Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft
File:                     jZoijMUvgA7lpDIwezQyxj2KnYc.mft (raw, json)
Hash identifier:          Y4Cn/C8kcPrTbaaOmuV2LLjgmL+NsHRCzNmVkvZ/cKU=
Subject key identifier:   60:CF:92:C3:B3:07:46:1C:71:DF:F2:E6:DA:E8:6B:00:B1:73:A1:3F
Authority key identifier: 8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87
Certificate issuer:       /CN=A918FDBF/serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87
Certificate serial:       1CBD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft
Manifest number:          1CB0
Signing time:             Tue 18 Aug 2026 16:17:29 +0000
Manifest this update:     Tue 18 Aug 2026 16:17:29 +0000
Manifest next update:     Tue 25 Aug 2026 16:17:29 +0000
Files and hashes:         1: jZoijMUvgA7lpDIwezQyxj2KnYc.crl (hash: OLjC7eYiFL9I0igmMMehwsnlIlZdYaafiF/SaMCnKqc=)
                          2: 1D88BC36F8C711E6B6C42C6CC4F9AE02.roa (hash: k4TlMYilN23yIOsOzxylamYG8qpDaep1a1zgx1W7uB0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl
                          rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 16:17:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7357 (0x1cbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FDBF, serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87
        Validity
            Not Before: Aug 18 16:17:29 2026 GMT
            Not After : Aug 25 16:17:29 2026 GMT
        Subject: CN=6a848599-901c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:74:07:c4:27:2d:e6:ee:9b:e9:e3:80:96:6e:
                    25:b3:22:ce:f7:1a:0b:6d:3a:1f:11:53:d5:b7:43:
                    31:d9:df:f5:07:b3:c1:ab:d3:03:d7:39:10:e0:45:
                    a7:29:97:7e:3a:04:63:bb:07:af:1a:43:c2:30:aa:
                    54:d2:23:41:20:ea:39:94:cd:8a:dc:ba:b6:a2:21:
                    54:b1:ce:1a:18:cf:9f:0c:eb:aa:fa:07:ab:f7:f1:
                    4b:91:ca:83:64:7c:35:ed:97:4c:7e:61:a8:88:77:
                    ac:ae:62:f1:17:30:6b:75:71:f7:78:33:b3:d9:ac:
                    33:bb:31:02:ba:64:0f:79:3b:02:24:a2:51:b1:a9:
                    c3:37:3a:05:6c:60:7f:26:9e:dd:af:02:9b:0f:87:
                    41:64:b2:35:2c:db:b3:11:d8:f2:bb:3d:cc:1a:7a:
                    44:58:70:41:a6:20:a6:47:4c:0c:4b:2f:1b:19:9a:
                    42:f9:14:bd:3b:8d:7b:7e:fa:19:b3:b4:f4:22:e9:
                    97:a3:b7:d1:8f:34:d6:a4:f2:dd:31:a7:c7:3e:bb:
                    39:39:d4:b6:4f:66:84:2b:8f:92:f8:14:cb:de:56:
                    9e:3f:30:03:67:8b:10:27:0c:28:59:45:1a:b0:8e:
                    34:b7:fa:8e:71:2c:b7:8f:97:88:3c:e0:63:00:24:
                    6e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CF:92:C3:B3:07:46:1C:71:DF:F2:E6:DA:E8:6B:00:B1:73:A1:3F
            X509v3 Authority Key Identifier:
                keyid:8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:43:95:73:c0:e3:d8:b9:30:95:70:67:90:0e:69:61:f2:a9:
         57:76:88:69:aa:41:96:6c:30:12:ab:e8:ad:d9:4a:5c:6f:e3:
         c3:b0:bd:08:be:c3:ee:1f:ec:bb:11:f4:d9:12:eb:59:7d:93:
         f9:78:c1:8a:c0:a5:bd:2f:93:98:fa:00:8f:bc:f4:9d:e8:13:
         32:be:0a:42:d9:88:52:f2:91:d9:06:61:10:7d:65:d8:f3:33:
         56:08:5a:5d:8e:e1:f3:8d:02:05:4f:b3:90:62:78:63:5f:b0:
         f6:c6:ec:ec:99:a1:d5:b9:e1:53:30:ae:e7:e9:98:1a:ab:c6:
         22:dd:70:62:85:e1:7c:af:a6:c4:dd:f9:6e:64:dc:95:ca:22:
         6f:6e:80:59:99:1a:59:6d:89:30:45:33:94:b2:de:28:bc:9e:
         8c:0c:b2:c4:11:77:f1:81:23:1a:8e:89:a3:73:44:df:be:fd:
         14:8f:45:03:cd:cf:49:bc:f2:1a:c3:ab:d2:e2:32:d2:2e:b3:
         67:62:cb:3c:0c:82:3c:f0:ae:99:1c:ff:a9:e0:d7:e9:51:15:
         52:c2:f2:cf:1f:44:f2:56:a9:3f:18:36:fd:11:ec:1b:8c:34:
         15:07:8d:48:a0:02:8f:5a:08:b9:8a:8a:23:d8:07:7e:bd:fb:
         56:e8:48:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZEQkYxMTAvBgNVBAUTKDhEOUEyMjhDQzUyRjgwMEVFNUE0MzIzMDdCMzQzMkM2
M0Q4QTlEODcwHhcNMjYwODE4MTYxNzI5WhcNMjYwODI1MTYxNzI5WjAYMRYwFAYD
VQQDEw02YTg0ODU5OS05MDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl3QHxCct5u6b6eOAlm4lsyLO9xoLbTofEVPVt0Mx2d/1B7PBq9MD1zkQ4EWn
KZd+OgRjuwevGkPCMKpU0iNBIOo5lM2K3Lq2oiFUsc4aGM+fDOuq+ger9/FLkcqD
ZHw17ZdMfmGoiHesrmLxFzBrdXH3eDOz2awzuzECumQPeTsCJKJRsanDNzoFbGB/
Jp7drwKbD4dBZLI1LNuzEdjyuz3MGnpEWHBBpiCmR0wMSy8bGZpC+RS9O417fvoZ
s7T0IumXo7fRjzTWpPLdMafHPrs5OdS2T2aEK4+S+BTL3laePzADZ4sQJwwoWUUa
sI40t/qOcSy3j5eIPOBjACRuLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGDPksOz
B0Yccd/y5troawCxc6E/MB8GA1UdIwQYMBaAFI2aIozFL4AO5aQyMHs0MsY9ip2H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkRCRi85OUEzMEFGOEY4
QzUxMUU2OUVCQzU1NkFDNEY5QUUwMi9qWm9pak1VdmdBN2xwREl3ZXpReXhqMktu
WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pab2lqTVV2Z0E3bHBESXdlelF5eGoyS25ZYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RkRCRi85OUEzMEFGOEY4QzUxMUU2OUVCQzU1NkFDNEY5QUUwMi9qWm9pak1VdmdB
N2xwREl3ZXpReXhqMktuWWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK0OVc8Dj2LkwlXBnkA5pYfKpV3aIaapBlmwwEqvordlKXG/jw7C9CL7D7h/s
uxH02RLrWX2T+XjBisClvS+TmPoAj7z0negTMr4KQtmIUvKR2QZhEH1l2PMzVgha
XY7h840CBU+zkGJ4Y1+w9sbs7Jmh1bnhUzCu5+mYGqvGIt1wYoXhfK+mxN35bmTc
lcoib26AWZkaWW2JMEUzlLLeKLyejAyyxBF38YEjGo6Jo3NE3779FI9FA83PSbzy
GsOr0uIy0i6zZ2LLPAyCPPCumRz/qeDX6VEVUsLyzx9E8lapPxg2/RHsG4w0FQeN
SKACj1oIuYqKI9gHfr37VuhI/Q==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:06 2026 by rpki-client