Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft
File:                     9oPyIkSMakhd2P7f4encdEIT-jw.mft (raw, json)
Hash identifier:          SIYcLd69x1y0YA5V+De9fYA/52ZKCIwLkCfcAGSOwkc=
Subject key identifier:   7F:E0:B8:20:2A:8D:33:16:6C:45:38:20:89:91:F7:86:91:4D:DD:4A
Authority key identifier: F6:83:F2:22:44:8C:6A:48:5D:D8:FE:DF:E1:E9:DC:74:42:13:FA:3C
Certificate issuer:       /CN=A91A2886/serialNumber=F683F222448C6A485DD8FEDFE1E9DC744213FA3C
Certificate serial:       61
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9oPyIkSMakhd2P7f4encdEIT-jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft
Manifest number:          57
Signing time:             Thu 23 Jul 2026 10:18:03 +0000
Manifest this update:     Thu 23 Jul 2026 10:18:03 +0000
Manifest next update:     Thu 30 Jul 2026 10:18:03 +0000
Files and hashes:         1: 9oPyIkSMakhd2P7f4encdEIT-jw.crl (hash: BdK9XeSEZjdXMWDYP5T8BJG1e1YvdIyBEwAcQQLC88k=)
                          2: 35037C3414DD11F1B12014D7123D8C67.roa (hash: j+SdwyC8ptJD+qecbYia9qa2SzHrIz3dLwQQE297jB4=)
                          3: 9541152014DD11F1B59CF9DA123D8C67.roa (hash: o6jXstt3oz0pLRapDBGquL+NWtwn1qFvviGsBZcW4hM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.crl
                          rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9oPyIkSMakhd2P7f4encdEIT-jw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:18:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2886, serialNumber=F683F222448C6A485DD8FEDFE1E9DC744213FA3C
        Validity
            Not Before: Jul 23 10:18:03 2026 GMT
            Not After : Jul 30 10:18:03 2026 GMT
        Subject: CN=6a61ea5b-671b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f4:9a:1a:ea:68:76:60:ba:a6:71:88:89:89:
                    77:68:ca:c1:8f:cf:a8:ae:74:bb:30:9a:b9:d3:e4:
                    24:df:e8:11:d2:15:c6:bc:66:48:6d:ba:ec:56:ad:
                    30:32:35:19:6e:54:90:ab:82:e3:53:0c:14:92:25:
                    e7:50:72:f4:7e:ce:d3:fe:61:e2:0d:4e:ec:ac:22:
                    1e:77:74:63:02:49:a0:03:73:6e:95:d4:79:00:d4:
                    d7:ab:89:42:4c:b6:33:3d:4f:cc:09:9f:a5:b7:02:
                    a3:1d:3d:9f:a1:25:47:2d:23:63:fb:6c:95:27:29:
                    df:14:4e:0e:0f:2b:14:23:f6:58:65:20:78:35:dc:
                    d5:a8:f5:dd:50:a3:9c:d9:e1:47:c3:72:fa:63:67:
                    fa:b9:1b:7f:34:cc:10:8c:e6:44:82:97:11:cf:17:
                    4a:d4:ed:63:1a:9c:7c:89:02:ba:c2:9e:62:75:51:
                    9a:bb:9e:3d:6f:e3:f0:c8:7e:3c:94:da:2d:03:dd:
                    a2:74:2b:28:40:5e:09:be:d0:d9:cc:53:8e:9e:12:
                    35:43:7c:54:88:38:0e:40:2d:23:91:52:89:87:e1:
                    56:0d:b8:2d:ba:19:8f:b8:95:89:d6:9a:88:2a:03:
                    09:71:9c:40:b8:9d:0d:ae:e1:e4:73:e9:33:fa:48:
                    fa:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E0:B8:20:2A:8D:33:16:6C:45:38:20:89:91:F7:86:91:4D:DD:4A
            X509v3 Authority Key Identifier:
                keyid:F6:83:F2:22:44:8C:6A:48:5D:D8:FE:DF:E1:E9:DC:74:42:13:FA:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9oPyIkSMakhd2P7f4encdEIT-jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:3b:8d:34:19:30:2c:41:f3:61:bb:96:70:c1:ce:32:67:e9:
         2f:82:04:60:18:84:c8:bb:2a:2c:4d:79:c8:6b:67:f1:31:60:
         dd:f5:db:d9:0d:84:b7:df:93:2d:e8:2e:36:56:4d:ff:32:d4:
         c1:c8:61:47:f4:82:7e:3e:60:40:6f:c6:e3:cc:97:45:55:99:
         fe:dd:14:71:7d:a2:04:a2:ee:dc:6a:1a:3c:3f:18:b6:89:a7:
         dd:e5:df:d6:5d:67:48:8c:f8:90:fb:06:58:6f:3e:ab:9b:4c:
         15:85:36:a2:ce:52:30:62:eb:e1:0c:52:bd:4c:37:11:ba:6e:
         19:7c:f9:8e:dd:5f:63:c4:f9:cd:a0:94:26:90:9a:83:b1:57:
         f6:1d:97:09:e7:ed:17:b3:d9:c1:4b:e8:29:a9:66:d8:e1:c2:
         33:cd:6c:0c:fc:0e:0c:6f:af:e9:6a:c9:f5:e0:99:6a:7f:f2:
         a0:cf:90:12:a8:fc:39:36:48:eb:59:21:50:13:15:e8:45:db:
         b0:00:c6:69:a0:ff:85:d9:07:fe:f5:c2:97:42:6a:6b:61:6a:
         30:5a:18:9a:22:4e:f7:ba:3e:9e:8b:3c:79:57:83:d0:9c:1a:
         db:54:b7:92:e3:70:1c:e7:a9:42:eb:7f:d9:0f:87:1a:e8:b0:
         79:32:d9:25
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
Mjg4NjExMC8GA1UEBRMoRjY4M0YyMjI0NDhDNkE0ODVERDhGRURGRTFFOURDNzQ0
MjEzRkEzQzAeFw0yNjA3MjMxMDE4MDNaFw0yNjA3MzAxMDE4MDNaMBgxFjAUBgNV
BAMTDTZhNjFlYTViLTY3MWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCm9Joa6mh2YLqmcYiJiXdoysGPz6iudLswmrnT5CTf6BHSFca8ZkhtuuxWrTAy
NRluVJCrguNTDBSSJedQcvR+ztP+YeINTuysIh53dGMCSaADc26V1HkA1NeriUJM
tjM9T8wJn6W3AqMdPZ+hJUctI2P7bJUnKd8UTg4PKxQj9lhlIHg13NWo9d1Qo5zZ
4UfDcvpjZ/q5G380zBCM5kSClxHPF0rU7WManHyJArrCnmJ1UZq7nj1v4/DIfjyU
2i0D3aJ0KyhAXgm+0NnMU46eEjVDfFSIOA5ALSORUomH4VYNuC26GY+4lYnWmogq
AwlxnEC4nQ2u4eRz6TP6SPpNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUf+C4ICqN
MxZsRTggiZH3hpFN3UowHwYDVR0jBBgwFoAU9oPyIkSMakhd2P7f4encdEIT+jww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyODg2Lzg2MzI4MDk4MTBB
MzExRjFCRTcyQjVBRjM5M0Q4QzY3LzlvUHlJa1NNYWtoZDJQN2Y0ZW5jZEVJVC1q
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvOW9QeUlrU01ha2hkMlA3ZjRlbmNkRUlULWp3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy
ODg2Lzg2MzI4MDk4MTBBMzExRjFCRTcyQjVBRjM5M0Q4QzY3LzlvUHlJa1NNYWto
ZDJQN2Y0ZW5jZEVJVC1qdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCEO400GTAsQfNhu5Zwwc4yZ+kvggRgGITIuyosTXnIa2fxMWDd9dvZDYS335Mt
6C42Vk3/MtTByGFH9IJ+PmBAb8bjzJdFVZn+3RRxfaIEou7caho8Pxi2iafd5d/W
XWdIjPiQ+wZYbz6rm0wVhTaizlIwYuvhDFK9TDcRum4ZfPmO3V9jxPnNoJQmkJqD
sVf2HZcJ5+0Xs9nBS+gpqWbY4cIzzWwM/A4Mb6/pasn14Jlqf/Kgz5ASqPw5Nkjr
WSFQExXoRduwAMZpoP+F2Qf+9cKXQmprYWowWhiaIk73uj6eizx5V4PQnBrbVLeS
43Ac56lC63/ZD4ca6LB5Mtkl
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:48:14 2026 by rpki-client