Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
File:                     Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft (raw, json)
Hash identifier:          +QYh++g3eXViYSKAES8OxNfeFeFiZbZjS3lLlSB/iDc=
Subject key identifier:   95:8C:62:96:02:37:DF:B8:B4:62:38:00:EB:FC:36:C2:6F:C0:3E:67
Authority key identifier: 0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14
Certificate issuer:       /CN=A91637FD/serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214
Certificate serial:       0140
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
Manifest number:          013C
Signing time:             Thu 23 Jul 2026 07:01:57 +0000
Manifest this update:     Thu 23 Jul 2026 07:01:56 +0000
Manifest next update:     Thu 30 Jul 2026 07:01:56 +0000
Files and hashes:         1: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl (hash: oqBtACkQPaFz838IjXNpe4AVysHoXgUVS7CQ31LaLt0=)
                          2: D1E78BC0A15D11EFBAE3332CC4F9AE02.roa (hash: hdQpo+xnXuDoOPe/5r+BnsM8aeG+LI4VCVPfcf0L3eI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl
                          rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91637FD, serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214
        Validity
            Not Before: Jul 23 07:01:56 2026 GMT
            Not After : Jul 30 07:01:56 2026 GMT
        Subject: CN=6a61bc65-7d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e7:08:6a:61:bb:23:32:5e:38:43:a6:ee:40:
                    4e:e7:19:bb:4c:87:e6:25:ae:93:9b:84:18:87:06:
                    cc:76:9f:4d:ce:14:a7:e8:ea:72:89:df:bf:ec:4f:
                    b6:af:5c:e7:88:4e:49:8c:1b:05:34:0f:45:2a:e5:
                    13:5f:d5:9f:0f:a7:29:32:e8:4e:13:6e:b3:28:70:
                    c2:e1:dd:32:9e:17:4c:7a:a9:78:58:4f:1c:86:60:
                    89:12:5b:3d:e7:04:63:f9:2d:4e:08:1e:68:2d:e5:
                    5d:56:1b:ee:83:4f:65:45:b2:cf:5a:5c:5e:87:04:
                    d8:cf:ed:fa:68:f9:95:ac:71:b7:9a:5e:17:6f:b0:
                    2d:4c:31:ab:3a:08:35:54:7c:4b:4c:28:d4:a7:ee:
                    51:af:05:03:f6:70:ef:8b:e4:d9:7c:90:90:70:75:
                    12:24:e3:27:d5:66:04:eb:84:b2:13:d9:95:a0:1e:
                    34:95:80:e0:5f:b1:95:c0:de:21:55:a0:25:3a:9c:
                    9e:c3:11:36:c9:8a:ef:f4:db:a4:08:d8:75:bc:83:
                    d7:5d:11:77:1b:ec:53:dc:f2:40:bd:b2:0a:8e:10:
                    da:74:8b:c8:18:a1:b2:97:0e:42:c1:d6:6a:ff:4b:
                    e1:78:1a:78:70:d0:23:3d:38:0f:b1:a4:d4:f6:65:
                    8d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8C:62:96:02:37:DF:B8:B4:62:38:00:EB:FC:36:C2:6F:C0:3E:67
            X509v3 Authority Key Identifier:
                keyid:0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ee:52:93:ab:55:07:16:32:3b:2d:55:07:63:35:15:0b:77:
         87:76:0b:2b:df:44:9d:35:73:5d:26:6c:cf:c7:f5:22:3c:fd:
         ba:8a:3c:05:ad:bb:1b:bf:89:49:10:f8:7c:eb:35:d5:fe:db:
         0f:ce:4e:33:15:94:7d:79:eb:fe:4a:21:a4:a6:cc:ad:c1:d2:
         de:e9:73:e6:e4:cc:7d:e7:44:2a:63:aa:d9:3f:12:e0:5b:47:
         b4:dc:56:11:95:18:6d:04:cb:fa:8f:2a:ee:ed:73:e1:40:07:
         62:97:e3:c0:b6:66:9f:37:ed:7d:3e:94:28:6c:99:a8:2d:83:
         c0:c7:11:97:61:40:4f:dd:df:02:b6:ac:3b:13:1e:ce:80:b8:
         47:42:7e:81:ca:9a:7a:d1:0c:e1:06:af:62:8e:b4:63:c2:ce:
         d7:e3:d5:4c:db:f2:f6:37:76:d6:e5:d4:b7:1f:6a:59:a2:c6:
         63:7b:20:b1:ef:14:4f:0f:33:21:bb:18:7a:2a:5d:f6:4f:f4:
         df:bd:9e:b1:51:88:a6:55:aa:94:ba:72:30:af:2f:8c:1c:0c:
         25:29:ad:70:77:f5:99:42:19:dd:d4:f2:5e:7a:63:79:48:8e:
         2b:ac:c2:91:dc:97:b2:5e:e5:b5:ed:30:59:f4:90:f5:da:12:
         64:53:45:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjM3RkQxMTAvBgNVBAUTKDBBQ0U2RjZBQTZBM0ZBRTI3QTA4NUM3QTEyN0Y5QkM5
OTQyNDUyMTQwHhcNMjYwNzIzMDcwMTU2WhcNMjYwNzMwMDcwMTU2WjAYMRYwFAYD
VQQDEw02YTYxYmM2NS03ZDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtecIamG7IzJeOEOm7kBO5xm7TIfmJa6Tm4QYhwbMdp9NzhSn6Opyid+/7E+2
r1zniE5JjBsFNA9FKuUTX9WfD6cpMuhOE26zKHDC4d0ynhdMeql4WE8chmCJEls9
5wRj+S1OCB5oLeVdVhvug09lRbLPWlxehwTYz+36aPmVrHG3ml4Xb7AtTDGrOgg1
VHxLTCjUp+5RrwUD9nDvi+TZfJCQcHUSJOMn1WYE64SyE9mVoB40lYDgX7GVwN4h
VaAlOpyewxE2yYrv9NukCNh1vIPXXRF3G+xT3PJAvbIKjhDadIvIGKGylw5CwdZq
/0vheBp4cNAjPTgPsaTU9mWNLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJWMYpYC
N9+4tGI4AOv8NsJvwD5nMB8GA1UdIwQYMBaAFArOb2qmo/rieghcehJ/m8mUJFIU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzdGRC9FMjQ1QjVCMkEx
NUExMUVGQTFFQzJCNUZDNEY5QUUwMi9DczV2YXFhai11SjZDRng2RW4tYnlaUWtV
aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NzNXZhcWFqLXVKNkNGeDZFbi1ieVpRa1VoUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MzdGRC9FMjQ1QjVCMkExNUExMUVGQTFFQzJCNUZDNEY5QUUwMi9DczV2YXFhai11
SjZDRng2RW4tYnlaUWtVaFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcO5Sk6tVBxYyOy1VB2M1FQt3h3YLK99EnTVzXSZsz8f1Ijz9uoo8Ba27G7+J
SRD4fOs11f7bD85OMxWUfXnr/kohpKbMrcHS3ulz5uTMfedEKmOq2T8S4FtHtNxW
EZUYbQTL+o8q7u1z4UAHYpfjwLZmnzftfT6UKGyZqC2DwMcRl2FAT93fArasOxMe
zoC4R0J+gcqaetEM4QavYo60Y8LO1+PVTNvy9jd21uXUtx9qWaLGY3sgse8UTw8z
IbsYeipd9k/0372esVGIplWqlLpyMK8vjBwMJSmtcHf1mUIZ3dTyXnpjeUiOK6zC
kdyXsl7lte0wWfSQ9doSZFNFaQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:56:42 2026 by rpki-client