Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft
File:                     8HDB502tEidOj1dd_gu3wU69yZA.mft (raw, json)
Hash identifier:          58/X0NstrM4ZniZHuJ2n4CSiCEm3+QqTepXdrYsOTGs=
Subject key identifier:   07:53:79:DB:93:82:E2:72:21:63:8A:9A:7B:9B:0A:8C:38:42:23:B2
Authority key identifier: F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90
Certificate issuer:       /CN=A91348DF/serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990
Certificate serial:       0418
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft
Manifest number:          0411
Signing time:             Tue 21 Jul 2026 01:15:38 +0000
Manifest this update:     Tue 21 Jul 2026 01:15:37 +0000
Manifest next update:     Tue 28 Jul 2026 01:15:37 +0000
Files and hashes:         1: 8HDB502tEidOj1dd_gu3wU69yZA.crl (hash: iL71DgcJ7hXXOT9qnm5CUbRRvoWOYHKY+JcH3hwSEbQ=)
                          2: 06A2C3E2C1E211EC86C79687C4F9AE02.roa (hash: XV4+6RexVCN6qV3gQG680PT5iGhrAgYP0jd0N7lfisU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl
                          rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 01:15:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1048 (0x418)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91348DF, serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990
        Validity
            Not Before: Jul 21 01:15:37 2026 GMT
            Not After : Jul 28 01:15:37 2026 GMT
        Subject: CN=6a5ec83a-b9e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1f:e0:f0:9a:6a:fd:eb:69:8c:13:28:1e:51:
                    e9:c5:cf:9b:9f:cc:43:ef:6a:d8:61:0b:0e:63:a7:
                    05:c4:61:21:25:98:b9:92:4c:b8:f3:de:8c:55:ec:
                    6b:c6:a2:06:fb:e4:81:fb:60:a8:14:1b:0f:26:06:
                    fd:2f:b5:a6:50:d2:48:ce:1f:e2:fb:0f:4c:68:f3:
                    ca:02:ee:1f:8b:c1:1a:39:00:f1:b6:06:9f:01:1e:
                    62:2e:2c:2d:c4:5d:57:5a:28:65:86:8b:3b:f7:48:
                    d4:7c:4d:93:d0:c3:c6:97:6d:f6:6b:d4:85:be:ae:
                    79:38:99:4b:21:c3:20:fe:01:3b:80:19:25:b3:05:
                    51:6f:42:60:04:12:4b:3e:73:3b:48:d9:93:ca:c0:
                    18:67:f4:f1:85:0c:95:6f:65:49:a3:b9:40:a1:d4:
                    bd:1e:ff:b8:3a:0f:25:1c:d2:da:e9:41:41:cc:33:
                    76:a3:f7:25:cf:bb:f8:53:17:c5:12:fc:87:d8:6a:
                    50:d2:0b:17:da:96:d3:6d:65:53:c7:69:b9:11:73:
                    49:2d:b2:e4:0c:70:78:89:29:a5:45:e7:04:68:0a:
                    61:d0:34:da:36:30:ae:61:89:20:a9:c6:e9:d4:a0:
                    3d:f2:5e:71:a0:f8:5d:69:92:90:cc:1d:cb:d4:90:
                    a1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:53:79:DB:93:82:E2:72:21:63:8A:9A:7B:9B:0A:8C:38:42:23:B2
            X509v3 Authority Key Identifier:
                keyid:F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:33:45:89:f9:a3:25:cf:c0:b6:df:15:0d:5c:a8:38:6a:49:
         b8:a1:a8:01:fd:82:6e:ff:3d:3c:95:7d:0a:63:96:c9:f1:e2:
         a7:dc:24:b0:92:bc:36:1f:18:03:fd:b9:94:52:96:72:7b:57:
         16:da:6b:ed:4e:80:c9:b2:2f:ab:e7:77:93:5c:61:fe:10:7e:
         51:b8:02:c9:9e:d6:db:0b:87:c7:9a:fe:03:67:f9:77:b4:0e:
         74:b4:0e:3a:a8:c9:2f:b5:6d:15:89:0a:89:69:fb:4b:93:3f:
         84:21:40:0e:55:7e:e0:3e:16:60:8d:19:57:83:68:7e:3e:84:
         79:b3:2a:85:a6:82:20:94:e0:42:6c:ad:8f:f6:d9:31:0b:9c:
         c8:07:f2:90:b4:a4:5b:7b:5f:6a:4d:41:6a:5d:3b:3b:dd:20:
         18:bc:be:5e:37:25:15:dd:ae:19:83:9d:48:df:49:03:b3:53:
         35:4b:99:b0:89:8a:f2:3d:25:b6:04:fc:52:42:b0:df:e5:4f:
         ff:fc:f4:ed:89:40:5b:bd:25:ed:e7:b6:98:03:6a:0f:d3:b4:
         85:07:5c:98:aa:53:b2:87:9b:78:d7:8d:3c:a5:86:a5:cf:39:
         0e:02:9a:22:46:ad:be:4f:51:61:02:7b:72:4f:a4:54:bf:4f:
         a3:0c:92:f3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQ4REYxMTAvBgNVBAUTKEYwNzBDMUU3NERBRDEyMjc0RThGNTc1REZFMEJCN0Mx
NEVCREM5OTAwHhcNMjYwNzIxMDExNTM3WhcNMjYwNzI4MDExNTM3WjAYMRYwFAYD
VQQDEw02YTVlYzgzYS1iOWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2h/g8Jpq/etpjBMoHlHpxc+bn8xD72rYYQsOY6cFxGEhJZi5kky4896MVexr
xqIG++SB+2CoFBsPJgb9L7WmUNJIzh/i+w9MaPPKAu4fi8EaOQDxtgafAR5iLiwt
xF1XWihlhos790jUfE2T0MPGl232a9SFvq55OJlLIcMg/gE7gBklswVRb0JgBBJL
PnM7SNmTysAYZ/TxhQyVb2VJo7lAodS9Hv+4Og8lHNLa6UFBzDN2o/clz7v4UxfF
EvyH2GpQ0gsX2pbTbWVTx2m5EXNJLbLkDHB4iSmlRecEaAph0DTaNjCuYYkgqcbp
1KA98l5xoPhdaZKQzB3L1JChXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAdTeduT
guJyIWOKmnubCow4QiOyMB8GA1UdIwQYMBaAFPBwwedNrRInTo9XXf4Lt8FOvcmQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDhERi9GMDJCNURCQ0Mx
REQxMUVDQjk3QjlDN0ZDNEY5QUUwMi84SERCNTAydEVpZE9qMWRkX2d1M3dVNjl5
WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhIREI1MDJ0RWlkT2oxZGRfZ3Uzd1U2OXlaQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDhERi9GMDJCNURCQ0MxREQxMUVDQjk3QjlDN0ZDNEY5QUUwMi84SERCNTAydEVp
ZE9qMWRkX2d1M3dVNjl5WkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIjNFifmjJc/Att8VDVyoOGpJuKGoAf2Cbv89PJV9CmOWyfHip9wksJK8Nh8Y
A/25lFKWcntXFtpr7U6AybIvq+d3k1xh/hB+UbgCyZ7W2wuHx5r+A2f5d7QOdLQO
OqjJL7VtFYkKiWn7S5M/hCFADlV+4D4WYI0ZV4Nofj6EebMqhaaCIJTgQmytj/bZ
MQucyAfykLSkW3tfak1Bal07O90gGLy+XjclFd2uGYOdSN9JA7NTNUuZsImK8j0l
tgT8UkKw3+VP//z07YlAW70l7ee2mANqD9O0hQdcmKpTsoebeNeNPKWGpc85DgKa
Ikatvk9RYQJ7ck+kVL9PowyS8w==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:33:04 2026 by rpki-client