Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
File:                     EKxjBm6avEIqxfRaInENUC6-Qsg.mft (raw, json)
Hash identifier:          lWjBSYFQTgBLU3v/zH2C8Lh9KPzvnZYCq6OjJPkHB0w=
Subject key identifier:   E2:CC:EA:F5:51:99:8D:05:86:F6:76:32:39:8F:80:27:04:21:89:E0
Authority key identifier: 10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8
Certificate issuer:       /CN=A9187D5B/serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8
Certificate serial:       C5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
Manifest number:          BC
Signing time:             Fri 17 Jul 2026 08:16:08 +0000
Manifest this update:     Fri 17 Jul 2026 08:16:07 +0000
Manifest next update:     Fri 24 Jul 2026 08:16:07 +0000
Files and hashes:         1: EKxjBm6avEIqxfRaInENUC6-Qsg.crl (hash: 8WhsImA7ASHBrOet7DhDUP9w9cY+QCewe/EtERzOvEc=)
                          2: CA226038692E11F0B07B731AC4F9AE02.roa (hash: dFQlL2iPfjK9FA+gcyCkTdqn8PNU0IRLWWtAcc4wFxU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl
                          rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 08:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187D5B, serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8
        Validity
            Not Before: Jul 17 08:16:07 2026 GMT
            Not After : Jul 24 08:16:07 2026 GMT
        Subject: CN=6a59e4c8-58a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b4:93:0c:01:23:fc:22:40:05:a8:39:7e:61:
                    ca:c2:9e:2c:a7:e8:ff:6a:8c:30:d6:96:74:ff:bd:
                    1c:3e:66:55:a6:f2:5d:68:bf:e6:55:c7:ca:9c:63:
                    91:b1:91:70:e8:e4:76:4d:d8:ad:8a:3b:d3:20:14:
                    82:8d:2f:27:5f:ba:78:d8:a7:6f:84:33:b2:64:e4:
                    e6:f6:69:9a:47:b5:48:33:55:52:a4:29:de:d6:69:
                    4e:ef:26:72:a5:41:7a:65:da:7d:4f:56:ac:69:4b:
                    7d:82:e3:c1:50:56:7c:9a:9b:d7:96:2c:60:04:a5:
                    93:64:4d:ae:d8:20:f9:9e:b1:09:a9:8a:b0:ed:03:
                    e8:40:a3:f3:c7:09:2d:6c:1f:57:fd:c6:18:2e:6d:
                    24:95:bf:50:32:e1:f3:dd:54:7d:a3:cf:a3:25:91:
                    59:76:09:00:76:6e:38:0b:80:a0:27:a0:55:62:f9:
                    ab:0d:3d:00:65:40:9c:af:f6:a1:fa:68:2b:4b:71:
                    b1:2c:63:fe:81:07:d1:7f:bf:2d:a7:41:2d:a3:08:
                    7d:4c:31:35:32:d5:e0:a4:1b:fd:43:54:06:7b:20:
                    ac:69:a7:b6:81:da:b9:69:05:69:c4:0a:71:39:12:
                    19:ce:a5:e6:6d:80:e4:74:73:41:fc:4e:56:0b:11:
                    07:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CC:EA:F5:51:99:8D:05:86:F6:76:32:39:8F:80:27:04:21:89:E0
            X509v3 Authority Key Identifier:
                keyid:10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:a8:48:22:b9:d6:2f:e2:b0:eb:f8:e3:90:b2:63:af:57:1a:
         52:ae:82:94:bc:46:fd:0f:63:6a:db:c7:1c:d8:ea:60:46:4d:
         34:e0:3d:75:0f:b2:ad:67:88:3b:20:6f:69:a2:79:1b:64:4a:
         56:91:df:2a:58:fb:e6:bd:e2:bd:00:90:54:d8:d2:5d:a4:6a:
         61:5e:15:7d:dc:26:d5:bc:a9:21:1c:f8:8a:08:98:c2:de:79:
         b9:42:02:62:52:db:6f:6d:7c:a1:43:5e:c5:32:8d:d3:ae:eb:
         68:16:2d:05:b6:4d:b3:4a:8d:d4:31:d3:8e:1e:d5:ab:8e:55:
         2f:14:93:02:2f:10:e1:ee:ee:b0:e4:7d:b4:23:c3:82:0c:d1:
         c8:01:b3:75:e5:2d:69:d1:4f:d3:9d:bd:e2:0a:98:37:68:8b:
         ed:79:71:ca:43:a4:9f:b8:5a:14:9a:fb:a9:f9:bc:ab:4a:24:
         00:7e:a0:c2:5f:b8:c0:30:cb:c7:72:6d:db:af:63:3c:8c:fc:
         ea:39:33:d3:8b:01:2c:35:b9:be:99:15:1c:5f:88:f5:d0:97:
         01:ad:64:ab:8c:15:3f:76:71:2e:82:f9:62:7c:4e:fe:9a:c1:
         bd:a5:3f:66:b7:6e:cd:03:12:b7:2f:b9:31:c3:e3:76:99:be:
         75:59:01:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODdENUIxMTAvBgNVBAUTKDEwQUM2MzA2NkU5QUJDNDIyQUM1RjQ1QTIyNzEwRDUw
MkVCRTQyQzgwHhcNMjYwNzE3MDgxNjA3WhcNMjYwNzI0MDgxNjA3WjAYMRYwFAYD
VQQDEw02YTU5ZTRjOC01OGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuLSTDAEj/CJABag5fmHKwp4sp+j/aoww1pZ0/70cPmZVpvJdaL/mVcfKnGOR
sZFw6OR2TditijvTIBSCjS8nX7p42KdvhDOyZOTm9mmaR7VIM1VSpCne1mlO7yZy
pUF6Zdp9T1asaUt9guPBUFZ8mpvXlixgBKWTZE2u2CD5nrEJqYqw7QPoQKPzxwkt
bB9X/cYYLm0klb9QMuHz3VR9o8+jJZFZdgkAdm44C4CgJ6BVYvmrDT0AZUCcr/ah
+mgrS3GxLGP+gQfRf78tp0Etowh9TDE1MtXgpBv9Q1QGeyCsaae2gdq5aQVpxApx
ORIZzqXmbYDkdHNB/E5WCxEHQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOLM6vVR
mY0FhvZ2MjmPgCcEIYngMB8GA1UdIwQYMBaAFBCsYwZumrxCKsX0WiJxDVAuvkLI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0Q1Qi83OTgzMzg1QTY5
MkUxMUYwQkQwRjY4MTlDNEY5QUUwMi9FS3hqQm02YXZFSXF4ZlJhSW5FTlVDNi1R
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0VLeGpCbTZhdkVJcXhmUmFJbkVOVUM2LVFzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
N0Q1Qi83OTgzMzg1QTY5MkUxMUYwQkQwRjY4MTlDNEY5QUUwMi9FS3hqQm02YXZF
SXF4ZlJhSW5FTlVDNi1Rc2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcqhIIrnWL+Kw6/jjkLJjr1caUq6ClLxG/Q9jatvHHNjqYEZNNOA9dQ+yrWeI
OyBvaaJ5G2RKVpHfKlj75r3ivQCQVNjSXaRqYV4Vfdwm1bypIRz4igiYwt55uUIC
YlLbb218oUNexTKN067raBYtBbZNs0qN1DHTjh7Vq45VLxSTAi8Q4e7usOR9tCPD
ggzRyAGzdeUtadFP05294gqYN2iL7XlxykOkn7haFJr7qfm8q0okAH6gwl+4wDDL
x3Jt269jPIz86jkz04sBLDW5vpkVHF+I9dCXAa1kq4wVP3ZxLoL5YnxO/prBvaU/
ZrduzQMSty+5McPjdpm+dVkB4A==
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:19:45 2026 by rpki-client