C7DC, serialNumber=99B70BF2025EDDCDF92A47D04CB756ACB073DC45
        Validity
            Not Before: Jul 17 06:52:40 2026 GMT
            Not After : Jul 24 06:52:40 2026 GMT
        Subject: CN=6a59d138-017e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b3:25:c1:77:f6:44:b1:28:f7:97:90:72:53:
                    be:bc:27:db:24:a4:eb:4f:c1:66:19:9b:2d:2a:13:
                    43:50:66:8a:be:19:cf:03:67:df:ef:51:34:2e:d4:
                    f2:50:47:d9:a2:af:36:54:8f:53:35:ba:a2:14:6b:
                    97:44:9e:23:f8:af:2b:9e:fe:db:55:26:da:90:69:
                    44:a4:b4:59:76:a2:f3:7f:bc:4a:2f:a9:48:f5:da:
                    72:8c:d9:6e:3f:fb:22:26:43:90:b9:0c:92:ee:74:
                    6e:c5:c6:d0:eb:4a:c8:02:9a:a7:26:34:45:35:a7:
                    aa:d6:cf:8c:c9:cd:0b:1b:f2:d4:77:84:67:a5:d3:
                    8f:c2:43:b8:ba:3a:af:2b:7e:da:da:89:36:da:46:
                    34:e3:5f:d7:a8:34:d6:6f:a6:17:f8:a8:ed:8d:a3:
                    43:d3:34:24:1c:c8:dd:02:d7:e9:18:41:63:ba:90:
                    63:49:17:54:21:69:d3:54:3b:f7:7e:5c:76:98:c0:
                    5e:ec:bf:0e:82:f4:26:de:93:29:1a:66:9d:43:74:
                    f6:da:80:48:b0:bb:f3:c7:ff:17:16:80:4e:ef:e2:
                    0e:41:f2:29:8c:84:0d:ca:c0:9f:bb:2e:4f:db:95:
                    58:67:70:c0:ff:43:86:69:2a:c6:0b:a2:ae:f1:65:
                    14:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:99:26:B9:15:1D:F7:84:73:47:85:7F:1D:B2:EA:6C:65:C8:8E:7B
            X509v3 Authority Key Identifier:
                keyid:99:B7:0B:F2:02:5E:DD:CD:F9:2A:47:D0:4C:B7:56:AC:B0:73:DC:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:90:43:7c:1a:e8:fd:e1:24:3b:46:14:9e:44:c1:32:a9:82:
         13:73:ec:38:07:59:45:88:d2:3c:5b:51:02:0c:f9:5f:46:a8:
         8e:16:39:7b:23:ae:dd:13:65:f2:42:82:97:fc:3b:a8:d4:28:
         02:2c:50:9a:ee:14:49:36:26:bf:ae:f7:4e:9a:da:6b:40:f3:
         81:08:87:dd:b3:66:98:7d:31:40:4e:81:36:c7:62:1b:0b:d8:
         12:98:44:93:96:ee:33:c6:3a:a0:11:35:76:59:fb:10:5d:74:
         d3:69:d6:9e:af:71:6f:10:5c:ac:0b:2b:53:88:cc:fa:b6:f2:
         a7:6e:e3:3f:1f:16:e2:f7:cb:f1:40:57:7c:41:34:31:1f:db:
         07:c6:80:81:a9:c4:4a:75:1d:d1:13:73:e6:92:ea:fd:2e:b5:
         b1:a1:cf:9f:4e:ee:67:42:4c:57:72:61:f8:23:79:94:f2:fb:
         28:b5:47:33:de:fa:5d:7d:c5:c6:c3:4a:c6:e7:3f:cc:ea:ff:
         87:4a:1d:99:68:2a:77:66:be:0b:da:c7:26:cd:08:9d:eb:3c:
         dd:31:31:65:56:81:49:2b:3a:f9:3b:5b:9b:7b:38:7d:a3:9b:
         d0:31:a7:7f:f1:7e:fb:e6:17:e3:42:9b:e5:23:52:00:93:5c:
         9c:1c:59:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM3REMxMTAvBgNVBAUTKDk5QjcwQkYyMDI1RUREQ0RGOTJBNDdEMDRDQjc1NkFD
QjA3M0RDNDUwHhcNMjYwNzE3MDY1MjQwWhcNMjYwNzI0MDY1MjQwWjAYMRYwFAYD
VQQDEw02YTU5ZDEzOC0wMTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsrMlwXf2RLEo95eQclO+vCfbJKTrT8FmGZstKhNDUGaKvhnPA2ff71E0LtTy
UEfZoq82VI9TNbqiFGuXRJ4j+K8rnv7bVSbakGlEpLRZdqLzf7xKL6lI9dpyjNlu
P/siJkOQuQyS7nRuxcbQ60rIApqnJjRFNaeq1s+Myc0LG/LUd4RnpdOPwkO4ujqv
K37a2ok22kY041/XqDTWb6YX+KjtjaND0zQkHMjdAtfpGEFjupBjSRdUIWnTVDv3
flx2mMBe7L8OgvQm3pMpGmadQ3T22oBIsLvzx/8XFoBO7+IOQfIpjIQNysCfuy5P
25VYZ3DA/0OGaSrGC6Ku8WUU4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE+ZJrkV
HfeEc0eFfx2y6mxlyI57MB8GA1UdIwQYMBaAFJm3C/ICXt3N+SpH0Ey3Vqywc9xF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzdEQy82REVGREI3MEM1
OEIxMUVGQjg3RTVGMzNDNEY5QUUwMi9tYmNMOGdKZTNjMzVLa2ZRVExkV3JMQnoz
RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21iY0w4Z0plM2MzNUtrZlFUTGRXckxCejNFVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QzdEQy82REVGREI3MEM1OEIxMUVGQjg3RTVGMzNDNEY5QUUwMi9tYmNMOGdKZTNj
MzVLa2ZRVExkV3JMQnozRVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmZBDfBro/eEkO0YUnkTBMqmCE3PsOAdZRYjSPFtRAgz5X0aojhY5eyOu3RNl
8kKCl/w7qNQoAixQmu4USTYmv673Tpraa0DzgQiH3bNmmH0xQE6BNsdiGwvYEphE
k5buM8Y6oBE1dln7EF1002nWnq9xbxBcrAsrU4jM+rbyp27jPx8W4vfL8UBXfEE0
MR/bB8aAganESnUd0RNz5pLq/S61saHPn07uZ0JMV3Jh+CN5lPL7KLVHM976XX3F
xsNKxuc/zOr/h0odmWgqd2a+C9rHJs0Ines83TExZVaBSSs6+Ttbm3s4faOb0DGn
f/F+++YX40Kb5SNSAJNcnBxZjw==
-----END CERTIFICATE-----
Generated at Sat Jul 18 08:15:51 2026 by rpki-client