Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
File:                     j3AW2iLylktW9Cz0bZ8SOvNoMas.mft (raw, json)
Hash identifier:          lXZoubSJFzuguWKH4E4CeKgKK+9ejCfVr/kQdE/0BZw=
Subject key identifier:   40:11:8D:63:94:1A:BB:27:22:A1:69:F1:35:0D:09:82:3A:9D:15:4E
Authority key identifier: 8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB
Certificate issuer:       /CN=A91884A1/serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB
Certificate serial:       024F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
Manifest number:          0247
Signing time:             Thu 23 Jul 2026 03:40:52 +0000
Manifest this update:     Thu 23 Jul 2026 03:40:52 +0000
Manifest next update:     Thu 30 Jul 2026 03:40:52 +0000
Files and hashes:         1: j3AW2iLylktW9Cz0bZ8SOvNoMas.crl (hash: 8Ma+sfB6w4V7PNqhNN+/PWgCNvVI1+W+SFamzXJ/vSo=)
                          2: 87695D32591811EE973B1058C4F9AE02.roa (hash: ntXVrABTYDs7hsbPUUZm6yiRHJzXaf9fF6++buw87GU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl
                          rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:40:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591 (0x24f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91884A1, serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB
        Validity
            Not Before: Jul 23 03:40:52 2026 GMT
            Not After : Jul 30 03:40:52 2026 GMT
        Subject: CN=6a618d44-74c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f2:82:20:42:23:64:54:06:9f:9a:c4:e0:05:
                    0e:79:3b:7f:9f:70:a6:83:19:46:b1:b0:5c:e4:f1:
                    00:9d:2a:f3:3d:34:a0:c5:f3:07:b1:e6:43:89:df:
                    bc:95:b4:bd:38:b1:e6:3f:03:2b:ef:da:39:67:25:
                    c2:e2:11:e3:69:2d:a3:89:28:0c:24:9b:e0:53:84:
                    27:3c:79:c0:b5:f7:bd:e9:a3:46:ac:2e:d1:96:26:
                    d2:2d:bf:b5:87:d4:8e:0d:2d:0d:55:3e:8d:69:aa:
                    75:49:88:8f:fa:20:48:e0:c8:3e:81:56:63:45:c1:
                    79:bf:9a:e7:09:cc:d0:df:3f:2b:50:74:41:4c:ea:
                    61:05:c7:93:56:80:aa:06:65:54:c6:4d:bc:5a:d7:
                    65:07:b0:63:12:09:b9:43:fb:8c:8e:48:d3:3a:aa:
                    fd:a9:25:bf:f5:05:cc:4e:fe:50:03:18:a6:77:84:
                    f5:06:4a:a9:3e:88:b4:6b:96:0d:1f:19:7f:b1:f5:
                    1b:81:db:e2:a8:6e:db:bf:b7:f3:89:b0:a4:b7:65:
                    98:5e:4b:be:99:cc:46:d8:b3:56:b5:4f:67:50:c3:
                    90:ed:99:73:1d:53:32:a5:82:ce:a8:e3:8a:7d:bd:
                    44:d0:1d:14:18:2c:47:f7:ee:04:24:18:60:0a:d5:
                    77:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:11:8D:63:94:1A:BB:27:22:A1:69:F1:35:0D:09:82:3A:9D:15:4E
            X509v3 Authority Key Identifier:
                keyid:8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:29:24:c6:69:1e:33:1c:8c:2d:91:ba:4f:87:24:89:9b:de:
         10:68:61:a0:e8:40:e3:df:97:a6:c6:6e:2f:ab:d9:de:57:80:
         d4:07:47:0b:5d:76:18:e1:4b:78:ae:81:d6:41:cd:6f:08:11:
         16:12:eb:c0:4a:fe:4e:24:42:c1:9a:d2:31:1b:de:87:8e:78:
         44:0d:04:a0:5d:ca:71:3f:d5:9c:6e:c7:cf:c0:8b:f2:03:26:
         1b:3a:47:f9:b1:67:78:0e:9e:96:5b:fe:d1:19:cf:15:5f:0c:
         da:2b:b2:62:4a:d7:f9:91:67:ed:4d:24:3f:c5:d0:38:48:f6:
         f1:4e:b0:89:1d:e1:0d:d7:c5:45:f5:61:d1:e8:2a:b3:99:ff:
         36:29:18:98:45:4f:84:74:31:e1:a8:51:21:a8:e9:a2:67:0e:
         bb:2f:ea:c1:97:36:f9:c8:c1:4a:3d:dd:53:7b:fd:38:52:fb:
         46:5d:72:8a:a7:99:bb:df:cf:f4:b0:f6:0a:63:2d:eb:34:9a:
         16:2a:4d:7a:04:04:0c:96:ab:0a:ae:cb:56:c7:73:78:13:d8:
         3f:50:d5:fa:40:0d:2d:a8:dc:2d:1d:00:3f:a6:47:0b:24:c0:
         70:f3:61:29:21:38:22:f5:33:07:fd:bd:79:37:de:97:bd:e4:
         65:dc:26:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODg0QTExMTAvBgNVBAUTKDhGNzAxNkRBMjJGMjk2NEI1NkY0MkNGNDZEOUYxMjNB
RjM2ODMxQUIwHhcNMjYwNzIzMDM0MDUyWhcNMjYwNzMwMDM0MDUyWjAYMRYwFAYD
VQQDEw02YTYxOGQ0NC03NGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3/KCIEIjZFQGn5rE4AUOeTt/n3CmgxlGsbBc5PEAnSrzPTSgxfMHseZDid+8
lbS9OLHmPwMr79o5ZyXC4hHjaS2jiSgMJJvgU4QnPHnAtfe96aNGrC7RlibSLb+1
h9SODS0NVT6Naap1SYiP+iBI4Mg+gVZjRcF5v5rnCczQ3z8rUHRBTOphBceTVoCq
BmVUxk28WtdlB7BjEgm5Q/uMjkjTOqr9qSW/9QXMTv5QAximd4T1BkqpPoi0a5YN
Hxl/sfUbgdviqG7bv7fzibCkt2WYXku+mcxG2LNWtU9nUMOQ7ZlzHVMypYLOqOOK
fb1E0B0UGCxH9+4EJBhgCtV3oQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEARjWOU
GrsnIqFp8TUNCYI6nRVOMB8GA1UdIwQYMBaAFI9wFtoi8pZLVvQs9G2fEjrzaDGr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODRBMS9EN0RCMUM2MDE0
OUUxMUVFQUJEQzc1MzJDNEY5QUUwMi9qM0FXMmlMeWxrdFc5Q3owYlo4U092Tm9N
YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ozQVcyaUx5bGt0VzlDejBiWjhTT3ZOb01hcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
ODRBMS9EN0RCMUM2MDE0OUUxMUVFQUJEQzc1MzJDNEY5QUUwMi9qM0FXMmlMeWxr
dFc5Q3owYlo4U092Tm9NYXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkCkkxmkeMxyMLZG6T4ckiZveEGhhoOhA49+XpsZuL6vZ3leA1AdHC112GOFL
eK6B1kHNbwgRFhLrwEr+TiRCwZrSMRveh454RA0EoF3KcT/VnG7Hz8CL8gMmGzpH
+bFneA6ellv+0RnPFV8M2iuyYkrX+ZFn7U0kP8XQOEj28U6wiR3hDdfFRfVh0egq
s5n/NikYmEVPhHQx4ahRIajpomcOuy/qwZc2+cjBSj3dU3v9OFL7Rl1yiqeZu9/P
9LD2CmMt6zSaFipNegQEDJarCq7LVsdzeBPYP1DV+kANLajcLR0AP6ZHCyTAcPNh
KSE4IvUzB/29eTfel73kZdwmUw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:08 2026 by rpki-client