Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft
File:                     f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft (raw, json)
Hash identifier:          +YsnLwh131Fcb/b1Dk4FgC+Y8XSN76oD70FbCP5IAu0=
Subject key identifier:   DB:8B:38:EF:67:23:A9:6A:0B:5A:BE:A1:41:7A:95:8D:EA:AE:E6:9F
Authority key identifier: 7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D
Certificate issuer:       /CN=A916DA3F/serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D
Certificate serial:       06DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft
Manifest number:          06CB
Signing time:             Sun 02 Aug 2026 22:49:36 +0000
Manifest this update:     Sun 02 Aug 2026 22:49:36 +0000
Manifest next update:     Sun 09 Aug 2026 22:49:36 +0000
Files and hashes:         1: f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl (hash: NRcaIrdimfpF0wC+kqI+IM5WAUgvMiZASA9ujd5kVqs=)
                          2: 95B7B784C1E611EF91316938C4F9AE02.roa (hash: y+lFHngfQnlFkbwbfAnNnYvQWplxE2BUU73qj0ZDaUw=)
                          3: 515B1CD254EB11F0B04DBD37C4F9AE02.roa (hash: nKGpkEspHYoLDWlKrq+T1eLZcO38KBQKAU4XkN0Vf1Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl
                          rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Aug 2026 22:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1757 (0x6dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DA3F, serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D
        Validity
            Not Before: Aug  2 22:49:36 2026 GMT
            Not After : Aug  9 22:49:36 2026 GMT
        Subject: CN=6a6fc980-b0fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8d:2b:ef:ee:7a:26:16:08:42:da:64:38:22:
                    3b:43:57:4a:a1:0a:ee:99:d6:9d:57:ba:f3:5e:b8:
                    13:e9:30:bb:c5:44:66:d0:62:fd:7b:23:21:33:0c:
                    a6:b3:26:cf:97:bb:a7:e8:dc:10:07:99:36:e9:db:
                    93:c5:e1:37:e1:f4:03:d8:42:cd:c1:06:49:e2:ea:
                    e6:9a:f1:a4:74:31:0f:e3:a6:07:fe:03:2b:cf:17:
                    3c:54:5c:9e:2b:79:49:3a:90:5a:23:40:f0:ab:f7:
                    63:68:db:c7:2c:28:3b:2c:5e:54:26:56:99:2d:0a:
                    0f:c8:3e:8e:64:79:f1:73:b4:65:1a:f0:ac:a6:cb:
                    c2:cc:88:3f:d8:9e:c7:c8:8a:05:95:8a:c7:e0:14:
                    2a:12:f7:24:82:d0:7f:9a:51:f6:a0:6c:02:55:57:
                    32:1a:0d:22:10:75:66:2b:9f:01:db:78:43:fc:3b:
                    30:d8:b5:4d:d0:e8:14:69:b3:e5:bf:8a:b1:6e:f3:
                    f3:2f:56:79:43:74:c5:1f:20:dd:b8:5f:ca:f8:9a:
                    1c:4e:4f:4c:bf:e2:db:8f:05:04:9e:10:cc:31:9e:
                    30:bb:18:9a:23:46:d4:e7:e3:bc:b4:74:6b:d9:b0:
                    c9:6e:c0:63:e4:8c:e2:a1:6f:9c:63:7a:ea:42:28:
                    c0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8B:38:EF:67:23:A9:6A:0B:5A:BE:A1:41:7A:95:8D:EA:AE:E6:9F
            X509v3 Authority Key Identifier:
                keyid:7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:15:e7:b8:9f:d7:b2:6d:7a:8f:b6:d6:49:56:bd:88:e1:db:
         b5:e2:f7:41:e8:8d:ed:ed:08:66:1e:d0:f7:8b:ca:5e:19:1c:
         37:9c:c6:d3:d6:2e:28:38:48:ff:47:d2:b8:8f:2e:1b:0e:fa:
         fa:15:b5:6f:23:98:9b:6a:78:bb:d3:74:0c:91:e1:1c:e7:10:
         1a:82:82:df:2c:54:cb:e6:a4:ce:1b:ce:c6:3d:b9:38:18:65:
         b7:f0:d4:50:5f:dd:53:70:cc:15:ad:d5:81:85:1e:c7:80:d5:
         e0:5b:35:fe:1a:32:70:8e:7c:80:5b:e4:14:d3:9f:31:ab:38:
         1b:41:4e:0b:9a:63:fb:69:b6:b4:d2:c6:cb:6d:73:69:a1:44:
         0f:65:af:16:94:c4:78:8e:76:92:5d:b7:84:ce:a1:a9:9f:b3:
         83:4d:44:a1:eb:94:cb:28:06:de:e5:52:2f:11:a0:d5:c9:b6:
         52:da:2f:87:53:45:ec:3b:11:67:e3:67:a4:f7:4b:76:3f:35:
         02:91:1b:c2:7e:8b:67:53:35:74:d0:11:c3:30:fd:25:cf:22:
         dd:b1:a6:20:d7:98:de:24:46:56:8b:42:6c:53:fd:03:a8:cb:
         1b:ef:db:c4:7d:a1:ec:a0:d4:b2:09:dd:b1:92:9c:81:90:a6:
         55:ea:0f:b5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkRBM0YxMTAvBgNVBAUTKDdGRjNFQTlBQzA4MzI1MUY1RDMwQjAxRDA1NkJDQkNE
RTFBN0VFMkQwHhcNMjYwODAyMjI0OTM2WhcNMjYwODA5MjI0OTM2WjAYMRYwFAYD
VQQDEw02YTZmYzk4MC1iMGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApo0r7+56JhYIQtpkOCI7Q1dKoQrumdadV7rzXrgT6TC7xURm0GL9eyMhMwym
sybPl7un6NwQB5k26duTxeE34fQD2ELNwQZJ4urmmvGkdDEP46YH/gMrzxc8VFye
K3lJOpBaI0Dwq/djaNvHLCg7LF5UJlaZLQoPyD6OZHnxc7RlGvCspsvCzIg/2J7H
yIoFlYrH4BQqEvckgtB/mlH2oGwCVVcyGg0iEHVmK58B23hD/Dsw2LVN0OgUabPl
v4qxbvPzL1Z5Q3TFHyDduF/K+JocTk9Mv+LbjwUEnhDMMZ4wuxiaI0bU5+O8tHRr
2bDJbsBj5IzioW+cY3rqQijAlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNuLOO9n
I6lqC1q+oUF6lY3qruafMB8GA1UdIwQYMBaAFH/z6prAgyUfXTCwHQVry83hp+4t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REEzRi8wNEZGODlEOEI2
Q0QxMUVCOEUxMDgwMjZDNEY5QUUwMi9mX1BxbXNDREpSOWRNTEFkQld2THplR243
aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZfUHFtc0NESlI5ZE1MQWRCV3ZMemVHbjdpMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
REEzRi8wNEZGODlEOEI2Q0QxMUVCOEUxMDgwMjZDNEY5QUUwMi9mX1BxbXNDREpS
OWRNTEFkQld2THplR243aTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFBXnuJ/Xsm16j7bWSVa9iOHbteL3QeiN7e0IZh7Q94vKXhkcN5zG09YuKDhI
/0fSuI8uGw76+hW1byOYm2p4u9N0DJHhHOcQGoKC3yxUy+akzhvOxj25OBhlt/DU
UF/dU3DMFa3VgYUex4DV4Fs1/hoycI58gFvkFNOfMas4G0FOC5pj+2m2tNLGy21z
aaFED2WvFpTEeI52kl23hM6hqZ+zg01EoeuUyygG3uVSLxGg1cm2Utovh1NF7DsR
Z+NnpPdLdj81ApEbwn6LZ1M1dNARwzD9Jc8i3bGmINeY3iRGVotCbFP9A6jLG+/b
xH2h7KDUsgndsZKcgZCmVeoPtQ==
-----END CERTIFICATE-----
Generated at Tue Aug 4 13:36:46 2026 by rpki-client