Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft
File:                     7MBefFuSR4uMxDst35ql9slCnyE.mft (raw, json)
Hash identifier:          78Vg83Vhcfc6tDiVgV8L66GxIvDNjrrTXJeoGXSHvXU=
Subject key identifier:   58:5B:C5:3F:57:99:ED:64:10:5B:D3:FE:B5:66:5B:22:BB:52:CE:C4
Authority key identifier: EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21
Certificate issuer:       /CN=A9190D0D/serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21
Certificate serial:       0C15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft
Manifest number:          0BEA
Signing time:             Wed 26 Aug 2026 18:55:57 +0000
Manifest this update:     Wed 26 Aug 2026 18:55:57 +0000
Manifest next update:     Wed 02 Sep 2026 18:55:57 +0000
Files and hashes:         1: 7MBefFuSR4uMxDst35ql9slCnyE.crl (hash: eFN6hMVzL9bLPkKk1TGL3w9Ot1wtUpdr9WSwSFAdUko=)
                          2: 81B5E70C18B511F1AC11CD310A3D8C67.roa (hash: 5Ie3ZIxlQpY2pGzYYtHErJYraDQp8xSopPGehYawBBk=)
                          3: B7F0310EBCB911F08FEDBF33C4F9AE02.roa (hash: iBHWKuOva34+z/8UqtOgV0qkI2D/34heB6aVlSgkcj4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl
                          rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 18:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3093 (0xc15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190D0D, serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21
        Validity
            Not Before: Aug 26 18:55:57 2026 GMT
            Not After : Sep  2 18:55:57 2026 GMT
        Subject: CN=6a8f36bd-3db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:04:84:a7:75:24:6b:76:12:96:98:93:ae:57:
                    fb:47:4c:6b:19:8c:34:8d:c6:d1:5c:30:ee:cf:a8:
                    10:87:7a:91:40:b0:1c:b6:1d:bd:fd:6f:01:ee:99:
                    37:ee:92:12:a9:aa:76:11:78:75:91:21:aa:e8:6b:
                    ee:67:05:e9:3c:48:0f:ff:44:53:e2:bb:a0:76:b6:
                    9a:4a:da:64:04:b4:2e:6c:36:02:1e:43:50:42:55:
                    ff:11:3b:d1:ed:a4:dc:de:57:d3:b8:90:e6:af:0c:
                    45:d6:f9:6b:2f:1d:14:93:e2:fa:08:0a:ef:1c:bb:
                    32:1b:39:fb:99:7b:84:12:31:1d:a5:ea:55:ab:9d:
                    e2:58:30:54:7f:f4:6b:11:c3:6d:6f:f9:e7:45:4a:
                    48:72:d7:dc:1d:4a:30:5b:41:1a:73:36:39:47:1e:
                    e9:72:4e:c0:56:ee:4e:89:61:11:b4:be:ca:e3:ea:
                    3b:be:fd:f7:11:05:78:87:06:7d:3f:80:91:d4:35:
                    c0:12:9f:31:9f:a0:68:6a:3d:e1:6f:f7:37:c9:58:
                    a6:71:db:0f:e2:5e:76:b1:34:3e:eb:6d:ae:14:b0:
                    64:e1:45:aa:a3:fb:5f:45:fb:c6:ef:c6:2b:eb:d4:
                    cf:11:a1:73:45:96:63:fb:71:de:01:48:83:25:e9:
                    1b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5B:C5:3F:57:99:ED:64:10:5B:D3:FE:B5:66:5B:22:BB:52:CE:C4
            X509v3 Authority Key Identifier:
                keyid:EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b5:24:2e:a6:a6:6b:13:fd:8c:9e:5d:53:8c:d2:69:82:03:
         ae:49:de:cb:06:db:94:fc:d9:33:dc:8a:f9:6b:02:94:1b:60:
         39:92:f1:74:2a:0d:e9:d9:32:11:f9:08:e9:6c:09:d6:71:0e:
         da:e8:57:7d:3c:92:b1:0e:50:3c:02:d1:72:6c:bd:6d:ba:c4:
         06:e5:ad:6d:0d:e3:72:23:fe:65:82:fb:13:9e:5c:bf:36:55:
         14:a3:8b:dc:61:eb:48:80:4b:2b:34:d8:7a:9b:bd:b2:78:2d:
         8e:2c:c6:a7:e7:9b:22:d7:02:f7:e6:20:48:c4:de:9b:66:b0:
         3c:5f:1e:db:8a:9d:e0:95:6c:1d:42:8e:bb:19:2c:b0:9f:dd:
         db:5e:28:7a:91:28:df:67:ff:b1:fe:e4:5d:11:b6:9f:1b:6b:
         2f:53:43:95:8b:1f:88:e8:48:41:de:de:e4:e2:77:76:ea:a4:
         3f:a7:ba:02:7e:a7:5b:9d:53:7e:a2:64:c3:46:2f:0f:16:15:
         75:4e:d0:16:6d:6b:42:c2:64:79:2d:e7:95:f5:7c:f7:62:03:
         d5:31:70:9d:32:4e:4a:b6:c9:96:e4:12:bd:b1:70:52:ae:8f:
         0a:d4:ec:dd:72:3f:cc:96:cc:23:62:0f:fc:ed:1a:81:e3:10:
         ac:39:ef:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTBEMEQxMTAvBgNVBAUTKEVDQzA1RTdDNUI5MjQ3OEI4Q0M0M0IyRERGOUFBNUY2
Qzk0MjlGMjEwHhcNMjYwODI2MTg1NTU3WhcNMjYwOTAyMTg1NTU3WjAYMRYwFAYD
VQQDEw02YThmMzZiZC0zZGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4ASEp3Uka3YSlpiTrlf7R0xrGYw0jcbRXDDuz6gQh3qRQLActh29/W8B7pk3
7pISqap2EXh1kSGq6GvuZwXpPEgP/0RT4rugdraaStpkBLQubDYCHkNQQlX/ETvR
7aTc3lfTuJDmrwxF1vlrLx0Uk+L6CArvHLsyGzn7mXuEEjEdpepVq53iWDBUf/Rr
EcNtb/nnRUpIctfcHUowW0EaczY5Rx7pck7AVu5OiWERtL7K4+o7vv33EQV4hwZ9
P4CR1DXAEp8xn6Boaj3hb/c3yVimcdsP4l52sTQ+622uFLBk4UWqo/tfRfvG78Yr
69TPEaFzRZZj+3HeAUiDJekbCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFhbxT9X
me1kEFvT/rVmWyK7Us7EMB8GA1UdIwQYMBaAFOzAXnxbkkeLjMQ7Ld+apfbJQp8h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQwRC9GMDM3QkQwODQ3
NjYxMUVBQUJCMTFBNjVDNEY5QUUwMi83TUJlZkZ1U1I0dU14RHN0MzVxbDlzbENu
eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdNQmVmRnVTUjR1TXhEc3QzNXFsOXNsQ255RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MEQwRC9GMDM3QkQwODQ3NjYxMUVBQUJCMTFBNjVDNEY5QUUwMi83TUJlZkZ1U1I0
dU14RHN0MzVxbDlzbENueUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP7UkLqamaxP9jJ5dU4zSaYIDrkneywbblPzZM9yK+WsClBtgOZLxdCoN6dky
EfkI6WwJ1nEO2uhXfTySsQ5QPALRcmy9bbrEBuWtbQ3jciP+ZYL7E55cvzZVFKOL
3GHrSIBLKzTYepu9sngtjizGp+ebItcC9+YgSMTem2awPF8e24qd4JVsHUKOuxks
sJ/d214oepEo32f/sf7kXRG2nxtrL1NDlYsfiOhIQd7e5OJ3duqkP6e6An6nW51T
fqJkw0YvDxYVdU7QFm1rQsJkeS3nlfV892ID1TFwnTJOSrbJluQSvbFwUq6PCtTs
3XI/zJbMI2IP/O0ageMQrDnvqA==
-----END CERTIFICATE-----
Generated at Thu Aug 27 03:59:22 2026 by rpki-client