Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft
File:                     CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft (raw, json)
Hash identifier:          9B2Bi1wbhpSLxwLnivq0iDMVbYKFP+i3RzO4beoKSVg=
Subject key identifier:   38:EC:C4:C4:FA:B3:E5:2D:1F:98:E9:08:0D:80:1A:FA:CE:6D:ED:2F
Authority key identifier: 09:58:D7:C7:B5:75:67:D9:65:E1:48:04:81:52:E2:B4:78:FC:43:99
Certificate issuer:       /CN=A918FA35/serialNumber=0958D7C7B57567D965E148048152E2B478FC4399
Certificate serial:       9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft
Manifest number:          99
Signing time:             Fri 17 Jul 2026 08:34:31 +0000
Manifest this update:     Fri 17 Jul 2026 08:34:30 +0000
Manifest next update:     Fri 24 Jul 2026 08:34:30 +0000
Files and hashes:         1: CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl (hash: v56g46OvMduORESpzt5a0uJpWRIZ4AY4AQxVzKMpHO8=)
                          2: EC6B1EDAC3F811F0BE50C87AC4F9AE02.roa (hash: o62XZo2Qz1zImJWSvpxTK0mWq5l9UluAleNSitVqKg8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl
                          rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 08:34:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FA35, serialNumber=0958D7C7B57567D965E148048152E2B478FC4399
        Validity
            Not Before: Jul 17 08:34:30 2026 GMT
            Not After : Jul 24 08:34:30 2026 GMT
        Subject: CN=6a59e917-d36d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:da:e7:2b:2c:8b:c2:33:27:55:c1:ed:31:89:
                    a5:c7:86:df:4c:a4:fe:1b:8e:55:70:44:94:f0:b1:
                    4b:b2:06:f9:f8:ac:44:4b:bf:4a:ad:d4:dd:47:11:
                    1e:e3:1e:a1:82:0f:96:90:f3:0d:74:9e:2d:ec:2d:
                    82:db:1d:66:c1:34:8f:29:7e:7a:2b:1f:60:3b:0e:
                    32:24:0c:97:4e:2a:db:b3:27:e8:2e:f5:d3:1f:dd:
                    d3:fe:2f:0b:ea:d0:7c:55:c8:75:76:18:2b:d3:9e:
                    a7:72:e0:e5:83:1d:d0:b7:3e:d7:3d:fc:a6:10:ea:
                    91:ba:38:28:7f:90:9a:a5:e9:de:bf:4b:43:11:24:
                    0b:40:67:8c:9b:33:e5:c7:ed:43:c3:96:d7:4e:f9:
                    6d:97:87:b7:90:67:f5:97:1a:8a:22:05:02:56:d4:
                    8c:33:48:e5:79:08:3e:7b:ed:e8:28:1c:91:f3:75:
                    6a:1d:00:0c:d9:a8:46:59:84:4a:4e:68:25:01:28:
                    83:56:b9:8d:18:c4:d8:cf:68:ac:d2:7f:2c:ec:9d:
                    03:39:8c:fd:17:ab:56:84:55:fa:28:b7:5f:6f:44:
                    e1:96:40:01:0c:4f:e3:19:77:bd:64:3a:72:6c:9b:
                    aa:dc:6b:34:ad:73:85:12:d4:09:5f:60:4b:93:f1:
                    89:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:EC:C4:C4:FA:B3:E5:2D:1F:98:E9:08:0D:80:1A:FA:CE:6D:ED:2F
            X509v3 Authority Key Identifier:
                keyid:09:58:D7:C7:B5:75:67:D9:65:E1:48:04:81:52:E2:B4:78:FC:43:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b5:ca:67:0b:3b:d0:ff:bf:80:37:fd:15:7b:90:67:25:de:
         6a:ed:42:a6:34:a7:ac:a2:66:d6:7e:b5:58:ee:6e:f3:ce:01:
         b2:9a:b8:8c:99:3e:49:86:00:75:8a:c8:9a:14:9b:76:6a:c8:
         a7:db:63:a5:cc:13:40:a4:75:71:c6:36:45:f1:39:c0:57:90:
         9e:cc:64:4a:cc:cc:c8:86:9e:4e:ba:b2:84:db:82:92:e8:ca:
         7e:b8:a2:a2:24:fb:0a:11:92:78:3f:03:e4:e3:e4:27:f5:8f:
         5d:1d:76:03:3f:58:98:52:9b:67:9a:e2:aa:2f:e0:20:37:6b:
         62:42:04:dc:41:f2:90:c1:73:91:58:7e:d3:c5:83:28:ff:e0:
         d9:b1:b3:bc:8d:3a:74:31:73:f0:55:40:cf:6a:30:07:f0:c4:
         07:13:61:37:de:ad:24:c9:71:24:cc:77:d7:be:df:93:cd:5f:
         62:8d:1f:23:5e:34:0e:2e:12:fc:1b:3b:0b:5d:a4:50:bc:14:
         9e:c4:90:54:c9:c4:65:28:0f:27:22:19:73:fb:bf:86:13:f4:
         18:1b:59:4a:1a:11:99:6d:90:1f:5e:53:66:5c:47:7e:94:4c:
         bf:77:1d:98:2d:b2:cc:6c:7d:d8:36:81:7a:32:38:45:6b:95:
         8c:e0:b2:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZBMzUxMTAvBgNVBAUTKDA5NThEN0M3QjU3NTY3RDk2NUUxNDgwNDgxNTJFMkI0
NzhGQzQzOTkwHhcNMjYwNzE3MDgzNDMwWhcNMjYwNzI0MDgzNDMwWjAYMRYwFAYD
VQQDEw02YTU5ZTkxNy1kMzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAydrnKyyLwjMnVcHtMYmlx4bfTKT+G45VcESU8LFLsgb5+KxES79KrdTdRxEe
4x6hgg+WkPMNdJ4t7C2C2x1mwTSPKX56Kx9gOw4yJAyXTirbsyfoLvXTH93T/i8L
6tB8Vch1dhgr056ncuDlgx3Qtz7XPfymEOqRujgof5Capenev0tDESQLQGeMmzPl
x+1Dw5bXTvltl4e3kGf1lxqKIgUCVtSMM0jleQg+e+3oKByR83VqHQAM2ahGWYRK
TmglASiDVrmNGMTYz2is0n8s7J0DOYz9F6tWhFX6KLdfb0ThlkABDE/jGXe9ZDpy
bJuq3Gs0rXOFEtQJX2BLk/GJJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDjsxMT6
s+UtH5jpCA2AGvrObe0vMB8GA1UdIwQYMBaAFAlY18e1dWfZZeFIBIFS4rR4/EOZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkEzNS81RTQwMzRERTk4
QjkxMUYwQjk5NjBCMjBDNEY5QUUwMi9DVmpYeDdWMVo5bGw0VWdFZ1ZMaXRIajhR
NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NWalh4N1YxWjlsbDRVZ0VnVkxpdEhqOFE1ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RkEzNS81RTQwMzRERTk4QjkxMUYwQjk5NjBCMjBDNEY5QUUwMi9DVmpYeDdWMVo5
bGw0VWdFZ1ZMaXRIajhRNWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANrXKZws70P+/gDf9FXuQZyXeau1CpjSnrKJm1n61WO5u884Bspq4jJk+SYYA
dYrImhSbdmrIp9tjpcwTQKR1ccY2RfE5wFeQnsxkSszMyIaeTrqyhNuCkujKfrii
oiT7ChGSeD8D5OPkJ/WPXR12Az9YmFKbZ5riqi/gIDdrYkIE3EHykMFzkVh+08WD
KP/g2bGzvI06dDFz8FVAz2owB/DEBxNhN96tJMlxJMx3177fk81fYo0fI140Di4S
/Bs7C12kULwUnsSQVMnEZSgPJyIZc/u/hhP0GBtZShoRmW2QH15TZlxHfpRMv3cd
mC2yzGx92DaBejI4RWuVjOCyAA==
-----END CERTIFICATE-----
Generated at Sat Jul 18 07:17:23 2026 by rpki-client