Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
File:                     -gRcYwK4c-iDZfqaAhSZtPPFhog.mft (raw, json)
Hash identifier:          Z8q0YXoNtU9tXZG2kRbIFbXaBEqpOhZxSQvQHKQ1bcw=
Subject key identifier:   65:B4:DD:B3:2E:76:36:E3:4A:F0:B8:E7:37:D9:4A:D7:52:36:F5:C6
Authority key identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88
Certificate issuer:       /CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
Certificate serial:       063E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
Manifest number:          061E
Signing time:             Wed 22 Jul 2026 23:40:04 +0000
Manifest this update:     Wed 22 Jul 2026 23:40:03 +0000
Manifest next update:     Wed 29 Jul 2026 23:40:03 +0000
Files and hashes:         1: -gRcYwK4c-iDZfqaAhSZtPPFhog.crl (hash: tTNUZ9vD+owA5JipjDWyqjp6Vl6v0h6Eodo6FL/Y53g=)
                          2: 36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa (hash: sXo/EfCy1P1hXgj+XVBKjDkQi4E974lDfTItj2KXQOc=)
                          3: 52A1A77A6ECF11F0B2785815C4F9AE02.roa (hash: 99SBr5WJIbWwpgEc6hwr9lvi4BLubRre2gvekG03kuo=)
                          4: 5C9E3A00E83111F0B570A08B79EE528E.roa (hash: ME2B8uuD8K+ZGXPv64QmrsnI4TiGRtKbpWpIh4aJJVc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl
                          rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1598 (0x63e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91853D3, serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
        Validity
            Not Before: Jul 22 23:40:03 2026 GMT
            Not After : Jul 29 23:40:03 2026 GMT
        Subject: CN=6a6154d4-0a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4a:0a:81:63:8c:cc:c7:3e:63:df:51:e5:ba:
                    57:46:7e:33:dd:ba:3b:b0:5e:0a:b3:40:a0:0a:f7:
                    9f:90:0a:ed:8c:27:1d:0a:80:49:c7:a2:2d:48:df:
                    a2:33:12:95:3b:bb:7d:e1:a2:0a:f2:f9:7e:7e:93:
                    fa:59:a3:ab:49:93:71:49:54:3f:1f:56:b0:11:4a:
                    a3:82:a1:01:5c:0e:48:c4:0e:8f:e4:f4:f0:18:47:
                    ba:44:79:c4:30:2f:2f:0c:2c:29:7c:cb:c2:53:b9:
                    7e:4a:45:92:d6:72:ae:35:fe:35:c8:b5:5d:c1:89:
                    d7:61:ce:55:66:5e:30:12:51:bf:52:5c:70:df:48:
                    d5:d6:2e:28:cf:19:32:c0:4a:ac:12:fd:b5:40:1c:
                    ef:81:b6:da:bd:80:08:22:4b:5d:a6:62:fd:b7:8e:
                    6d:f2:59:0b:65:b1:cb:69:11:6a:14:9d:62:6d:48:
                    aa:a9:46:98:b5:5b:08:5b:86:d2:c5:f8:5f:59:03:
                    b1:fa:36:9a:8f:9b:53:d1:26:53:d7:c2:ae:7e:e4:
                    ec:31:69:99:70:0c:df:28:1f:f4:b6:8a:17:f6:95:
                    ea:5d:df:09:cf:07:f7:57:8d:df:d7:b9:85:cf:17:
                    98:b7:25:da:c4:5d:d8:03:ff:c2:5d:8e:06:d5:5d:
                    4a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B4:DD:B3:2E:76:36:E3:4A:F0:B8:E7:37:D9:4A:D7:52:36:F5:C6
            X509v3 Authority Key Identifier:
                keyid:FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ee:74:d5:35:51:93:c4:bc:7e:27:1c:a8:0a:d0:42:36:c1:
         de:fc:81:62:e1:fd:ba:e7:bb:55:82:5e:74:c7:cf:80:14:9e:
         ac:92:1d:d9:0b:24:c3:ed:2f:97:31:1d:4c:c7:ad:15:4d:69:
         e2:01:6c:1d:56:c8:36:4e:15:6b:36:a8:37:de:2d:90:b6:db:
         68:91:9a:10:ce:37:20:0b:38:05:3b:03:c0:2b:00:61:58:1b:
         f8:d2:55:01:16:28:b5:e2:0f:3d:7a:5d:8a:bd:73:a2:0a:a8:
         46:c7:fc:ae:e8:fe:a0:e2:5a:99:b7:42:97:a3:9e:da:ea:f7:
         62:b8:2b:60:11:e6:d7:e9:40:dc:f4:ad:ea:c8:ce:13:9f:66:
         18:5e:7a:b2:5f:25:bf:47:df:cf:b5:ca:06:37:d0:f4:0d:78:
         80:b8:5b:d2:da:b2:ba:66:0e:a3:6c:fc:10:fc:d2:1e:30:91:
         75:50:e6:00:af:a7:75:bd:07:19:9d:6b:87:73:77:83:c4:ae:
         e4:62:65:06:eb:ed:32:47:b6:4c:2d:3c:0e:2d:09:7b:a3:58:
         07:4f:5e:d3:33:85:2e:49:43:19:94:ec:e9:2f:bc:d3:e7:c8:
         dc:2f:91:70:4c:8e:60:e5:46:f1:55:93:e3:5d:e3:c6:c7:ed:
         71:26:53:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODUzRDMxMTAvBgNVBAUTKEZBMDQ1QzYzMDJCODczRTg4MzY1RkE5QTAyMTQ5OUI0
RjNDNTg2ODgwHhcNMjYwNzIyMjM0MDAzWhcNMjYwNzI5MjM0MDAzWjAYMRYwFAYD
VQQDEw02YTYxNTRkNC0wYTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnEoKgWOMzMc+Y99R5bpXRn4z3bo7sF4Ks0CgCvefkArtjCcdCoBJx6ItSN+i
MxKVO7t94aIK8vl+fpP6WaOrSZNxSVQ/H1awEUqjgqEBXA5IxA6P5PTwGEe6RHnE
MC8vDCwpfMvCU7l+SkWS1nKuNf41yLVdwYnXYc5VZl4wElG/Ulxw30jV1i4ozxky
wEqsEv21QBzvgbbavYAIIktdpmL9t45t8lkLZbHLaRFqFJ1ibUiqqUaYtVsIW4bS
xfhfWQOx+jaaj5tT0SZT18KufuTsMWmZcAzfKB/0tooX9pXqXd8Jzwf3V43f17mF
zxeYtyXaxF3YA//CXY4G1V1KSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGW03bMu
djbjSvC45zfZStdSNvXGMB8GA1UdIwQYMBaAFPoEXGMCuHPog2X6mgIUmbTzxYaI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82RUMwRTM2ODAw
MEExMUVDOEMyODcyNTJDNEY5QUUwMi8tZ1JjWXdLNGMtaURaZnFhQWhTWnRQUEZo
b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1nUmNZd0s0Yy1pRFpmcWFBaFNadFBQRmhvZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTNEMy82RUMwRTM2ODAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi8tZ1JjWXdLNGMt
aURaZnFhQWhTWnRQUEZob2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIO501TVRk8S8ficcqArQQjbB3vyBYuH9uue7VYJedMfPgBSerJId2Qskw+0v
lzEdTMetFU1p4gFsHVbINk4VazaoN94tkLbbaJGaEM43IAs4BTsDwCsAYVgb+NJV
ARYoteIPPXpdir1zogqoRsf8ruj+oOJambdCl6Oe2ur3YrgrYBHm1+lA3PSt6sjO
E59mGF56sl8lv0ffz7XKBjfQ9A14gLhb0tqyumYOo2z8EPzSHjCRdVDmAK+ndb0H
GZ1rh3N3g8Su5GJlBuvtMke2TC08Di0Je6NYB09e0zOFLklDGZTs6S+80+fI3C+R
cEyOYOVG8VWT413jxsftcSZT/g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:18:17 2026 by rpki-client