Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131821/20129142809F11F1B191525D8CA30FBC/g38GODxsxdOK-dN_AsDIiguFaUY.mft
File:                     g38GODxsxdOK-dN_AsDIiguFaUY.mft (raw, json)
Hash identifier:          HojM0G0NFK4DInmiRsNchLdfXeN9Ewywda8J1IMGtUM=
Subject key identifier:   C5:9E:0C:C3:D5:42:48:EB:58:44:E0:2E:F3:7D:87:C2:BC:03:78:56
Authority key identifier: 83:7F:06:38:3C:6C:C5:D3:8A:F9:D3:7F:02:C0:C8:8A:0B:85:69:46
Certificate issuer:       /CN=A9131821/serialNumber=837F06383C6CC5D38AF9D37F02C0C88A0B856946
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g38GODxsxdOK-dN_AsDIiguFaUY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131821/20129142809F11F1B191525D8CA30FBC/g38GODxsxdOK-dN_AsDIiguFaUY.mft
Manifest number:          14
Signing time:             Wed 19 Aug 2026 09:46:09 +0000
Manifest this update:     Wed 19 Aug 2026 09:46:09 +0000
Manifest next update:     Wed 26 Aug 2026 09:46:09 +0000
Files and hashes:         1: g38GODxsxdOK-dN_AsDIiguFaUY.crl (hash: kkInPz7ln3y6TPswgD7tUx3mPYo78XIpFGQk9KdKmxY=)
                          2: B786F6BE80A211F1BEE50EFD8CA30FBC.roa (hash: VjMW2cban0Alef8+4ZH9ZJyPTWQbnSuuC5ci8mGfk0s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131821/20129142809F11F1B191525D8CA30FBC/g38GODxsxdOK-dN_AsDIiguFaUY.crl
                          rsync://rpki.apnic.net/member_repository/A9131821/20129142809F11F1B191525D8CA30FBC/g38GODxsxdOK-dN_AsDIiguFaUY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g38GODxsxdOK-dN_AsDIiguFaUY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131821, serialNumber=837F06383C6CC5D38AF9D37F02C0C88A0B856946
        Validity
            Not Before: Aug 19 09:46:09 2026 GMT
            Not After : Aug 26 09:46:09 2026 GMT
        Subject: CN=6a857b61-4127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3c:d3:b9:88:28:0e:2f:10:d8:5f:09:67:af:
                    14:2b:76:a2:e7:60:19:c8:24:65:7f:3b:11:95:51:
                    82:d8:c0:3a:77:01:50:43:d9:02:42:9d:a1:e2:db:
                    c3:65:2f:e6:53:98:74:5c:31:df:b3:88:a0:77:07:
                    56:32:37:3c:80:d1:99:b2:39:81:8d:7c:1e:f0:bc:
                    96:81:15:e9:50:3b:b2:68:ad:e1:1e:e3:c4:f8:93:
                    89:93:48:09:45:bb:14:05:4d:fb:8a:51:8f:fd:68:
                    05:26:16:5d:d5:4e:2d:79:16:e0:1c:29:3a:d8:16:
                    ac:05:63:91:b5:ff:aa:cc:38:96:82:cb:a6:65:2c:
                    1e:4e:2d:ec:79:f2:cd:d8:30:3a:32:81:92:64:5c:
                    93:0c:32:c5:f0:0f:ff:0d:93:f3:50:a3:2e:1e:9d:
                    65:5b:7f:5b:06:14:47:fc:c0:7e:25:3e:21:3f:82:
                    bf:5e:a6:34:0b:e4:f8:31:92:a9:c0:8c:a4:61:a2:
                    74:11:43:f8:38:8b:e0:db:49:53:6a:fb:21:10:e5:
                    65:1d:bb:8c:70:92:c5:e9:d7:27:51:6e:ee:07:35:
                    bb:54:83:f4:dd:fc:27:5d:0d:7b:2e:63:50:d3:fc:
                    c8:fa:ac:9d:9c:ad:94:4f:38:ca:16:c0:08:71:03:
                    38:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9E:0C:C3:D5:42:48:EB:58:44:E0:2E:F3:7D:87:C2:BC:03:78:56
            X509v3 Authority Key Identifier:
                keyid:83:7F:06:38:3C:6C:C5:D3:8A:F9:D3:7F:02:C0:C8:8A:0B:85:69:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131821/20129142809F11F1B191525D8CA30FBC/g38GODxsxdOK-dN_AsDIiguFaUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g38GODxsxdOK-dN_AsDIiguFaUY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131821/20129142809F11F1B191525D8CA30FBC/g38GODxsxdOK-dN_AsDIiguFaUY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:2c:5b:4e:57:9d:4c:2c:08:9f:40:c4:ba:ca:6a:47:ff:ef:
         c8:da:64:0a:21:8e:aa:c4:13:f9:15:4e:a1:59:d7:c8:59:ec:
         f3:78:c0:c4:c7:f7:37:31:2f:e5:38:8c:e1:07:86:7e:14:ac:
         0c:f0:97:f0:66:93:e7:8d:a8:67:79:f5:f4:37:f2:f5:43:c1:
         81:a2:c1:d3:6d:18:2a:3a:69:bb:fb:be:cd:97:35:77:30:6c:
         07:f9:92:f2:5d:89:cc:c9:86:c4:c6:5f:5a:aa:79:82:17:fe:
         70:0f:53:7c:21:58:bc:bb:bd:02:95:c7:84:04:4a:44:8e:82:
         79:27:a0:ae:9c:2c:48:ba:77:a4:8e:49:dd:b7:73:c4:8e:23:
         9d:1c:a6:64:7d:9c:25:49:65:59:81:2d:ff:5b:76:f7:8a:5d:
         13:ef:65:74:71:5c:66:83:91:af:0b:68:4d:99:f3:87:03:09:
         5e:00:7c:c9:c8:00:00:e4:5e:64:8d:09:51:5d:be:8e:ec:f8:
         a1:81:74:31:09:03:d9:7f:d7:7a:fe:a7:bc:fc:b6:c7:4e:2c:
         d5:28:65:a3:18:c4:aa:89:f9:ba:8f:f6:7e:0c:a3:70:66:4a:
         65:9e:b4:3e:62:ff:55:98:33:1a:b7:b1:3c:20:f7:3e:bd:8f:
         42:cd:d4:dc
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MTgyMTExMC8GA1UEBRMoODM3RjA2MzgzQzZDQzVEMzhBRjlEMzdGMDJDMEM4OEEw
Qjg1Njk0NjAeFw0yNjA4MTkwOTQ2MDlaFw0yNjA4MjYwOTQ2MDlaMBgxFjAUBgNV
BAMTDTZhODU3YjYxLTQxMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDIPNO5iCgOLxDYXwlnrxQrdqLnYBnIJGV/OxGVUYLYwDp3AVBD2QJCnaHi28Nl
L+ZTmHRcMd+ziKB3B1YyNzyA0ZmyOYGNfB7wvJaBFelQO7JoreEe48T4k4mTSAlF
uxQFTfuKUY/9aAUmFl3VTi15FuAcKTrYFqwFY5G1/6rMOJaCy6ZlLB5OLex58s3Y
MDoygZJkXJMMMsXwD/8Nk/NQoy4enWVbf1sGFEf8wH4lPiE/gr9epjQL5PgxkqnA
jKRhonQRQ/g4i+DbSVNq+yEQ5WUdu4xwksXp1ydRbu4HNbtUg/Td/CddDXsuY1DT
/Mj6rJ2crZRPOMoWwAhxAzjfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxZ4Mw9VC
SOtYROAu832HwrwDeFYwHwYDVR0jBBgwFoAUg38GODxsxdOK+dN/AsDIiguFaUYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxODIxLzIwMTI5MTQyODA5
RjExRjFCMTkxNTI1RDhDQTMwRkJDL2czOEdPRHhzeGRPSy1kTl9Bc0RJaWd1RmFV
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZzM4R09EeHN4ZE9LLWROX0FzRElpZ3VGYVVZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx
ODIxLzIwMTI5MTQyODA5RjExRjFCMTkxNTI1RDhDQTMwRkJDL2czOEdPRHhzeGRP
Sy1kTl9Bc0RJaWd1RmFVWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAjLFtOV51MLAifQMS6ympH/+/I2mQKIY6qxBP5FU6hWdfIWezzeMDEx/c3MS/l
OIzhB4Z+FKwM8JfwZpPnjahnefX0N/L1Q8GBosHTbRgqOmm7+77NlzV3MGwH+ZLy
XYnMyYbExl9aqnmCF/5wD1N8IVi8u70ClceEBEpEjoJ5J6CunCxIunekjkndt3PE
jiOdHKZkfZwlSWVZgS3/W3b3il0T72V0cVxmg5GvC2hNmfOHAwleAHzJyAAA5F5k
jQlRXb6O7PihgXQxCQPZf9d6/qe8/LbHTizVKGWjGMSqifm6j/Z+DKNwZkplnrQ+
Yv9VmDMat7E8IPc+vY9CzdTc
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:44:29 2026 by rpki-client