Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft
File:                     rkcY5fMvAEoDEv64aa3LvMTu5RY.mft (raw, json)
Hash identifier:          N9rqd6T/gQVhziS9ss5UbiC18cChUExBNL9ain0dnfE=
Subject key identifier:   36:6A:A4:4B:C6:6B:E0:5C:6B:6B:BE:93:F6:08:50:6B:F2:AE:68:0C
Authority key identifier: AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16
Certificate issuer:       /CN=A917C185/serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516
Certificate serial:       0A1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft
Manifest number:          0A0F
Signing time:             Sat 04 Jul 2026 19:54:45 +0000
Manifest this update:     Sat 04 Jul 2026 19:54:45 +0000
Manifest next update:     Sat 11 Jul 2026 19:54:45 +0000
Files and hashes:         1: rkcY5fMvAEoDEv64aa3LvMTu5RY.crl (hash: 2kIyJ84rsNbamiNLLiSmYJVSlNlPDdDjJf3UTXAUTjs=)
                          2: DF27F546D12D11EE9F451355C4F9AE02.roa (hash: 6QMDVSthddfqb1QrZW5I4wtYqanc1b5umweIX9kimlQ=)
                          3: CB91083CA63511EA900DB923C4F9AE02.roa (hash: kprOxi7yOOu/qaqTDcj+Kv/ZVavP691sQgk1g/w7hYw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl
                          rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 19:54:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2590 (0xa1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C185, serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516
        Validity
            Not Before: Jul  4 19:54:45 2026 GMT
            Not After : Jul 11 19:54:45 2026 GMT
        Subject: CN=6a496505-1d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:68:4d:9c:1e:0b:d6:4a:a8:42:7b:34:ff:70:
                    7d:62:b9:6c:b0:1c:ff:e2:be:45:90:24:7d:0a:fd:
                    4c:76:b0:bd:9b:0a:1c:b1:05:5d:0e:df:71:2d:7f:
                    35:dc:e1:09:93:5a:00:f2:c7:49:53:31:25:5a:72:
                    41:f4:00:d9:d1:f9:66:3c:55:56:4e:c9:f0:9e:f5:
                    5e:aa:73:0c:b4:46:7b:74:43:c7:c5:7b:8e:24:fe:
                    d3:c4:da:e2:55:ae:12:57:7d:14:32:b2:b7:84:21:
                    a5:f6:69:10:d6:91:14:0b:6b:e2:5f:b9:7f:9b:46:
                    a1:20:42:75:f6:62:d7:3a:54:5f:3b:4a:6c:69:7f:
                    f9:2a:60:0a:c1:83:a6:e5:54:c2:e0:9d:51:d8:ea:
                    30:4f:78:eb:8b:64:3a:a6:30:dc:4a:fa:df:79:53:
                    7e:99:9b:16:01:a6:d7:3b:59:49:5e:1e:60:ae:f2:
                    7b:7d:04:e5:b1:5b:40:6d:56:6b:1c:0b:ac:d5:66:
                    ed:aa:b9:35:74:57:55:80:f6:db:f6:cd:57:50:64:
                    7d:d3:25:2c:23:1b:e8:17:db:f0:5e:c3:69:b2:b2:
                    d6:0d:b1:da:92:92:e9:87:d9:05:25:6f:bf:8f:26:
                    0e:c7:60:f5:d5:44:cd:09:bb:e9:99:e4:e4:35:2c:
                    6b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6A:A4:4B:C6:6B:E0:5C:6B:6B:BE:93:F6:08:50:6B:F2:AE:68:0C
            X509v3 Authority Key Identifier:
                keyid:AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c7:d0:75:45:99:c6:df:65:df:d5:e9:7d:46:bf:cb:b2:86:
         6c:9c:9b:80:24:d5:bd:00:af:af:4b:77:aa:ae:24:45:6b:4e:
         57:f8:9e:75:a8:e6:6d:5f:25:fd:cc:a8:ee:dc:83:7c:1e:00:
         bf:10:eb:0b:d2:62:7b:47:ab:43:c7:a7:99:90:df:37:90:14:
         45:29:27:3d:6f:af:ea:1e:ac:46:d4:5d:20:9e:68:97:73:bd:
         19:23:0f:0d:a0:e8:24:5f:af:2e:da:3b:e3:75:11:90:ca:f5:
         ff:04:2f:86:18:50:41:5f:9a:41:ea:bd:f2:14:cc:6c:57:d9:
         b4:13:e7:9b:3a:45:0b:d6:e9:6e:cc:de:7e:ad:60:7a:94:29:
         84:cc:2e:70:a0:22:4d:e0:5d:39:83:9d:44:1d:94:a5:15:b2:
         cc:65:e9:c4:4f:7a:f4:7f:63:7e:14:17:38:74:d4:11:41:fb:
         db:4e:b7:32:ca:73:4c:ac:cf:d8:12:84:97:13:92:80:e8:7c:
         47:a6:9e:b8:6c:d9:ca:ac:70:d1:43:68:81:4c:1d:f9:ef:a0:
         77:6e:2f:29:d6:7c:5a:7a:70:5c:3f:1f:ff:a4:cc:2b:e6:d1:
         91:ba:b1:9a:57:d5:74:c7:dc:6d:39:5b:7d:ca:bc:d4:54:b3:
         8a:1a:34:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0MxODUxMTAvBgNVBAUTKEFFNDcxOEU1RjMyRjAwNEEwMzEyRkVCODY5QURDQkJD
QzRFRUU1MTYwHhcNMjYwNzA0MTk1NDQ1WhcNMjYwNzExMTk1NDQ1WjAYMRYwFAYD
VQQDEw02YTQ5NjUwNS0xZDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiGhNnB4L1kqoQns0/3B9YrlssBz/4r5FkCR9Cv1MdrC9mwocsQVdDt9xLX81
3OEJk1oA8sdJUzElWnJB9ADZ0flmPFVWTsnwnvVeqnMMtEZ7dEPHxXuOJP7TxNri
Va4SV30UMrK3hCGl9mkQ1pEUC2viX7l/m0ahIEJ19mLXOlRfO0psaX/5KmAKwYOm
5VTC4J1R2OowT3jri2Q6pjDcSvrfeVN+mZsWAabXO1lJXh5grvJ7fQTlsVtAbVZr
HAus1Wbtqrk1dFdVgPbb9s1XUGR90yUsIxvoF9vwXsNpsrLWDbHakpLph9kFJW+/
jyYOx2D11UTNCbvpmeTkNSxrHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDZqpEvG
a+Bca2u+k/YIUGvyrmgMMB8GA1UdIwQYMBaAFK5HGOXzLwBKAxL+uGmty7zE7uUW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzE4NS8yMDIyNzZCQTlC
RkYxMUVBODQzNkZDNDVDNEY5QUUwMi9ya2NZNWZNdkFFb0RFdjY0YWEzTHZNVHU1
UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JrY1k1Zk12QUVvREV2NjRhYTNMdk1UdTVSWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzE4NS8yMDIyNzZCQTlCRkYxMUVBODQzNkZDNDVDNEY5QUUwMi9ya2NZNWZNdkFF
b0RFdjY0YWEzTHZNVHU1UlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbcfQdUWZxt9l39XpfUa/y7KGbJybgCTVvQCvr0t3qq4kRWtOV/iedajmbV8l
/cyo7tyDfB4AvxDrC9Jie0erQ8enmZDfN5AURSknPW+v6h6sRtRdIJ5ol3O9GSMP
DaDoJF+vLto743URkMr1/wQvhhhQQV+aQeq98hTMbFfZtBPnmzpFC9bpbszefq1g
epQphMwucKAiTeBdOYOdRB2UpRWyzGXpxE969H9jfhQXOHTUEUH72063MspzTKzP
2BKElxOSgOh8R6aeuGzZyqxw0UNogUwd+e+gd24vKdZ8WnpwXD8f/6TMK+bRkbqx
mlfVdMfcbTlbfcq81FSziho0OA==
-----END CERTIFICATE-----
Generated at Sun Jul 5 08:44:49 2026 by rpki-client