Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft
File:                     2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft (raw, json)
Hash identifier:          MgN0faE4sIlprMVJ/OC+SbGBMKeJ8MlIAA/NW4PsoKw=
Subject key identifier:   2B:AE:3C:DF:E2:6A:9C:E9:40:09:11:EC:B6:33:12:68:E5:E7:F8:D5
Authority key identifier: D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E
Certificate issuer:       /CN=A9147049/serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E
Certificate serial:       E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft
Manifest number:          DE
Signing time:             Fri 17 Jul 2026 07:45:23 +0000
Manifest this update:     Fri 17 Jul 2026 07:45:22 +0000
Manifest next update:     Fri 24 Jul 2026 07:45:22 +0000
Files and hashes:         1: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl (hash: n1CvHYeid80AHCusV1KwAf7eLbtYyraplLIObCWQA4s=)
                          2: 321C6B5C2C6711F0B5DEE20CC4F9AE02.roa (hash: /aTSxcHxRkOfKrRCHUaeDVdu5n6tqyMBf2gXf3ZAFRk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl
                          rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 07:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147049, serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E
        Validity
            Not Before: Jul 17 07:45:22 2026 GMT
            Not After : Jul 24 07:45:22 2026 GMT
        Subject: CN=6a59dd93-0e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:40:65:1a:e4:a5:d3:7a:6a:7c:c2:13:37:45:
                    d6:e1:07:ee:7d:50:51:36:bb:e5:11:78:f1:8a:93:
                    d1:ff:60:75:c2:ea:76:af:3d:b2:dc:ff:56:7e:65:
                    19:85:47:7b:fe:f6:63:86:61:32:74:1e:99:aa:ae:
                    40:fb:82:65:ca:67:29:f1:1c:84:a8:95:ff:8f:d7:
                    46:2e:42:16:86:49:f8:78:04:b3:b5:b0:3b:94:f6:
                    24:44:88:8f:0b:1b:aa:f5:c5:88:be:14:5d:34:b0:
                    d0:5e:6a:a3:00:34:d2:78:17:32:2b:dd:3b:26:57:
                    d1:0b:44:a4:55:60:e3:30:14:fe:13:85:a7:78:77:
                    a9:a6:fc:1c:ba:da:37:e2:6c:ba:98:1a:10:1c:fe:
                    5b:6f:50:2d:d8:f8:7b:f3:ec:1b:79:2a:b3:92:54:
                    47:be:cf:5f:96:dd:86:a9:29:2c:a7:fc:c3:e2:83:
                    b6:c2:0c:ba:f7:3c:ee:4c:03:45:91:df:30:ac:c1:
                    d5:08:d4:9d:60:23:95:73:d9:8a:27:27:f2:b2:e9:
                    8a:6b:be:0e:d3:31:07:dd:6e:dc:b4:e4:10:61:84:
                    29:d2:8f:c6:f7:a1:0e:e6:ba:66:bc:c4:bd:a6:98:
                    fa:c8:94:2b:f3:ae:0b:8e:a0:c4:eb:51:17:fc:19:
                    2a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AE:3C:DF:E2:6A:9C:E9:40:09:11:EC:B6:33:12:68:E5:E7:F8:D5
            X509v3 Authority Key Identifier:
                keyid:D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:f2:49:b1:57:98:ca:cb:ba:03:37:19:6d:94:3d:95:78:ce:
         cb:ac:6b:0a:63:36:29:a5:69:a4:bb:06:67:22:51:f3:94:15:
         78:73:0d:da:f7:92:81:a2:a4:0d:98:42:50:de:d1:67:f8:f7:
         44:d3:35:87:a4:78:f5:e8:b4:c0:46:02:4b:5c:2f:b1:97:46:
         cc:bd:f2:c9:55:7c:63:79:e4:12:10:9e:f1:2d:ee:0f:f6:a3:
         f6:d2:72:e1:12:b3:6c:8c:72:99:ec:bf:25:43:ba:04:c3:64:
         b3:2a:9c:8b:ae:a2:05:cd:d4:d7:c9:a5:97:03:0b:c8:d6:6b:
         2f:ec:f1:de:b9:97:71:c5:b0:d5:b5:8b:91:71:97:94:dc:ff:
         4e:c2:67:9c:39:02:df:15:39:54:9a:a5:f7:03:f4:15:50:b2:
         1f:ec:df:9f:0f:0c:61:c4:99:87:1f:9f:38:3a:ef:e8:e2:6a:
         33:89:d0:97:95:bc:98:11:44:05:da:dd:b3:30:2c:14:91:a9:
         ee:19:2f:42:3c:27:46:17:c2:d0:82:0e:79:04:0f:c1:c0:1e:
         be:a9:4a:26:41:bf:e8:25:4d:0b:6f:b2:bc:5d:b2:98:83:18:
         b7:ca:41:9e:05:aa:6b:ff:56:42:ca:25:3e:23:38:92:9b:14:
         14:c9:61:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDcwNDkxMTAvBgNVBAUTKEQ5RDFCMDU1RkVGQzg5RjU4MDNBN0ZBOEUyQjkwMjYx
OUYzMzhEOEUwHhcNMjYwNzE3MDc0NTIyWhcNMjYwNzI0MDc0NTIyWjAYMRYwFAYD
VQQDEw02YTU5ZGQ5My0wZTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsEBlGuSl03pqfMITN0XW4QfufVBRNrvlEXjxipPR/2B1wup2rz2y3P9WfmUZ
hUd7/vZjhmEydB6Zqq5A+4Jlymcp8RyEqJX/j9dGLkIWhkn4eASztbA7lPYkRIiP
Cxuq9cWIvhRdNLDQXmqjADTSeBcyK907JlfRC0SkVWDjMBT+E4WneHeppvwcuto3
4my6mBoQHP5bb1At2Ph78+wbeSqzklRHvs9flt2GqSksp/zD4oO2wgy69zzuTANF
kd8wrMHVCNSdYCOVc9mKJyfysumKa74O0zEH3W7ctOQQYYQp0o/G96EO5rpmvMS9
ppj6yJQr864LjqDE61EX/BkqNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCuuPN/i
apzpQAkR7LYzEmjl5/jVMB8GA1UdIwQYMBaAFNnRsFX+/In1gDp/qOK5AmGfM42O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzA0OS9CMDlDQkQ2NjJD
NjYxMUYwOURBNTZCMEJDNEY5QUUwMi8yZEd3VmY3OGlmV0FPbi1vNHJrQ1laOHpq
WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJkR3dWZjc4aWZXQU9uLW80cmtDWVo4empZNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzA0OS9CMDlDQkQ2NjJDNjYxMUYwOURBNTZCMEJDNEY5QUUwMi8yZEd3VmY3OGlm
V0FPbi1vNHJrQ1laOHpqWTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAi/JJsVeYysu6AzcZbZQ9lXjOy6xrCmM2KaVppLsGZyJR85QVeHMN2veSgaKk
DZhCUN7RZ/j3RNM1h6R49ei0wEYCS1wvsZdGzL3yyVV8Y3nkEhCe8S3uD/aj9tJy
4RKzbIxymey/JUO6BMNksyqci66iBc3U18mllwMLyNZrL+zx3rmXccWw1bWLkXGX
lNz/TsJnnDkC3xU5VJql9wP0FVCyH+zfnw8MYcSZhx+fODrv6OJqM4nQl5W8mBFE
BdrdszAsFJGp7hkvQjwnRhfC0IIOeQQPwcAevqlKJkG/6CVNC2+yvF2ymIMYt8pB
ngWqa/9WQsolPiM4kpsUFMlhIQ==
-----END CERTIFICATE-----
Generated at Sat Jul 18 07:16:42 2026 by rpki-client