Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft
File:                     m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft (raw, json)
Hash identifier:          qG9lsdYBAauJFOOWojEBrgzHzE60W4jFeaBJGi4uaGY=
Subject key identifier:   64:75:D7:F6:90:C1:04:CA:A5:59:CD:31:36:A2:D8:FA:A7:82:B8:D9
Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4
Certificate issuer:       /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4
Certificate serial:       27AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft
Manifest number:          2722
Signing time:             Wed 12 Aug 2026 15:37:22 +0000
Manifest this update:     Wed 12 Aug 2026 15:37:21 +0000
Manifest next update:     Wed 19 Aug 2026 15:37:21 +0000
Files and hashes:         1: m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl (hash: CFysCKCB+nATIrz+pCZ1mwYLthenXTZa/JQDgsQjDWk=)
                          2: 8ZyB5Nc2gIY5ylh7rhnl6Cy2gbw.asa (hash: +Pjl1MLAprkwiqwhT673Q9jFse4Elz7TYi7+ZiBgGbI=)
                          3: 9qAcg6cCriNo_EL5rFif8L2qvyQ.asa (hash: GDoXzuebgCv+n7JB5o6wM41UcS8TK2ToFJTNzWZ7MQ4=)
                          4: 1818C91A5C1611F0AEC3F02BC4F9AE02.roa (hash: vvlwkhzUvE0FKB5grEYGUNi8KcaEXKrEcNbY2LoLmZ8=)
                          5: 694FA6C678B511F0B9F98C80C4F9AE02.roa (hash: 8bcJT2SUfJvBhjjxVcOLkV67/1UHWnWs/wyeZ8062Mk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl
                          rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Aug 2026 15:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10159 (0x27af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143DB0, serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4
        Validity
            Not Before: Aug 12 15:37:21 2026 GMT
            Not After : Aug 19 15:37:21 2026 GMT
        Subject: CN=6a7c9332-baa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8a:b8:dc:4a:a2:04:aa:a3:38:7c:b4:e1:37:
                    ef:cc:0c:05:c0:c1:a7:ea:9d:a7:ca:4e:d4:4a:f9:
                    06:c5:ce:46:9d:e2:32:3d:f3:e3:7b:73:3c:b7:33:
                    d1:ac:67:01:12:64:af:48:f1:92:28:ad:7b:97:63:
                    7d:c3:d2:a8:bb:76:fd:ca:a9:7f:81:9d:ad:1a:68:
                    12:6c:9b:b4:87:ef:0c:ed:34:6e:40:9d:38:0e:8b:
                    06:7d:1c:d3:4f:8d:ca:94:46:01:96:8f:99:27:f3:
                    dc:da:e7:39:47:10:52:35:21:8f:f6:5e:c5:8a:a4:
                    1f:28:3f:54:e8:04:97:af:f5:91:7b:5f:72:4b:26:
                    ca:7e:b9:48:8e:80:d3:64:58:f9:e6:c2:85:5a:48:
                    ee:cc:fc:f0:5c:6f:54:5b:b0:e3:dd:85:69:1b:47:
                    62:88:b1:19:a2:28:d8:d0:fe:81:26:4d:a9:9d:c4:
                    ae:90:c4:95:7a:9f:b2:8a:53:d1:9c:98:b7:d4:f0:
                    e5:1b:13:28:57:7a:b7:17:c2:89:a7:13:77:d2:03:
                    42:49:0c:e9:16:6f:9a:98:28:19:83:58:94:ec:49:
                    6f:d0:a0:a8:7a:3f:47:b5:72:69:c7:81:18:03:9c:
                    71:51:cb:da:d2:e7:6d:5a:9d:ec:65:bf:92:8f:ce:
                    2e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:75:D7:F6:90:C1:04:CA:A5:59:CD:31:36:A2:D8:FA:A7:82:B8:D9
            X509v3 Authority Key Identifier:
                keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:bd:fa:9f:c1:89:83:2e:7e:14:95:23:19:a6:94:8d:0d:cf:
         c3:1a:17:a2:1c:ed:7c:69:a3:47:7f:79:32:fa:99:3f:55:72:
         18:e7:93:db:3f:8c:29:2e:33:26:b8:27:2c:6b:c3:bd:35:7d:
         6d:c7:1d:77:33:f2:a8:e7:27:9c:66:cc:94:50:63:63:91:b9:
         8f:14:43:d2:94:89:00:ec:c9:58:f4:18:17:13:51:6b:22:f0:
         49:69:81:ba:0b:1f:42:00:af:89:19:61:34:2f:ab:c1:d3:ee:
         8e:ff:b4:9a:45:be:47:cc:c7:47:32:2a:e9:f3:56:ad:48:79:
         69:02:9b:ef:97:61:a5:e9:07:65:97:be:bc:14:8a:cb:ba:9d:
         aa:a9:35:81:fc:a0:f6:66:a2:93:d6:b6:7f:19:2c:f2:00:9e:
         39:74:f7:3c:22:4a:76:f6:df:aa:45:e1:17:9b:9b:ec:e7:da:
         3a:7f:47:51:92:74:2e:5c:5d:e8:6e:30:80:28:a3:86:ab:29:
         ef:3a:1b:fc:7a:9e:f2:d3:24:8d:5f:3a:e4:66:eb:71:91:13:
         9f:73:57:71:5f:47:16:3d:bf:52:e9:b7:29:cf:91:cf:a9:56:
         d5:26:9f:bc:d7:ec:40:88:6b:20:58:3a:f6:f3:bc:0f:03:e7:
         a3:41:db:3a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJ68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDNEQjAxMTAvBgNVBAUTKDlCQzc2NTFBQzRCQUJGOEM0NDc4NTM0RkFEQTYxMEFD
REE3NDZCRDQwHhcNMjYwODEyMTUzNzIxWhcNMjYwODE5MTUzNzIxWjAYMRYwFAYD
VQQDEw02YTdjOTMzMi1iYWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo4q43EqiBKqjOHy04TfvzAwFwMGn6p2nyk7USvkGxc5GneIyPfPje3M8tzPR
rGcBEmSvSPGSKK17l2N9w9Kou3b9yql/gZ2tGmgSbJu0h+8M7TRuQJ04DosGfRzT
T43KlEYBlo+ZJ/Pc2uc5RxBSNSGP9l7FiqQfKD9U6ASXr/WRe19ySybKfrlIjoDT
ZFj55sKFWkjuzPzwXG9UW7Dj3YVpG0diiLEZoijY0P6BJk2pncSukMSVep+yilPR
nJi31PDlGxMoV3q3F8KJpxN30gNCSQzpFm+amCgZg1iU7Elv0KCoej9HtXJpx4EY
A5xxUcva0udtWp3sZb+Sj84uyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGR11/aQ
wQTKpVnNMTai2PqngrjZMB8GA1UdIwQYMBaAFJvHZRrEur+MRHhTT62mEKzadGvU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RCMC9CODk1QUY3NDA1
MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0eEVlRk5QcmFZUXJOcDBh
OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL204ZGxHc1M2djR4RWVGTlByYVlRck5wMGE5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
M0RCMC9CODk1QUY3NDA1MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0
eEVlRk5QcmFZUXJOcDBhOVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqL36n8GJgy5+FJUjGaaUjQ3PwxoXohztfGmjR395MvqZP1VyGOeT2z+MKS4z
JrgnLGvDvTV9bccddzPyqOcnnGbMlFBjY5G5jxRD0pSJAOzJWPQYFxNRayLwSWmB
ugsfQgCviRlhNC+rwdPujv+0mkW+R8zHRzIq6fNWrUh5aQKb75dhpekHZZe+vBSK
y7qdqqk1gfyg9maik9a2fxks8gCeOXT3PCJKdvbfqkXhF5ub7OfaOn9HUZJ0Llxd
6G4wgCijhqsp7zob/Hqe8tMkjV865GbrcZETn3NXcV9HFj2/Uum3Kc+Rz6lW1Saf
vNfsQIhrIFg69vO8DwPno0HbOg==
-----END CERTIFICATE-----
Generated at Thu Aug 13 07:59:35 2026 by rpki-client