Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft
File:                     0NDWzWh3DDh4O764QbES0FYBdKI.mft (raw, json)
Hash identifier:          VTbGNDoOPD2VCBoMAEjq/ty5SMM1NbXVOkITpLMo+uY=
Subject key identifier:   0B:23:E3:07:8F:CC:62:0E:81:02:55:F4:42:12:24:63:37:26:35:48
Authority key identifier: D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2
Certificate issuer:       /CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
Certificate serial:       097C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft
Manifest number:          0939
Signing time:             Wed 22 Jul 2026 20:43:58 +0000
Manifest this update:     Wed 22 Jul 2026 20:43:58 +0000
Manifest next update:     Wed 29 Jul 2026 20:43:58 +0000
Files and hashes:         1: 0NDWzWh3DDh4O764QbES0FYBdKI.crl (hash: JQ0UfckeMTBHXrIJONPidy/W16JsjpRyy+V2bzjCfhk=)
                          2: 4EF79184489411ED86987260C4F9AE02.roa (hash: FW+6trj4ky9MIx0ol9teJ9/ApDWDbFtG0371+JMzJmo=)
                          3: 530A6E26721711F1A345157A7BA30FBC.roa (hash: q5oiasmtw4zs+gP72ndK+9apIt6id57zzQstMwGY0i4=)
                          4: BD1D670AA9AE11F0BAAC4E40C4F9AE02.roa (hash: GzxogbU8QiwwF++aswC6YdHu3ZoZCEYz5G0xx5UJTJQ=)
                          5: 577FD5BE067C11ED882FC127C4F9AE02.roa (hash: oRxcNHxks0xSpQQ3xzQ2CValnLK9KvTZJVfHvaOGSxM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl
                          rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:43:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2428 (0x97c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91998BE, serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
        Validity
            Not Before: Jul 22 20:43:58 2026 GMT
            Not After : Jul 29 20:43:58 2026 GMT
        Subject: CN=6a612b8e-c278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:ed:19:c6:59:be:7e:44:e0:47:67:18:7d:
                    82:20:61:cd:93:46:4b:0c:df:49:d1:88:50:d7:83:
                    87:2d:76:d3:15:8c:b2:5d:99:38:d9:87:ae:97:50:
                    f5:ed:af:42:21:9b:d4:40:1b:2c:9e:97:fb:38:eb:
                    95:e1:38:6c:08:e9:64:5b:50:7c:47:37:5a:7d:ee:
                    32:35:7f:7f:e1:85:ec:9e:40:f7:d4:1a:c1:c1:5c:
                    d2:59:4c:ff:41:23:83:2c:6b:06:8b:f7:d8:7d:a3:
                    24:d3:e8:e8:79:08:17:59:69:a8:5b:04:88:ac:89:
                    73:cc:ad:92:52:0d:40:7d:6f:75:9d:ba:58:0e:e0:
                    24:51:10:fa:78:6d:bf:1c:00:d1:10:2d:97:16:b8:
                    a0:dc:35:41:22:94:a5:60:f4:5c:7b:bf:de:b0:81:
                    3c:86:51:f1:88:41:7c:50:2f:89:52:33:a4:82:d7:
                    b9:db:57:9d:d3:b2:e4:7a:3f:de:41:ae:2b:74:5f:
                    b7:17:fe:5d:e6:bd:22:89:81:8d:5e:59:87:79:93:
                    5c:00:60:17:7d:11:cb:8f:4b:84:a0:b7:41:7a:b0:
                    00:f9:99:fc:f9:32:59:76:f8:f6:71:73:9f:56:0c:
                    b6:ac:59:e2:78:9d:91:0a:06:09:2b:5e:80:d4:1e:
                    08:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:23:E3:07:8F:CC:62:0E:81:02:55:F4:42:12:24:63:37:26:35:48
            X509v3 Authority Key Identifier:
                keyid:D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:6a:89:f0:68:c4:47:ba:5b:2d:eb:e9:f0:86:55:b2:fe:84:
         de:e2:2d:06:8c:cb:9e:5f:0f:a0:f0:5f:8e:e2:35:46:70:c0:
         32:52:0e:f2:29:74:30:b4:40:b2:76:3d:f4:c1:d3:5c:83:4c:
         76:2e:fb:2d:32:d3:a8:75:e1:0d:d5:3e:65:8d:5b:59:68:da:
         b7:35:af:f2:01:7a:95:24:2f:7f:fd:06:21:37:4e:c8:82:b6:
         1b:62:6d:d7:ae:57:97:c3:44:c4:4d:3f:b1:15:cb:fc:c6:b6:
         19:ba:f5:7f:40:23:c6:86:15:3e:aa:1e:9e:d7:99:21:00:e1:
         ab:fc:5a:8c:ab:af:69:8e:ee:c6:75:67:c7:a0:24:a5:2c:89:
         05:08:44:19:08:54:09:23:c0:f4:71:2d:0d:3f:ba:91:61:cb:
         81:48:76:09:de:08:14:0b:4e:e7:85:92:77:2c:52:e7:30:65:
         16:0a:93:f7:ab:a6:5d:67:38:9a:0c:cf:46:e2:5a:8b:4d:e9:
         5d:04:4c:da:66:f9:dc:b0:73:1d:ac:2a:05:f3:1f:7a:5f:3f:
         0c:c5:12:1c:20:d0:d3:3f:e4:2d:48:62:ea:a5:41:7c:50:9f:
         0c:4a:34:09:20:a4:0b:4d:a8:dd:8e:de:1f:cb:13:be:86:21:
         b7:d2:24:a1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTk4QkUxMTAvBgNVBAUTKEQwRDBENkNENjg3NzBDMzg3ODNCQkVCODQxQjExMkQw
NTYwMTc0QTIwHhcNMjYwNzIyMjA0MzU4WhcNMjYwNzI5MjA0MzU4WjAYMRYwFAYD
VQQDEw02YTYxMmI4ZS1jMjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArvntGcZZvn5E4EdnGH2CIGHNk0ZLDN9J0YhQ14OHLXbTFYyyXZk42Yeul1D1
7a9CIZvUQBssnpf7OOuV4ThsCOlkW1B8Rzdafe4yNX9/4YXsnkD31BrBwVzSWUz/
QSODLGsGi/fYfaMk0+joeQgXWWmoWwSIrIlzzK2SUg1AfW91nbpYDuAkURD6eG2/
HADREC2XFrig3DVBIpSlYPRce7/esIE8hlHxiEF8UC+JUjOkgte521ed07Lkej/e
Qa4rdF+3F/5d5r0iiYGNXlmHeZNcAGAXfRHLj0uEoLdBerAA+Zn8+TJZdvj2cXOf
Vgy2rFnieJ2RCgYJK16A1B4IuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAsj4weP
zGIOgQJV9EISJGM3JjVIMB8GA1UdIwQYMBaAFNDQ1s1odww4eDu+uEGxEtBWAXSi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OThCRS8xNTBFNTdDNkNG
NDkxMUVBOUNDOTM1M0VDNEY5QUUwMi8wTkRXeldoM0REaDRPNzY0UWJFUzBGWUJk
S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBORFd6V2gzRERoNE83NjRRYkVTMEZZQmRLSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OThCRS8xNTBFNTdDNkNGNDkxMUVBOUNDOTM1M0VDNEY5QUUwMi8wTkRXeldoM0RE
aDRPNzY0UWJFUzBGWUJkS0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAa2qJ8GjER7pbLevp8IZVsv6E3uItBozLnl8PoPBfjuI1RnDAMlIO8il0MLRA
snY99MHTXINMdi77LTLTqHXhDdU+ZY1bWWjatzWv8gF6lSQvf/0GITdOyIK2G2Jt
165Xl8NExE0/sRXL/Ma2Gbr1f0AjxoYVPqoenteZIQDhq/xajKuvaY7uxnVnx6Ak
pSyJBQhEGQhUCSPA9HEtDT+6kWHLgUh2Cd4IFAtO54WSdyxS5zBlFgqT96umXWc4
mgzPRuJai03pXQRM2mb53LBzHawqBfMfel8/DMUSHCDQ0z/kLUhi6qVBfFCfDEo0
CSCkC02o3Y7eH8sTvoYht9IkoQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:04:10 2026 by rpki-client