Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
File:                     CViGFDhyEOi2mtPDGnNhnXVe0MA.mft (raw, json)
Hash identifier:          iWDFTtWAMloX6YeoOo+MWnu6ZsmxqxNTjyG0zAk+QKU=
Subject key identifier:   64:B5:B9:94:01:86:70:51:0F:60:87:D7:7A:80:17:F3:3F:1B:C0:C4
Authority key identifier: 09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0
Certificate issuer:       /CN=A914CB22/serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0
Certificate serial:       0206
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
Manifest number:          0200
Signing time:             Wed 19 Aug 2026 03:43:52 +0000
Manifest this update:     Wed 19 Aug 2026 03:43:52 +0000
Manifest next update:     Wed 26 Aug 2026 03:43:52 +0000
Files and hashes:         1: CViGFDhyEOi2mtPDGnNhnXVe0MA.crl (hash: G9U3wSYmuY0gwNPbjSruevSh8k9RaarXJcf34td7wwY=)
                          2: 2F996DC6C77311EEBD6F2D2BC4F9AE02.roa (hash: AWmRUUuHw7qvkIYfsKHsasjQBa7Xv/yb5/iOLvXpkFs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl
                          rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:43:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 518 (0x206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CB22, serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0
        Validity
            Not Before: Aug 19 03:43:52 2026 GMT
            Not After : Aug 26 03:43:52 2026 GMT
        Subject: CN=6a852678-debb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2c:6a:00:ea:a0:36:20:b4:d4:8c:2e:6f:50:
                    c4:11:ad:34:85:63:b6:06:7b:bb:db:cc:d9:6c:fb:
                    44:0e:82:ca:4f:23:5d:ab:a2:d8:29:a4:90:6f:f8:
                    9b:b3:56:d8:15:4a:84:18:70:7b:3f:83:3b:3e:32:
                    10:1e:c9:4d:3d:d8:e9:41:ab:43:c3:3d:a1:ef:c2:
                    df:cb:e5:70:f6:00:76:7a:71:ff:ae:8e:3f:c6:ff:
                    e7:3b:13:59:f1:07:74:c9:9b:23:43:27:b8:d8:88:
                    0b:a8:d1:33:56:d1:8f:7e:53:38:73:00:45:85:3a:
                    a4:0f:1e:58:0c:9e:39:49:6c:15:35:33:82:cc:5d:
                    10:8b:c1:6f:a7:19:21:b4:20:4f:74:27:87:7d:2b:
                    46:8e:3d:df:04:d8:ce:55:b8:bd:8b:d7:c4:c7:c5:
                    63:57:3d:29:25:f2:23:00:b3:87:42:60:9a:da:63:
                    b5:6b:d1:e3:93:b6:25:fa:5a:b2:1e:53:32:a1:0d:
                    e0:44:21:ea:a5:99:65:08:a1:d3:20:fa:1e:ad:71:
                    25:56:e3:f7:90:98:8c:14:72:73:d2:c6:49:6a:82:
                    60:af:f3:3c:41:95:d1:27:6e:bf:54:fc:d7:aa:16:
                    90:62:86:52:53:eb:f6:7e:bc:be:8c:5c:c3:83:4a:
                    7d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B5:B9:94:01:86:70:51:0F:60:87:D7:7A:80:17:F3:3F:1B:C0:C4
            X509v3 Authority Key Identifier:
                keyid:09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:41:2c:c1:3e:09:85:33:59:5b:7a:1b:b4:2c:6c:75:25:1a:
         1e:d1:25:5a:81:d7:01:ff:76:15:04:8e:75:1c:f0:42:90:10:
         c3:f1:be:79:46:5e:d3:33:12:b8:ee:80:f2:fd:55:09:eb:5c:
         78:0e:3f:2f:e0:0e:d7:a6:c6:00:88:83:b6:6f:bc:96:1a:a8:
         72:5f:94:3b:b1:c3:ad:4e:db:b8:f3:8e:d0:82:9d:b3:61:98:
         5f:bf:05:50:36:4e:3b:e8:9e:59:e3:26:e4:ae:fc:b1:dc:57:
         40:8e:37:66:c7:fe:f5:6b:9d:ba:2a:c8:b1:b2:4d:56:ee:e9:
         f3:e5:51:f4:33:57:65:3b:d6:09:87:9c:b3:a2:12:c3:c6:fc:
         95:81:1c:31:71:f2:52:21:74:f8:75:e2:ae:43:01:3e:f8:f2:
         7c:e3:df:e9:77:c8:5b:36:59:a3:6e:ee:7b:7b:29:25:9e:02:
         0a:c5:b5:d1:56:6b:94:88:90:01:db:cb:43:74:66:33:cc:e8:
         82:da:03:d6:63:8b:07:c2:e8:eb:c8:4b:89:a1:2a:0c:1f:f0:
         4e:19:73:ca:a0:81:35:ea:6d:8e:ae:a6:87:00:88:5b:58:2a:
         2a:e4:f5:e1:38:f0:2f:c9:ed:de:9a:e1:15:cd:28:fd:3e:f5:
         9f:02:1b:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NENCMjIxMTAvBgNVBAUTKDA5NTg4NjE0Mzg3MjEwRThCNjlBRDNDMzFBNzM2MTlE
NzU1RUQwQzAwHhcNMjYwODE5MDM0MzUyWhcNMjYwODI2MDM0MzUyWjAYMRYwFAYD
VQQDEw02YTg1MjY3OC1kZWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyCxqAOqgNiC01Iwub1DEEa00hWO2Bnu728zZbPtEDoLKTyNdq6LYKaSQb/ib
s1bYFUqEGHB7P4M7PjIQHslNPdjpQatDwz2h78Lfy+Vw9gB2enH/ro4/xv/nOxNZ
8Qd0yZsjQye42IgLqNEzVtGPflM4cwBFhTqkDx5YDJ45SWwVNTOCzF0Qi8Fvpxkh
tCBPdCeHfStGjj3fBNjOVbi9i9fEx8VjVz0pJfIjALOHQmCa2mO1a9Hjk7Yl+lqy
HlMyoQ3gRCHqpZllCKHTIPoerXElVuP3kJiMFHJz0sZJaoJgr/M8QZXRJ26/VPzX
qhaQYoZSU+v2fry+jFzDg0p9dQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGS1uZQB
hnBRD2CH13qAF/M/G8DEMB8GA1UdIwQYMBaAFAlYhhQ4chDotprTwxpzYZ11XtDA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0IyMi82NjAyRTk3ODhD
RDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVPaTJtdFBER25OaG5YVmUw
TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NWaUdGRGh5RU9pMm10UERHbk5oblhWZTBNQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Q0IyMi82NjAyRTk3ODhDRDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVP
aTJtdFBER25OaG5YVmUwTUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmEEswT4JhTNZW3obtCxsdSUaHtElWoHXAf92FQSOdRzwQpAQw/G+eUZe0zMS
uO6A8v1VCetceA4/L+AO16bGAIiDtm+8lhqocl+UO7HDrU7buPOO0IKds2GYX78F
UDZOO+ieWeMm5K78sdxXQI43Zsf+9WuduirIsbJNVu7p8+VR9DNXZTvWCYecs6IS
w8b8lYEcMXHyUiF0+HXirkMBPvjyfOPf6XfIWzZZo27ue3spJZ4CCsW10VZrlIiQ
AdvLQ3RmM8zogtoD1mOLB8Lo68hLiaEqDB/wThlzyqCBNeptjq6mhwCIW1gqKuT1
4TjwL8nt3prhFc0o/T71nwIb8A==
-----END CERTIFICATE-----
Generated at Wed Aug 19 15:14:52 2026 by rpki-client