Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
File:                     fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft (raw, json)
Hash identifier:          L2kHKvqhsihe598JfLBpVMmp/Ti/Xit9RzMR2K4Zvzs=
Subject key identifier:   52:BD:C4:A9:7C:46:96:FA:61:BA:74:D7:02:7A:1D:7C:77:43:1B:EE
Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
Certificate issuer:       /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
Certificate serial:       044D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
Manifest number:          0435
Signing time:             Wed 01 Jul 2026 01:19:10 +0000
Manifest this update:     Wed 01 Jul 2026 01:19:09 +0000
Manifest next update:     Wed 08 Jul 2026 01:19:09 +0000
Files and hashes:         1: fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl (hash: Qbfqqg6LuiSt4m22Wm8PYZNv925JbK+EPc3rWdcGbnY=)
                          2: 319786BEB63B11EF8D06900EC4F9AE02.roa (hash: Tj4ow2/jq+mUP/LMLTPrpgT8A3SwEW2gBwmbNDd2jrU=)
                          3: 791CD4FEFAE511F0B461E4A0696F56BC.roa (hash: 7W5oQwxnfaz/Da+/adv0pSip5O41XdqYh1qWJQtoYxU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl
                          rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 Jul 2026 01:19:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1101 (0x44d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D4F2, serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
        Validity
            Not Before: Jul  1 01:19:09 2026 GMT
            Not After : Jul  8 01:19:09 2026 GMT
        Subject: CN=6a446b0e-89bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cd:06:6d:ec:c0:3d:be:1f:75:38:3c:79:03:
                    1d:67:35:9a:79:24:4a:e7:f6:e7:d4:81:17:60:5d:
                    0f:dc:3f:ab:ba:79:53:ef:d2:e4:30:76:74:7e:f6:
                    6b:4e:14:c7:83:4b:49:71:37:93:7c:47:04:43:89:
                    b3:56:e8:55:61:7b:0e:f9:96:a7:93:d4:6b:9b:a9:
                    04:c9:a0:f2:87:30:2d:9e:b2:ee:62:79:b9:62:28:
                    e6:21:10:31:31:d3:a3:15:33:49:c1:ac:94:c7:f9:
                    7b:00:5f:c2:03:76:83:4b:1f:8a:20:87:80:66:40:
                    e2:8a:d1:d9:49:6c:ee:42:92:d2:2e:8c:3a:4d:e5:
                    a8:e4:20:13:fb:08:af:a2:5c:12:82:fc:b9:67:04:
                    37:53:ef:40:c8:c0:ab:91:9e:91:be:25:0c:c7:87:
                    e7:49:f6:7e:9d:bc:0d:65:8a:84:b7:1c:a4:79:f4:
                    03:8f:77:99:34:8a:e1:f8:77:98:8b:21:df:38:67:
                    b1:6e:73:47:79:e4:89:1f:a4:11:4a:1c:f1:e5:3f:
                    97:07:73:3a:81:0b:78:3e:5b:c5:bb:68:e6:08:12:
                    c5:c1:dd:49:c4:ef:63:38:3f:f6:dc:d6:fc:e6:9a:
                    45:b0:16:a4:fc:a1:73:11:09:e8:ce:1e:ff:81:d7:
                    99:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BD:C4:A9:7C:46:96:FA:61:BA:74:D7:02:7A:1D:7C:77:43:1B:EE
            X509v3 Authority Key Identifier:
                keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d9:66:92:1d:95:6e:69:14:83:24:0a:66:91:e1:f6:79:d6:
         d5:41:fc:39:e0:7b:18:c5:69:0a:bd:d7:d9:1e:d7:50:24:5f:
         d5:f4:7d:19:9e:24:5f:b4:2d:95:b4:66:d4:0d:5c:d2:72:94:
         b8:0a:53:f8:92:1a:58:9d:e9:45:08:ef:af:aa:c4:81:b5:bf:
         03:23:36:7f:f8:94:d7:3b:d4:90:49:42:e9:2e:0b:62:d9:9a:
         b1:25:f4:36:33:ab:23:db:49:12:5f:fa:01:7a:94:a0:8f:73:
         c7:9f:06:67:e8:2a:49:32:b2:fe:b4:03:b4:70:cf:5b:18:0c:
         2f:f8:da:06:f8:de:44:cb:42:a9:89:14:af:e9:35:da:c5:bb:
         d7:a2:aa:45:4c:a8:3b:fc:21:61:cc:96:58:ed:ba:c2:14:9b:
         66:cd:06:01:7b:49:4f:17:fa:03:c0:e0:51:c8:52:53:9b:aa:
         07:33:11:03:be:19:d9:52:79:19:1d:b4:6b:1e:7c:32:39:99:
         fc:67:03:21:5f:1f:36:74:1c:84:0b:eb:5a:78:c4:ee:3a:d1:
         49:89:8f:36:dc:37:ee:2d:ee:45:a4:d8:6a:a6:85:6e:70:02:
         5c:e7:14:5c:e2:79:db:dd:66:ec:f0:e8:c4:1a:de:13:72:78:
         bb:b9:61:62
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ0RjIxMTAvBgNVBAUTKDdEMThEODc3NTAyMTA1RkExODcyQURFRTRDRjI2MjND
NDE0RjE2QjUwHhcNMjYwNzAxMDExOTA5WhcNMjYwNzA4MDExOTA5WjAYMRYwFAYD
VQQDEw02YTQ0NmIwZS04OWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1c0GbezAPb4fdTg8eQMdZzWaeSRK5/bn1IEXYF0P3D+runlT79LkMHZ0fvZr
ThTHg0tJcTeTfEcEQ4mzVuhVYXsO+Zank9Rrm6kEyaDyhzAtnrLuYnm5YijmIRAx
MdOjFTNJwayUx/l7AF/CA3aDSx+KIIeAZkDiitHZSWzuQpLSLow6TeWo5CAT+wiv
olwSgvy5ZwQ3U+9AyMCrkZ6RviUMx4fnSfZ+nbwNZYqEtxykefQDj3eZNIrh+HeY
iyHfOGexbnNHeeSJH6QRShzx5T+XB3M6gQt4PlvFu2jmCBLFwd1JxO9jOD/23Nb8
5ppFsBak/KFzEQnozh7/gdeZEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFK9xKl8
Rpb6Ybp01wJ6HXx3QxvuMB8GA1UdIwQYMBaAFH0Y2HdQIQX6GHKt7kzyYjxBTxa1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRGMi9EMjk5RjhFQ0I5
QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJmb1ljcTN1VFBKaVBFRlBG
clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZSallkMUFoQmZvWWNxM3VUUEppUEVGUEZyVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDRGMi9EMjk5RjhFQ0I5QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJm
b1ljcTN1VFBKaVBFRlBGclUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZNlmkh2VbmkUgyQKZpHh9nnW1UH8OeB7GMVpCr3X2R7XUCRf1fR9GZ4kX7Qt
lbRm1A1c0nKUuApT+JIaWJ3pRQjvr6rEgbW/AyM2f/iU1zvUkElC6S4LYtmasSX0
NjOrI9tJEl/6AXqUoI9zx58GZ+gqSTKy/rQDtHDPWxgML/jaBvjeRMtCqYkUr+k1
2sW716KqRUyoO/whYcyWWO26whSbZs0GAXtJTxf6A8DgUchSU5uqBzMRA74Z2VJ5
GR20ax58MjmZ/GcDIV8fNnQchAvrWnjE7jrRSYmPNtw37i3uRaTYaqaFbnACXOcU
XOJ5291m7PDoxBreE3J4u7lhYg==
-----END CERTIFICATE-----
Generated at Wed Jul 1 06:22:28 2026 by rpki-client