Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
File:                     Aul8r2u1VIcberzm6NeDIOuURpE.mft (raw, json)
Hash identifier:          CvNWg3wgUvYqLav4dtTPJcCcAkR/Kd9dZRKU6wDzEJU=
Subject key identifier:   55:BB:9D:10:A9:19:B5:D3:F8:0D:CD:75:A7:2B:97:56:D6:D3:8B:41
Authority key identifier: 02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91
Certificate issuer:       /CN=A917A47E/serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691
Certificate serial:       24BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
Manifest number:          24A2
Signing time:             Sat 04 Jul 2026 15:47:13 +0000
Manifest this update:     Sat 04 Jul 2026 15:47:13 +0000
Manifest next update:     Sat 11 Jul 2026 15:47:13 +0000
Files and hashes:         1: Aul8r2u1VIcberzm6NeDIOuURpE.crl (hash: bGlguRXO3/1tNqmGLPmU3VUKXswN0OJ5TPyvhXnFy5Y=)
                          2: 0B72CFAC049211EBB8144531C4F9AE02.roa (hash: kE6e/2uyAi3HKTrQshUdCns+fLTS/L8pSxDJFAPtMig=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl
                          rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 15:47:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9402 (0x24ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A47E, serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691
        Validity
            Not Before: Jul  4 15:47:13 2026 GMT
            Not After : Jul 11 15:47:13 2026 GMT
        Subject: CN=6a492b01-46dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:43:45:8a:f1:69:07:69:de:53:b4:28:98:d6:
                    c7:aa:90:84:d9:bc:57:a4:d4:36:37:3e:4d:5a:2a:
                    d4:c1:ba:54:68:b9:63:de:ae:ce:62:0c:08:56:91:
                    cf:7b:0b:17:68:eb:ae:ee:32:88:66:3e:fe:d1:04:
                    34:82:29:50:2e:3b:1b:cb:c6:0d:c0:ef:b1:e6:77:
                    5e:2d:35:5d:34:e9:8b:fc:5c:e9:0e:5b:0e:17:5f:
                    0d:12:d7:65:24:4d:9e:52:cc:96:26:37:92:65:cd:
                    1d:f2:14:50:b5:8c:9d:f6:cd:5d:0e:30:0e:9b:86:
                    28:c0:d1:b8:ba:21:47:96:f5:19:fb:e1:66:d4:c4:
                    ed:b6:f1:fa:ac:34:50:57:4c:b6:92:73:93:87:82:
                    12:4c:7d:16:60:8f:1f:56:1b:46:22:f1:24:c7:6d:
                    2d:0f:d8:4a:d7:3a:d3:bf:96:4b:53:8e:76:52:45:
                    f0:f5:ef:e3:cd:6d:a5:ec:7f:a5:b6:46:07:5f:51:
                    d4:42:46:e7:dd:9b:69:f8:51:31:3b:4e:ab:e0:2f:
                    51:e9:62:b0:a1:74:cd:83:c3:f0:31:49:be:3d:e5:
                    32:a5:05:84:09:80:2e:f4:b4:90:f0:d9:3a:94:84:
                    4a:a6:56:a8:98:ce:97:71:99:3e:49:4e:e5:91:0d:
                    d5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BB:9D:10:A9:19:B5:D3:F8:0D:CD:75:A7:2B:97:56:D6:D3:8B:41
            X509v3 Authority Key Identifier:
                keyid:02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:a4:98:18:b6:28:e8:fe:1b:59:d2:13:6e:6e:2c:22:ce:0e:
         ab:57:7b:44:3b:dc:b4:5a:a6:12:89:2d:e4:f5:58:55:3e:ac:
         0d:23:ab:61:c2:d6:42:e9:05:55:7e:20:c1:ff:13:d7:d9:90:
         fc:ce:99:13:47:8e:23:53:f4:74:9e:30:b2:9e:53:6c:4c:30:
         c4:b2:6e:94:96:c8:fa:87:a5:e1:38:08:64:ca:b6:bc:1b:8c:
         bd:df:58:1d:89:53:99:c8:54:d9:8a:24:6c:50:95:1d:7f:7b:
         4c:38:ae:79:59:76:6b:d9:92:5b:dc:36:5a:05:0b:f1:72:a6:
         0d:3b:39:52:cb:81:78:57:b6:39:f1:d3:bb:87:5a:75:42:95:
         b3:d3:38:8e:96:08:02:7b:19:96:ad:63:78:0d:30:46:ef:41:
         9f:a7:be:a2:67:94:36:05:8c:d8:92:e8:3b:8a:8c:1d:65:1a:
         54:be:87:c1:69:8f:39:df:97:ba:7a:8d:52:6e:02:c7:fe:a7:
         b9:b5:cf:50:fb:57:c1:c2:b3:1b:fd:d9:b2:81:29:d1:e8:46:
         4d:ea:9c:02:58:5c:61:ae:23:dd:0d:d9:76:e0:f4:91:43:6d:
         69:09:1a:7d:90:96:16:ca:23:2d:69:c7:67:03:5d:99:6b:7e:
         10:e7:b6:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0E0N0UxMTAvBgNVBAUTKDAyRTk3Q0FGNkJCNTU0ODcxQjdBQkNFNkU4RDc4MzIw
RUI5NDQ2OTEwHhcNMjYwNzA0MTU0NzEzWhcNMjYwNzExMTU0NzEzWjAYMRYwFAYD
VQQDEw02YTQ5MmIwMS00NmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyUNFivFpB2neU7QomNbHqpCE2bxXpNQ2Nz5NWirUwbpUaLlj3q7OYgwIVpHP
ewsXaOuu7jKIZj7+0QQ0gilQLjsby8YNwO+x5ndeLTVdNOmL/FzpDlsOF18NEtdl
JE2eUsyWJjeSZc0d8hRQtYyd9s1dDjAOm4YowNG4uiFHlvUZ++Fm1MTttvH6rDRQ
V0y2knOTh4ISTH0WYI8fVhtGIvEkx20tD9hK1zrTv5ZLU452UkXw9e/jzW2l7H+l
tkYHX1HUQkbn3Ztp+FExO06r4C9R6WKwoXTNg8PwMUm+PeUypQWECYAu9LSQ8Nk6
lIRKplaomM6XcZk+SU7lkQ3VqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFW7nRCp
GbXT+A3Ndacrl1bW04tBMB8GA1UdIwQYMBaAFALpfK9rtVSHG3q85ujXgyDrlEaR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ3RS8zRTZCRUM1NjY5
MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJY2JlcnptNk5lRElPdVVS
cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0F1bDhyMnUxVkljYmVyem02TmVESU91VVJwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QTQ3RS8zRTZCRUM1NjY5MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJ
Y2JlcnptNk5lRElPdVVScEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAKSYGLYo6P4bWdITbm4sIs4Oq1d7RDvctFqmEokt5PVYVT6sDSOrYcLWQukF
VX4gwf8T19mQ/M6ZE0eOI1P0dJ4wsp5TbEwwxLJulJbI+oel4TgIZMq2vBuMvd9Y
HYlTmchU2YokbFCVHX97TDiueVl2a9mSW9w2WgUL8XKmDTs5UsuBeFe2OfHTu4da
dUKVs9M4jpYIAnsZlq1jeA0wRu9Bn6e+omeUNgWM2JLoO4qMHWUaVL6HwWmPOd+X
unqNUm4Cx/6nubXPUPtXwcKzG/3ZsoEp0ehGTeqcAlhcYa4j3Q3ZduD0kUNtaQka
fZCWFsojLWnHZwNdmWt+EOe2Fw==
-----END CERTIFICATE-----
Generated at Sun Jul 5 12:36:37 2026 by rpki-client