Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft
File:                     f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft (raw, json)
Hash identifier:          +eN6IVswG77ZcNLt708DNd/31MKM8ihpODrGXvZHaic=
Subject key identifier:   7A:6D:5F:09:D3:F2:85:4D:5A:21:65:63:D8:67:E1:5F:15:E0:B0:59
Authority key identifier: 7F:49:35:89:5C:2D:6C:B6:2C:41:75:C4:8E:6E:D9:5D:C1:68:19:7E
Certificate issuer:       /CN=A9153F90/serialNumber=7F4935895C2D6CB62C4175C48E6ED95DC168197E
Certificate serial:       48
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft
Manifest number:          46
Signing time:             Fri 17 Jul 2026 09:45:26 +0000
Manifest this update:     Fri 17 Jul 2026 09:45:26 +0000
Manifest next update:     Fri 24 Jul 2026 09:45:26 +0000
Files and hashes:         1: f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl (hash: xGk2FT7RSGOa/Z/RrBmV1YeM05U7AJzvVWdCC5ulwxM=)
                          2: A1369C781C3B11F1A9F167973A3D8C67.roa (hash: Ln2S+wJ8y0nN9Ehuf580iL5liKxjlD5bK/WsoPCx1Ew=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl
                          rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 09:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153F90, serialNumber=7F4935895C2D6CB62C4175C48E6ED95DC168197E
        Validity
            Not Before: Jul 17 09:45:26 2026 GMT
            Not After : Jul 24 09:45:26 2026 GMT
        Subject: CN=6a59f9b6-0e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fd:05:f0:b9:68:29:c0:95:3e:88:d7:d0:4d:
                    f4:6a:c9:5f:e1:64:06:bd:ce:5f:4d:e4:a5:1d:49:
                    98:02:a2:5c:7a:4d:2f:5f:4c:ea:63:a0:ff:b7:9e:
                    65:69:53:96:1f:8a:c4:66:a3:ad:a8:1a:18:a0:86:
                    63:8f:9f:b9:9c:41:de:d9:2d:89:30:73:04:ca:41:
                    af:a0:3c:22:86:48:53:77:9b:73:df:19:02:58:9c:
                    5c:fa:e6:f9:27:ae:8e:4b:10:54:12:8a:af:72:8c:
                    fe:18:ac:1e:05:26:60:72:b1:9f:cf:42:dc:e2:f0:
                    16:c7:91:7e:6f:2f:35:6d:2e:5d:03:67:6d:8c:0d:
                    4e:60:a5:9d:46:6d:11:95:82:77:53:5e:80:05:95:
                    76:c0:28:31:ec:4a:4d:44:08:55:40:80:53:a9:65:
                    80:a8:54:60:3f:86:0b:30:b1:47:9a:b2:ea:ff:b2:
                    b0:d9:54:41:6c:55:51:55:d3:45:82:44:28:19:fe:
                    c2:4c:ff:a0:f0:da:71:bf:ec:27:4d:c6:a2:7e:44:
                    61:5b:9d:ef:b6:70:c1:27:e2:2d:7e:05:62:80:6b:
                    f9:54:8c:f4:2c:89:82:a4:12:9e:9e:4d:28:a2:c0:
                    c5:eb:01:87:5e:b2:1f:4d:7d:07:f9:21:ae:90:e3:
                    09:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6D:5F:09:D3:F2:85:4D:5A:21:65:63:D8:67:E1:5F:15:E0:B0:59
            X509v3 Authority Key Identifier:
                keyid:7F:49:35:89:5C:2D:6C:B6:2C:41:75:C4:8E:6E:D9:5D:C1:68:19:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:7b:5b:48:96:b6:ce:02:bd:5a:52:87:75:e8:cb:d6:96:fe:
         0b:df:4a:80:86:1d:1e:ea:7e:85:67:ae:f1:e8:40:63:24:ae:
         1d:a3:f4:8c:2c:74:49:d6:a7:04:74:e7:0b:f4:b8:b2:21:7c:
         4e:a9:ed:8d:f9:45:1d:27:76:b1:96:85:04:86:f0:4c:fa:fc:
         bd:52:12:df:ad:d0:cd:95:3b:86:1c:80:eb:ec:aa:6f:80:e4:
         be:68:c6:48:7b:d6:a4:99:fb:ec:e1:ba:36:a5:ab:1a:e1:1e:
         7e:99:e8:a4:a1:5e:d8:9e:64:fc:db:40:d7:ff:c3:3a:68:91:
         c5:fe:0a:71:c4:e9:36:57:e2:27:63:12:fe:db:3e:ed:80:0f:
         ac:4b:b1:47:72:96:7b:99:e6:5b:59:33:57:09:80:0a:3e:9e:
         2e:42:5d:3c:5d:27:67:3c:f4:0f:09:19:52:cf:5e:c6:06:5d:
         4c:51:dc:99:33:54:53:d7:1a:13:18:55:0b:83:23:f0:3c:3c:
         a1:4c:02:57:19:05:f1:94:aa:16:09:df:9d:a4:a7:bb:28:89:
         98:e7:96:fd:c0:a9:e7:f7:76:3a:56:78:f0:28:a1:f5:27:89:
         69:5b:2e:5d:4c:e3:f1:ea:5b:be:9e:2a:2d:22:7e:4a:06:bd:
         6f:d2:d3:cc
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
M0Y5MDExMC8GA1UEBRMoN0Y0OTM1ODk1QzJENkNCNjJDNDE3NUM0OEU2RUQ5NURD
MTY4MTk3RTAeFw0yNjA3MTcwOTQ1MjZaFw0yNjA3MjQwOTQ1MjZaMBgxFjAUBgNV
BAMTDTZhNTlmOWI2LTBlNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDe/QXwuWgpwJU+iNfQTfRqyV/hZAa9zl9N5KUdSZgColx6TS9fTOpjoP+3nmVp
U5YfisRmo62oGhighmOPn7mcQd7ZLYkwcwTKQa+gPCKGSFN3m3PfGQJYnFz65vkn
ro5LEFQSiq9yjP4YrB4FJmBysZ/PQtzi8BbHkX5vLzVtLl0DZ22MDU5gpZ1GbRGV
gndTXoAFlXbAKDHsSk1ECFVAgFOpZYCoVGA/hgswsUeasur/srDZVEFsVVFV00WC
RCgZ/sJM/6Dw2nG/7CdNxqJ+RGFbne+2cMEn4i1+BWKAa/lUjPQsiYKkEp6eTSii
wMXrAYdesh9NfQf5Ia6Q4wlNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUem1fCdPy
hU1aIWVj2GfhXxXgsFkwHwYDVR0jBBgwFoAUf0k1iVwtbLYsQXXEjm7ZXcFoGX4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzRjkwL0Y5MTNENTE0MUMz
NjExRjE4ODQ3QUIyQjM4M0Q4QzY3L2YwazFpVnd0YkxZc1FYWEVqbTdaWGNGb0dY
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvZjBrMWlWd3RiTFlzUVhYRWptN1pYY0ZvR1g0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz
RjkwL0Y5MTNENTE0MUMzNjExRjE4ODQ3QUIyQjM4M0Q4QzY3L2YwazFpVnd0YkxZ
c1FYWEVqbTdaWGNGb0dYNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBge1tIlrbOAr1aUod16MvWlv4L30qAhh0e6n6FZ67x6EBjJK4do/SMLHRJ1qcE
dOcL9LiyIXxOqe2N+UUdJ3axloUEhvBM+vy9UhLfrdDNlTuGHIDr7KpvgOS+aMZI
e9akmfvs4bo2pasa4R5+meikoV7YnmT820DX/8M6aJHF/gpxxOk2V+InYxL+2z7t
gA+sS7FHcpZ7meZbWTNXCYAKPp4uQl08XSdnPPQPCRlSz17GBl1MUdyZM1RT1xoT
GFULgyPwPDyhTAJXGQXxlKoWCd+dpKe7KImY55b9wKnn93Y6VnjwKKH1J4lpWy5d
TOPx6lu+niotIn5KBr1v0tPM
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:54 2026 by rpki-client