Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft
File:                     PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft (raw, json)
Hash identifier:          YnGNU5O6cBnF8fvWuF/fFix56hvtPU6XSa8MfSOVLTw=
Subject key identifier:   74:A8:FD:A5:98:F5:28:1C:52:A9:2D:DE:ED:93:AD:41:A0:63:DE:F2
Authority key identifier: 3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19
Certificate issuer:       /CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519
Certificate serial:       0566
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft
Manifest number:          055F
Signing time:             Thu 06 Aug 2026 23:07:57 +0000
Manifest this update:     Thu 06 Aug 2026 23:07:57 +0000
Manifest next update:     Thu 13 Aug 2026 23:07:57 +0000
Files and hashes:         1: PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl (hash: 3G5r+yaBnLaV8EJY/514BCdvTP3Km2iKhemvtmua8+A=)
                          2: 47A72A7441ED11EC9B02377AC4F9AE02.roa (hash: T0ns+7x4iK0WmW0k/dhc+1Ohg2P5NWnpBDqsr9+P9R0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl
                          rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Aug 2026 23:07:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1382 (0x566)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A39E, serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519
        Validity
            Not Before: Aug  6 23:07:57 2026 GMT
            Not After : Aug 13 23:07:57 2026 GMT
        Subject: CN=6a7513cd-1e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:be:b7:45:e2:99:e3:2e:e3:60:da:0c:2c:51:
                    14:c7:7b:84:fb:58:70:49:95:5b:da:65:86:e4:ad:
                    d0:3f:9f:d5:b5:34:d7:2e:58:c1:ac:ba:aa:0e:f2:
                    8e:22:4f:3f:02:20:39:b5:4b:49:84:a2:cf:1e:e1:
                    55:7c:37:e5:df:a3:98:1c:98:e0:60:ee:85:79:4e:
                    bf:bf:81:6b:33:d0:9d:af:d3:a3:76:72:32:19:a8:
                    c7:1d:43:25:90:1f:91:44:83:cd:e1:13:aa:92:80:
                    9e:7b:f7:4c:75:5b:71:4a:00:86:a7:60:4f:01:23:
                    83:b4:45:f6:99:d0:9d:ee:ac:65:09:3b:e1:1a:53:
                    e5:98:cb:ef:39:dc:b7:37:84:71:b9:69:2d:75:67:
                    bc:ae:1f:c9:30:29:d1:fe:d3:60:2a:24:bd:91:a9:
                    5d:b5:42:12:f4:09:31:15:ed:b3:53:95:9e:13:68:
                    d0:c2:66:c8:9a:c7:09:65:99:1c:42:12:60:8b:a7:
                    fb:4d:26:5c:c0:b4:55:56:ba:5b:7d:ed:1b:10:e0:
                    52:69:be:ed:58:da:ab:83:8a:21:25:f3:7a:11:78:
                    5d:96:51:c6:5a:69:66:31:54:a3:0e:cf:2f:e6:c3:
                    0a:9c:1f:0c:c7:82:35:85:be:85:07:23:25:1d:15:
                    73:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A8:FD:A5:98:F5:28:1C:52:A9:2D:DE:ED:93:AD:41:A0:63:DE:F2
            X509v3 Authority Key Identifier:
                keyid:3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:6f:84:c5:1e:9d:b9:7a:2e:01:38:45:6d:34:08:fc:c9:29:
         ea:78:5c:91:0a:1b:6a:94:ea:4d:e2:ac:c3:b2:62:ac:f6:f1:
         fe:dd:93:39:21:4c:13:8a:03:d3:6a:98:a1:76:ea:f9:0e:26:
         ee:80:9c:0b:bd:37:19:68:c5:70:af:29:3f:7a:1e:02:25:35:
         5a:b2:ec:9f:6c:73:50:79:11:b5:2d:d5:57:9f:38:71:b2:8d:
         ac:3e:2d:74:b5:e8:b6:88:94:e1:51:26:fb:9d:0c:8b:77:ce:
         53:14:9d:e1:c6:3a:f4:b0:98:86:40:09:b5:82:1f:af:c9:a5:
         ed:85:c9:ad:64:ff:b9:c5:83:56:ae:f7:fb:4e:01:af:1e:0f:
         df:64:bf:a6:bb:00:1d:dd:23:85:4b:59:e7:03:8d:0f:46:b3:
         84:de:75:64:fe:6f:12:b2:c5:1f:dd:49:b9:0c:ae:73:29:2e:
         e3:d8:11:8a:fe:0e:5e:03:54:91:ad:32:eb:b5:79:1d:aa:ba:
         cd:60:34:40:e4:3b:08:0e:c4:d6:f5:cd:c3:e4:63:91:69:e3:
         c3:25:9c:93:08:e6:b5:1f:1e:66:ca:0c:3e:a7:54:65:0f:d5:
         af:52:9a:40:eb:d8:aa:db:d0:4a:78:58:54:aa:43:a8:4e:53:
         73:1a:25:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEzOUUxMTAvBgNVBAUTKDNFNDJEMzMzNEExQ0UxODg5REZDNjdFNDJERjYyODU4
MjE4NTI1MTkwHhcNMjYwODA2MjMwNzU3WhcNMjYwODEzMjMwNzU3WjAYMRYwFAYD
VQQDEw02YTc1MTNjZC0xZTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq763ReKZ4y7jYNoMLFEUx3uE+1hwSZVb2mWG5K3QP5/VtTTXLljBrLqqDvKO
Ik8/AiA5tUtJhKLPHuFVfDfl36OYHJjgYO6FeU6/v4FrM9Cdr9OjdnIyGajHHUMl
kB+RRIPN4ROqkoCee/dMdVtxSgCGp2BPASODtEX2mdCd7qxlCTvhGlPlmMvvOdy3
N4RxuWktdWe8rh/JMCnR/tNgKiS9kaldtUIS9AkxFe2zU5WeE2jQwmbImscJZZkc
QhJgi6f7TSZcwLRVVrpbfe0bEOBSab7tWNqrg4ohJfN6EXhdllHGWmlmMVSjDs8v
5sMKnB8Mx4I1hb6FByMlHRVzyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHSo/aWY
9SgcUqkt3u2TrUGgY97yMB8GA1UdIwQYMBaAFD5C0zNKHOGInfxn5C32KFghhSUZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTM5RS9DQTMxNjg5NjQx
RTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZaWRfR2ZrTGZZb1dDR0ZK
UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BrTFRNMG9jNFlpZF9HZmtMZllvV0NHRkpSay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTM5RS9DQTMxNjg5NjQxRTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZ
aWRfR2ZrTGZZb1dDR0ZKUmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkm+ExR6duXouAThFbTQI/Mkp6nhckQobapTqTeKsw7JirPbx/t2TOSFME4oD
02qYoXbq+Q4m7oCcC703GWjFcK8pP3oeAiU1WrLsn2xzUHkRtS3VV584cbKNrD4t
dLXotoiU4VEm+50Mi3fOUxSd4cY69LCYhkAJtYIfr8ml7YXJrWT/ucWDVq73+04B
rx4P32S/prsAHd0jhUtZ5wOND0azhN51ZP5vErLFH91JuQyucyku49gRiv4OXgNU
ka0y67V5Haq6zWA0QOQ7CA7E1vXNw+RjkWnjwyWckwjmtR8eZsoMPqdUZQ/Vr1Ka
QOvYqtvQSnhYVKpDqE5Tcxolkg==
-----END CERTIFICATE-----
Generated at Sat Aug 8 06:20:44 2026 by rpki-client