Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
File:                     MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft (raw, json)
Hash identifier:          AYDZEE+shMhFmaZtb7vGKQfrHsvpA8DdBiBkCq5Ezwg=
Subject key identifier:   54:74:30:6F:70:9D:AA:89:D7:61:C9:2F:17:AC:AB:03:70:A8:00:28
Authority key identifier: 32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71
Certificate issuer:       /CN=A9180127/serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171
Certificate serial:       0230
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
Manifest number:          0226
Signing time:             Wed 19 Aug 2026 03:22:45 +0000
Manifest this update:     Wed 19 Aug 2026 03:22:44 +0000
Manifest next update:     Wed 26 Aug 2026 03:22:44 +0000
Files and hashes:         1: MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl (hash: HvkWNq1+zS1tKuvbYUdYlm8NRKf8rb1VK7XfpjYmaVU=)
                          2: 367F1DC24F6E11F185D012B6C8833773.roa (hash: t1Y5uB+U1yi8oL0ZoSG/KpJIn/IBE89Y/hTey3o5yJA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl
                          rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:22:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 560 (0x230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180127, serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171
        Validity
            Not Before: Aug 19 03:22:44 2026 GMT
            Not After : Aug 26 03:22:44 2026 GMT
        Subject: CN=6a852185-902e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0b:5b:78:7c:d6:e9:26:d9:55:d1:4b:6b:15:
                    d6:37:14:6f:3f:27:ac:14:6f:f0:ae:65:e2:25:67:
                    cd:88:d1:09:a4:33:5f:e5:86:82:5b:22:91:af:04:
                    4a:95:80:bd:72:03:38:0b:46:d7:ba:7c:4b:7d:08:
                    89:2e:23:65:a0:40:1e:66:1f:29:6f:c2:f7:ec:e7:
                    1c:2b:85:74:84:65:8b:d3:bb:e7:f8:c6:52:68:5b:
                    52:70:ca:b1:8c:46:35:38:7a:fa:11:1e:6e:79:1d:
                    1c:f7:6d:a5:1b:61:f4:bb:23:54:e4:80:c5:80:3a:
                    6a:66:04:13:73:88:62:9a:47:b3:5e:37:b3:0e:1b:
                    25:dc:62:c5:2b:f9:59:5f:5b:1a:24:df:d2:51:fa:
                    6e:ee:d5:22:db:73:a8:f0:a2:a1:f5:b5:98:48:72:
                    13:03:64:6f:f6:3e:fc:ce:be:8f:03:ed:cf:26:a2:
                    76:a9:af:e1:93:5c:ec:67:ee:1d:49:51:42:ae:0b:
                    d5:98:53:97:9d:41:76:e4:91:79:32:18:2f:2a:75:
                    96:01:ff:d4:09:56:6b:5b:44:f6:53:c1:6b:6e:16:
                    97:fb:5e:f8:30:bb:eb:a3:f1:14:a0:0e:2a:85:d4:
                    e6:3a:a6:df:5e:76:2b:f2:30:6a:c1:39:85:d1:39:
                    33:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:74:30:6F:70:9D:AA:89:D7:61:C9:2F:17:AC:AB:03:70:A8:00:28
            X509v3 Authority Key Identifier:
                keyid:32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:31:58:6a:35:d6:06:53:18:10:ff:63:cf:5c:30:3b:9f:fd:
         cd:78:47:e5:3d:cb:2e:4b:f5:80:c2:56:10:be:5d:1c:30:bc:
         cc:1c:95:37:fe:7b:bc:c3:7c:33:42:43:bd:08:c1:3b:27:e3:
         66:77:b2:27:63:0c:20:50:2f:30:50:15:ef:aa:95:aa:7a:99:
         91:8a:45:5e:5b:d4:14:ce:92:88:bc:ba:f0:11:4c:88:19:e2:
         58:5f:d4:c4:57:f8:0b:0d:b7:65:08:fb:30:11:48:90:c9:e1:
         2d:71:a1:a3:4b:4b:a6:72:f9:ff:3d:8a:19:1a:88:fb:9f:f7:
         fc:d1:4e:4f:86:45:1b:fb:88:05:f8:fa:b0:3c:df:bd:46:4b:
         05:f2:33:73:ba:53:95:82:19:a7:d6:7f:74:68:df:09:8d:fd:
         95:cb:e7:42:24:bf:ed:a8:8d:1e:f4:d3:0b:fd:bf:8d:a0:42:
         a1:a5:54:5f:dc:1e:db:1a:62:d5:f2:a2:fc:d3:c0:8a:c1:41:
         46:70:5f:3c:3c:f5:43:b5:d9:05:35:c8:98:74:87:6f:98:af:
         a0:f9:b4:30:cf:1d:31:29:8d:1e:b8:33:d2:1b:39:ac:a9:fc:
         97:ce:e8:1d:ea:c8:ce:10:00:e3:cf:b1:02:73:38:f3:71:35:
         72:40:b0:0f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAxMjcxMTAvBgNVBAUTKDMyMTVDNTUxNkFGQjU0RDhFNjEyRDFFQzNENTE4MkQz
MjFFNTMxNzEwHhcNMjYwODE5MDMyMjQ0WhcNMjYwODI2MDMyMjQ0WjAYMRYwFAYD
VQQDEw02YTg1MjE4NS05MDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtwtbeHzW6SbZVdFLaxXWNxRvPyesFG/wrmXiJWfNiNEJpDNf5YaCWyKRrwRK
lYC9cgM4C0bXunxLfQiJLiNloEAeZh8pb8L37OccK4V0hGWL07vn+MZSaFtScMqx
jEY1OHr6ER5ueR0c922lG2H0uyNU5IDFgDpqZgQTc4himkezXjezDhsl3GLFK/lZ
X1saJN/SUfpu7tUi23Oo8KKh9bWYSHITA2Rv9j78zr6PA+3PJqJ2qa/hk1zsZ+4d
SVFCrgvVmFOXnUF25JF5MhgvKnWWAf/UCVZrW0T2U8FrbhaX+174MLvro/EUoA4q
hdTmOqbfXnYr8jBqwTmF0TkzFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFR0MG9w
naqJ12HJLxesqwNwqAAoMB8GA1UdIwQYMBaAFDIVxVFq+1TY5hLR7D1RgtMh5TFx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDEyNy8xNkFGMUQyMDVC
N0YxMUVFQkUzMjBFMzVDNEY5QUUwMi9NaFhGVVdyN1ZOam1FdEhzUFZHQzB5SGxN
WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01oWEZVV3I3Vk5qbUV0SHNQVkdDMHlIbE1YRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDEyNy8xNkFGMUQyMDVCN0YxMUVFQkUzMjBFMzVDNEY5QUUwMi9NaFhGVVdyN1ZO
am1FdEhzUFZHQzB5SGxNWEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATjFYajXWBlMYEP9jz1wwO5/9zXhH5T3LLkv1gMJWEL5dHDC8zByVN/57vMN8
M0JDvQjBOyfjZneyJ2MMIFAvMFAV76qVqnqZkYpFXlvUFM6SiLy68BFMiBniWF/U
xFf4Cw23ZQj7MBFIkMnhLXGho0tLpnL5/z2KGRqI+5/3/NFOT4ZFG/uIBfj6sDzf
vUZLBfIzc7pTlYIZp9Z/dGjfCY39lcvnQiS/7aiNHvTTC/2/jaBCoaVUX9we2xpi
1fKi/NPAisFBRnBfPDz1Q7XZBTXImHSHb5ivoPm0MM8dMSmNHrgz0hs5rKn8l87o
HerIzhAA48+xAnM483E1ckCwDw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:35 2026 by rpki-client