Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
File:                     xHWJli7Q04kmIr5be4vu_ozniKc.mft (raw, json)
Hash identifier:          QW4LpJGOntpBCi30VNfxYkQm1LB/SL0cAU3YqzIJEso=
Subject key identifier:   34:04:C4:0C:17:35:50:F0:0F:F9:0F:C3:48:E5:9E:43:6C:70:2E:E2
Authority key identifier: C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
Certificate issuer:       /CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
Certificate serial:       01EC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
Manifest number:          01DD
Signing time:             Thu 23 Jul 2026 05:02:50 +0000
Manifest this update:     Thu 23 Jul 2026 05:02:49 +0000
Manifest next update:     Thu 30 Jul 2026 05:02:49 +0000
Files and hashes:         1: xHWJli7Q04kmIr5be4vu_ozniKc.crl (hash: roJZO0uKmii1FyvPRa5EkF8OirTYfH50TCYJUMlVLro=)
                          2: 8C7D223C2DAB11EF88127264C4F9AE02.roa (hash: X6aIaG1zQqgDiSqMFiuqRqeQ5WZkrDJTEHFLzyOj2LU=)
                          3: 4E2CAC386E8711EF8521ED6FC4F9AE02.roa (hash: eKVOlBNn+5WuwNFphnK/oDxQ3aByduRE2UhfBxYvHBw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl
                          rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A13A6, serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
        Validity
            Not Before: Jul 23 05:02:49 2026 GMT
            Not After : Jul 30 05:02:49 2026 GMT
        Subject: CN=6a61a07a-aba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bf:04:d3:e1:87:97:77:f2:34:22:75:5d:2a:
                    42:aa:ae:2f:bc:d9:98:ed:3d:ec:4f:a4:9e:13:42:
                    4d:32:c8:3e:47:b5:9c:2b:45:d8:7e:b3:e4:b9:88:
                    fc:9e:04:ed:81:0a:dc:57:10:84:6a:17:82:62:7f:
                    d2:4c:43:da:b2:4b:b9:4c:99:50:d7:0b:2b:b2:5a:
                    d3:37:90:9f:c1:0e:06:ce:60:94:8e:d7:e7:53:cf:
                    23:0d:10:8d:5e:87:f6:93:a2:aa:1e:e8:76:c9:ab:
                    04:48:b0:08:44:46:e4:69:50:87:ab:2b:63:30:9e:
                    95:f6:db:21:7f:80:ad:d1:42:a1:c2:e7:e3:cc:31:
                    69:19:d6:a3:e8:b4:1c:8d:c1:36:52:69:80:97:d7:
                    5e:dd:3f:44:00:d1:41:b8:38:79:02:39:af:b0:cf:
                    62:d5:7f:05:6f:d0:b8:ef:49:28:e1:95:38:2d:13:
                    b3:17:f6:78:7b:30:dd:b8:ea:af:4e:46:81:ef:79:
                    a1:08:e9:26:7c:59:24:ec:73:93:25:1a:8d:09:d6:
                    33:53:1c:57:33:2f:74:a3:15:c2:60:80:b0:fb:cb:
                    ce:0a:7d:fc:00:e0:bf:55:9e:3e:94:83:00:56:97:
                    db:9f:8f:c2:eb:72:e1:44:a3:70:94:1d:23:cd:11:
                    c6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:04:C4:0C:17:35:50:F0:0F:F9:0F:C3:48:E5:9E:43:6C:70:2E:E2
            X509v3 Authority Key Identifier:
                keyid:C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:cd:44:6c:0f:9c:69:32:23:54:09:72:3a:fe:48:32:9a:83:
         b3:91:e3:b2:d5:8d:a8:a3:31:1b:bf:f7:3b:7a:6f:2f:7f:0d:
         f0:b3:d7:ce:6d:34:7d:4a:3f:56:8a:c4:a8:4b:49:6d:27:98:
         19:50:63:6d:a2:0f:2b:71:ec:be:78:79:17:58:87:00:cd:14:
         df:e7:fb:98:00:7c:e8:12:53:71:f5:57:06:b8:c3:f8:0b:04:
         31:97:8c:8f:9c:57:b8:da:e4:8a:c2:a0:09:b7:78:87:73:19:
         15:5e:0e:dd:23:08:c7:7c:c9:37:e9:95:a1:15:50:3c:f8:56:
         da:fb:c6:59:77:70:a6:2d:ba:65:57:57:b5:6c:5e:54:5a:0b:
         a6:b8:8f:57:11:49:c8:79:51:0d:1d:75:f6:22:89:fc:1b:b0:
         40:5d:02:59:c2:b0:46:2e:e0:94:d1:f6:df:0a:ae:79:15:2c:
         4f:df:e7:8e:bf:80:b7:3c:ed:36:62:b5:18:2a:98:de:5c:71:
         90:84:59:8b:84:7b:f3:92:9d:01:dd:f3:2b:51:b8:64:95:4b:
         4d:39:05:78:9b:bd:35:77:98:71:63:7f:2f:58:39:62:1a:0f:
         36:f9:82:5a:41:28:70:f7:46:44:2c:43:c5:32:15:cd:a1:d9:
         83:55:13:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTEzQTYxMTAvBgNVBAUTKEM0NzU4OTk2MkVEMEQzODkyNjIyQkU1QjdCOEJFRUZF
OENFNzg4QTcwHhcNMjYwNzIzMDUwMjQ5WhcNMjYwNzMwMDUwMjQ5WjAYMRYwFAYD
VQQDEw02YTYxYTA3YS1hYmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAob8E0+GHl3fyNCJ1XSpCqq4vvNmY7T3sT6SeE0JNMsg+R7WcK0XYfrPkuYj8
ngTtgQrcVxCEaheCYn/STEPasku5TJlQ1wsrslrTN5CfwQ4GzmCUjtfnU88jDRCN
Xof2k6KqHuh2yasESLAIREbkaVCHqytjMJ6V9tshf4Ct0UKhwufjzDFpGdaj6LQc
jcE2UmmAl9de3T9EANFBuDh5AjmvsM9i1X8Fb9C470ko4ZU4LROzF/Z4ezDduOqv
TkaB73mhCOkmfFkk7HOTJRqNCdYzUxxXMy90oxXCYICw+8vOCn38AOC/VZ4+lIMA
Vpfbn4/C63LhRKNwlB0jzRHGsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDQExAwX
NVDwD/kPw0jlnkNscC7iMB8GA1UdIwQYMBaAFMR1iZYu0NOJJiK+W3uL7v6M54in
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTNBNi84MDc5NEM5QUMw
OEMxMUVFQkQ4MDVCMjRDNEY5QUUwMi94SFdKbGk3UTA0a21JcjViZTR2dV9vem5p
S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3hIV0psaTdRMDRrbUlyNWJlNHZ1X296bmlLYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTNBNi84MDc5NEM5QUMwOEMxMUVFQkQ4MDVCMjRDNEY5QUUwMi94SFdKbGk3UTA0
a21JcjViZTR2dV9vem5pS2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARc1EbA+caTIjVAlyOv5IMpqDs5HjstWNqKMxG7/3O3pvL38N8LPXzm00fUo/
VorEqEtJbSeYGVBjbaIPK3Hsvnh5F1iHAM0U3+f7mAB86BJTcfVXBrjD+AsEMZeM
j5xXuNrkisKgCbd4h3MZFV4O3SMIx3zJN+mVoRVQPPhW2vvGWXdwpi26ZVdXtWxe
VFoLpriPVxFJyHlRDR119iKJ/BuwQF0CWcKwRi7glNH23wqueRUsT9/njr+Atzzt
NmK1GCqY3lxxkIRZi4R785KdAd3zK1G4ZJVLTTkFeJu9NXeYcWN/L1g5YhoPNvmC
WkEocPdGRCxDxTIVzaHZg1UTCg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:35:08 2026 by rpki-client