Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft
File:                     ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft (raw, json)
Hash identifier:          H+/Tf+6KiH2hPjYMXqvbJimR3UxH1BBo7iVcPuVmA4k=
Subject key identifier:   44:B6:E8:A3:29:68:CB:9B:EF:37:A3:3A:31:E4:20:B8:44:C8:B5:75
Authority key identifier: 6B:22:F9:07:91:05:A4:DE:BC:B0:9C:C1:B9:00:96:08:5C:66:2D:44
Certificate issuer:       /CN=A91A6ABE/serialNumber=6B22F9079105A4DEBCB09CC1B90096085C662D44
Certificate serial:       B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft
Manifest number:          B5
Signing time:             Thu 23 Jul 2026 08:56:25 +0000
Manifest this update:     Thu 23 Jul 2026 08:56:25 +0000
Manifest next update:     Thu 30 Jul 2026 08:56:25 +0000
Files and hashes:         1: ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl (hash: 0ZzjpuB5TzyXPwyaFkkaHvUUh3S/HHHWu1yhRkfay9Y=)
                          2: EADAF6B2743E11F0ABAB020EC4F9AE02.roa (hash: mhTd4sXqZQkM0yZzJxLZu/7dsOvN9ird2NK8A1L8tLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6ABE, serialNumber=6B22F9079105A4DEBCB09CC1B90096085C662D44
        Validity
            Not Before: Jul 23 08:56:25 2026 GMT
            Not After : Jul 30 08:56:25 2026 GMT
        Subject: CN=6a61d739-f71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d5:e2:b6:11:0c:f8:2f:58:7c:b3:47:bd:fe:
                    49:54:fb:74:81:52:e1:b6:0c:d4:a0:d4:d4:81:eb:
                    d4:8a:be:3c:df:83:10:4d:28:94:f4:ff:fa:28:07:
                    65:0d:17:54:f0:7d:7d:11:47:03:62:6c:29:04:84:
                    64:22:a7:80:52:0e:0f:b8:23:46:1d:0a:6c:6d:a6:
                    95:33:13:c0:3a:73:4a:b4:c7:97:e8:a4:ff:06:b2:
                    19:73:c2:81:8f:c3:2f:33:df:ad:b5:7c:12:97:1d:
                    81:c8:22:d2:1a:a2:20:c9:c9:a3:26:47:05:d9:db:
                    f7:48:b6:61:6f:9f:99:df:d1:eb:92:b4:60:88:6b:
                    30:3b:be:6d:29:cb:27:16:ce:8a:a6:cd:f3:2c:33:
                    96:7c:d3:71:1a:bd:1d:01:b2:f4:31:7c:b2:ce:44:
                    0d:7a:b9:fc:35:04:67:f0:cb:04:92:18:ad:9e:be:
                    ff:64:28:e5:b4:55:93:cd:e9:89:b1:79:54:a2:79:
                    97:06:0f:65:0a:8f:75:2b:65:e0:1f:4d:80:8a:f2:
                    74:4c:5b:f0:77:55:ea:b7:33:a8:f4:32:95:37:6d:
                    49:fe:74:35:e0:8c:69:47:69:9f:25:a5:3b:bb:53:
                    53:d5:7f:aa:ee:75:93:3f:fa:3e:11:dd:8c:f8:a0:
                    79:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B6:E8:A3:29:68:CB:9B:EF:37:A3:3A:31:E4:20:B8:44:C8:B5:75
            X509v3 Authority Key Identifier:
                keyid:6B:22:F9:07:91:05:A4:DE:BC:B0:9C:C1:B9:00:96:08:5C:66:2D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:3b:17:fa:81:f7:ae:0e:4a:8c:d2:eb:e9:e0:54:be:c1:e3:
         95:4f:bc:fd:d2:b9:47:8e:c4:6b:55:f5:ca:09:6a:20:bb:cf:
         82:f9:28:51:9b:94:e4:54:6a:98:b2:bd:f4:e1:9e:e1:2c:14:
         7f:8d:72:47:c8:11:55:b0:43:06:99:f8:ef:7f:16:30:11:34:
         8b:85:d6:6c:86:db:c1:83:f4:71:e6:38:ec:b9:85:8c:be:f6:
         30:69:84:11:e9:cd:c4:64:02:95:2a:0f:82:94:67:b8:2c:23:
         f6:9b:b1:71:3e:ac:53:e6:7f:41:8b:d7:36:af:26:90:19:01:
         8c:fb:66:17:d3:97:bd:5c:ac:7c:fb:1b:db:54:b2:55:c5:21:
         35:4a:78:67:c3:b8:48:f6:aa:de:26:6f:a5:d3:d3:bf:67:d0:
         70:63:86:17:53:e5:1e:58:66:16:bd:f5:1d:19:41:38:98:7d:
         d6:a5:dc:8e:e3:2c:ae:5e:96:c7:3b:2e:7a:ad:59:2a:65:b7:
         d9:5c:af:d1:f3:18:32:bb:93:91:2e:75:88:b5:39:39:48:84:
         fa:b6:12:a5:c9:d2:14:5a:f1:11:76:93:9a:97:c4:ba:84:2a:
         20:c6:4d:e0:78:7e:2e:bc:7d:1a:84:ac:ab:c8:fa:bd:b0:38:
         21:cb:56:ca
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTZBQkUxMTAvBgNVBAUTKDZCMjJGOTA3OTEwNUE0REVCQ0IwOUNDMUI5MDA5NjA4
NUM2NjJENDQwHhcNMjYwNzIzMDg1NjI1WhcNMjYwNzMwMDg1NjI1WjAYMRYwFAYD
VQQDEw02YTYxZDczOS1mNzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzNXithEM+C9YfLNHvf5JVPt0gVLhtgzUoNTUgevUir4834MQTSiU9P/6KAdl
DRdU8H19EUcDYmwpBIRkIqeAUg4PuCNGHQpsbaaVMxPAOnNKtMeX6KT/BrIZc8KB
j8MvM9+ttXwSlx2ByCLSGqIgycmjJkcF2dv3SLZhb5+Z39HrkrRgiGswO75tKcsn
Fs6Kps3zLDOWfNNxGr0dAbL0MXyyzkQNern8NQRn8MsEkhitnr7/ZCjltFWTzemJ
sXlUonmXBg9lCo91K2XgH02AivJ0TFvwd1XqtzOo9DKVN21J/nQ14IxpR2mfJaU7
u1NT1X+q7nWTP/o+Ed2M+KB5AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFES26KMp
aMub7zejOjHkILhEyLV1MB8GA1UdIwQYMBaAFGsi+QeRBaTevLCcwbkAlghcZi1E
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkFCRS8xNUY1QzEwQzc0
M0UxMUYwOTRBN0JGMDlDNEY5QUUwMi9heUw1QjVFRnBONjhzSnpCdVFDV0NGeG1M
VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2F5TDVCNUVGcE42OHNKekJ1UUNXQ0Z4bUxVUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NkFCRS8xNUY1QzEwQzc0M0UxMUYwOTRBN0JGMDlDNEY5QUUwMi9heUw1QjVFRnBO
NjhzSnpCdVFDV0NGeG1MVVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArjsX+oH3rg5KjNLr6eBUvsHjlU+8/dK5R47Ea1X1yglqILvPgvkoUZuU5FRq
mLK99OGe4SwUf41yR8gRVbBDBpn4738WMBE0i4XWbIbbwYP0ceY47LmFjL72MGmE
EenNxGQClSoPgpRnuCwj9puxcT6sU+Z/QYvXNq8mkBkBjPtmF9OXvVysfPsb21Sy
VcUhNUp4Z8O4SPaq3iZvpdPTv2fQcGOGF1PlHlhmFr31HRlBOJh91qXcjuMsrl6W
xzsueq1ZKmW32Vyv0fMYMruTkS51iLU5OUiE+rYSpcnSFFrxEXaTmpfEuoQqIMZN
4Hh+Lrx9GoSsq8j6vbA4IctWyg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:50:58 2026 by rpki-client