Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft
File:                     kHuyYrVxYj40suIMYKcYwXOcw70.mft (raw, json)
Hash identifier:          s3fXBT05q/7OPimxYXIDII5DzTDpPDTovmBIB5xO4SY=
Subject key identifier:   E6:39:41:A2:09:A3:7A:FA:1C:6F:7A:AB:74:9B:8B:4C:19:C3:CB:9A
Authority key identifier: 90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD
Certificate issuer:       /CN=A91A3A64/serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD
Certificate serial:       0482
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft
Manifest number:          0479
Signing time:             Thu 23 Jul 2026 00:56:17 +0000
Manifest this update:     Thu 23 Jul 2026 00:56:16 +0000
Manifest next update:     Thu 30 Jul 2026 00:56:16 +0000
Files and hashes:         1: kHuyYrVxYj40suIMYKcYwXOcw70.crl (hash: Zz5/SMp0hs0ssj6flYdYIJsosg/JGxHVArtSK5A3kcs=)
                          2: 5B92665E9ADD11ECA5401423C4F9AE02.roa (hash: Nb29Wu1CDYoesjc8FMHKjysC8EpiLHTgbPxZYxl0RNM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.crl
                          rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1154 (0x482)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3A64, serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD
        Validity
            Not Before: Jul 23 00:56:16 2026 GMT
            Not After : Jul 30 00:56:16 2026 GMT
        Subject: CN=6a6166b0-412c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e5:ab:9e:cf:9e:b6:88:22:2b:3e:27:aa:f3:
                    f7:32:eb:eb:ad:10:26:b2:30:55:50:61:6e:3b:4e:
                    dd:a7:92:eb:2d:81:50:fd:7a:62:98:a6:c6:84:80:
                    5c:b9:ab:84:20:58:5c:46:a5:52:0d:75:43:e4:5d:
                    e9:74:eb:11:c5:83:ae:17:6b:b5:52:8d:27:d2:bd:
                    45:55:cc:d1:8e:90:29:a6:68:6c:e4:d3:c7:b9:b0:
                    8d:ad:dd:62:d1:b8:be:86:46:58:e1:a9:94:26:cd:
                    b3:43:63:0d:57:6c:24:f1:cb:25:60:62:0a:2a:dc:
                    3c:52:ff:67:86:b4:8f:9a:5d:60:89:53:e0:f3:7b:
                    1a:cc:d9:ce:fe:d8:91:3d:8d:dd:3f:fe:c4:bf:92:
                    02:99:e5:f7:88:8b:65:d0:73:84:54:44:fb:af:9b:
                    96:3c:6c:46:0b:5e:15:c0:de:ed:ea:21:f3:89:78:
                    fb:06:14:0e:11:ff:e4:9f:4d:b5:85:dc:8c:51:e3:
                    9d:cb:55:09:f1:24:cc:49:7e:83:94:ea:58:a6:24:
                    00:2b:ed:b7:55:94:12:83:89:64:f3:a5:e9:d8:42:
                    39:de:97:3c:08:27:0e:7e:cc:87:8f:3a:13:29:5f:
                    63:81:3c:10:1b:96:5a:b8:d4:92:88:5a:7a:d8:e1:
                    d2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:39:41:A2:09:A3:7A:FA:1C:6F:7A:AB:74:9B:8B:4C:19:C3:CB:9A
            X509v3 Authority Key Identifier:
                keyid:90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:3b:40:a3:5f:df:d8:cb:d7:cd:08:af:57:86:b3:43:21:1f:
         a9:50:84:b3:bc:fc:d6:b0:69:7b:42:4d:75:f6:75:71:8a:50:
         a2:fe:ed:d7:d3:b7:d0:3d:42:e7:7c:0a:28:6a:84:60:6c:68:
         ae:f6:aa:e9:22:09:fd:ea:a3:96:fd:ee:0b:d9:52:fc:30:ee:
         30:45:8e:69:5a:1f:9d:a7:fe:b0:12:45:1d:01:06:4e:3f:b9:
         a0:af:bd:b0:a4:de:8d:ad:13:20:34:ce:30:e7:0d:e9:7f:56:
         fe:b3:e9:50:31:9e:3f:ab:e3:8d:11:05:ed:99:57:14:f3:95:
         e1:c8:e4:1b:26:e3:7f:22:0f:07:ac:c1:5f:0c:35:5b:54:51:
         7e:8b:11:1d:28:51:6a:3e:82:93:5d:1e:39:a1:18:86:0e:de:
         15:3c:fb:73:54:c1:ec:3b:15:0f:a5:5d:ce:b4:b8:de:e7:d5:
         61:2b:f9:78:b0:ca:c7:6b:31:38:1c:b5:60:14:10:24:35:60:
         8a:ae:47:cd:82:b2:ba:cc:c8:cc:dc:a2:d9:4c:2a:e7:12:94:
         21:cb:b6:dc:9b:5e:dc:a7:2a:7e:70:9e:5b:e9:d9:65:ad:a5:
         83:51:3d:ad:c6:15:75:1d:bc:dd:43:9f:04:42:1d:34:f9:78:
         9c:4c:33:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTNBNjQxMTAvBgNVBAUTKDkwN0JCMjYyQjU3MTYyM0UzNEIyRTIwQzYwQTcxOEMx
NzM5Q0MzQkQwHhcNMjYwNzIzMDA1NjE2WhcNMjYwNzMwMDA1NjE2WjAYMRYwFAYD
VQQDEw02YTYxNjZiMC00MTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5OWrns+etogiKz4nqvP3MuvrrRAmsjBVUGFuO07dp5LrLYFQ/XpimKbGhIBc
uauEIFhcRqVSDXVD5F3pdOsRxYOuF2u1Uo0n0r1FVczRjpAppmhs5NPHubCNrd1i
0bi+hkZY4amUJs2zQ2MNV2wk8cslYGIKKtw8Uv9nhrSPml1giVPg83sazNnO/tiR
PY3dP/7Ev5ICmeX3iItl0HOEVET7r5uWPGxGC14VwN7t6iHziXj7BhQOEf/kn021
hdyMUeOdy1UJ8STMSX6DlOpYpiQAK+23VZQSg4lk86Xp2EI53pc8CCcOfsyHjzoT
KV9jgTwQG5ZauNSSiFp62OHSLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOY5QaIJ
o3r6HG96q3Sbi0wZw8uaMB8GA1UdIwQYMBaAFJB7smK1cWI+NLLiDGCnGMFznMO9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0E2NC8zNThDNjdCRTlB
REExMUVDODU3MTMzNzhDNEY5QUUwMi9rSHV5WXJWeFlqNDBzdUlNWUtjWXdYT2N3
NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tIdXlZclZ4WWo0MHN1SU1ZS2NZd1hPY3c3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
M0E2NC8zNThDNjdCRTlBREExMUVDODU3MTMzNzhDNEY5QUUwMi9rSHV5WXJWeFlq
NDBzdUlNWUtjWXdYT2N3NzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmDtAo1/f2MvXzQivV4azQyEfqVCEs7z81rBpe0JNdfZ1cYpQov7t19O30D1C
53wKKGqEYGxorvaq6SIJ/eqjlv3uC9lS/DDuMEWOaVofnaf+sBJFHQEGTj+5oK+9
sKTeja0TIDTOMOcN6X9W/rPpUDGeP6vjjREF7ZlXFPOV4cjkGybjfyIPB6zBXww1
W1RRfosRHShRaj6Ck10eOaEYhg7eFTz7c1TB7DsVD6VdzrS43ufVYSv5eLDKx2sx
OBy1YBQQJDVgiq5HzYKyuszIzNyi2Uwq5xKUIcu23Jte3KcqfnCeW+nZZa2lg1E9
rcYVdR283UOfBEIdNPl4nEwzIA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:56:47 2026 by rpki-client