Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
File:                     fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft (raw, json)
Hash identifier:          oO3xJrry7RrDOIqsI58LTw58++8tOovQiR98lpnwC94=
Subject key identifier:   6D:BE:BB:53:3F:70:CB:87:06:63:0D:B8:DF:6D:AD:C5:C5:97:B0:0F
Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
Certificate issuer:       /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
Certificate serial:       0466
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
Manifest number:          044D
Signing time:             Sat 15 Aug 2026 00:14:41 +0000
Manifest this update:     Sat 15 Aug 2026 00:14:40 +0000
Manifest next update:     Sat 22 Aug 2026 00:14:40 +0000
Files and hashes:         1: fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl (hash: wUWmE1PmZXx22nDej/LP9G7o1zRc+IaUpIIATm8sg1M=)
                          2: 791CD4FEFAE511F0B461E4A0696F56BC.roa (hash: 7W5oQwxnfaz/Da+/adv0pSip5O41XdqYh1qWJQtoYxU=)
                          3: 319786BEB63B11EF8D06900EC4F9AE02.roa (hash: Tj4ow2/jq+mUP/LMLTPrpgT8A3SwEW2gBwmbNDd2jrU=)
                          4: 1762C314878E11F199DA80955211F970.roa (hash: IzQBeC4PmDoF+drcIWyzoD8TumN/IGGjux0nGstfa/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl
                          rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Aug 2026 00:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1126 (0x466)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D4F2, serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
        Validity
            Not Before: Aug 15 00:14:40 2026 GMT
            Not After : Aug 22 00:14:40 2026 GMT
        Subject: CN=6a7faf70-612d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:65:f9:bd:91:a1:df:66:e6:d1:5e:8a:c1:ca:
                    13:ae:bf:73:29:a3:07:fe:87:74:85:6b:8b:09:cf:
                    93:06:b1:44:b2:0f:75:0d:dd:e7:8c:b9:83:9d:42:
                    44:1f:df:eb:f7:27:10:f7:72:4d:c7:a8:cc:90:e2:
                    62:d1:d9:76:71:d4:05:ed:7d:f7:77:b3:41:9a:37:
                    dc:3f:70:79:8c:07:ef:89:53:bf:b1:cd:db:85:58:
                    16:62:cc:de:4d:d2:33:b3:63:e0:c8:5e:95:e6:33:
                    e6:fd:c0:14:be:00:5d:3e:53:16:7b:60:6a:62:83:
                    fc:f7:f7:56:cd:af:a1:a2:1f:da:f4:38:9b:9d:d3:
                    c3:80:53:58:59:fa:7c:00:28:04:20:f2:46:8d:80:
                    b7:a2:39:e9:1d:ba:cf:29:05:1a:20:33:58:d4:7b:
                    30:09:9a:32:10:3a:83:4d:99:07:a5:15:06:51:10:
                    27:74:b5:b4:4b:2f:2d:87:1a:77:81:e6:17:75:35:
                    b2:5e:67:82:36:9f:38:f5:9e:fb:e4:d6:e0:99:71:
                    5b:a0:8c:5e:fe:12:f9:e2:42:20:a0:d6:79:e5:d9:
                    c0:1d:cf:de:f9:53:14:3e:16:f2:d5:1d:f2:b8:67:
                    58:73:ac:be:cc:50:46:b1:24:df:ae:d2:75:ee:10:
                    1b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BE:BB:53:3F:70:CB:87:06:63:0D:B8:DF:6D:AD:C5:C5:97:B0:0F
            X509v3 Authority Key Identifier:
                keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:53:82:d2:bf:fa:1c:eb:6d:fb:af:a7:a9:9e:bf:00:a4:eb:
         4b:3b:06:4e:53:f1:d9:03:1f:c1:ba:b6:15:dd:25:1e:b2:ac:
         7f:5b:48:5c:cc:3a:53:3a:8c:63:a0:c3:a4:6f:6f:87:7e:36:
         b1:12:68:a2:c0:b0:5a:8a:58:eb:d9:db:78:41:c9:78:e6:57:
         22:41:93:6f:42:b9:fa:00:9e:b0:68:2f:e5:99:48:3b:3a:e8:
         15:e9:77:b9:e6:3f:ab:07:fb:95:34:bc:1c:72:48:ba:88:12:
         89:94:e7:8d:e0:30:2f:cd:18:d6:28:53:0f:7f:2f:af:7f:bd:
         05:b5:fa:5f:5f:00:d6:23:bb:79:f2:08:81:a3:f1:6e:96:e9:
         7e:58:c7:49:af:86:c0:97:30:00:ad:1d:6d:7d:9f:3b:ac:a4:
         47:b5:9a:b7:17:3d:3c:31:ce:ef:06:d1:96:5f:02:e2:56:5f:
         29:12:e9:b1:8d:09:c1:8e:d1:b0:11:b8:12:ad:47:5b:68:f0:
         e6:74:5f:67:6d:d1:0c:2b:af:33:ac:e4:86:fb:fb:71:0f:83:
         58:95:08:64:ac:be:ca:a1:3d:c6:d0:e2:12:0f:5b:f3:ab:43:
         88:b3:cf:c8:8e:b5:92:49:5b:35:c3:bd:89:a2:ac:20:f3:13:
         d8:d3:da:42
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ0RjIxMTAvBgNVBAUTKDdEMThEODc3NTAyMTA1RkExODcyQURFRTRDRjI2MjND
NDE0RjE2QjUwHhcNMjYwODE1MDAxNDQwWhcNMjYwODIyMDAxNDQwWjAYMRYwFAYD
VQQDEw02YTdmYWY3MC02MTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1mX5vZGh32bm0V6KwcoTrr9zKaMH/od0hWuLCc+TBrFEsg91Dd3njLmDnUJE
H9/r9ycQ93JNx6jMkOJi0dl2cdQF7X33d7NBmjfcP3B5jAfviVO/sc3bhVgWYsze
TdIzs2PgyF6V5jPm/cAUvgBdPlMWe2BqYoP89/dWza+hoh/a9DibndPDgFNYWfp8
ACgEIPJGjYC3ojnpHbrPKQUaIDNY1HswCZoyEDqDTZkHpRUGURAndLW0Sy8thxp3
geYXdTWyXmeCNp849Z775NbgmXFboIxe/hL54kIgoNZ55dnAHc/e+VMUPhby1R3y
uGdYc6y+zFBGsSTfrtJ17hAbIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG2+u1M/
cMuHBmMNuN9trcXFl7APMB8GA1UdIwQYMBaAFH0Y2HdQIQX6GHKt7kzyYjxBTxa1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRGMi9EMjk5RjhFQ0I5
QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJmb1ljcTN1VFBKaVBFRlBG
clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZSallkMUFoQmZvWWNxM3VUUEppUEVGUEZyVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDRGMi9EMjk5RjhFQ0I5QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJm
b1ljcTN1VFBKaVBFRlBGclUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAalOC0r/6HOtt+6+nqZ6/AKTrSzsGTlPx2QMfwbq2Fd0lHrKsf1tIXMw6UzqM
Y6DDpG9vh342sRJoosCwWopY69nbeEHJeOZXIkGTb0K5+gCesGgv5ZlIOzroFel3
ueY/qwf7lTS8HHJIuogSiZTnjeAwL80Y1ihTD38vr3+9BbX6X18A1iO7efIIgaPx
bpbpfljHSa+GwJcwAK0dbX2fO6ykR7Watxc9PDHO7wbRll8C4lZfKRLpsY0JwY7R
sBG4Eq1HW2jw5nRfZ23RDCuvM6zkhvv7cQ+DWJUIZKy+yqE9xtDiEg9b86tDiLPP
yI61kklbNcO9iaKsIPMT2NPaQg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 09:03:45 2026 by rpki-client