Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
File:                     f3dZIELjyHvlbu2B2cyw6XQCzdc.mft (raw, json)
Hash identifier:          6cgvBUFVjt9lsvNP13c3odqtKdYsyJ1shmPrRPy/Jt8=
Subject key identifier:   5E:2E:FF:88:36:DE:3C:56:2C:57:97:D4:2A:9F:AA:D3:0D:4F:5F:6E
Authority key identifier: 7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7
Certificate issuer:       /CN=A9192A47/serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7
Certificate serial:       013D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
Manifest number:          0133
Signing time:             Tue 21 Jul 2026 07:13:06 +0000
Manifest this update:     Tue 21 Jul 2026 07:13:05 +0000
Manifest next update:     Tue 28 Jul 2026 07:13:05 +0000
Files and hashes:         1: f3dZIELjyHvlbu2B2cyw6XQCzdc.crl (hash: VlV07HoJ5UVga0WWW8fL+p/p2V6ZXCOKA432RNCk1Wo=)
                          2: 43631816B82211EFB74FF56BC4F9AE02.roa (hash: 8H2e0J6ttQKl0SPd9mkDBdGO8YngFPILlTNxbAVIA68=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl
                          rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 07:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A47, serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7
        Validity
            Not Before: Jul 21 07:13:05 2026 GMT
            Not After : Jul 28 07:13:05 2026 GMT
        Subject: CN=6a5f1c02-20b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d3:fc:bb:0e:70:32:3d:3b:e1:d0:7a:25:68:
                    77:53:05:79:17:52:18:b5:45:45:e5:1d:5d:0d:4c:
                    dd:85:73:4b:31:18:58:d9:78:ac:dc:12:3b:a3:52:
                    4a:ae:ef:44:65:18:b6:94:59:26:5d:4c:95:ee:30:
                    5f:2a:e0:d8:e6:a3:cb:44:ea:0b:20:da:51:b0:3d:
                    68:05:ad:63:3b:cd:61:04:1a:8f:2e:23:34:6f:cd:
                    38:5b:26:48:f0:61:ac:02:fb:2c:7e:ed:a6:ed:3f:
                    de:45:dc:3e:55:30:bf:f6:b0:1b:90:10:28:d7:5f:
                    87:3a:42:99:c2:f2:07:b6:71:17:c9:a7:77:83:f6:
                    bd:59:13:bc:14:b8:5b:f6:40:77:da:eb:f8:e3:20:
                    b6:f6:66:3e:34:98:d5:3f:e1:ca:9a:07:91:89:f8:
                    f0:a9:08:13:68:2a:69:17:9b:b1:d0:f1:0d:d5:9b:
                    59:6d:76:5e:a4:f8:c9:cf:6f:da:57:3e:24:db:a7:
                    8f:a6:66:73:df:92:b8:04:0f:73:5e:43:39:e3:23:
                    a9:c6:92:85:99:dc:16:e9:42:7d:c4:3b:eb:3a:94:
                    a3:8c:78:6f:7e:d1:48:80:be:0d:80:18:56:60:60:
                    ce:5b:8c:b4:d7:34:d0:8c:81:3b:c8:db:96:f1:b8:
                    ea:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2E:FF:88:36:DE:3C:56:2C:57:97:D4:2A:9F:AA:D3:0D:4F:5F:6E
            X509v3 Authority Key Identifier:
                keyid:7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:61:07:7b:d4:c2:c5:f9:d4:75:58:37:b2:59:c1:65:a3:a5:
         1d:19:bd:af:3d:ed:da:f5:2c:e2:14:fa:ec:21:1e:95:ad:45:
         fb:9a:04:ab:21:83:dc:38:c7:7d:a6:45:76:ed:f1:ac:df:38:
         cc:96:88:ea:1d:eb:62:d7:60:ae:ab:cf:01:26:19:9b:17:15:
         54:c0:4d:bb:f5:e7:ca:72:94:0e:a8:de:11:c5:ed:c8:22:93:
         22:7f:ee:4b:16:f6:d2:52:91:64:96:f6:cc:39:b4:42:5a:3c:
         d1:57:93:15:a7:2f:f8:d3:79:61:61:e4:64:dc:f6:9c:9d:4f:
         c8:bb:1f:d0:ce:b9:41:12:60:3b:8d:00:67:62:6d:4a:6d:20:
         55:2f:1f:f7:5f:78:f3:34:36:54:91:9c:4d:0b:0a:cf:76:74:
         cc:fb:20:a5:42:f4:f6:b7:a5:e1:cf:08:80:12:4f:1e:6c:64:
         43:16:ed:79:69:4c:4a:51:52:d3:d1:9f:4f:bd:77:34:ac:e5:
         d7:af:35:19:d3:c1:c3:e4:81:ba:b3:45:3a:13:70:40:9f:5f:
         64:c5:92:8e:d7:0d:aa:f3:40:18:93:4b:ad:c7:92:6c:8c:2f:
         8a:a3:e4:bf:84:f3:5b:7d:23:a7:7a:bc:e3:45:6e:e5:99:b2:
         7c:37:f4:ed
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJBNDcxMTAvBgNVBAUTKDdGNzc1OTIwNDJFM0M4N0JFNTZFRUQ4MUQ5Q0NCMEU5
NzQwMkNERDcwHhcNMjYwNzIxMDcxMzA1WhcNMjYwNzI4MDcxMzA1WjAYMRYwFAYD
VQQDEw02YTVmMWMwMi0yMGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAndP8uw5wMj074dB6JWh3UwV5F1IYtUVF5R1dDUzdhXNLMRhY2Xis3BI7o1JK
ru9EZRi2lFkmXUyV7jBfKuDY5qPLROoLINpRsD1oBa1jO81hBBqPLiM0b804WyZI
8GGsAvssfu2m7T/eRdw+VTC/9rAbkBAo11+HOkKZwvIHtnEXyad3g/a9WRO8FLhb
9kB32uv44yC29mY+NJjVP+HKmgeRifjwqQgTaCppF5ux0PEN1ZtZbXZepPjJz2/a
Vz4k26ePpmZz35K4BA9zXkM54yOpxpKFmdwW6UJ9xDvrOpSjjHhvftFIgL4NgBhW
YGDOW4y01zTQjIE7yNuW8bjqawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF4u/4g2
3jxWLFeX1CqfqtMNT19uMB8GA1UdIwQYMBaAFH93WSBC48h75W7tgdnMsOl0As3X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkE0Ny8xNTkwN0MyMkI4
MjExMUVGQUFFNkY1NjdDNEY5QUUwMi9mM2RaSUVManlIdmxidTJCMmN5dzZYUUN6
ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2YzZFpJRUxqeUh2bGJ1MkIyY3l3NlhRQ3pkYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MkE0Ny8xNTkwN0MyMkI4MjExMUVGQUFFNkY1NjdDNEY5QUUwMi9mM2RaSUVManlI
dmxidTJCMmN5dzZYUUN6ZGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwWEHe9TCxfnUdVg3slnBZaOlHRm9rz3t2vUs4hT67CEela1F+5oEqyGD3DjH
faZFdu3xrN84zJaI6h3rYtdgrqvPASYZmxcVVMBNu/XnynKUDqjeEcXtyCKTIn/u
Sxb20lKRZJb2zDm0Qlo80VeTFacv+NN5YWHkZNz2nJ1PyLsf0M65QRJgO40AZ2Jt
Sm0gVS8f91948zQ2VJGcTQsKz3Z0zPsgpUL09rel4c8IgBJPHmxkQxbteWlMSlFS
09GfT713NKzl1681GdPBw+SBurNFOhNwQJ9fZMWSjtcNqvNAGJNLrceSbIwviqPk
v4TzW30jp3q840Vu5ZmyfDf07Q==
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:50:54 2026 by rpki-client