Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft
File:                     51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft (raw, json)
Hash identifier:          npgGW0os9oQwhfzB9WY9Qfy/2+/CLKmJ5/bxUSSNv1c=
Subject key identifier:   31:C5:E6:41:2F:08:10:FB:36:ED:1A:BB:4F:15:15:75:F4:C0:08:E5
Authority key identifier: E7:58:4F:95:9A:08:1A:4D:D9:48:09:35:30:51:D2:35:93:9C:39:1D
Certificate issuer:       /CN=A91AB063/serialNumber=E7584F959A081A4DD94809353051D235939C391D
Certificate serial:       1C61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft
Manifest number:          1C52
Signing time:             Wed 22 Jul 2026 16:17:25 +0000
Manifest this update:     Wed 22 Jul 2026 16:17:25 +0000
Manifest next update:     Wed 29 Jul 2026 16:17:25 +0000
Files and hashes:         1: 51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl (hash: Uz5SIWmN/l7RUg21kow1eAI14X834JiWL9/ig4S6t8M=)
                          2: B6FD84CE54F611E79DF7E643C4F9AE02.roa (hash: 9ImJtWj6yuZgtcmv1bgeujWxq+BLLmLeGu5HgVdDTSg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl
                          rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:17:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7265 (0x1c61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB063, serialNumber=E7584F959A081A4DD94809353051D235939C391D
        Validity
            Not Before: Jul 22 16:17:25 2026 GMT
            Not After : Jul 29 16:17:25 2026 GMT
        Subject: CN=6a60ed15-3829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9b:69:00:2c:fb:e8:4b:ad:1a:1c:45:6e:ba:
                    58:c8:c9:47:e0:40:c1:42:cd:0b:c4:86:44:a7:6c:
                    2a:ea:5d:00:ba:de:33:c8:d9:d3:53:fc:97:64:2a:
                    8c:5a:1f:30:de:de:4d:6e:35:a4:c6:26:12:57:eb:
                    f5:5c:1e:d2:d0:6c:50:f2:6b:12:3e:7d:06:f3:de:
                    eb:16:e4:06:76:30:b6:a2:5c:08:94:f9:55:1d:87:
                    1f:a1:48:36:01:c8:0a:18:98:88:63:6d:76:ab:bf:
                    08:9f:15:3f:cc:b7:3e:1d:05:4f:1a:3b:2c:b3:a1:
                    36:4a:10:9b:da:86:15:33:6a:11:df:49:dd:80:33:
                    ce:7a:d6:12:75:ba:f2:63:8e:16:00:c6:93:0d:fd:
                    e0:ff:d8:b2:c3:d9:de:31:9c:26:bc:6e:e3:44:d9:
                    c5:60:61:88:52:49:45:f7:44:11:fc:7f:6e:48:a7:
                    07:7f:2f:16:79:2e:50:ce:54:d4:50:09:16:0a:5e:
                    9e:f5:39:10:bf:77:0c:b7:67:73:4b:4c:31:0e:8d:
                    4e:10:52:04:a3:be:71:90:b2:03:c7:c6:a1:25:33:
                    37:b1:2d:9b:82:3a:af:60:f1:23:88:91:01:d9:b5:
                    75:58:82:6f:f7:b9:9c:a2:87:3b:4b:66:ed:39:35:
                    86:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C5:E6:41:2F:08:10:FB:36:ED:1A:BB:4F:15:15:75:F4:C0:08:E5
            X509v3 Authority Key Identifier:
                keyid:E7:58:4F:95:9A:08:1A:4D:D9:48:09:35:30:51:D2:35:93:9C:39:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:53:ef:51:85:4e:ec:d6:c8:2e:1d:af:24:63:0d:e4:36:20:
         14:c5:88:f2:78:fc:6a:e6:01:aa:99:ad:2a:4b:5d:00:44:9b:
         f9:7b:77:2a:8f:72:3c:99:fb:35:9f:19:cb:9e:47:02:d2:9e:
         c4:af:e2:c3:9b:4b:f6:93:a2:e7:c3:94:8e:a4:ff:34:79:30:
         1c:ea:aa:24:9b:f8:e9:53:15:09:14:92:fe:fa:8c:e3:10:52:
         27:7c:3a:27:d5:37:de:8b:96:48:6c:08:d9:29:df:d7:f1:fd:
         9c:d6:25:f5:15:fc:3b:3f:32:7b:2a:68:1a:cb:38:85:77:04:
         c3:71:90:37:64:29:a4:96:cb:a9:ac:eb:eb:a9:db:a5:83:94:
         79:2f:2d:dc:6d:cf:d2:b4:fb:87:3e:6c:31:65:e6:10:6a:04:
         25:3b:95:d5:12:cc:63:db:2b:ee:51:08:88:66:aa:15:f3:12:
         36:d0:49:63:38:33:8e:69:73:7a:d7:f6:fb:4a:49:4c:f2:f4:
         7a:b8:98:7a:a7:f6:d5:15:74:c4:1e:12:ce:cf:45:28:ea:5a:
         1d:b8:8b:3e:9f:98:73:86:82:71:38:6d:a8:35:bc:3c:b9:02:
         17:09:b1:52:c1:c8:e6:e7:bc:4f:30:c8:dd:dd:20:02:72:67:
         b8:44:6f:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUIwNjMxMTAvBgNVBAUTKEU3NTg0Rjk1OUEwODFBNEREOTQ4MDkzNTMwNTFEMjM1
OTM5QzM5MUQwHhcNMjYwNzIyMTYxNzI1WhcNMjYwNzI5MTYxNzI1WjAYMRYwFAYD
VQQDEw02YTYwZWQxNS0zODI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs5tpACz76EutGhxFbrpYyMlH4EDBQs0LxIZEp2wq6l0Aut4zyNnTU/yXZCqM
Wh8w3t5NbjWkxiYSV+v1XB7S0GxQ8msSPn0G897rFuQGdjC2olwIlPlVHYcfoUg2
AcgKGJiIY212q78InxU/zLc+HQVPGjsss6E2ShCb2oYVM2oR30ndgDPOetYSdbry
Y44WAMaTDf3g/9iyw9neMZwmvG7jRNnFYGGIUklF90QR/H9uSKcHfy8WeS5QzlTU
UAkWCl6e9TkQv3cMt2dzS0wxDo1OEFIEo75xkLIDx8ahJTM3sS2bgjqvYPEjiJEB
2bV1WIJv97mcooc7S2btOTWGxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDHF5kEv
CBD7Nu0au08VFXX0wAjlMB8GA1UdIwQYMBaAFOdYT5WaCBpN2UgJNTBR0jWTnDkd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjA2My8xMTg2QjZCQzA5
M0ExMUU3OTU0MDk1MEJDNEY5QUUwMi81MWhQbFpvSUdrM1pTQWsxTUZIU05aT2NP
UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzUxaFBsWm9JR2szWlNBazFNRkhTTlpPY09SMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjA2My8xMTg2QjZCQzA5M0ExMUU3OTU0MDk1MEJDNEY5QUUwMi81MWhQbFpvSUdr
M1pTQWsxTUZIU05aT2NPUjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT1PvUYVO7NbILh2vJGMN5DYgFMWI8nj8auYBqpmtKktdAESb+Xt3Ko9yPJn7
NZ8Zy55HAtKexK/iw5tL9pOi58OUjqT/NHkwHOqqJJv46VMVCRSS/vqM4xBSJ3w6
J9U33ouWSGwI2Snf1/H9nNYl9RX8Oz8yeypoGss4hXcEw3GQN2QppJbLqazr66nb
pYOUeS8t3G3P0rT7hz5sMWXmEGoEJTuV1RLMY9sr7lEIiGaqFfMSNtBJYzgzjmlz
etf2+0pJTPL0eriYeqf21RV0xB4Szs9FKOpaHbiLPp+Yc4aCcThtqDW8PLkCFwmx
UsHI5ue8TzDI3d0gAnJnuERvuA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:48:09 2026 by rpki-client