Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft
File:                     L9JLb9eYBEVzVDhmYs4w3aOyALU.mft (raw, json)
Hash identifier:          3rpzRcl0RthruitRaxsXoym+1MAXuAxGEyBSO+7fw/E=
Subject key identifier:   9A:4F:4A:C3:19:17:7B:B5:3C:5C:FC:B7:BA:9E:66:A9:A1:B6:15:10
Authority key identifier: 2F:D2:4B:6F:D7:98:04:45:73:54:38:66:62:CE:30:DD:A3:B2:00:B5
Certificate issuer:       /CN=A91A29DA/serialNumber=2FD24B6FD79804457354386662CE30DDA3B200B5
Certificate serial:       01CC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft
Manifest number:          01C3
Signing time:             Thu 23 Jul 2026 05:15:01 +0000
Manifest this update:     Thu 23 Jul 2026 05:15:00 +0000
Manifest next update:     Thu 30 Jul 2026 05:15:00 +0000
Files and hashes:         1: L9JLb9eYBEVzVDhmYs4w3aOyALU.crl (hash: wKI+zX089IMQfJ0wIw79GHO/C50sxqh12FIqfqNX3ok=)
                          2: C659227E3D9611F1B3BD8648C4833773.roa (hash: URpwa68ICBHx7NH87HQVK1oNTdznNSwb1RkzR4QbR8U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.crl
                          rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460 (0x1cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A29DA, serialNumber=2FD24B6FD79804457354386662CE30DDA3B200B5
        Validity
            Not Before: Jul 23 05:15:00 2026 GMT
            Not After : Jul 30 05:15:00 2026 GMT
        Subject: CN=6a61a355-c3a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b3:55:36:e5:37:e6:c4:d3:7e:a9:3a:63:ef:
                    55:14:c0:55:d0:95:ec:18:28:fc:6a:d9:4b:e8:4e:
                    b2:ee:30:dc:3d:b5:8b:98:4b:43:66:49:7f:eb:8f:
                    d5:f5:39:e1:69:04:33:45:69:7a:6a:e9:cc:ee:30:
                    20:4c:49:a9:b9:de:9a:1c:81:f8:24:2d:39:31:60:
                    04:22:6a:aa:5d:49:83:8d:6e:3a:0d:9d:a4:89:7f:
                    1d:2d:39:a6:ae:bf:56:17:6b:04:6b:6c:01:76:df:
                    96:af:52:b6:34:c5:86:2e:3d:99:92:a5:e6:9c:9c:
                    ee:f0:02:7c:1f:a2:6f:26:60:72:12:ff:17:0d:3d:
                    55:e7:ff:73:58:11:a5:19:7e:9d:6c:cf:bd:33:4a:
                    97:d4:5c:8d:aa:fb:dc:2b:49:67:75:02:a9:6d:72:
                    f9:da:bb:ef:6f:ff:84:03:42:07:7b:af:87:68:8c:
                    6b:c1:3e:d8:9b:6c:1e:ee:54:bf:c5:77:fe:a5:3c:
                    d0:c6:89:1c:a6:6b:4a:d8:b4:7a:84:88:39:4c:b2:
                    24:39:19:ad:11:f8:96:df:eb:99:31:b9:1f:7e:99:
                    ae:f6:ce:a2:fb:1f:0e:22:99:67:1d:77:71:be:6c:
                    cc:f7:48:ec:9b:33:01:33:fd:81:a6:f3:6d:87:5f:
                    0c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4F:4A:C3:19:17:7B:B5:3C:5C:FC:B7:BA:9E:66:A9:A1:B6:15:10
            X509v3 Authority Key Identifier:
                keyid:2F:D2:4B:6F:D7:98:04:45:73:54:38:66:62:CE:30:DD:A3:B2:00:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:6e:5f:b5:b5:7b:e1:4d:4b:d0:e8:0b:3a:54:e4:d7:35:87:
         3a:8f:d8:b2:8c:7f:8e:3f:15:da:66:60:56:67:3d:0e:3c:c6:
         27:ff:9d:fb:03:8b:15:20:7d:30:cc:45:23:0b:d1:dd:4b:b1:
         23:0b:d3:2a:5c:bb:ce:8c:03:14:f6:09:ab:3f:7f:40:1c:6d:
         c2:01:be:a0:0a:51:3e:01:f1:bc:bb:3e:4d:89:e5:64:31:81:
         e1:6d:d9:16:11:d0:17:98:b8:0a:d1:4d:ac:74:b8:da:2c:99:
         cd:6f:ea:53:49:b4:ee:15:72:a5:e7:4d:11:4a:0c:f4:11:bf:
         be:51:d9:72:5e:cb:ae:fc:58:24:99:28:47:38:96:fa:27:85:
         ad:7c:0f:a6:57:02:e6:32:a6:71:14:2c:11:5d:15:ca:94:41:
         db:a9:f3:6b:13:7c:d9:2f:b3:b9:0f:c9:cd:55:a4:80:f2:82:
         eb:cb:46:b3:20:94:98:f5:91:70:cc:b6:08:8e:3d:4f:01:08:
         d7:79:16:fa:ab:c8:ec:49:04:84:5f:be:8d:49:31:85:5d:a4:
         9e:26:e0:58:84:27:12:80:15:9a:66:fa:05:b9:e3:b6:ed:de:
         51:73:54:96:b6:4a:00:e7:67:6d:c7:6e:a4:75:23:8f:4d:b6:
         9a:1a:0b:b0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTI5REExMTAvBgNVBAUTKDJGRDI0QjZGRDc5ODA0NDU3MzU0Mzg2NjYyQ0UzMERE
QTNCMjAwQjUwHhcNMjYwNzIzMDUxNTAwWhcNMjYwNzMwMDUxNTAwWjAYMRYwFAYD
VQQDEw02YTYxYTM1NS1jM2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyrNVNuU35sTTfqk6Y+9VFMBV0JXsGCj8atlL6E6y7jDcPbWLmEtDZkl/64/V
9TnhaQQzRWl6aunM7jAgTEmpud6aHIH4JC05MWAEImqqXUmDjW46DZ2kiX8dLTmm
rr9WF2sEa2wBdt+Wr1K2NMWGLj2ZkqXmnJzu8AJ8H6JvJmByEv8XDT1V5/9zWBGl
GX6dbM+9M0qX1FyNqvvcK0lndQKpbXL52rvvb/+EA0IHe6+HaIxrwT7Ym2we7lS/
xXf+pTzQxokcpmtK2LR6hIg5TLIkORmtEfiW3+uZMbkffpmu9s6i+x8OIplnHXdx
vmzM90jsmzMBM/2BpvNth18MHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJpPSsMZ
F3u1PFz8t7qeZqmhthUQMB8GA1UdIwQYMBaAFC/SS2/XmARFc1Q4ZmLOMN2jsgC1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjlEQS8zNEI1QjUxNERB
NTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9MOUpMYjllWUJFVnpWRGhtWXM0dzNhT3lB
TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0w5SkxiOWVZQkVWelZEaG1ZczR3M2FPeUFMVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MjlEQS8zNEI1QjUxNERBNTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9MOUpMYjllWUJF
VnpWRGhtWXM0dzNhT3lBTFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxG5ftbV74U1L0OgLOlTk1zWHOo/Ysox/jj8V2mZgVmc9DjzGJ/+d+wOLFSB9
MMxFIwvR3UuxIwvTKly7zowDFPYJqz9/QBxtwgG+oApRPgHxvLs+TYnlZDGB4W3Z
FhHQF5i4CtFNrHS42iyZzW/qU0m07hVypedNEUoM9BG/vlHZcl7LrvxYJJkoRziW
+ieFrXwPplcC5jKmcRQsEV0VypRB26nzaxN82S+zuQ/JzVWkgPKC68tGsyCUmPWR
cMy2CI49TwEI13kW+qvI7EkEhF++jUkxhV2knibgWIQnEoAVmmb6Bbnjtu3eUXNU
lrZKAOdnbcdupHUjj022mhoLsA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:43:52 2026 by rpki-client