Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
File:                     0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft (raw, json)
Hash identifier:          hZzuMoR3SAv7XgUk5NBy1QthwYR80GP5fezaTOubCh0=
Subject key identifier:   4A:43:8B:80:AC:40:72:10:0A:FA:F3:09:3A:80:BC:02:0D:6B:CF:F9
Authority key identifier: D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4
Certificate issuer:       /CN=A91AE08E/serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4
Certificate serial:       0972
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
Manifest number:          0965
Signing time:             Wed 22 Jul 2026 20:33:19 +0000
Manifest this update:     Wed 22 Jul 2026 20:33:19 +0000
Manifest next update:     Wed 29 Jul 2026 20:33:19 +0000
Files and hashes:         1: 0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl (hash: RToVUVvNmW6vaR6PGgefGiaeqNs7nPsdKDWewRw1K4c=)
                          2: 6E038820BF6211EA94C2957CC4F9AE02.roa (hash: zpylNEe89CbqVMFt1Qej/SgQec1Qy8+/AmkFsaHZ4JI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2418 (0x972)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE08E, serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4
        Validity
            Not Before: Jul 22 20:33:19 2026 GMT
            Not After : Jul 29 20:33:19 2026 GMT
        Subject: CN=6a61290f-9c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:81:ad:55:23:15:7b:51:32:48:06:73:1c:db:
                    90:24:e2:52:b0:1e:01:56:76:05:fe:97:86:6c:4f:
                    4b:8d:e1:06:67:f1:70:7b:56:fe:a9:44:76:04:8c:
                    82:69:b0:78:96:ae:33:a5:a1:19:66:59:53:2b:a8:
                    83:cd:89:96:01:ed:ce:6f:73:f9:68:64:18:55:12:
                    1c:04:7b:01:12:6d:b9:f0:ea:03:97:ec:9b:55:d7:
                    ab:5d:13:e0:6a:57:b6:c5:2e:83:59:26:f4:b2:a2:
                    65:75:4a:36:34:da:cd:b2:1c:1a:34:8e:39:46:10:
                    8b:91:63:6a:47:eb:bf:eb:f6:d8:d4:64:e9:dd:6d:
                    72:4b:6a:15:e4:ec:15:56:4c:af:09:75:1e:8a:e5:
                    1f:58:fd:24:ee:00:5c:50:b7:0c:be:87:a9:e2:92:
                    db:14:15:7d:c8:e3:95:b7:01:0e:59:cc:b3:8f:67:
                    c8:ec:d8:78:c0:e3:57:98:76:6c:c9:3f:7d:37:1e:
                    5e:71:97:49:bc:10:04:2f:93:c5:8e:9b:61:c6:3d:
                    97:d9:81:8e:cd:7a:0f:63:4f:be:d8:d1:55:01:8d:
                    aa:07:a5:c6:92:8e:81:e4:c4:7c:20:7f:20:c8:67:
                    ae:29:46:cf:e6:e9:e7:47:46:f5:6c:00:41:0d:3e:
                    5a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:43:8B:80:AC:40:72:10:0A:FA:F3:09:3A:80:BC:02:0D:6B:CF:F9
            X509v3 Authority Key Identifier:
                keyid:D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:64:f7:21:58:a4:73:c4:b1:c7:c0:b6:f2:b9:74:67:38:9e:
         80:c9:dc:5f:c8:0b:85:8c:9d:d9:3c:8d:c1:37:2e:21:ad:74:
         fb:70:6b:60:3e:0f:29:f4:a7:bf:a1:35:64:d2:f0:52:53:f4:
         b0:41:4a:90:7f:61:53:43:0d:80:84:2f:9b:dc:20:59:5a:35:
         e1:7d:31:37:1a:c1:f5:cb:ec:dc:f4:d7:c7:44:f3:77:5e:82:
         08:55:ed:f9:54:db:86:37:09:ed:76:2d:7a:3e:6e:77:04:b0:
         e1:b0:e0:cf:61:2a:8b:20:0f:1d:2c:4a:54:02:73:09:0e:df:
         77:41:9c:a3:67:61:6c:16:33:ed:0a:49:1a:20:c6:df:08:bb:
         92:f3:2d:b9:8f:4b:6d:0a:b2:f0:7a:e5:60:a5:b6:05:23:0e:
         4e:72:7a:b7:e6:73:d5:21:65:28:0c:e8:21:cf:81:4f:84:03:
         29:1c:b2:38:59:38:aa:67:d5:7f:c7:7d:26:f0:3d:9d:3e:ac:
         28:f3:60:8b:e1:8c:43:b3:85:68:c3:18:f4:ec:5d:e3:99:1b:
         55:0b:c7:2d:9b:db:c3:62:39:df:6c:82:d5:cc:3c:08:02:77:
         50:4f:77:33:98:fd:df:13:d2:50:9f:21:f8:b8:81:34:9b:91:
         61:19:32:23
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUUwOEUxMTAvBgNVBAUTKEQyOTBERDE2NzIyMkMzOUIxMzRGODFFNTI3RjAyMkQ4
NUVERjIzRjQwHhcNMjYwNzIyMjAzMzE5WhcNMjYwNzI5MjAzMzE5WjAYMRYwFAYD
VQQDEw02YTYxMjkwZi05YzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvoGtVSMVe1EySAZzHNuQJOJSsB4BVnYF/peGbE9LjeEGZ/Fwe1b+qUR2BIyC
abB4lq4zpaEZZllTK6iDzYmWAe3Ob3P5aGQYVRIcBHsBEm258OoDl+ybVderXRPg
ale2xS6DWSb0sqJldUo2NNrNshwaNI45RhCLkWNqR+u/6/bY1GTp3W1yS2oV5OwV
VkyvCXUeiuUfWP0k7gBcULcMvoep4pLbFBV9yOOVtwEOWcyzj2fI7Nh4wONXmHZs
yT99Nx5ecZdJvBAEL5PFjpthxj2X2YGOzXoPY0++2NFVAY2qB6XGko6B5MR8IH8g
yGeuKUbP5unnR0b1bABBDT5a2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEpDi4Cs
QHIQCvrzCTqAvAINa8/5MB8GA1UdIwQYMBaAFNKQ3RZyIsObE0+B5SfwIthe3yP0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTA4RS9CMkEzQzIzQ0JG
NEExMUVBOEMzMTVEMzFDNEY5QUUwMi8wcERkRm5JaXc1c1RUNEhsSl9BaTJGN2ZJ
X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBwRGRGbklpdzVzVFQ0SGxKX0FpMkY3ZklfUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RTA4RS9CMkEzQzIzQ0JGNEExMUVBOEMzMTVEMzFDNEY5QUUwMi8wcERkRm5JaXc1
c1RUNEhsSl9BaTJGN2ZJX1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjGT3IVikc8Sxx8C28rl0ZziegMncX8gLhYyd2TyNwTcuIa10+3BrYD4PKfSn
v6E1ZNLwUlP0sEFKkH9hU0MNgIQvm9wgWVo14X0xNxrB9cvs3PTXx0Tzd16CCFXt
+VTbhjcJ7XYtej5udwSw4bDgz2EqiyAPHSxKVAJzCQ7fd0Gco2dhbBYz7QpJGiDG
3wi7kvMtuY9LbQqy8HrlYKW2BSMOTnJ6t+Zz1SFlKAzoIc+BT4QDKRyyOFk4qmfV
f8d9JvA9nT6sKPNgi+GMQ7OFaMMY9Oxd45kbVQvHLZvbw2I532yC1cw8CAJ3UE93
M5j93xPSUJ8h+LiBNJuRYRkyIw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:44:35 2026 by rpki-client