Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
File:                     9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft (raw, json)
Hash identifier:          FDzqNKv9TRbefWDz3QhYuhPhHvaIiOcv5sLgU7yrFds=
Subject key identifier:   6A:08:65:55:CB:E1:AC:B5:58:75:AF:F5:EE:81:D0:33:7D:20:9B:A0
Authority key identifier: F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89
Certificate issuer:       /CN=A91487A2/serialNumber=F68DCED2E602F446567410994A8E8C021009ED89
Certificate serial:       023F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
Manifest number:          0237
Signing time:             Thu 23 Jul 2026 03:48:22 +0000
Manifest this update:     Thu 23 Jul 2026 03:48:21 +0000
Manifest next update:     Thu 30 Jul 2026 03:48:21 +0000
Files and hashes:         1: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl (hash: bVRF5/akgCvzTmhYCqivQwmzIflPd0aifSkkcnoGQgI=)
                          2: E6F6831A26AF11EEA8E86146C4F9AE02.roa (hash: hX2Iw++PK9Y+cjSdv5iifugQbVGCyctU8mKlkkvrChc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl
                          rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 575 (0x23f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91487A2, serialNumber=F68DCED2E602F446567410994A8E8C021009ED89
        Validity
            Not Before: Jul 23 03:48:21 2026 GMT
            Not After : Jul 30 03:48:21 2026 GMT
        Subject: CN=6a618f06-2920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c5:f6:48:22:76:a8:ed:86:15:b7:66:55:6c:
                    7f:33:ab:0f:23:2c:d1:d9:dc:55:7e:1e:44:04:77:
                    2b:53:bd:12:a8:c8:9f:e2:90:dc:2b:3e:47:4f:bf:
                    79:5d:2f:02:5c:7b:2a:d1:3d:fe:cf:0d:bc:b5:83:
                    bf:b9:f4:ae:63:b4:55:18:d0:20:a0:78:e2:16:21:
                    33:42:ce:fd:ad:47:ea:36:24:0c:37:96:dc:c1:2a:
                    d1:95:ba:54:3d:f4:95:1e:2c:ff:70:dc:61:3a:3e:
                    7b:98:c7:3b:41:ea:9c:ca:fa:17:bc:7d:9a:3d:a7:
                    88:fc:8e:29:5b:e9:c8:d9:ce:c5:92:92:59:31:b7:
                    a9:5c:84:99:6f:ed:e7:bc:94:4e:09:88:57:d1:a5:
                    26:ab:8f:f3:21:5d:7e:6d:b2:fa:c5:12:1c:93:4c:
                    ae:0f:89:25:1a:6f:8d:c8:f0:b8:54:12:a3:04:c4:
                    91:63:b3:97:c6:b0:57:cd:5f:8a:be:64:c1:b7:ad:
                    53:40:0d:f0:c1:cb:74:f3:f6:58:33:95:e6:6f:63:
                    2b:aa:aa:2a:52:e7:66:80:01:8a:f7:da:0c:e8:41:
                    78:da:f6:c2:26:d6:0a:2e:15:f9:55:f8:1a:7c:0f:
                    2d:9f:c9:eb:af:e2:01:3e:d7:bd:99:a0:92:8a:a6:
                    25:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:08:65:55:CB:E1:AC:B5:58:75:AF:F5:EE:81:D0:33:7D:20:9B:A0
            X509v3 Authority Key Identifier:
                keyid:F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:9b:4f:34:b8:3d:14:a9:16:19:6a:91:3f:72:55:4d:6d:77:
         6a:23:4b:2a:47:d5:6a:76:3e:0a:ef:65:70:9e:66:93:a1:c6:
         55:9a:7d:22:70:2b:7a:bd:8c:c4:c0:0e:83:8a:c8:86:fc:dd:
         d4:e1:65:2b:f5:06:db:41:73:14:57:4a:2d:26:2c:60:b7:30:
         f1:86:48:d3:43:6b:a5:bb:11:14:f9:6c:90:70:49:6c:dc:59:
         b2:57:5e:6e:2e:11:2b:b0:30:28:4b:00:05:d6:87:21:44:64:
         f5:8f:5c:88:e6:45:ab:67:53:fa:ac:ab:4c:ff:c9:ed:5a:5b:
         fd:3f:f5:5b:4f:a3:21:53:e5:01:8d:ef:39:a2:9f:42:22:63:
         95:2a:ce:70:f9:6b:75:1a:2d:58:2a:80:ce:b0:0a:74:84:c0:
         75:29:34:23:70:1e:63:34:05:1c:5d:d3:f6:a0:e7:12:a3:1b:
         85:4b:8f:74:9f:67:6b:c5:e9:4c:19:69:92:b5:8a:b3:f8:2c:
         a5:17:88:fd:1b:b5:5c:91:f5:a9:b6:d9:f1:80:44:6b:fd:c2:
         88:eb:e4:09:d5:cb:0a:ad:31:5a:5a:b6:c0:23:56:a8:ac:9e:
         65:99:12:20:c9:d1:d0:51:6b:a7:ca:b3:27:8d:dd:79:59:ad:
         c1:73:a7:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDg3QTIxMTAvBgNVBAUTKEY2OERDRUQyRTYwMkY0NDY1Njc0MTA5OTRBOEU4QzAy
MTAwOUVEODkwHhcNMjYwNzIzMDM0ODIxWhcNMjYwNzMwMDM0ODIxWjAYMRYwFAYD
VQQDEw02YTYxOGYwNi0yOTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA78X2SCJ2qO2GFbdmVWx/M6sPIyzR2dxVfh5EBHcrU70SqMif4pDcKz5HT795
XS8CXHsq0T3+zw28tYO/ufSuY7RVGNAgoHjiFiEzQs79rUfqNiQMN5bcwSrRlbpU
PfSVHiz/cNxhOj57mMc7QeqcyvoXvH2aPaeI/I4pW+nI2c7FkpJZMbepXISZb+3n
vJROCYhX0aUmq4/zIV1+bbL6xRIck0yuD4klGm+NyPC4VBKjBMSRY7OXxrBXzV+K
vmTBt61TQA3wwct08/ZYM5Xmb2MrqqoqUudmgAGK99oM6EF42vbCJtYKLhX5Vfga
fA8tn8nrr+IBPte9maCSiqYlmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGoIZVXL
4ay1WHWv9e6B0DN9IJugMB8GA1UdIwQYMBaAFPaNztLmAvRGVnQQmUqOjAIQCe2J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODdBMi80MDZCNjEwMDI2
QUYxMUVFOEFFRDRGNDVDNEY5QUUwMi85bzNPMHVZQzlFWldkQkNaU282TUFoQUo3
WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlvM08wdVlDOUVaV2RCQ1pTbzZNQWhBSjdZay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
ODdBMi80MDZCNjEwMDI2QUYxMUVFOEFFRDRGNDVDNEY5QUUwMi85bzNPMHVZQzlF
WldkQkNaU282TUFoQUo3WWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAp5tPNLg9FKkWGWqRP3JVTW13aiNLKkfVanY+Cu9lcJ5mk6HGVZp9InArer2M
xMAOg4rIhvzd1OFlK/UG20FzFFdKLSYsYLcw8YZI00NrpbsRFPlskHBJbNxZslde
bi4RK7AwKEsABdaHIURk9Y9ciOZFq2dT+qyrTP/J7Vpb/T/1W0+jIVPlAY3vOaKf
QiJjlSrOcPlrdRotWCqAzrAKdITAdSk0I3AeYzQFHF3T9qDnEqMbhUuPdJ9na8Xp
TBlpkrWKs/gspReI/Ru1XJH1qbbZ8YBEa/3CiOvkCdXLCq0xWlq2wCNWqKyeZZkS
IMnR0FFrp8qzJ43deVmtwXOnnQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:43 2026 by rpki-client