Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
File:                     UN4cYHM-ori3boQDYJGOHyXEbkM.mft (raw, json)
Hash identifier:          hIc/Qs+m96HQ1ZDuUtYGrmfh+CarIFGMLQKEVBd6SWQ=
Subject key identifier:   2D:D7:5D:83:DA:69:FD:A9:49:2E:BF:19:9C:97:9A:C0:3D:82:2B:52
Authority key identifier: 50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
Certificate issuer:       /CN=A916701E/serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Certificate serial:       0CE4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
Manifest number:          0CCB
Signing time:             Wed 12 Aug 2026 18:22:10 +0000
Manifest this update:     Wed 12 Aug 2026 18:22:09 +0000
Manifest next update:     Wed 19 Aug 2026 18:22:09 +0000
Files and hashes:         1: UN4cYHM-ori3boQDYJGOHyXEbkM.crl (hash: T5B4afSav02ZK9VtvAsqgc0OYW2zLyPXtYoZUcYwN2w=)
                          2: FNdaP_tlvzdOkRkygoSbG2qvE4Q.asa (hash: HtM4cT1n0OKEJjnde1/o9+CymoCiMyNjl/BcEhdS6xk=)
                          3: 46C5452E0DD711EF85707821C4F9AE02.roa (hash: VXncP0PhzyqKm2QEziAfAuVtMG/akEU8trZDQTOKPw8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
                          rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Aug 2026 18:22:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3300 (0xce4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916701E, serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
        Validity
            Not Before: Aug 12 18:22:09 2026 GMT
            Not After : Aug 19 18:22:09 2026 GMT
        Subject: CN=6a7cb9d2-ff2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cf:ec:6a:ea:05:d4:81:f7:e1:48:48:9d:fb:
                    b4:17:f3:fd:90:f2:23:1e:bc:f2:59:23:6d:00:f6:
                    20:ed:91:6d:e9:24:29:a9:aa:95:cf:11:a5:63:cb:
                    e0:d5:56:79:5e:ea:1c:ea:c9:dd:62:5e:b2:96:c7:
                    1d:b2:5b:e9:e5:0c:66:23:f6:bf:07:0a:21:fa:65:
                    5b:6f:c2:d6:98:1a:eb:8f:b2:97:e3:fc:4b:a6:93:
                    31:45:74:21:41:b0:25:ee:3f:0f:8a:3f:5e:93:68:
                    8a:f6:04:88:6d:55:f0:c4:9d:5a:34:53:9c:3e:cc:
                    13:34:46:ee:81:aa:49:74:e9:33:b3:64:f4:01:30:
                    3f:9b:d3:ba:3b:0b:ab:80:5c:dd:21:0e:e5:fb:76:
                    b1:11:2b:31:23:ab:3c:dc:f3:e3:30:0d:10:e3:a4:
                    8e:57:87:f9:cc:b6:8c:9c:56:61:59:10:05:48:b1:
                    7e:71:51:fe:89:58:e0:7e:41:63:f5:d3:49:88:09:
                    f1:32:d8:a8:c3:b2:c1:7e:f6:aa:32:7e:9e:cd:84:
                    b7:45:bd:62:43:39:e2:3a:b8:1d:aa:fa:6f:97:d6:
                    5a:aa:f8:9e:28:9f:d0:d2:cb:0b:ff:74:2b:df:bc:
                    c2:45:0e:d8:cc:39:cf:12:69:f2:65:8e:2c:43:a4:
                    2e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D7:5D:83:DA:69:FD:A9:49:2E:BF:19:9C:97:9A:C0:3D:82:2B:52
            X509v3 Authority Key Identifier:
                keyid:50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:7f:8b:93:d1:62:6c:80:08:b6:90:7d:7b:0f:af:11:bf:bf:
         b4:79:cc:d7:54:6a:10:3a:31:fa:59:e2:d0:ce:2b:9f:d9:92:
         98:39:27:bb:b4:6a:e8:71:49:11:35:97:21:ab:59:24:f0:7f:
         bd:8d:4a:6f:5d:b1:07:49:cb:3c:46:59:c8:2d:4c:82:ed:b6:
         5c:1a:41:46:af:46:1b:a7:bf:98:bb:10:9c:fe:52:ff:3f:86:
         a3:d0:58:c2:3b:09:33:c9:bc:c4:ea:ad:46:0a:39:08:36:25:
         7c:0b:f9:35:f9:60:7e:a9:11:d3:4d:d4:c8:5a:4b:d8:81:aa:
         7e:17:2a:81:00:29:84:3f:89:fb:7c:b6:ea:c0:ff:44:71:f5:
         c2:9d:c4:c8:e6:f0:30:61:ab:44:11:af:e8:2a:97:34:0b:37:
         e1:cc:de:8a:7f:3a:96:5f:ad:16:38:0b:43:e3:93:15:a3:02:
         06:4e:a0:b9:75:16:e2:6c:8b:fb:96:57:c0:26:73:49:16:61:
         73:10:9a:b3:52:74:b8:a8:e9:a8:48:14:4f:3f:7c:2a:12:cf:
         76:70:8e:57:99:31:03:a3:1a:bf:50:8f:4b:7c:0d:4f:ef:7f:
         6a:88:4b:03:ae:b0:c3:51:5a:7d:82:19:37:d8:35:ec:89:3b:
         19:93:91:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjcwMUUxMTAvBgNVBAUTKDUwREUxQzYwNzMzRUEyQjhCNzZFODQwMzYwOTE4RTFG
MjVDNDZFNDMwHhcNMjYwODEyMTgyMjA5WhcNMjYwODE5MTgyMjA5WjAYMRYwFAYD
VQQDEw02YTdjYjlkMi1mZjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3s/sauoF1IH34UhInfu0F/P9kPIjHrzyWSNtAPYg7ZFt6SQpqaqVzxGlY8vg
1VZ5Xuoc6sndYl6ylscdslvp5QxmI/a/Bwoh+mVbb8LWmBrrj7KX4/xLppMxRXQh
QbAl7j8Pij9ek2iK9gSIbVXwxJ1aNFOcPswTNEbugapJdOkzs2T0ATA/m9O6Owur
gFzdIQ7l+3axESsxI6s83PPjMA0Q46SOV4f5zLaMnFZhWRAFSLF+cVH+iVjgfkFj
9dNJiAnxMtiow7LBfvaqMn6ezYS3Rb1iQzniOrgdqvpvl9ZaqvieKJ/Q0ssL/3Qr
37zCRQ7YzDnPEmnyZY4sQ6QufwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC3XXYPa
af2pSS6/GZyXmsA9gitSMB8GA1UdIwQYMBaAFFDeHGBzPqK4t26EA2CRjh8lxG5D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzAxRS83ODVEN0VEMjFD
MDgxMUVBODU3NkIxNTFDNEY5QUUwMi9VTjRjWUhNLW9yaTNib1FEWUpHT0h5WEVi
a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VONGNZSE0tb3JpM2JvUURZSkdPSHlYRWJrTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzAxRS83ODVEN0VEMjFDMDgxMUVBODU3NkIxNTFDNEY5QUUwMi9VTjRjWUhNLW9y
aTNib1FEWUpHT0h5WEVia00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArX+Lk9FibIAItpB9ew+vEb+/tHnM11RqEDox+lni0M4rn9mSmDknu7Rq6HFJ
ETWXIatZJPB/vY1Kb12xB0nLPEZZyC1Mgu22XBpBRq9GG6e/mLsQnP5S/z+Go9BY
wjsJM8m8xOqtRgo5CDYlfAv5NflgfqkR003UyFpL2IGqfhcqgQAphD+J+3y26sD/
RHH1wp3EyObwMGGrRBGv6CqXNAs34czein86ll+tFjgLQ+OTFaMCBk6guXUW4myL
+5ZXwCZzSRZhcxCas1J0uKjpqEgUTz98KhLPdnCOV5kxA6Mav1CPS3wNT+9/aohL
A66ww1FafYIZN9g17Ik7GZORJQ==
-----END CERTIFICATE-----
Generated at Thu Aug 13 07:51:42 2026 by rpki-client