Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft
File:                     7C-kN5G65saorcWjDpmoUrYSj68.mft (raw, json)
Hash identifier:          uZbhBzPxp8x0okhaLnx2IBf7N6wdR8JDBAFpH+TSHKg=
Subject key identifier:   13:AE:23:E7:87:67:6E:18:DF:E9:11:44:6D:7C:DC:05:4C:EA:02:73
Authority key identifier: EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF
Certificate issuer:       /CN=A915A813/serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF
Certificate serial:       3573
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft
Manifest number:          356F
Signing time:             Tue 18 Aug 2026 14:32:54 +0000
Manifest this update:     Tue 18 Aug 2026 14:32:54 +0000
Manifest next update:     Tue 25 Aug 2026 14:32:54 +0000
Files and hashes:         1: 7C-kN5G65saorcWjDpmoUrYSj68.crl (hash: 464aYQHqQV8qeLJLAAaQgr/pihql+O9aPFtuua6SyMc=)
                          2: 33EEDAE8E5E711F09BCF2E4C5E6F56BC.roa (hash: UkDcxGGvmqyz1urnD56t6fBt1amqEJgDXdakYI4IPMo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl
                          rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 14:32:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13683 (0x3573)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A813, serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF
        Validity
            Not Before: Aug 18 14:32:54 2026 GMT
            Not After : Aug 25 14:32:54 2026 GMT
        Subject: CN=6a846d16-a4dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1c:5f:1f:6a:77:87:c6:50:41:d1:b4:c2:53:
                    12:25:75:ce:9b:7c:e4:bd:85:2a:6a:14:d5:62:90:
                    b1:7d:a8:9b:b3:f0:2a:e0:29:b4:29:ec:f5:b1:ef:
                    c4:91:ee:d1:aa:42:f7:21:36:16:68:8f:53:d7:fe:
                    dc:0a:43:ee:51:df:2e:d9:b2:be:51:d7:b5:ad:85:
                    21:58:b8:f6:c8:c3:c2:98:b5:70:8d:ae:bc:fb:c8:
                    b8:2b:15:10:5d:1a:f2:5a:2d:08:59:61:41:c4:90:
                    e6:38:80:18:b5:ae:a9:58:cd:58:4d:47:29:53:af:
                    91:7d:eb:0c:ed:c5:82:1e:a4:e5:28:14:94:b7:e2:
                    fd:3a:56:13:08:d1:27:76:58:bc:73:cb:63:0b:48:
                    d2:bf:b0:85:b6:2e:8a:a7:0b:e9:7c:a5:ef:98:13:
                    89:39:e3:2e:ae:54:db:e0:cf:af:e1:5a:89:b0:77:
                    9a:21:25:65:47:7b:cb:74:c5:30:da:6b:40:9b:79:
                    d9:0e:bc:52:3d:1c:6b:6f:57:13:28:b9:bb:23:9c:
                    41:88:13:c1:e4:97:e7:5a:29:57:4d:ed:a5:0c:f5:
                    c9:98:7c:c0:a9:3e:92:2d:5e:26:4f:18:ef:81:c1:
                    4a:e4:ad:16:e3:05:af:62:2f:d9:b0:c8:54:ba:b0:
                    65:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AE:23:E7:87:67:6E:18:DF:E9:11:44:6D:7C:DC:05:4C:EA:02:73
            X509v3 Authority Key Identifier:
                keyid:EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:d1:9c:57:08:8d:72:93:3b:1e:c4:c3:c7:63:72:a2:7f:31:
         9a:86:d6:e7:0e:5b:5b:0d:40:43:f5:07:02:9f:1b:43:d6:0d:
         a0:08:5a:08:9a:9e:aa:75:65:96:07:a5:1e:0d:8c:22:63:cd:
         a7:74:4d:47:8c:4b:3c:13:ea:3d:dd:0c:30:47:63:a1:37:93:
         8e:a8:12:42:33:32:c4:cc:e4:b9:6b:7b:ce:09:d7:10:36:ca:
         e1:0b:09:d8:3e:e9:34:cf:e8:95:b0:4e:82:2e:f4:da:9b:59:
         5d:81:03:90:ab:3c:8d:ae:6d:98:ab:db:d2:3e:33:83:45:6c:
         f2:c9:46:54:24:d4:09:64:d9:9a:00:67:bb:44:76:76:cb:bd:
         a7:51:cf:db:5d:8a:ad:d6:1d:b5:1f:98:28:6b:30:6b:03:7a:
         53:13:61:bd:2e:3c:68:cc:1f:83:6a:11:29:a9:f8:19:bb:a9:
         9d:5d:c4:2a:44:98:44:45:c1:bb:3a:77:c1:d7:58:8a:c1:de:
         0d:02:57:5f:a8:a6:63:10:18:93:6b:b7:12:dc:34:0b:6d:dc:
         27:30:7b:6a:a2:b5:e5:2e:42:4b:ae:e3:1b:45:1b:d1:c3:91:
         52:18:d0:73:51:88:e8:d4:ea:39:28:46:b6:ad:ec:0d:fe:83:
         5c:8a:69:03
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUE4MTMxMTAvBgNVBAUTKEVDMkZBNDM3OTFCQUU2QzZBOEFEQzVBMzBFOTlBODUy
QjYxMjhGQUYwHhcNMjYwODE4MTQzMjU0WhcNMjYwODI1MTQzMjU0WjAYMRYwFAYD
VQQDEw02YTg0NmQxNi1hNGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmhxfH2p3h8ZQQdG0wlMSJXXOm3zkvYUqahTVYpCxfaibs/Aq4Cm0Kez1se/E
ke7RqkL3ITYWaI9T1/7cCkPuUd8u2bK+Ude1rYUhWLj2yMPCmLVwja68+8i4KxUQ
XRryWi0IWWFBxJDmOIAYta6pWM1YTUcpU6+RfesM7cWCHqTlKBSUt+L9OlYTCNEn
dli8c8tjC0jSv7CFti6KpwvpfKXvmBOJOeMurlTb4M+v4VqJsHeaISVlR3vLdMUw
2mtAm3nZDrxSPRxrb1cTKLm7I5xBiBPB5JfnWilXTe2lDPXJmHzAqT6SLV4mTxjv
gcFK5K0W4wWvYi/ZsMhUurBl7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBOuI+eH
Z24Y3+kRRG183AVM6gJzMB8GA1UdIwQYMBaAFOwvpDeRuubGqK3Fow6ZqFK2Eo+v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTgxMy81QjREN0Y1MjFE
ODkxMUUyQTQyMDg4RTIwOEIwMkNEMi83Qy1rTjVHNjVzYW9yY1dqRHBtb1VyWVNq
NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdDLWtONUc2NXNhb3JjV2pEcG1vVXJZU2o2OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTgxMy81QjREN0Y1MjFEODkxMUUyQTQyMDg4RTIwOEIwMkNEMi83Qy1rTjVHNjVz
YW9yY1dqRHBtb1VyWVNqNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAItGcVwiNcpM7HsTDx2Nyon8xmobW5w5bWw1AQ/UHAp8bQ9YNoAhaCJqeqnVl
lgelHg2MImPNp3RNR4xLPBPqPd0MMEdjoTeTjqgSQjMyxMzkuWt7zgnXEDbK4QsJ
2D7pNM/olbBOgi702ptZXYEDkKs8ja5tmKvb0j4zg0Vs8slGVCTUCWTZmgBnu0R2
dsu9p1HP212KrdYdtR+YKGswawN6UxNhvS48aMwfg2oRKan4GbupnV3EKkSYREXB
uzp3wddYisHeDQJXX6imYxAYk2u3Etw0C23cJzB7aqK15S5CS67jG0Ub0cORUhjQ
c1GI6NTqOShGtq3sDf6DXIppAw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:47:08 2026 by rpki-client