Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft
File:                     MR39neQF4HHYMSH7kCX7TyAkAyw.mft (raw, json)
Hash identifier:          oXkLOSdkKOGIGXnBW4633zhJ6OHWb36maB0I9yYrwys=
Subject key identifier:   6A:A5:8E:CF:67:1A:C3:F5:B5:1F:8F:D7:BA:44:FF:5F:D6:95:2A:B9
Authority key identifier: 31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C
Certificate issuer:       /CN=A9147B3A/serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C
Certificate serial:       0AB7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft
Manifest number:          0AAD
Signing time:             Tue 18 Aug 2026 19:46:33 +0000
Manifest this update:     Tue 18 Aug 2026 19:46:32 +0000
Manifest next update:     Tue 25 Aug 2026 19:46:32 +0000
Files and hashes:         1: MR39neQF4HHYMSH7kCX7TyAkAyw.crl (hash: oeUQZtbI5qr3Nu3GvAjnjEvbf8CNKNaqQq6DLvV47ac=)
                          2: CD57B28C814211EA94DD3E2DC4F9AE02.roa (hash: IUz2Q5bD+d2a5hWSIO7TTyRJWvOUcF3m6LFQhPIhf48=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl
                          rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2743 (0xab7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147B3A, serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C
        Validity
            Not Before: Aug 18 19:46:32 2026 GMT
            Not After : Aug 25 19:46:32 2026 GMT
        Subject: CN=6a84b699-4d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:dd:4b:dc:a2:dc:db:4b:55:a5:8d:f5:ea:f4:
                    0f:57:ab:69:d7:b8:81:62:6c:20:3b:78:04:3e:aa:
                    95:67:c6:f3:13:7c:ad:df:65:36:50:32:db:ae:6f:
                    1b:a9:2a:e6:27:77:5b:0a:6c:26:dd:3b:25:6b:53:
                    c7:a4:94:5e:4d:b1:0b:19:08:2b:bd:3c:86:34:1d:
                    11:ea:e7:38:c3:ed:92:e3:6d:0d:9d:cd:25:e9:b9:
                    09:69:5c:19:17:2d:77:de:9f:f9:8c:15:65:08:72:
                    f4:13:5c:bd:bd:09:f7:67:45:50:6e:89:b3:1e:a7:
                    bd:60:4c:0a:98:ea:fb:b8:d2:10:9a:3b:3c:fe:39:
                    d3:77:aa:b3:b3:43:2b:c6:0d:b9:a7:64:ea:e0:8f:
                    e7:7d:7c:69:81:5c:e1:f1:88:f0:9e:74:df:33:d2:
                    ae:4f:4b:29:34:03:81:2c:b6:19:5c:18:d4:4b:63:
                    f7:a2:58:91:01:6d:95:9a:f5:ae:1e:93:2a:86:3a:
                    08:11:c7:e9:e7:f4:64:57:e0:05:7f:0b:0a:dc:fd:
                    2b:26:db:bd:1f:4d:56:c5:9b:d6:73:b1:c8:27:1a:
                    36:03:1f:80:e4:5b:db:7b:29:fd:58:c9:31:c5:74:
                    6e:e2:92:5e:fb:8d:b0:84:53:27:5a:a0:3e:18:8a:
                    fa:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A5:8E:CF:67:1A:C3:F5:B5:1F:8F:D7:BA:44:FF:5F:D6:95:2A:B9
            X509v3 Authority Key Identifier:
                keyid:31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:11:19:40:69:2b:60:3b:be:4e:bd:44:f8:f4:f4:df:39:2a:
         9d:7b:12:6b:cc:36:ff:1f:a6:42:48:c5:ad:51:27:93:cd:1f:
         d2:da:74:ac:68:18:88:57:02:7f:76:f7:da:4d:22:00:a2:b3:
         0d:9d:99:21:97:e0:09:f2:b7:88:65:db:bd:a5:ca:3e:75:45:
         31:5b:5a:53:5a:48:c9:f9:6d:6d:b6:2b:41:36:f8:86:8d:84:
         08:fb:ab:92:f5:52:11:a0:e6:d9:e1:ff:20:40:45:93:2e:d3:
         38:1c:46:f0:be:5a:97:6f:9a:ae:88:60:27:7d:6c:37:8f:6d:
         16:6e:c8:6d:2c:14:19:e1:a0:4e:2c:a3:50:4c:12:85:84:cd:
         33:c6:9d:81:c4:c5:73:19:85:ea:7c:66:36:37:6c:b1:08:c8:
         08:38:1c:1a:cf:03:38:63:5a:35:71:29:76:5c:b7:85:26:78:
         1d:f5:1e:44:0d:7c:75:01:b6:d5:46:9a:25:ca:24:1a:25:ff:
         a8:fa:da:f2:45:22:f1:88:1b:27:73:23:a3:95:5d:8f:d0:e7:
         ed:a0:6f:77:7b:63:9a:c5:07:2c:e1:2b:78:0a:d8:6a:8f:90:
         25:c5:2f:c5:1d:9f:4e:8a:93:2a:2f:6f:30:9d:4b:2e:8c:81:
         f4:7f:44:14
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDdCM0ExMTAvBgNVBAUTKDMxMURGRDlERTQwNUUwNzFEODMxMjFGQjkwMjVGQjRG
MjAyNDAzMkMwHhcNMjYwODE4MTk0NjMyWhcNMjYwODI1MTk0NjMyWjAYMRYwFAYD
VQQDEw02YTg0YjY5OS00ZDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0N1L3KLc20tVpY316vQPV6tp17iBYmwgO3gEPqqVZ8bzE3yt32U2UDLbrm8b
qSrmJ3dbCmwm3Tsla1PHpJReTbELGQgrvTyGNB0R6uc4w+2S420Nnc0l6bkJaVwZ
Fy133p/5jBVlCHL0E1y9vQn3Z0VQbomzHqe9YEwKmOr7uNIQmjs8/jnTd6qzs0Mr
xg25p2Tq4I/nfXxpgVzh8YjwnnTfM9KuT0spNAOBLLYZXBjUS2P3oliRAW2VmvWu
HpMqhjoIEcfp5/RkV+AFfwsK3P0rJtu9H01WxZvWc7HIJxo2Ax+A5Fvbeyn9WMkx
xXRu4pJe+42whFMnWqA+GIr6MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGqljs9n
GsP1tR+P17pE/1/WlSq5MB8GA1UdIwQYMBaAFDEd/Z3kBeBx2DEh+5Al+08gJAMs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0IzQS81NTFCRjJCQzgx
NDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRISFlNU0g3a0NYN1R5QWtB
eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01SMzluZVFGNEhIWU1TSDdrQ1g3VHlBa0F5dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
N0IzQS81NTFCRjJCQzgxNDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRI
SFlNU0g3a0NYN1R5QWtBeXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaxEZQGkrYDu+Tr1E+PT03zkqnXsSa8w2/x+mQkjFrVEnk80f0tp0rGgYiFcC
f3b32k0iAKKzDZ2ZIZfgCfK3iGXbvaXKPnVFMVtaU1pIyfltbbYrQTb4ho2ECPur
kvVSEaDm2eH/IEBFky7TOBxG8L5al2+arohgJ31sN49tFm7IbSwUGeGgTiyjUEwS
hYTNM8adgcTFcxmF6nxmNjdssQjICDgcGs8DOGNaNXEpdly3hSZ4HfUeRA18dQG2
1UaaJcokGiX/qPra8kUi8YgbJ3Mjo5Vdj9Dn7aBvd3tjmsUHLOEreArYao+QJcUv
xR2fToqTKi9vMJ1LLoyB9H9EFA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:36 2026 by rpki-client