Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft
File:                     cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft (raw, json)
Hash identifier:          odsJ2P0EeH/YHWmI+U2xikTvCiqZSPfSfVG+Sx8rk5U=
Subject key identifier:   E8:88:29:62:74:C8:88:1B:91:F4:99:05:3D:9E:7C:4F:55:7A:FB:FC
Authority key identifier: 70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87
Certificate issuer:       /CN=A919D49F/serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087
Certificate serial:       1137
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft
Manifest number:          112C
Signing time:             Mon 22 Jun 2026 17:13:25 +0000
Manifest this update:     Mon 22 Jun 2026 17:13:25 +0000
Manifest next update:     Mon 29 Jun 2026 17:13:25 +0000
Files and hashes:         1: cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl (hash: TdqRemljL4IwShLFzEcuPg1RubB5o7jwK5VPI7ldQJA=)
                          2: 74087358355111E99EC82E0AC4F9AE02.roa (hash: 71ZBfHYzvqkrS7+3nYZhPvkXeo54VJ5UzV6oWKK8CPY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl
                          rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 17:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4407 (0x1137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D49F, serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087
        Validity
            Not Before: Jun 22 17:13:25 2026 GMT
            Not After : Jun 29 17:13:25 2026 GMT
        Subject: CN=6a396d35-f5cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4c:66:08:97:6b:77:f7:25:66:59:e0:1a:e4:
                    d5:00:0a:fc:93:21:28:28:4f:1b:12:29:30:df:54:
                    ae:7d:fa:67:3b:64:4b:81:68:07:17:23:95:4d:0e:
                    4b:e8:42:e9:0c:67:7f:53:18:e7:1e:3e:70:74:43:
                    28:31:b3:3d:c0:3f:84:18:10:65:f9:84:db:54:ed:
                    ab:1c:a1:46:ee:7a:c1:8c:de:f5:a2:0e:dd:e1:a3:
                    2d:86:cd:a8:20:b0:d8:45:63:e7:50:08:51:a4:7d:
                    49:53:70:f9:69:e5:b4:f8:9c:00:e1:0e:8a:38:e0:
                    95:66:da:10:c4:5f:14:90:22:63:73:80:62:20:3c:
                    40:da:76:32:15:27:8a:c8:1e:87:05:4f:62:08:ff:
                    e8:3a:38:b4:7e:ab:29:19:ba:20:e2:e4:8e:23:61:
                    47:d5:d9:dd:51:65:cd:16:82:f1:ed:0d:d9:85:77:
                    02:d1:de:0a:e8:c1:f3:e5:c4:f3:6b:f4:44:66:7a:
                    8a:54:dd:b3:42:4a:47:c2:7e:cd:92:ca:f0:a5:5d:
                    3a:44:3b:6c:75:86:a5:46:c8:b6:fc:e2:41:29:e2:
                    f2:92:9d:10:5b:f2:a8:fb:0c:65:08:5b:cd:f2:88:
                    9d:ca:c8:17:fd:2e:17:ee:9e:e6:7c:ef:a2:f1:14:
                    e4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:88:29:62:74:C8:88:1B:91:F4:99:05:3D:9E:7C:4F:55:7A:FB:FC
            X509v3 Authority Key Identifier:
                keyid:70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:b9:72:ba:68:be:2c:f8:9b:55:81:f1:cf:57:ab:41:e5:ca:
         15:43:8a:af:e7:02:47:80:78:d1:02:5f:53:92:fe:7c:c8:f4:
         c4:ab:2a:36:c9:91:2d:bd:4a:39:c4:b8:ee:ea:a3:52:eb:2b:
         50:bd:a7:ad:2c:81:7a:c0:fe:70:c9:1c:5a:7f:55:24:e3:28:
         a4:a2:aa:d6:07:ce:32:3c:c4:97:fe:bc:14:2a:f7:47:a3:74:
         10:f5:70:be:34:bf:a8:14:2e:b5:79:26:68:82:0f:8e:60:d9:
         74:94:1e:11:3b:34:cb:3b:5a:2a:67:a9:ae:78:a1:4a:7e:1f:
         75:49:86:38:c5:02:b4:b1:3e:b5:ab:a7:c4:76:95:f9:9c:c5:
         ab:b3:43:09:5a:ee:ed:85:d4:d2:88:e7:07:40:50:79:15:2f:
         6e:d1:b5:5b:8d:d7:ec:fa:23:c7:de:d1:c4:e0:1b:4f:6d:b2:
         e4:8a:18:d5:02:41:94:11:95:18:29:ff:0c:2d:9c:d8:96:19:
         1b:03:3d:04:ac:74:49:82:7f:3f:b5:c0:ac:78:81:67:e1:c6:
         5d:96:4b:7f:67:3a:70:37:c5:96:30:47:8c:69:8f:fa:d7:05:
         05:41:f1:b5:d4:fd:41:9c:9f:0b:4b:33:ff:7d:62:93:b4:92:
         37:74:df:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICETcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQ0OUYxMTAvBgNVBAUTKDcwN0Q0ODYwNUEwRDg1NzcyRjkwREM0QjExNzJCRUYz
MDI5NEEwODcwHhcNMjYwNjIyMTcxMzI1WhcNMjYwNjI5MTcxMzI1WjAYMRYwFAYD
VQQDEw02YTM5NmQzNS1mNWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqUxmCJdrd/clZlngGuTVAAr8kyEoKE8bEikw31SuffpnO2RLgWgHFyOVTQ5L
6ELpDGd/UxjnHj5wdEMoMbM9wD+EGBBl+YTbVO2rHKFG7nrBjN71og7d4aMths2o
ILDYRWPnUAhRpH1JU3D5aeW0+JwA4Q6KOOCVZtoQxF8UkCJjc4BiIDxA2nYyFSeK
yB6HBU9iCP/oOji0fqspGbog4uSOI2FH1dndUWXNFoLx7Q3ZhXcC0d4K6MHz5cTz
a/REZnqKVN2zQkpHwn7NksrwpV06RDtsdYalRsi2/OJBKeLykp0QW/Ko+wxlCFvN
8oidysgX/S4X7p7mfO+i8RTkiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOiIKWJ0
yIgbkfSZBT2efE9Vevv8MB8GA1UdIwQYMBaAFHB9SGBaDYV3L5DcSxFyvvMClKCH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDQ5Ri8wQkFDODU1NjM1
NTExMUU5OThBNTBBMEFDNEY5QUUwMi9jSDFJWUZvTmhYY3ZrTnhMRVhLLTh3S1Vv
SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NIMUlZRm9OaFhjdmtOeExFWEstOHdLVW9JYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDQ5Ri8wQkFDODU1NjM1NTExMUU5OThBNTBBMEFDNEY5QUUwMi9jSDFJWUZvTmhY
Y3ZrTnhMRVhLLTh3S1VvSWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuLlyumi+LPibVYHxz1erQeXKFUOKr+cCR4B40QJfU5L+fMj0xKsqNsmRLb1K
OcS47uqjUusrUL2nrSyBesD+cMkcWn9VJOMopKKq1gfOMjzEl/68FCr3R6N0EPVw
vjS/qBQutXkmaIIPjmDZdJQeETs0yztaKmeprnihSn4fdUmGOMUCtLE+taunxHaV
+ZzFq7NDCVru7YXU0ojnB0BQeRUvbtG1W43X7Pojx97RxOAbT22y5IoY1QJBlBGV
GCn/DC2c2JYZGwM9BKx0SYJ/P7XArHiBZ+HGXZZLf2c6cDfFljBHjGmP+tcFBUHx
tdT9QZyfC0sz/31ik7SSN3Tf8A==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:00 2026 by rpki-client