Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft
File:                     dh_-bfalw4-a60XlQCWIzddef9w.mft (raw, json)
Hash identifier:          /OUUMGNQ07RuDYxyuOOZ1DmhXMcZtHaujvWURS9gP7A=
Subject key identifier:   97:42:B0:CC:73:CF:2D:41:CA:8E:D8:A5:A9:BD:EB:35:86:CA:42:99
Authority key identifier: 76:1F:FE:6D:F6:A5:C3:8F:9A:EB:45:E5:40:25:88:CD:D7:5E:7F:DC
Certificate issuer:       /CN=A9179CA1/serialNumber=761FFE6DF6A5C38F9AEB45E5402588CDD75E7FDC
Certificate serial:       088F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft
Manifest number:          0887
Signing time:             Tue 18 Aug 2026 21:02:10 +0000
Manifest this update:     Tue 18 Aug 2026 21:02:09 +0000
Manifest next update:     Tue 25 Aug 2026 21:02:09 +0000
Files and hashes:         1: dh_-bfalw4-a60XlQCWIzddef9w.crl (hash: 0YJz+vmTZxmjXXD3jbFByDNh33fvJZoV2o4R41wTGoQ=)
                          2: 7816A67E045611EB86495B26C4F9AE02.roa (hash: 7pu3YPOy/Iyi+5lsIR5w0HcGr9ERc7QOQEXQx+NBL5Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.crl
                          rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2191 (0x88f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179CA1, serialNumber=761FFE6DF6A5C38F9AEB45E5402588CDD75E7FDC
        Validity
            Not Before: Aug 18 21:02:09 2026 GMT
            Not After : Aug 25 21:02:09 2026 GMT
        Subject: CN=6a84c851-a39c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:66:c9:af:7c:48:6e:6e:06:47:6a:aa:da:53:
                    89:1c:7c:1d:de:ea:7a:f3:b5:e6:85:27:44:71:d1:
                    9b:83:62:67:b4:62:96:ee:f5:d4:da:a4:3c:79:da:
                    77:61:32:38:67:3d:35:db:47:47:fe:df:17:82:07:
                    5e:ff:b6:af:e0:d5:93:b1:3a:37:39:48:61:a5:66:
                    53:f4:aa:64:ef:1d:3a:fd:2c:e8:eb:5e:55:87:ce:
                    0d:34:ed:e9:c8:a2:6c:97:a0:79:1e:96:d9:94:1b:
                    be:0f:5e:27:54:27:ad:21:ed:fb:58:53:15:1b:4e:
                    19:51:4f:eb:2c:86:91:10:3d:de:31:e9:11:a7:9c:
                    0e:29:87:60:97:0f:ba:3d:5b:61:28:cd:6c:76:4a:
                    05:6e:3d:40:04:bc:4c:de:48:c1:00:0f:84:2a:a4:
                    04:d5:d7:bb:66:aa:a8:b1:5c:66:a8:29:ee:14:c8:
                    e6:c2:5f:e9:b5:f7:5c:95:95:fc:ab:78:2b:57:8c:
                    2c:e9:41:bb:2f:82:f8:05:c3:a7:f2:d4:3d:80:d9:
                    8f:b3:32:c3:3a:0e:9f:a6:78:95:74:b5:c6:cb:f1:
                    09:cf:28:90:3d:63:5f:bd:7d:5e:e2:5a:ba:5c:39:
                    15:11:90:b2:97:0b:bb:8c:88:cb:cc:df:70:65:fd:
                    13:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:42:B0:CC:73:CF:2D:41:CA:8E:D8:A5:A9:BD:EB:35:86:CA:42:99
            X509v3 Authority Key Identifier:
                keyid:76:1F:FE:6D:F6:A5:C3:8F:9A:EB:45:E5:40:25:88:CD:D7:5E:7F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:a8:7b:44:f2:48:51:65:26:dc:70:ae:7c:f2:f8:be:89:33:
         99:43:a3:57:de:05:c0:aa:4f:80:3d:c7:d9:aa:86:9d:cb:8d:
         8d:7c:cb:05:d2:c9:24:30:e7:e4:13:d9:55:81:62:e8:6c:ca:
         53:bd:dc:8d:f0:25:c8:0f:a9:f9:28:26:2f:b8:ed:a6:1f:91:
         98:86:97:c8:7b:fe:8a:92:0c:7c:a9:8b:2a:25:7b:8d:4a:1f:
         13:5b:66:72:86:63:24:2f:08:13:57:f9:d0:cd:b9:6d:32:b3:
         f0:7f:0e:71:74:50:c4:5f:0c:a8:58:ae:81:8e:52:ff:0e:e3:
         19:f6:77:cd:c6:39:cb:7b:c3:6c:ac:7c:5c:0e:40:e4:26:08:
         6c:88:6f:2f:b8:31:e0:81:6c:5a:97:3e:d6:7b:af:bb:ed:82:
         6a:26:f2:16:73:57:fd:61:da:10:a1:64:15:8c:f5:88:4b:80:
         d3:46:06:4f:c2:d0:47:4c:2b:7f:e9:a5:07:fb:ab:a1:0f:a0:
         6e:a9:c8:05:2d:b6:e7:c4:6a:94:a0:82:7e:cd:fe:4f:5b:9f:
         4e:5e:ee:d6:bf:a2:ac:ce:6b:de:78:86:4e:fe:a1:3e:e7:b8:
         c5:c8:8d:c8:84:99:32:68:85:84:df:1a:af:47:d3:34:40:5c:
         ce:eb:dc:48
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzlDQTExMTAvBgNVBAUTKDc2MUZGRTZERjZBNUMzOEY5QUVCNDVFNTQwMjU4OENE
RDc1RTdGREMwHhcNMjYwODE4MjEwMjA5WhcNMjYwODI1MjEwMjA5WjAYMRYwFAYD
VQQDEw02YTg0Yzg1MS1hMzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArWbJr3xIbm4GR2qq2lOJHHwd3up687XmhSdEcdGbg2JntGKW7vXU2qQ8edp3
YTI4Zz0120dH/t8Xggde/7av4NWTsTo3OUhhpWZT9Kpk7x06/Szo615Vh84NNO3p
yKJsl6B5HpbZlBu+D14nVCetIe37WFMVG04ZUU/rLIaRED3eMekRp5wOKYdglw+6
PVthKM1sdkoFbj1ABLxM3kjBAA+EKqQE1de7ZqqosVxmqCnuFMjmwl/ptfdclZX8
q3grV4ws6UG7L4L4BcOn8tQ9gNmPszLDOg6fpniVdLXGy/EJzyiQPWNfvX1e4lq6
XDkVEZCylwu7jIjLzN9wZf0TPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJdCsMxz
zy1Byo7Ypam96zWGykKZMB8GA1UdIwQYMBaAFHYf/m32pcOPmutF5UAliM3XXn/c
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUNBMS84MDYzNTRBRTA0
NTUxMUVCODkxQThCMjVDNEY5QUUwMi9kaF8tYmZhbHc0LWE2MFhsUUNXSXpkZGVm
OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RoXy1iZmFsdzQtYTYwWGxRQ1dJemRkZWY5dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OUNBMS84MDYzNTRBRTA0NTUxMUVCODkxQThCMjVDNEY5QUUwMi9kaF8tYmZhbHc0
LWE2MFhsUUNXSXpkZGVmOXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjah7RPJIUWUm3HCufPL4vokzmUOjV94FwKpPgD3H2aqGncuNjXzLBdLJJDDn
5BPZVYFi6GzKU73cjfAlyA+p+SgmL7jtph+RmIaXyHv+ipIMfKmLKiV7jUofE1tm
coZjJC8IE1f50M25bTKz8H8OcXRQxF8MqFiugY5S/w7jGfZ3zcY5y3vDbKx8XA5A
5CYIbIhvL7gx4IFsWpc+1nuvu+2CaibyFnNX/WHaEKFkFYz1iEuA00YGT8LQR0wr
f+mlB/uroQ+gbqnIBS2258RqlKCCfs3+T1ufTl7u1r+irM5r3niGTv6hPue4xciN
yISZMmiFhN8ar0fTNEBczuvcSA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:18 2026 by rpki-client