Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
File:                     tAgYFca67ZihzJUKxvoQvGAFiQI.mft (raw, json)
Hash identifier:          I3x3TT7cmikuG65wfp5mLllQQTcTzXCI4/7VJsk4kxg=
Subject key identifier:   72:4D:E7:07:84:F8:6A:78:76:B5:5C:20:F6:E1:10:B0:B8:1E:AC:B5
Authority key identifier: B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02
Certificate issuer:       /CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
Certificate serial:       01C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
Manifest number:          01A9
Signing time:             Thu 23 Jul 2026 05:35:50 +0000
Manifest this update:     Thu 23 Jul 2026 05:35:50 +0000
Manifest next update:     Thu 30 Jul 2026 05:35:50 +0000
Files and hashes:         1: tAgYFca67ZihzJUKxvoQvGAFiQI.crl (hash: 0t3ZK35SzD9caXjXJs8oAc9d9oVAtytZrAvlKQ2mjF8=)
                          2: 052FFA76076211EFB14D3B12C4F9AE02.roa (hash: 5D/Ry/8ZP2E54WupdxSy/KsQmqjx8wwM6c9M/jH7pYs=)
                          3: C27BAE1E63B411EF9A87155DC4F9AE02.roa (hash: +2GaHe5cWbVmXD0EaHkbTYfFj1TTwinsmIfZx+qjcRc=)
                          4: 04B0D250076211EFB14D3B12C4F9AE02.roa (hash: SsVxQtDk/Oa1shqSFxMi2LpzccLXqJhR2Mhs5lXheR4=)
                          5: 03DAC9E4076211EFB14D3B12C4F9AE02.roa (hash: vRQ6HdkSj/Wf7+vduG5A9cFn7YJoyEBj6p0aYIaPJ/w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl
                          rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:35:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3F5D, serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
        Validity
            Not Before: Jul 23 05:35:50 2026 GMT
            Not After : Jul 30 05:35:50 2026 GMT
        Subject: CN=6a61a836-d21c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7e:86:dd:54:ac:3d:3e:8d:ed:d3:19:1f:d2:
                    fa:1d:6c:48:3c:43:0b:f1:97:ef:39:08:33:8c:f9:
                    27:04:02:71:0f:75:d1:9e:29:00:2c:bb:c4:6a:be:
                    71:16:3b:f1:96:1d:69:9e:7d:fe:ec:82:bd:04:f8:
                    40:2b:41:f8:f3:dc:05:ab:11:ff:46:36:83:9a:0b:
                    a1:cd:c4:a2:4a:f1:29:66:8d:9b:6b:3e:16:6e:a9:
                    0d:10:2a:7a:5b:9a:81:ed:cd:24:15:a3:75:f2:17:
                    6d:f9:a4:35:49:20:2e:e1:61:d4:1f:23:2b:81:d3:
                    5b:87:64:be:a2:be:75:fe:3a:78:1a:6a:37:f7:39:
                    56:ee:e3:c2:cc:95:2f:6a:ad:78:66:93:e1:de:e3:
                    6c:03:04:44:17:e4:cf:e9:2a:99:30:bd:63:80:7c:
                    d3:46:39:01:c1:92:4e:57:54:b0:9b:59:31:39:5e:
                    8d:b4:d0:15:03:b9:37:80:8d:a0:55:ed:d7:e9:2a:
                    f0:71:b7:13:76:85:a7:2d:0b:e9:60:07:37:db:4e:
                    c7:06:01:8f:33:1f:19:eb:42:52:3f:97:bf:0d:05:
                    23:61:dc:92:f9:de:de:42:5c:f5:23:83:03:e4:1b:
                    65:09:d8:86:08:8b:f3:9c:b1:0c:52:aa:90:ba:ed:
                    34:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4D:E7:07:84:F8:6A:78:76:B5:5C:20:F6:E1:10:B0:B8:1E:AC:B5
            X509v3 Authority Key Identifier:
                keyid:B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:5a:99:09:b9:53:50:73:3f:63:80:5e:47:37:47:0e:ec:0d:
         d5:be:b6:6d:b0:17:77:01:95:66:de:a3:c8:68:07:ee:60:3c:
         53:1f:3a:53:42:d0:13:ab:38:3f:22:4b:e6:58:86:9c:31:1f:
         d1:ea:5c:79:b8:47:4c:44:03:ec:b0:fa:53:82:4d:5d:2b:6b:
         aa:68:2c:52:61:fb:5a:75:48:4e:5e:1b:4a:3b:c4:f6:84:c9:
         c2:e5:60:a0:30:37:37:e3:aa:58:b3:81:16:1b:e5:88:87:3b:
         52:c5:21:8d:5a:b5:83:ce:65:08:05:78:85:a1:32:6e:27:f9:
         a1:3a:0f:1b:87:da:30:35:de:45:a7:a3:39:77:6a:f5:fb:b2:
         d7:d5:4f:44:ca:23:b1:39:8d:a7:de:72:9e:30:e9:8f:d4:f8:
         ff:ab:ef:79:7a:b0:e5:50:2c:2d:e0:60:d7:54:b2:dd:4d:ab:
         fa:6b:94:14:69:9f:79:94:1d:a2:fb:09:71:63:51:4a:8b:57:
         b6:29:df:53:e0:d0:95:60:e9:10:88:d0:6a:7b:b1:87:9c:9d:
         96:60:7f:1c:7f:3d:88:1d:c4:5d:1f:e8:61:8f:93:e0:5e:cd:
         5c:2a:09:44:df:55:f2:c3:c7:2a:27:44:0f:b9:23:ef:fc:84:
         d2:d3:fb:18
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTNGNUQxMTAvBgNVBAUTKEI0MDgxODE1QzZCQUVEOThBMUNDOTUwQUM2RkExMEJD
NjAwNTg5MDIwHhcNMjYwNzIzMDUzNTUwWhcNMjYwNzMwMDUzNTUwWjAYMRYwFAYD
VQQDEw02YTYxYTgzNi1kMjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlX6G3VSsPT6N7dMZH9L6HWxIPEML8ZfvOQgzjPknBAJxD3XRnikALLvEar5x
Fjvxlh1pnn3+7IK9BPhAK0H489wFqxH/RjaDmguhzcSiSvEpZo2baz4WbqkNECp6
W5qB7c0kFaN18hdt+aQ1SSAu4WHUHyMrgdNbh2S+or51/jp4Gmo39zlW7uPCzJUv
aq14ZpPh3uNsAwREF+TP6SqZML1jgHzTRjkBwZJOV1Swm1kxOV6NtNAVA7k3gI2g
Ve3X6SrwcbcTdoWnLQvpYAc3207HBgGPMx8Z60JSP5e/DQUjYdyS+d7eQlz1I4MD
5BtlCdiGCIvznLEMUqqQuu00oQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHJN5weE
+Gp4drVcIPbhELC4Hqy1MB8GA1UdIwQYMBaAFLQIGBXGuu2YocyVCsb6ELxgBYkC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0Y1RC8xMEY5NEVGMDA2
QUIxMUVGODdCRkE3MjVDNEY5QUUwMi90QWdZRmNhNjdaaWh6SlVLeHZvUXZHQUZp
UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RBZ1lGY2E2N1ppaHpKVUt4dm9RdkdBRmlRSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
M0Y1RC8xMEY5NEVGMDA2QUIxMUVGODdCRkE3MjVDNEY5QUUwMi90QWdZRmNhNjda
aWh6SlVLeHZvUXZHQUZpUUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHVqZCblTUHM/Y4BeRzdHDuwN1b62bbAXdwGVZt6jyGgH7mA8Ux86U0LQE6s4
PyJL5liGnDEf0epcebhHTEQD7LD6U4JNXStrqmgsUmH7WnVITl4bSjvE9oTJwuVg
oDA3N+OqWLOBFhvliIc7UsUhjVq1g85lCAV4haEybif5oToPG4faMDXeRaejOXdq
9fuy19VPRMojsTmNp95ynjDpj9T4/6vveXqw5VAsLeBg11Sy3U2r+muUFGmfeZQd
ovsJcWNRSotXtinfU+DQlWDpEIjQanuxh5ydlmB/HH89iB3EXR/oYY+T4F7NXCoJ
RN9V8sPHKidED7kj7/yE0tP7GA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:40:52 2026 by rpki-client