Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft
File:                     01UDTjnACz53K-oBQambzhQnrfQ.mft (raw, json)
Hash identifier:          rx3AfAS600A52iE4Oc3O8vqieo9GUpyhsHvBhmtEiUw=
Subject key identifier:   D6:E2:79:7A:EE:11:F4:23:6C:D6:70:63:3A:A7:74:69:8B:B3:D9:AF
Authority key identifier: D3:55:03:4E:39:C0:0B:3E:77:2B:EA:01:41:A9:9B:CE:14:27:AD:F4
Certificate issuer:       /CN=A916537A/serialNumber=D355034E39C00B3E772BEA0141A99BCE1427ADF4
Certificate serial:       42
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft
Manifest number:          3C
Signing time:             Sun 05 Jul 2026 09:22:17 +0000
Manifest this update:     Sun 05 Jul 2026 09:22:16 +0000
Manifest next update:     Sun 12 Jul 2026 09:22:16 +0000
Files and hashes:         1: 01UDTjnACz53K-oBQambzhQnrfQ.crl (hash: zCsQ25z/iLJk3UuiyEboK39t66L6fE7ckoFMep8+JVw=)
                          2: 58EE9E1227E311F1A1CB4281AA833773.roa (hash: yPIdqNt/dpH6aJ38rvENnZ/i7R2Mb/uLxcqBp1Vco0I=)
                          3: B32ED56A27EB11F1BCE516B1AC833773.roa (hash: Z+wnvZGdyya/p79JNqeHLnyos7VD9XGeNRtgVLhtA0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.crl
                          rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 09:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916537A, serialNumber=D355034E39C00B3E772BEA0141A99BCE1427ADF4
        Validity
            Not Before: Jul  5 09:22:16 2026 GMT
            Not After : Jul 12 09:22:16 2026 GMT
        Subject: CN=6a4a2249-1620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a9:02:8b:9c:09:5f:34:42:62:21:ea:da:ad:
                    47:59:3c:a9:39:c2:18:a4:5c:e7:a9:fd:83:69:a9:
                    e9:b7:2e:c3:d0:cd:a6:c9:4a:13:25:44:4e:6e:c3:
                    97:a5:79:dd:32:fe:67:87:71:e6:32:34:d2:50:20:
                    39:71:78:11:1a:19:83:28:8c:48:8c:ef:90:d3:29:
                    9c:20:40:77:98:5c:b6:2a:92:c1:f4:1e:65:24:37:
                    1a:64:b9:1b:dd:c8:34:a7:0c:4a:51:06:47:19:d0:
                    1f:e2:b5:98:69:76:8a:7f:48:ac:04:a9:47:d8:5a:
                    e6:90:7b:1d:56:73:97:13:c5:b8:fa:7b:63:07:ae:
                    f6:ce:4f:88:f2:24:d1:8c:b2:f3:e6:fc:8d:54:67:
                    2e:aa:06:04:4d:f0:54:1c:ef:a0:81:43:d6:32:c0:
                    95:e5:be:26:2c:f4:e4:8f:fe:99:6c:36:45:b1:f1:
                    cc:9c:ff:d7:bb:1b:d3:a8:21:7e:68:cb:03:a7:97:
                    22:9d:21:5a:80:2a:17:02:7b:fd:e4:51:09:ad:aa:
                    fc:c9:1d:7a:0b:3f:d3:29:58:78:a5:82:61:41:50:
                    33:68:eb:65:b4:d8:b9:1e:c6:40:f7:66:57:db:33:
                    8d:9f:ed:e0:63:b1:9c:67:b8:6a:5f:7f:9c:96:9c:
                    6c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E2:79:7A:EE:11:F4:23:6C:D6:70:63:3A:A7:74:69:8B:B3:D9:AF
            X509v3 Authority Key Identifier:
                keyid:D3:55:03:4E:39:C0:0B:3E:77:2B:EA:01:41:A9:9B:CE:14:27:AD:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ff:84:dc:a0:2f:5b:c7:a7:11:f3:56:c3:67:d7:fc:a7:48:
         31:cb:63:08:d3:c8:91:2c:e0:9f:47:b2:a2:9d:b5:e2:67:25:
         0d:a3:c9:12:99:63:c3:83:9b:15:23:c7:b8:84:e7:f7:2a:a2:
         b3:51:6d:92:52:bb:3e:49:de:c1:04:7c:da:64:1c:82:47:5d:
         84:94:e3:26:0a:39:00:85:80:1a:27:70:5f:23:f3:ee:27:0a:
         63:08:e7:59:f0:fa:b3:b6:ca:53:95:fd:79:88:4f:27:26:9c:
         64:a9:45:ae:b5:68:2b:78:df:63:5b:b9:22:0f:58:71:00:a7:
         cc:3a:03:59:ff:a7:03:68:02:73:43:48:00:3f:09:14:3d:f0:
         2e:25:6b:dd:53:70:92:f8:07:bd:fe:6f:a3:d7:2e:96:aa:e9:
         f6:6a:76:70:68:47:df:72:2a:19:2e:65:30:22:26:67:23:df:
         be:96:bb:50:cd:3d:1e:a1:63:14:2b:bf:b9:03:1e:58:cf:0e:
         58:d3:96:2e:1d:2a:40:c7:42:80:8e:ed:07:ec:67:2e:6c:0b:
         21:15:41:76:da:89:a1:7e:06:87:2a:b0:ab:66:dc:49:67:cd:
         a0:54:46:a8:25:9b:a9:e5:42:1d:10:5a:b4:82:8b:24:6b:35:
         3c:13:dd:df
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NTM3QTExMC8GA1UEBRMoRDM1NTAzNEUzOUMwMEIzRTc3MkJFQTAxNDFBOTlCQ0Ux
NDI3QURGNDAeFw0yNjA3MDUwOTIyMTZaFw0yNjA3MTIwOTIyMTZaMBgxFjAUBgNV
BAMTDTZhNGEyMjQ5LTE2MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDGqQKLnAlfNEJiIerarUdZPKk5whikXOep/YNpqem3LsPQzabJShMlRE5uw5el
ed0y/meHceYyNNJQIDlxeBEaGYMojEiM75DTKZwgQHeYXLYqksH0HmUkNxpkuRvd
yDSnDEpRBkcZ0B/itZhpdop/SKwEqUfYWuaQex1Wc5cTxbj6e2MHrvbOT4jyJNGM
svPm/I1UZy6qBgRN8FQc76CBQ9YywJXlviYs9OSP/plsNkWx8cyc/9e7G9OoIX5o
ywOnlyKdIVqAKhcCe/3kUQmtqvzJHXoLP9MpWHilgmFBUDNo62W02LkexkD3Zlfb
M42f7eBjsZxnuGpff5yWnGyVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1uJ5eu4R
9CNs1nBjOqd0aYuz2a8wHwYDVR0jBBgwFoAU01UDTjnACz53K+oBQambzhQnrfQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1MzdBLzk2MTkyODRFMjc2
QTExRjFBODkxQjE3RkMyODMzNzczLzAxVURUam5BQ3o1M0stb0JRYW1iemhRbnJm
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvMDFVRFRqbkFDejUzSy1vQlFhbWJ6aFFucmZRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1
MzdBLzk2MTkyODRFMjc2QTExRjFBODkxQjE3RkMyODMzNzczLzAxVURUam5BQ3o1
M0stb0JRYW1iemhRbnJmUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCD/4TcoC9bx6cR81bDZ9f8p0gxy2MI08iRLOCfR7KinbXiZyUNo8kSmWPDg5sV
I8e4hOf3KqKzUW2SUrs+Sd7BBHzaZByCR12ElOMmCjkAhYAaJ3BfI/PuJwpjCOdZ
8PqztspTlf15iE8nJpxkqUWutWgreN9jW7kiD1hxAKfMOgNZ/6cDaAJzQ0gAPwkU
PfAuJWvdU3CS+Ae9/m+j1y6Wqun2anZwaEffcioZLmUwIiZnI9++lrtQzT0eoWMU
K7+5Ax5Yzw5Y05YuHSpAx0KAju0H7GcubAshFUF22omhfgaHKrCrZtxJZ82gVEao
JZup5UIdEFq0goskazU8E93f
-----END CERTIFICATE-----
Generated at Tue Jul 7 04:57:10 2026 by rpki-client