Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft
File:                     chHmi1fNzfTtqDzwtGI7dpP2NDo.mft (raw, json)
Hash identifier:          /A+stU770HICrUWm+ANLShoEQCt6JV1TOHc3MV+Eu1w=
Subject key identifier:   CE:14:E4:2C:1A:AB:D7:78:D5:57:F7:EA:11:36:46:44:5B:09:6F:23
Authority key identifier: 72:11:E6:8B:57:CD:CD:F4:ED:A8:3C:F0:B4:62:3B:76:93:F6:34:3A
Certificate issuer:       /CN=A91638DD/serialNumber=7211E68B57CDCDF4EDA83CF0B4623B7693F6343A
Certificate serial:       0273
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft
Manifest number:          026D
Signing time:             Thu 23 Jul 2026 03:14:31 +0000
Manifest this update:     Thu 23 Jul 2026 03:14:30 +0000
Manifest next update:     Thu 30 Jul 2026 03:14:30 +0000
Files and hashes:         1: chHmi1fNzfTtqDzwtGI7dpP2NDo.crl (hash: rl4yPar20hMJkGgqsbVn6qRYyEornH7+NtyU1SEIbBM=)
                          2: 3FA4288CD29B11ED88E16742C4F9AE02.roa (hash: XRam2F4FC1VRB1bzeJbTRlXhvSOCTuW1Ti0TuLeUucE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.crl
                          rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 627 (0x273)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91638DD, serialNumber=7211E68B57CDCDF4EDA83CF0B4623B7693F6343A
        Validity
            Not Before: Jul 23 03:14:30 2026 GMT
            Not After : Jul 30 03:14:30 2026 GMT
        Subject: CN=6a618717-bab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:85:18:26:aa:4f:c9:65:52:72:c0:24:9a:b5:
                    ac:5f:22:5b:0e:39:33:8f:ad:9d:87:3c:11:3a:84:
                    35:2f:d8:0e:65:1f:a3:16:1a:3f:4d:33:43:89:00:
                    58:48:03:e0:cb:4f:d8:b0:53:85:3c:3a:61:1b:d7:
                    8f:a1:ec:57:fc:c2:0b:0c:79:58:11:2c:9f:8c:3a:
                    12:f2:02:c6:16:70:d3:f8:06:03:ec:cf:d9:e5:a7:
                    e1:1d:b1:65:eb:4c:0c:1b:96:ad:16:76:67:e3:c0:
                    c9:85:27:06:a9:8f:3f:56:59:f9:ed:20:12:82:54:
                    58:08:69:1c:80:af:8f:28:75:fe:49:fa:0d:cb:c2:
                    9a:3d:f5:b1:a1:b2:05:bd:92:15:f0:76:42:0c:d1:
                    fa:6e:3f:74:53:a7:6f:fa:d3:9d:32:d9:62:5e:17:
                    e4:ca:b0:19:b8:3b:b7:dc:c8:3b:7c:a4:c4:7a:1b:
                    ed:8b:4e:69:ca:ee:84:16:71:4b:0d:18:1a:57:eb:
                    1a:e4:63:3b:f2:69:11:cc:db:f0:65:ac:56:99:96:
                    a7:12:50:34:eb:fc:34:15:76:3b:ce:e6:0e:9b:0c:
                    e6:f4:31:5b:97:c4:40:bb:b8:66:5b:d7:cf:e3:8b:
                    62:4e:41:31:58:98:35:48:99:38:bd:01:59:3a:65:
                    ab:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:14:E4:2C:1A:AB:D7:78:D5:57:F7:EA:11:36:46:44:5B:09:6F:23
            X509v3 Authority Key Identifier:
                keyid:72:11:E6:8B:57:CD:CD:F4:ED:A8:3C:F0:B4:62:3B:76:93:F6:34:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:b8:8f:82:8e:c3:6f:01:a0:48:ea:fa:40:72:f9:15:64:ab:
         5e:30:8f:3a:3b:e0:72:be:d3:43:84:fb:ae:89:f1:7e:3d:8b:
         74:37:36:69:e5:d1:f6:2b:cc:e1:0e:f0:da:19:96:bf:a8:6c:
         96:04:6b:6c:04:09:60:06:b1:c6:8e:f4:b9:64:4e:06:9e:a9:
         0b:e0:7e:8e:21:bc:c9:76:a8:79:20:2f:00:c3:a1:21:28:1b:
         e7:9a:5e:6a:65:ed:84:66:84:0d:d3:58:ec:c5:44:78:4f:72:
         d7:79:f4:26:92:59:bd:05:42:46:fb:af:63:b6:11:f9:02:45:
         e6:35:2f:0a:6b:14:80:b7:1b:40:bb:04:ff:c4:a3:ce:60:c0:
         34:27:c6:5a:3d:ff:62:5a:34:bc:20:1b:75:71:df:c6:e7:59:
         8a:87:08:a6:79:3f:41:17:94:32:ee:aa:62:32:25:dc:ec:b8:
         53:a3:49:5f:5e:62:ed:22:ae:b4:f1:91:a4:eb:d7:6e:78:54:
         f0:cb:29:1b:c8:f3:46:f1:8f:2d:03:5b:9f:af:73:d7:a7:2e:
         ff:57:af:05:8e:b8:70:b7:26:8b:02:63:f5:b9:3a:f5:d4:73:
         df:9b:a9:71:f7:fd:21:15:53:bb:39:63:0a:4b:20:e5:0e:9c:
         b5:f9:63:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjM4REQxMTAvBgNVBAUTKDcyMTFFNjhCNTdDRENERjRFREE4M0NGMEI0NjIzQjc2
OTNGNjM0M0EwHhcNMjYwNzIzMDMxNDMwWhcNMjYwNzMwMDMxNDMwWjAYMRYwFAYD
VQQDEw02YTYxODcxNy1iYWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApYUYJqpPyWVScsAkmrWsXyJbDjkzj62dhzwROoQ1L9gOZR+jFho/TTNDiQBY
SAPgy0/YsFOFPDphG9ePoexX/MILDHlYESyfjDoS8gLGFnDT+AYD7M/Z5afhHbFl
60wMG5atFnZn48DJhScGqY8/Vln57SASglRYCGkcgK+PKHX+SfoNy8KaPfWxobIF
vZIV8HZCDNH6bj90U6dv+tOdMtliXhfkyrAZuDu33Mg7fKTEehvti05pyu6EFnFL
DRgaV+sa5GM78mkRzNvwZaxWmZanElA06/w0FXY7zuYOmwzm9DFbl8RAu7hmW9fP
44tiTkExWJg1SJk4vQFZOmWrLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM4U5Cwa
q9d41Vf36hE2RkRbCW8jMB8GA1UdIwQYMBaAFHIR5otXzc307ag88LRiO3aT9jQ6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzhERC9DODg3MENBRUQy
OTcxMUVEQjA4NThCM0RDNEY5QUUwMi9jaEhtaTFmTnpmVHRxRHp3dEdJN2RwUDJO
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NoSG1pMWZOemZUdHFEend0R0k3ZHBQMk5Eby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MzhERC9DODg3MENBRUQyOTcxMUVEQjA4NThCM0RDNEY5QUUwMi9jaEhtaTFmTnpm
VHRxRHp3dEdJN2RwUDJORG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbLiPgo7DbwGgSOr6QHL5FWSrXjCPOjvgcr7TQ4T7ronxfj2LdDc2aeXR9ivM
4Q7w2hmWv6hslgRrbAQJYAaxxo70uWROBp6pC+B+jiG8yXaoeSAvAMOhISgb55pe
amXthGaEDdNY7MVEeE9y13n0JpJZvQVCRvuvY7YR+QJF5jUvCmsUgLcbQLsE/8Sj
zmDANCfGWj3/Ylo0vCAbdXHfxudZiocIpnk/QReUMu6qYjIl3Oy4U6NJX15i7SKu
tPGRpOvXbnhU8MspG8jzRvGPLQNbn69z16cu/1evBY64cLcmiwJj9bk69dRz35up
cff9IRVTuzljCksg5Q6ctfljKQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:54:28 2026 by rpki-client