Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
File:                     juUibgV6ZUQkIur-2cYuKQ3zJIo.mft (raw, json)
Hash identifier:          zb3CYKirmQuqDEBYbODhEqEphp1jsqJ7fhqJ0x1qasQ=
Subject key identifier:   1F:6D:BC:0C:B7:0A:AB:58:B3:F5:6A:89:95:0C:EE:B4:B7:DF:DB:E5
Authority key identifier: 8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A
Certificate issuer:       /CN=A91672E3/serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
Certificate serial:       0285
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
Manifest number:          0268
Signing time:             Thu 23 Jul 2026 03:22:22 +0000
Manifest this update:     Thu 23 Jul 2026 03:22:22 +0000
Manifest next update:     Thu 30 Jul 2026 03:22:22 +0000
Files and hashes:         1: juUibgV6ZUQkIur-2cYuKQ3zJIo.crl (hash: 6LHn/OG9N0uQGFElMjdTpk05P61s3z9+CdfuPH2k87I=)
                          2: FD678F40214E11F095B05918C4F9AE02.roa (hash: Vm3x4XjI71ZGXzqh/k1zDRwiOP341qe7iTCno94apNg=)
                          3: 45399802215111F0B94CA13FC4F9AE02.roa (hash: 4GMNfCTUHQ1rV2C9XWos7Hdj0ySssxUEkLEdwlySSs0=)
                          4: D84BF6B860C411F18C6019A18247A888.roa (hash: QIlUH1QNdLALbUbhElUoD+izhiqfEVazksdCsrI3VgM=)
                          5: 4798C37060C511F1938892A38247A888.roa (hash: NqECYph2+dX2EILPMOrULQRj9cohk7FoO97wfRrmrZA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl
                          rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 645 (0x285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91672E3, serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
        Validity
            Not Before: Jul 23 03:22:22 2026 GMT
            Not After : Jul 30 03:22:22 2026 GMT
        Subject: CN=6a6188ee-dc68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:43:fc:82:41:18:37:26:8d:1c:a0:42:7b:fb:
                    56:df:12:f4:65:d1:f9:22:17:e1:14:89:77:04:fd:
                    03:c0:79:f3:60:dc:92:7f:ea:66:eb:d6:d3:63:ec:
                    39:49:a2:f1:99:ee:e5:24:80:26:ab:07:4a:0d:d3:
                    4a:60:8d:d7:08:ce:a6:1c:63:85:79:31:5f:25:a8:
                    92:f8:87:b3:a7:33:0e:77:81:4f:dd:15:3b:51:e4:
                    8f:0d:d4:33:a3:a6:21:e1:d3:4f:bf:30:a6:fd:a6:
                    2e:13:9c:17:96:2f:21:6c:ce:f5:7d:4e:18:e3:53:
                    8c:f1:b4:07:8c:aa:8e:08:ae:2b:09:18:db:12:b3:
                    90:40:df:ad:27:57:bc:62:99:5b:2a:3f:b2:6c:79:
                    01:57:76:d2:d8:c6:ed:b4:d7:89:b2:98:7e:fa:17:
                    df:11:d6:22:26:de:9f:ac:f5:30:be:5e:99:fe:e5:
                    19:63:5b:fa:32:d5:0f:aa:2a:1d:84:f4:86:92:91:
                    6e:53:e5:fa:2d:a4:27:02:0f:c1:6b:ee:58:e6:46:
                    05:a0:ed:08:d4:e7:57:4e:af:5c:19:11:3f:c3:77:
                    0a:e3:11:dc:03:2e:62:62:14:b7:3b:4f:5e:f2:59:
                    a4:46:1d:8d:7d:d3:62:2c:89:37:bb:fb:a9:55:67:
                    c0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6D:BC:0C:B7:0A:AB:58:B3:F5:6A:89:95:0C:EE:B4:B7:DF:DB:E5
            X509v3 Authority Key Identifier:
                keyid:8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:a6:51:b6:b8:e2:27:63:6c:73:b1:bc:82:a7:f9:92:d1:f5:
         ac:c8:f8:04:42:f2:e0:b4:53:de:44:ae:3d:f2:df:b7:ee:ab:
         3f:e1:60:e4:67:d7:98:54:c2:4b:08:95:6e:2d:5d:ca:df:f3:
         3e:5f:e8:07:cd:80:7e:d2:41:a5:d2:f1:ac:43:4d:94:29:f9:
         da:74:c2:24:42:3d:b0:eb:7f:a5:a6:ea:a8:33:3f:d5:80:f2:
         d7:6e:a3:52:2c:f6:eb:85:1d:51:50:84:3d:22:40:ba:22:42:
         96:cb:c6:b5:5d:78:4b:72:07:c9:21:47:ae:3c:eb:c3:84:c7:
         cd:71:4f:0d:98:ac:1c:84:ff:5e:5f:52:cd:7a:d2:ea:b0:d1:
         76:7d:df:39:3f:36:5e:af:1e:e1:f1:81:54:53:de:f3:49:2c:
         05:f5:b8:ad:cc:c2:19:d7:c3:51:5f:a6:b5:48:38:09:14:df:
         ef:1b:c1:27:7a:30:aa:e4:be:c2:9e:25:ad:fe:ac:8c:96:44:
         3c:d8:aa:db:98:bd:0c:6d:7f:dc:0a:99:a4:03:53:60:a4:b7:
         5e:81:0e:0f:0f:49:ec:5a:24:b3:5e:7a:5a:c2:b8:68:82:85:
         52:6c:26:88:5c:96:8e:12:c2:09:47:63:53:ad:35:05:cd:7f:
         b3:37:e0:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjcyRTMxMTAvBgNVBAUTKDhFRTUyMjZFMDU3QTY1NDQyNDIyRUFGRUQ5QzYyRTI5
MERGMzI0OEEwHhcNMjYwNzIzMDMyMjIyWhcNMjYwNzMwMDMyMjIyWjAYMRYwFAYD
VQQDEw02YTYxODhlZS1kYzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqUP8gkEYNyaNHKBCe/tW3xL0ZdH5IhfhFIl3BP0DwHnzYNySf+pm69bTY+w5
SaLxme7lJIAmqwdKDdNKYI3XCM6mHGOFeTFfJaiS+IezpzMOd4FP3RU7UeSPDdQz
o6Yh4dNPvzCm/aYuE5wXli8hbM71fU4Y41OM8bQHjKqOCK4rCRjbErOQQN+tJ1e8
YplbKj+ybHkBV3bS2MbttNeJsph++hffEdYiJt6frPUwvl6Z/uUZY1v6MtUPqiod
hPSGkpFuU+X6LaQnAg/Ba+5Y5kYFoO0I1OdXTq9cGRE/w3cK4xHcAy5iYhS3O09e
8lmkRh2NfdNiLIk3u/upVWfADQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB9tvAy3
CqtYs/VqiZUM7rS339vlMB8GA1UdIwQYMBaAFI7lIm4FemVEJCLq/tnGLikN8ySK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzJFMy9DNkI1MDEzQ0VB
RTkxMUVEODc1QTJENTFDNEY5QUUwMi9qdVVpYmdWNlpVUWtJdXItMmNZdUtRM3pK
SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2p1VWliZ1Y2WlVRa0l1ci0yY1l1S1EzekpJby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzJFMy9DNkI1MDEzQ0VBRTkxMUVEODc1QTJENTFDNEY5QUUwMi9qdVVpYmdWNlpV
UWtJdXItMmNZdUtRM3pKSW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYKZRtrjiJ2Nsc7G8gqf5ktH1rMj4BELy4LRT3kSuPfLft+6rP+Fg5GfXmFTC
SwiVbi1dyt/zPl/oB82AftJBpdLxrENNlCn52nTCJEI9sOt/pabqqDM/1YDy126j
Uiz264UdUVCEPSJAuiJClsvGtV14S3IHySFHrjzrw4THzXFPDZisHIT/Xl9SzXrS
6rDRdn3fOT82Xq8e4fGBVFPe80ksBfW4rczCGdfDUV+mtUg4CRTf7xvBJ3owquS+
wp4lrf6sjJZEPNiq25i9DG1/3AqZpANTYKS3XoEODw9J7Foks156WsK4aIKFUmwm
iFyWjhLCCUdjU601Bc1/szfgqw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:27:12 2026 by rpki-client