Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft
File:                     D5BpKh7v5_ChrGi14awJ9wJpccw.mft (raw, json)
Hash identifier:          4uY1MPSDAsgyf6k7FK8xlmlEbmqfFCo8R5BuM8TVUIU=
Subject key identifier:   81:E4:9C:11:CD:A6:4D:8B:1A:A5:CB:86:2F:B3:20:D2:0B:6C:04:5C
Authority key identifier: 0F:90:69:2A:1E:EF:E7:F0:A1:AC:68:B5:E1:AC:09:F7:02:69:71:CC
Certificate issuer:       /CN=A91185B8/serialNumber=0F90692A1EEFE7F0A1AC68B5E1AC09F7026971CC
Certificate serial:       027F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft
Manifest number:          027B
Signing time:             Thu 23 Jul 2026 03:05:17 +0000
Manifest this update:     Thu 23 Jul 2026 03:05:16 +0000
Manifest next update:     Thu 30 Jul 2026 03:05:16 +0000
Files and hashes:         1: D5BpKh7v5_ChrGi14awJ9wJpccw.crl (hash: ebG7o6l4TIuwEn4kGDZa4DmwWzdCzbcaUekvEL1FdM4=)
                          2: 61BCB5467F5F11F1BEA7A26F5FA30FBC.roa (hash: SeQUnFSLQHOFUsaseN6yWVAw0Pri/I36or2wIB3les8=)
                          3: 624A40D27F5F11F1BEA7A26F5FA30FBC.roa (hash: CTuiIjeKzXxi3ZMYeyZBR0nwz6i115ctqbvud5AdBUg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.crl
                          rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 639 (0x27f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91185B8, serialNumber=0F90692A1EEFE7F0A1AC68B5E1AC09F7026971CC
        Validity
            Not Before: Jul 23 03:05:16 2026 GMT
            Not After : Jul 30 03:05:16 2026 GMT
        Subject: CN=6a6184ed-2361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:21:80:f2:bf:61:25:6d:f7:f3:32:3b:10:b2:
                    a2:d9:dd:1b:9b:34:aa:ec:f6:be:8f:46:df:09:8c:
                    75:63:fa:7b:1c:9d:fe:76:84:fa:bf:af:19:3a:ea:
                    9c:d7:bf:64:65:c3:9b:ec:f5:da:2e:35:af:90:55:
                    f7:2a:0d:5b:68:36:30:e1:e4:89:01:b6:ca:5a:d3:
                    19:22:9f:ce:09:f9:ca:00:7c:96:60:ed:e1:d9:d9:
                    c5:80:26:b4:11:88:12:4f:9c:6a:f0:f5:24:ad:ee:
                    2e:7f:8c:24:55:ab:61:66:b2:31:0f:8f:60:b0:c5:
                    16:d5:8b:63:04:5f:53:7a:7d:67:4c:1a:6b:af:00:
                    27:80:9b:81:3a:ea:a2:05:f6:60:ef:da:61:1d:82:
                    01:d1:63:07:60:dc:5f:59:b7:d9:9f:20:da:dc:09:
                    60:76:58:34:ef:d7:9a:0c:66:38:47:e7:4d:ed:38:
                    51:07:42:77:0a:86:02:74:a5:12:0d:9a:0d:eb:63:
                    85:8c:58:0f:b8:d1:8a:f2:bf:72:e3:5a:65:51:c0:
                    f6:02:6c:01:26:fe:51:be:55:d3:40:34:06:3b:cd:
                    3f:dd:b3:03:28:28:0c:29:35:d7:1f:14:02:55:21:
                    7f:e6:f4:60:c7:46:32:23:3b:45:a6:57:b8:32:90:
                    6c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E4:9C:11:CD:A6:4D:8B:1A:A5:CB:86:2F:B3:20:D2:0B:6C:04:5C
            X509v3 Authority Key Identifier:
                keyid:0F:90:69:2A:1E:EF:E7:F0:A1:AC:68:B5:E1:AC:09:F7:02:69:71:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:08:06:33:2f:d0:4a:99:3a:48:10:f0:f1:31:87:16:8c:80:
         1d:89:aa:9b:ae:20:ce:4f:c9:dc:da:7b:f3:2a:64:60:a3:d7:
         26:3a:fa:d0:b4:59:52:79:c4:fe:9c:de:01:f6:5b:2a:19:29:
         69:79:3e:8c:c1:09:bd:3e:98:00:a1:87:bf:ef:94:23:10:19:
         bb:38:19:8d:2b:d7:dc:0e:cd:15:32:66:da:d4:fe:86:0f:0c:
         c0:de:cb:e7:c1:ae:06:4e:da:91:7f:4d:b0:20:84:c1:20:8b:
         b3:a9:c7:4d:5d:ad:02:bb:6e:0c:b4:8d:ff:23:0d:3c:7d:7b:
         fe:f0:33:d0:79:7e:23:12:4c:22:92:33:46:f8:65:ac:b5:81:
         bf:77:b1:47:55:7e:cf:80:5c:33:e9:ea:f5:20:c0:69:f2:f1:
         21:fa:71:77:79:8d:b2:fd:f4:08:cb:a5:dd:5e:f1:17:ab:91:
         4a:72:7e:6e:91:d9:ff:79:21:29:ab:3c:18:10:ed:b4:f3:04:
         b9:9b:16:25:1d:e8:ba:66:76:d7:12:75:69:cf:ab:ac:fe:80:
         b4:de:df:0e:5b:9e:9e:8f:d2:ed:b4:41:5c:30:c8:2e:60:dd:
         eb:ba:37:f4:4f:e1:54:d1:08:91:de:b6:19:d8:bd:63:8d:48:
         f9:12:2e:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg1QjgxMTAvBgNVBAUTKDBGOTA2OTJBMUVFRkU3RjBBMUFDNjhCNUUxQUMwOUY3
MDI2OTcxQ0MwHhcNMjYwNzIzMDMwNTE2WhcNMjYwNzMwMDMwNTE2WjAYMRYwFAYD
VQQDEw02YTYxODRlZC0yMzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvyGA8r9hJW338zI7ELKi2d0bmzSq7Pa+j0bfCYx1Y/p7HJ3+doT6v68ZOuqc
179kZcOb7PXaLjWvkFX3Kg1baDYw4eSJAbbKWtMZIp/OCfnKAHyWYO3h2dnFgCa0
EYgST5xq8PUkre4uf4wkVathZrIxD49gsMUW1YtjBF9Ten1nTBprrwAngJuBOuqi
BfZg79phHYIB0WMHYNxfWbfZnyDa3Algdlg079eaDGY4R+dN7ThRB0J3CoYCdKUS
DZoN62OFjFgPuNGK8r9y41plUcD2AmwBJv5RvlXTQDQGO80/3bMDKCgMKTXXHxQC
VSF/5vRgx0YyIztFple4MpBsvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIHknBHN
pk2LGqXLhi+zINILbARcMB8GA1UdIwQYMBaAFA+QaSoe7+fwoaxoteGsCfcCaXHM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODVCOC9DRkEzNDA5QUJF
MzExMUVEQjRGRjdEMzRDNEY5QUUwMi9ENUJwS2g3djVfQ2hyR2kxNGF3Sjl3SnBj
Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0Q1QnBLaDd2NV9DaHJHaTE0YXdKOXdKcGNjdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODVCOC9DRkEzNDA5QUJFMzExMUVEQjRGRjdEMzRDNEY5QUUwMi9ENUJwS2g3djVf
Q2hyR2kxNGF3Sjl3SnBjY3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASQgGMy/QSpk6SBDw8TGHFoyAHYmqm64gzk/J3Np78ypkYKPXJjr60LRZUnnE
/pzeAfZbKhkpaXk+jMEJvT6YAKGHv++UIxAZuzgZjSvX3A7NFTJm2tT+hg8MwN7L
58GuBk7akX9NsCCEwSCLs6nHTV2tArtuDLSN/yMNPH17/vAz0Hl+IxJMIpIzRvhl
rLWBv3exR1V+z4BcM+nq9SDAafLxIfpxd3mNsv30CMul3V7xF6uRSnJ+bpHZ/3kh
Kas8GBDttPMEuZsWJR3oumZ21xJ1ac+rrP6AtN7fDlueno/S7bRBXDDILmDd67o3
9E/hVNEIkd62Gdi9Y41I+RIucw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:58:00 2026 by rpki-client