Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft
File:                     ApdxaY8oNwXUpN4S5XOVhcvrjww.mft (raw, json)
Hash identifier:          Sc6othIYfBrcOZi5GhMtKPYyUgnqHstO0wHpUVTWiuM=
Subject key identifier:   EF:7A:0F:12:E4:D1:49:48:49:A3:07:2E:3B:03:C1:B2:AE:D7:71:9B
Authority key identifier: 02:97:71:69:8F:28:37:05:D4:A4:DE:12:E5:73:95:85:CB:EB:8F:0C
Certificate issuer:       /CN=A91772FA/serialNumber=029771698F283705D4A4DE12E5739585CBEB8F0C
Certificate serial:       60
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ApdxaY8oNwXUpN4S5XOVhcvrjww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft
Manifest number:          59
Signing time:             Thu 23 Jul 2026 01:21:29 +0000
Manifest this update:     Thu 23 Jul 2026 01:21:28 +0000
Manifest next update:     Thu 30 Jul 2026 01:21:28 +0000
Files and hashes:         1: ApdxaY8oNwXUpN4S5XOVhcvrjww.crl (hash: cWGI6A3sTPJSM25SS8t0TpvWT/0T3mD8lB+yRezKNIw=)
                          2: 56C55F20266411F1AE95FD6DA8833773.roa (hash: Bh/+aoYsXA1eMtFp1ijM0hnLldVk4y3NMxI4DJ5jwNI=)
                          3: 579B4ED2266411F1AE95FD6DA8833773.roa (hash: 8bYV5yqT5f/vp8IUk+aSf8PEeGU4OsOngNPeYOyshUM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.crl
                          rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ApdxaY8oNwXUpN4S5XOVhcvrjww.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:21:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91772FA, serialNumber=029771698F283705D4A4DE12E5739585CBEB8F0C
        Validity
            Not Before: Jul 23 01:21:28 2026 GMT
            Not After : Jul 30 01:21:28 2026 GMT
        Subject: CN=6a616c99-db9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d6:aa:5a:37:57:7e:a8:f6:44:ae:1c:72:c2:
                    06:a5:88:00:e0:63:2c:f3:f2:c3:02:41:fa:70:12:
                    9a:00:b7:d7:2b:f5:a1:40:fc:8c:ca:fc:0c:48:a6:
                    1d:1a:b8:ee:53:f9:de:ff:e4:3f:72:c1:16:68:de:
                    07:8e:26:84:ff:22:f7:66:fe:e5:fa:d1:84:ab:45:
                    24:90:94:72:f8:70:b6:d3:4b:c9:c7:44:90:32:14:
                    0e:b1:d2:74:9c:11:2e:79:8a:b2:a6:86:4e:a5:1e:
                    98:90:44:68:5b:d6:27:24:01:ff:a4:7b:41:bd:5e:
                    70:84:a2:0b:95:b5:d6:e7:67:09:84:be:74:65:3f:
                    f8:d2:37:a0:1d:c8:db:f7:ce:07:47:62:c7:f8:0c:
                    df:ad:6d:68:ac:2b:a8:14:67:4a:37:5b:19:8e:7c:
                    46:a6:77:b6:ca:18:6e:31:28:fc:3b:f7:ea:67:01:
                    8e:48:4d:cf:52:bd:85:f8:e0:0c:af:8d:cd:ca:30:
                    9d:39:76:91:ac:21:8b:17:fe:3e:0f:d5:b0:44:5e:
                    af:49:fd:57:93:b7:c0:03:a6:2c:f1:6e:b6:d8:21:
                    1b:a6:78:80:71:7c:ca:ff:ac:3a:6e:51:b8:e9:2b:
                    73:2e:bc:23:fe:5d:62:ed:e8:5e:dc:9a:65:9f:d0:
                    7a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7A:0F:12:E4:D1:49:48:49:A3:07:2E:3B:03:C1:B2:AE:D7:71:9B
            X509v3 Authority Key Identifier:
                keyid:02:97:71:69:8F:28:37:05:D4:A4:DE:12:E5:73:95:85:CB:EB:8F:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ApdxaY8oNwXUpN4S5XOVhcvrjww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:4e:54:f7:94:01:3c:bb:7f:1f:92:d5:65:2e:de:25:89:de:
         3e:e9:74:05:f0:9f:0f:21:e0:18:ce:0a:b0:5d:f8:3c:0b:f5:
         b2:f9:e7:4c:e5:58:31:b1:48:13:f6:ec:4b:4d:64:00:5b:35:
         cc:55:a4:d2:45:36:33:06:34:9c:00:e4:f7:81:4f:c0:08:3b:
         81:01:f5:22:37:bd:7f:ef:0f:de:b6:63:98:e7:88:0f:f6:b0:
         bb:b1:9a:24:dd:e2:a3:d9:dd:c2:75:14:17:4e:7d:38:6f:2e:
         58:55:38:36:cb:d0:bc:04:09:bd:a1:b1:e7:5b:9c:68:80:24:
         53:85:39:17:02:01:d4:85:bc:84:f8:cd:a1:ab:00:7f:a3:78:
         86:8b:4a:21:62:ad:f7:6d:c5:ae:86:6d:ed:90:f3:cd:78:4a:
         a9:60:4c:7d:65:50:87:00:d8:98:80:f3:0b:e8:4c:13:c4:ff:
         8c:72:44:9b:4f:24:c1:66:3e:ba:e7:55:a3:5a:cd:ed:a3:99:
         07:bb:70:7d:05:5c:47:af:a8:bf:cf:37:a7:a9:2d:01:a6:ba:
         e9:0e:c0:43:dd:52:13:a4:8d:74:d4:a0:e3:91:f5:76:38:b7:
         8e:19:4f:89:b0:f3:c3:37:2f:6c:61:76:97:7d:28:d0:e6:d0:
         68:7a:79:39
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
NzJGQTExMC8GA1UEBRMoMDI5NzcxNjk4RjI4MzcwNUQ0QTRERTEyRTU3Mzk1ODVD
QkVCOEYwQzAeFw0yNjA3MjMwMTIxMjhaFw0yNjA3MzAwMTIxMjhaMBgxFjAUBgNV
BAMTDTZhNjE2Yzk5LWRiOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDC1qpaN1d+qPZErhxywgaliADgYyzz8sMCQfpwEpoAt9cr9aFA/IzK/AxIph0a
uO5T+d7/5D9ywRZo3geOJoT/Ivdm/uX60YSrRSSQlHL4cLbTS8nHRJAyFA6x0nSc
ES55irKmhk6lHpiQRGhb1ickAf+ke0G9XnCEoguVtdbnZwmEvnRlP/jSN6AdyNv3
zgdHYsf4DN+tbWisK6gUZ0o3WxmOfEamd7bKGG4xKPw79+pnAY5ITc9SvYX44Ayv
jc3KMJ05dpGsIYsX/j4P1bBEXq9J/VeTt8ADpizxbrbYIRumeIBxfMr/rDpuUbjp
K3MuvCP+XWLt6F7cmmWf0Hq7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU73oPEuTR
SUhJowcuOwPBsq7XcZswHwYDVR0jBBgwFoAUApdxaY8oNwXUpN4S5XOVhcvrjwww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3MkZBL0I4RkYyRjE4MTEx
QTExRjE4RjY5OTVBQjE3M0Q4QzY3L0FwZHhhWThvTndYVXBONFM1WE9WaGN2cmp3
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvQXBkeGFZOG9Od1hVcE40UzVYT1ZoY3Zyand3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3
MkZBL0I4RkYyRjE4MTExQTExRjE4RjY5OTVBQjE3M0Q4QzY3L0FwZHhhWThvTndY
VXBONFM1WE9WaGN2cmp3dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBBTlT3lAE8u38fktVlLt4lid4+6XQF8J8PIeAYzgqwXfg8C/Wy+edM5VgxsUgT
9uxLTWQAWzXMVaTSRTYzBjScAOT3gU/ACDuBAfUiN71/7w/etmOY54gP9rC7sZok
3eKj2d3CdRQXTn04by5YVTg2y9C8BAm9obHnW5xogCRThTkXAgHUhbyE+M2hqwB/
o3iGi0ohYq33bcWuhm3tkPPNeEqpYEx9ZVCHANiYgPML6EwTxP+MckSbTyTBZj66
51WjWs3to5kHu3B9BVxHr6i/zzenqS0BprrpDsBD3VITpI101KDjkfV2OLeOGU+J
sPPDNy9sYXaXfSjQ5tBoenk5
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:48:07 2026 by rpki-client