Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
File:                     N9M3SYXzuqgtC-BMbYejoDXiDeo.mft (raw, json)
Hash identifier:          BQvc6k2B7pO9V5f+uhI4os5/tPbGfUdX+Q18SUXErB0=
Subject key identifier:   33:EF:31:86:FF:5E:01:7E:BF:DF:D8:39:0C:9B:9E:EF:22:6A:26:45
Authority key identifier: 37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA
Certificate issuer:       /CN=A91415FB/serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA
Certificate serial:       1A58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
Manifest number:          1A35
Signing time:             Wed 22 Jul 2026 16:25:23 +0000
Manifest this update:     Wed 22 Jul 2026 16:25:22 +0000
Manifest next update:     Wed 29 Jul 2026 16:25:22 +0000
Files and hashes:         1: N9M3SYXzuqgtC-BMbYejoDXiDeo.crl (hash: GgD/VggXCsqjBUXLvybLJa+plyFCxDycHY76L24iHg8=)
                          2: 433F089AE49A11EB85874B74C4F9AE02.roa (hash: Y21EB5mcTdLJ+t1P6lpjNle0vO49vwuhzcqyBGhqfzk=)
                          3: 226DEC1275D511E88D5FDF24C4F9AE02.roa (hash: zKRxtwWLD/aVwZZeGl5qQOwJsbYCaLBjaAyISkZq1sA=)
                          4: 8351896675D611E88AFEBA28C4F9AE02.roa (hash: zRlRK9BeH8fdXLqsfz/46RYZS4/HEzNIowRP+B9H4J4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl
                          rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6744 (0x1a58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91415FB, serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA
        Validity
            Not Before: Jul 22 16:25:22 2026 GMT
            Not After : Jul 29 16:25:22 2026 GMT
        Subject: CN=6a60eef3-d53f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:86:d5:42:6a:9c:8f:dc:5a:de:01:81:3e:7a:
                    6e:08:3c:33:d3:65:0a:49:03:02:8c:7e:6b:3d:83:
                    4b:81:ad:be:be:a0:5f:f2:53:44:2e:1d:af:fd:4f:
                    3c:ec:fd:00:d5:fb:f4:02:2e:0f:fa:59:1a:f4:9d:
                    ec:3a:4f:e2:04:9f:3d:d5:7e:84:5f:99:ec:95:8a:
                    31:9c:32:94:eb:59:16:5c:f3:af:69:27:71:f8:44:
                    82:9c:ae:cc:5c:d5:6a:27:74:7e:24:9e:86:39:f2:
                    44:84:db:8b:34:09:f2:be:3b:fb:ec:69:ad:a0:57:
                    a5:8e:0b:b9:c3:0e:f7:bb:0d:df:c9:dd:fa:0c:68:
                    6a:8b:28:f7:b7:6c:98:39:43:ed:15:32:64:5f:cb:
                    94:d3:5a:a9:6b:6c:e0:f4:6f:4c:4e:1b:51:21:a1:
                    8d:fe:44:ae:bb:fd:d6:90:3f:04:98:42:d4:1e:a7:
                    0b:68:25:93:24:c5:c1:75:65:bc:c9:a7:15:c4:ee:
                    67:e6:6a:3c:24:72:41:a5:2d:09:fa:31:4c:41:8e:
                    21:b7:54:e8:e5:4e:66:08:61:f8:02:57:64:0c:7b:
                    64:d3:1d:96:63:12:2b:f5:74:37:fc:0d:0b:07:14:
                    79:fb:f9:cd:3a:2a:79:1e:57:b5:52:5e:53:bf:05:
                    4c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:EF:31:86:FF:5E:01:7E:BF:DF:D8:39:0C:9B:9E:EF:22:6A:26:45
            X509v3 Authority Key Identifier:
                keyid:37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d6:c7:0a:b2:8e:e6:fe:2b:3b:9b:65:04:5d:64:42:29:78:
         fa:4e:40:59:84:8c:e9:b6:6c:0d:50:77:b5:de:e8:05:ae:8a:
         53:0e:d3:0b:9f:a4:28:e9:92:b5:0a:0a:56:8f:4c:79:07:11:
         2a:d9:f6:3f:4b:af:55:13:34:30:4c:73:81:00:0a:b8:ec:53:
         ec:a5:e2:1b:71:d6:47:f9:30:b5:ee:db:3c:e1:ca:b3:84:6f:
         71:b2:20:bc:37:bc:a6:52:7f:fc:ac:9f:16:4c:06:24:14:c4:
         e8:6a:fd:ad:fd:7a:2d:ed:a7:20:19:3c:e2:f7:de:82:b5:d7:
         7c:0f:65:cb:ee:17:f9:33:ba:75:77:4f:01:73:5c:50:5b:c0:
         dc:1b:28:83:18:bc:6c:25:ac:8c:e8:58:94:9f:54:62:03:53:
         fd:ca:c4:a7:3a:b8:8b:7e:41:78:ae:40:6d:97:27:34:d4:1f:
         cf:af:7a:88:eb:7e:52:04:ab:fd:ce:36:69:a8:ec:6a:9b:1a:
         f7:a3:03:50:4d:a5:d2:00:d4:7d:34:6a:29:1b:d5:4f:ef:2e:
         a2:fe:24:74:b8:e1:1c:14:6e:73:87:f2:a1:7c:d6:ac:96:3c:
         27:6d:1f:6f:bf:4f:d4:84:6c:62:39:bb:d1:ae:b1:20:18:86:
         c4:d0:c1:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDE1RkIxMTAvBgNVBAUTKDM3RDMzNzQ5ODVGM0JBQTgyRDBCRTA0QzZEODdBM0Ew
MzVFMjBERUEwHhcNMjYwNzIyMTYyNTIyWhcNMjYwNzI5MTYyNTIyWjAYMRYwFAYD
VQQDEw02YTYwZWVmMy1kNTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs4bVQmqcj9xa3gGBPnpuCDwz02UKSQMCjH5rPYNLga2+vqBf8lNELh2v/U88
7P0A1fv0Ai4P+lka9J3sOk/iBJ891X6EX5nslYoxnDKU61kWXPOvaSdx+ESCnK7M
XNVqJ3R+JJ6GOfJEhNuLNAnyvjv77GmtoFeljgu5ww73uw3fyd36DGhqiyj3t2yY
OUPtFTJkX8uU01qpa2zg9G9MThtRIaGN/kSuu/3WkD8EmELUHqcLaCWTJMXBdWW8
yacVxO5n5mo8JHJBpS0J+jFMQY4ht1To5U5mCGH4AldkDHtk0x2WYxIr9XQ3/A0L
BxR5+/nNOip5Hle1Ul5TvwVMawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDPvMYb/
XgF+v9/YOQybnu8iaiZFMB8GA1UdIwQYMBaAFDfTN0mF87qoLQvgTG2Ho6A14g3q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVGQi83RjQ4ODk2ODcz
NUQxMUU3ODhEQTRGMTRDNEY5QUUwMi9OOU0zU1lYenVxZ3RDLUJNYlllam9EWGlE
ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL045TTNTWVh6dXFndEMtQk1iWWVqb0RYaURlby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MTVGQi83RjQ4ODk2ODczNUQxMUU3ODhEQTRGMTRDNEY5QUUwMi9OOU0zU1lYenVx
Z3RDLUJNYlllam9EWGlEZW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjNbHCrKO5v4rO5tlBF1kQil4+k5AWYSM6bZsDVB3td7oBa6KUw7TC5+kKOmS
tQoKVo9MeQcRKtn2P0uvVRM0MExzgQAKuOxT7KXiG3HWR/kwte7bPOHKs4RvcbIg
vDe8plJ//KyfFkwGJBTE6Gr9rf16Le2nIBk84vfegrXXfA9ly+4X+TO6dXdPAXNc
UFvA3Bsogxi8bCWsjOhYlJ9UYgNT/crEpzq4i35BeK5AbZcnNNQfz696iOt+UgSr
/c42aajsapsa96MDUE2l0gDUfTRqKRvVT+8uov4kdLjhHBRuc4fyoXzWrJY8J20f
b79P1IRsYjm70a6xIBiGxNDBIA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:51:55 2026 by rpki-client