Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
File:                     _Ern2eP0GafSBKVMedHz76mn1sg.mft (raw, json)
Hash identifier:          p3dyVPnaXijvZGmJpgmkNOV7ugyF8FUeg97hXtrAwng=
Subject key identifier:   CA:32:A5:0D:D6:37:84:94:B9:A9:C6:D5:D2:D4:CE:90:43:DF:5C:8D
Authority key identifier: FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8
Certificate issuer:       /CN=A91262F0/serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8
Certificate serial:       0296
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
Manifest number:          028C
Signing time:             Thu 23 Jul 2026 02:54:41 +0000
Manifest this update:     Thu 23 Jul 2026 02:54:40 +0000
Manifest next update:     Thu 30 Jul 2026 02:54:40 +0000
Files and hashes:         1: _Ern2eP0GafSBKVMedHz76mn1sg.crl (hash: Zf9D0IdLh6OgKxuTfvd9/OhzQl1gFHVDsuN1U9+cSmo=)
                          2: 05BD1998108D11F197077311333D8C67.roa (hash: ZxF538zON35iTObIR2PUbabLdiG79qM6J447o9x0f0c=)
                          3: 8E412748A33311EDA2CB2420C4F9AE02.roa (hash: 8ooMgmV7Ud+S1xspsx7qZBXNFAFm0OtpaMWTTHwLKP0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl
                          rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:54:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 662 (0x296)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262F0, serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8
        Validity
            Not Before: Jul 23 02:54:40 2026 GMT
            Not After : Jul 30 02:54:40 2026 GMT
        Subject: CN=6a618271-dee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7b:68:7f:bc:6f:2d:52:bd:74:12:61:44:38:
                    b7:45:6c:33:e5:37:9f:db:2d:a1:5e:6f:4c:08:8e:
                    36:dd:67:fc:57:56:44:e3:a3:da:47:c1:1e:d3:92:
                    a7:a4:1e:4f:fd:6a:03:9c:78:4c:48:fe:4e:ec:da:
                    07:5f:fe:03:e6:4e:c8:78:8e:e3:19:51:24:bb:a4:
                    26:63:a4:f0:5e:42:ae:09:f1:43:b9:aa:2e:93:ed:
                    e8:4b:c6:bd:9a:aa:2a:5a:28:a0:d8:f8:33:2d:08:
                    9c:db:99:e1:91:6f:31:79:b9:ea:7d:1d:74:fc:ea:
                    3e:c2:af:75:83:55:bf:c6:d7:c5:4d:3a:9c:da:45:
                    a8:07:3f:81:91:c1:71:fb:e4:26:03:6e:4d:f2:91:
                    f9:18:8c:c4:ee:66:b6:6c:5a:a1:9b:35:cd:d8:1b:
                    71:b6:d8:30:a8:8f:40:e7:c3:29:a4:4c:ed:f6:7a:
                    18:73:64:30:b6:9b:6f:b2:cc:61:09:de:27:61:25:
                    c2:69:51:e4:8a:12:c8:e6:b8:cd:4f:f5:b7:e8:8b:
                    50:eb:bf:3c:f8:fe:59:82:5b:08:bb:9c:3c:1c:19:
                    47:1b:ae:b0:9b:41:e8:9b:dd:26:15:4e:7e:07:e5:
                    ca:20:47:e4:63:a7:ff:8c:ca:2a:9d:ba:36:60:c9:
                    64:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:32:A5:0D:D6:37:84:94:B9:A9:C6:D5:D2:D4:CE:90:43:DF:5C:8D
            X509v3 Authority Key Identifier:
                keyid:FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:fc:6a:17:ab:63:9c:e3:2d:88:bb:30:31:20:82:78:70:28:
         62:43:ed:60:8c:05:fe:28:61:76:e2:2c:d7:d5:bb:e2:af:98:
         b7:f0:bd:99:fa:6b:39:35:b6:16:86:34:58:f3:4b:88:7e:20:
         17:6a:b7:b6:82:4e:46:ac:de:b9:74:f0:c2:b2:1f:5c:98:27:
         9f:d8:0c:ea:05:c5:ab:d4:6d:51:90:83:3f:3a:6f:8c:63:cf:
         cb:e8:01:d3:9e:6c:76:b5:ff:ee:c5:12:0a:31:21:24:ea:3a:
         3f:e3:77:a0:51:7b:75:56:e6:a9:9e:d9:9a:5a:36:a3:8e:54:
         69:7d:f6:78:c3:51:cf:62:4d:e4:01:c3:c5:7d:f3:44:f9:91:
         cf:c5:39:d4:21:42:9e:68:f7:6b:33:eb:f8:8c:41:c6:d5:cc:
         63:6c:5c:f1:4e:9a:64:9e:46:26:03:4b:df:8f:d3:86:19:3b:
         4f:fb:29:0d:60:a9:cf:03:fb:b2:09:d8:78:b5:df:e8:3a:66:
         f5:7f:c0:08:98:7f:3e:2b:1d:c0:53:95:1f:24:07:0a:d1:53:
         eb:7a:90:fe:e2:0e:f2:01:82:52:8a:21:28:23:ba:e0:43:09:
         8b:bb:4d:66:7e:1a:98:66:5c:77:c5:d8:81:19:a3:fb:b5:45:
         a1:56:ea:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyRjAxMTAvBgNVBAUTKEZDNEFFN0Q5RTNGNDE5QTdEMjA0QTU0Qzc5RDFGM0VG
QTlBN0Q2QzgwHhcNMjYwNzIzMDI1NDQwWhcNMjYwNzMwMDI1NDQwWjAYMRYwFAYD
VQQDEw02YTYxODI3MS1kZWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxntof7xvLVK9dBJhRDi3RWwz5Tef2y2hXm9MCI423Wf8V1ZE46PaR8Ee05Kn
pB5P/WoDnHhMSP5O7NoHX/4D5k7IeI7jGVEku6QmY6TwXkKuCfFDuaouk+3oS8a9
mqoqWiig2PgzLQic25nhkW8xebnqfR10/Oo+wq91g1W/xtfFTTqc2kWoBz+BkcFx
++QmA25N8pH5GIzE7ma2bFqhmzXN2BtxttgwqI9A58MppEzt9noYc2Qwtptvssxh
Cd4nYSXCaVHkihLI5rjNT/W36ItQ6788+P5ZglsIu5w8HBlHG66wm0Hom90mFU5+
B+XKIEfkY6f/jMoqnbo2YMlkeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMoypQ3W
N4SUuanG1dLUzpBD31yNMB8GA1UdIwQYMBaAFPxK59nj9Bmn0gSlTHnR8++pp9bI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJGMC8zM0FEMEE2MkEz
MEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdhZlNCS1ZNZWRIejc2bW4x
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19Fcm4yZVAwR2FmU0JLVk1lZEh6NzZtbjFzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NjJGMC8zM0FEMEE2MkEzMEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdh
ZlNCS1ZNZWRIejc2bW4xc2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfvxqF6tjnOMtiLswMSCCeHAoYkPtYIwF/ihhduIs19W74q+Yt/C9mfprOTW2
FoY0WPNLiH4gF2q3toJORqzeuXTwwrIfXJgnn9gM6gXFq9RtUZCDPzpvjGPPy+gB
055sdrX/7sUSCjEhJOo6P+N3oFF7dVbmqZ7Zmlo2o45UaX32eMNRz2JN5AHDxX3z
RPmRz8U51CFCnmj3azPr+IxBxtXMY2xc8U6aZJ5GJgNL34/Thhk7T/spDWCpzwP7
sgnYeLXf6Dpm9X/ACJh/PisdwFOVHyQHCtFT63qQ/uIO8gGCUoohKCO64EMJi7tN
Zn4amGZcd8XYgRmj+7VFoVbqwQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:28:02 2026 by rpki-client