Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
File:                     vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft (raw, json)
Hash identifier:          A/yIcxXuPUiDAKIzBPlnKgKyzVayFLgMYO7Uw5Iz5AI=
Subject key identifier:   58:84:0C:DA:ED:0D:BF:2C:EA:6E:A6:09:11:4A:A7:02:1E:53:DE:0C
Authority key identifier: BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99
Certificate issuer:       /CN=A919F026/serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
Certificate serial:       012C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
Manifest number:          0117
Signing time:             Fri 17 Jul 2026 07:21:45 +0000
Manifest this update:     Fri 17 Jul 2026 07:21:44 +0000
Manifest next update:     Fri 24 Jul 2026 07:21:44 +0000
Files and hashes:         1: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl (hash: plXPP3d7AcEZnE3o8rGBw0oBsvgcyyeWHWfqB2p2LYg=)
                          2: 3FCB43D2FB2911EF8A116D76C4F9AE02.roa (hash: TuXiY2w3e6zPpHWMMfGIh2+FsQ77W0kNYmMVPhTnzXc=)
                          3: 07E3560E707B11F08CCE202CC4F9AE02.roa (hash: qfuU9QdlAgNGEyETXyG5+zUSOsPh9QDRT3yT/b7upmM=)
                          4: 6E68E3C8A05811F0B1978E4CC4F9AE02.roa (hash: xZAQVFBAuCRw9GeATu83PkDRuX+f5O+jwXu5MsByzpg=)
                          5: 362EF79CFB2911EF8C103876C4F9AE02.roa (hash: 8z/uFEi8kY2kZUp/2Uo+wdZpbnZaPl9Z3nq0shxq+HU=)
                          6: 563F3D581F3C11F09F3C7F40C4F9AE02.roa (hash: jqaS9O87XNAGjnOYKmiPW3sMHJfZOBNM9M+7d9FRgko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl
                          rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 07:21:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F026, serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
        Validity
            Not Before: Jul 17 07:21:44 2026 GMT
            Not After : Jul 24 07:21:44 2026 GMT
        Subject: CN=6a59d808-53c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ba:dc:02:03:3f:ca:49:86:29:92:00:51:70:
                    ac:c5:5c:07:d9:b8:a5:ff:35:61:69:b4:28:b0:88:
                    4e:db:5e:05:e9:63:bc:7c:93:96:16:60:f4:a0:4d:
                    39:1c:9a:d7:17:e6:26:41:a1:ff:92:5e:5d:af:d0:
                    6d:3f:51:0d:ec:a0:dc:21:46:e5:24:a3:c0:00:1c:
                    1e:de:e0:f1:22:81:c3:7b:17:df:b3:78:a1:d7:59:
                    b5:26:94:db:96:69:f5:86:95:6a:06:a2:25:18:0b:
                    e8:58:79:b9:bd:7b:1f:61:e9:29:ba:9b:c5:89:72:
                    fd:d2:fd:a1:f1:c8:9f:65:a5:8e:0e:91:5a:b6:08:
                    83:62:59:83:0d:30:77:c3:33:95:c4:8a:fb:c1:75:
                    23:ea:a1:bb:35:3c:89:b4:64:6b:1d:bd:ef:2d:00:
                    d2:59:a9:01:11:c5:0a:55:06:1a:3f:26:d5:6d:6c:
                    84:63:bc:0e:94:40:12:85:97:14:a4:33:ff:e4:16:
                    5a:30:ce:f7:3a:c5:7a:31:7a:68:b3:13:1a:d8:53:
                    79:ee:5e:5a:18:40:eb:fb:b3:a8:46:b1:ad:a4:ee:
                    6a:95:f5:f8:1c:61:e8:8e:f0:a1:70:6c:c9:02:88:
                    0b:0f:b1:14:9a:dc:03:2c:31:c7:b4:5b:33:33:64:
                    df:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:84:0C:DA:ED:0D:BF:2C:EA:6E:A6:09:11:4A:A7:02:1E:53:DE:0C
            X509v3 Authority Key Identifier:
                keyid:BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:18:b0:81:b6:f3:f9:2d:c9:48:20:b3:d8:43:d8:29:b9:6f:
         55:3e:63:1e:d1:7d:81:c6:4c:9e:4b:96:2f:6d:e2:dc:54:6b:
         7e:ed:7b:58:30:86:0d:16:48:74:e1:48:4f:ef:6c:49:40:43:
         23:21:be:a8:ab:09:a9:fb:5e:55:b4:7b:35:7c:1b:79:bc:b0:
         e9:ae:e5:a3:a2:2e:df:a5:a8:f8:90:d2:37:c4:a4:03:32:68:
         a9:af:03:cc:c1:81:dc:b8:f5:f6:0e:7a:e1:19:1b:c2:dc:08:
         dc:b3:33:aa:6c:4d:64:c8:59:9e:89:9d:89:c0:be:8b:70:f0:
         cd:66:5e:71:84:78:89:31:cf:0a:22:87:3b:4f:d8:e2:96:eb:
         37:6b:07:4c:40:86:a9:21:70:fb:f4:02:7b:c4:99:fd:65:8f:
         bc:5f:2c:b4:7d:05:6a:70:37:75:ce:79:70:20:22:33:a5:95:
         c3:a2:33:85:38:b1:f7:c2:a5:cc:46:11:fc:52:c2:38:21:be:
         c6:a5:66:e7:71:a4:85:87:20:3d:f7:6c:5e:ac:a6:f8:8c:47:
         8d:51:c2:bb:12:aa:c2:0a:60:af:ad:20:9e:cd:54:3e:54:9b:
         03:d6:3b:9f:51:5c:df:e9:45:da:86:f1:eb:55:55:6f:37:14:
         ae:1f:ce:0d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUYwMjYxMTAvBgNVBAUTKEJENzlBQzc2NDBDOTU1QzQzNUM4Q0Y1NUMyOTFGMTIy
QjcwRTJGOTkwHhcNMjYwNzE3MDcyMTQ0WhcNMjYwNzI0MDcyMTQ0WjAYMRYwFAYD
VQQDEw02YTU5ZDgwOC01M2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj7rcAgM/ykmGKZIAUXCsxVwH2bil/zVhabQosIhO214F6WO8fJOWFmD0oE05
HJrXF+YmQaH/kl5dr9BtP1EN7KDcIUblJKPAABwe3uDxIoHDexffs3ih11m1JpTb
lmn1hpVqBqIlGAvoWHm5vXsfYekpupvFiXL90v2h8cifZaWODpFatgiDYlmDDTB3
wzOVxIr7wXUj6qG7NTyJtGRrHb3vLQDSWakBEcUKVQYaPybVbWyEY7wOlEAShZcU
pDP/5BZaMM73OsV6MXposxMa2FN57l5aGEDr+7OoRrGtpO5qlfX4HGHojvChcGzJ
AogLD7EUmtwDLDHHtFszM2TflQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFiEDNrt
Db8s6m6mCRFKpwIeU94MMB8GA1UdIwQYMBaAFL15rHZAyVXENcjPVcKR8SK3Di+Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjAyNi8zQkFBQUM0NEZC
MjgxMUVGOTU5RkM3NzRDNEY5QUUwMi92WG1zZGtESlZjUTF5TTlWd3BIeElyY09M
NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZYbXNka0RKVmNRMXlNOVZ3cEh4SXJjT0w1ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjAyNi8zQkFBQUM0NEZCMjgxMUVGOTU5RkM3NzRDNEY5QUUwMi92WG1zZGtESlZj
UTF5TTlWd3BIeElyY09MNWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcBiwgbbz+S3JSCCz2EPYKblvVT5jHtF9gcZMnkuWL23i3FRrfu17WDCGDRZI
dOFIT+9sSUBDIyG+qKsJqfteVbR7NXwbebyw6a7lo6Iu36Wo+JDSN8SkAzJoqa8D
zMGB3Lj19g564RkbwtwI3LMzqmxNZMhZnomdicC+i3DwzWZecYR4iTHPCiKHO0/Y
4pbrN2sHTECGqSFw+/QCe8SZ/WWPvF8stH0FanA3dc55cCAiM6WVw6IzhTix98Kl
zEYR/FLCOCG+xqVm53GkhYcgPfdsXqym+IxHjVHCuxKqwgpgr60gns1UPlSbA9Y7
n1Fc3+lF2obx61VVbzcUrh/ODQ==
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:55:06 2026 by rpki-client