Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
File:                     De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json)
Hash identifier:          Ycy4562kHfr2ZLAc2vobFJj2l7/a7gnXyNROkRfs8Us=
Subject key identifier:   A9:28:88:72:9E:00:24:29:64:EA:A2:4D:F2:FC:A4:40:93:8C:FE:AA
Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61
Certificate issuer:       /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561
Certificate serial:       141D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
Manifest number:          1402
Signing time:             Wed 22 Jul 2026 17:02:29 +0000
Manifest this update:     Wed 22 Jul 2026 17:02:28 +0000
Manifest next update:     Wed 29 Jul 2026 17:02:28 +0000
Files and hashes:         1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: Xl3ouxT7SzQtwk1xoJueYmGuiO+0XFPhQcSReCOPM1I=)
                          2: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: M2Is52Wa86uDs+DSqcpShPrDtjRDZ0zOUga6AJANsq8=)
                          3: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: BWEm8D7sFlvcEVtQhqLjMN5S3jhBuXaJAzjBNUqp7Bk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl
                          rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5149 (0x141d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1FA8, serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561
        Validity
            Not Before: Jul 22 17:02:28 2026 GMT
            Not After : Jul 29 17:02:28 2026 GMT
        Subject: CN=6a60f7a5-84c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c5:87:56:3d:e6:c3:99:0b:bb:56:11:cd:38:
                    60:06:cc:d8:ee:59:c6:e6:98:bf:dd:24:af:d4:54:
                    22:04:d2:1b:86:ad:8a:b8:1c:e6:47:10:24:8a:05:
                    7d:90:cc:5b:06:29:29:d3:ac:33:fc:ba:31:56:3c:
                    29:2c:82:d9:f7:7a:a8:a7:6e:4b:49:d1:02:b6:95:
                    e2:ef:a9:0d:20:4e:1a:c7:40:7e:6a:eb:a9:83:00:
                    a6:c8:84:e6:4d:d4:0b:49:71:09:9d:bf:e7:e0:dc:
                    f0:25:2d:d5:c1:c8:a1:d0:f0:1b:cc:11:3c:35:ef:
                    8c:74:51:93:47:e2:fd:15:56:19:39:4e:4d:f4:1f:
                    90:e1:d3:d2:10:fa:47:7f:3d:23:b6:ed:d2:33:75:
                    2c:89:91:0f:2d:d5:9e:40:f4:b2:b6:76:75:b1:ea:
                    a3:61:f1:26:f5:52:85:24:c7:3a:0c:05:43:22:3c:
                    6c:7c:fd:68:60:cd:70:f8:40:97:71:f8:fe:a9:b7:
                    b8:2c:e0:2b:58:d4:9b:5d:ae:37:1f:e7:c6:ea:37:
                    d9:9d:c7:80:80:c2:0a:0e:48:31:1e:58:c5:05:24:
                    3b:96:67:12:73:18:38:eb:15:e4:6b:f7:cc:da:7c:
                    6c:ac:a0:de:58:55:c3:ff:27:51:3e:b2:d6:6f:3c:
                    8e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:28:88:72:9E:00:24:29:64:EA:A2:4D:F2:FC:A4:40:93:8C:FE:AA
            X509v3 Authority Key Identifier:
                keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:44:2a:db:51:8d:07:76:8d:07:97:b3:40:c2:32:70:f4:77:
         a9:e4:14:ed:c0:97:1a:7b:14:40:23:ae:75:9e:7a:d9:81:71:
         3b:a3:55:0c:7a:9f:80:60:a8:11:13:be:ae:87:19:89:c0:75:
         c2:b1:60:5d:9b:a1:e3:7c:c5:cc:38:5e:ea:d5:7c:c6:82:ea:
         f8:56:07:99:09:87:b4:5e:cb:82:9f:10:58:8e:81:1c:99:9d:
         ae:21:df:79:58:3b:c4:57:04:b3:4a:89:f7:f0:a3:d4:83:be:
         96:7e:86:14:70:bf:05:1c:96:d8:07:5d:30:4d:42:be:6a:32:
         fc:85:70:be:a2:d8:6e:d8:be:1a:e0:ec:66:dd:e9:02:c9:1d:
         42:59:71:4c:25:82:b6:c5:be:1e:f1:d9:17:1d:81:bb:3c:b9:
         8d:b2:6e:af:24:9b:a1:92:a2:37:a3:35:aa:77:a5:ff:78:b1:
         f8:cd:f9:8d:20:4c:2a:6b:09:10:ab:40:c2:d7:b9:85:bc:59:
         56:37:3d:c8:97:cf:47:5e:8e:30:fb:e3:88:03:53:2e:7d:91:
         f9:b0:3f:a8:2d:9e:e4:9d:c3:fa:7a:9b:52:e1:34:e5:08:62:
         e1:72:f6:4d:69:d9:21:82:09:92:32:79:a1:4f:a8:ea:e2:38:
         56:9f:19:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjFGQTgxMTAvBgNVBAUTKDBERUVFRDEzNjIxNDNDMzYyRjI0Rjk3QzY3QzhFNEVD
RTJDN0E1NjEwHhcNMjYwNzIyMTcwMjI4WhcNMjYwNzI5MTcwMjI4WjAYMRYwFAYD
VQQDEw02YTYwZjdhNS04NGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtcWHVj3mw5kLu1YRzThgBszY7lnG5pi/3SSv1FQiBNIbhq2KuBzmRxAkigV9
kMxbBikp06wz/LoxVjwpLILZ93qop25LSdECtpXi76kNIE4ax0B+auupgwCmyITm
TdQLSXEJnb/n4NzwJS3Vwcih0PAbzBE8Ne+MdFGTR+L9FVYZOU5N9B+Q4dPSEPpH
fz0jtu3SM3UsiZEPLdWeQPSytnZ1seqjYfEm9VKFJMc6DAVDIjxsfP1oYM1w+ECX
cfj+qbe4LOArWNSbXa43H+fG6jfZnceAgMIKDkgxHljFBSQ7lmcScxg46xXka/fM
2nxsrKDeWFXD/ydRPrLWbzyOTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKkoiHKe
ACQpZOqiTfL8pECTjP6qMB8GA1UdIwQYMBaAFA3u7RNiFDw2LyT5fGfI5Ozix6Vh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9ERjQ3MDkwMkFG
RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBEWXZKUGw4WjhqazdPTEhw
V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0RlN3RFMklVUERZdkpQbDhaOGprN09MSHBXRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MUZBOC9ERjQ3MDkwMkFGRDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBE
WXZKUGw4WjhqazdPTEhwV0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAEQq21GNB3aNB5ezQMIycPR3qeQU7cCXGnsUQCOudZ562YFxO6NVDHqfgGCo
ERO+rocZicB1wrFgXZuh43zFzDhe6tV8xoLq+FYHmQmHtF7Lgp8QWI6BHJmdriHf
eVg7xFcEs0qJ9/Cj1IO+ln6GFHC/BRyW2AddME1Cvmoy/IVwvqLYbti+GuDsZt3p
AskdQllxTCWCtsW+HvHZFx2Buzy5jbJurySboZKiN6M1qnel/3ix+M35jSBMKmsJ
EKtAwte5hbxZVjc9yJfPR16OMPvjiANTLn2R+bA/qC2e5J3D+nqbUuE05Qhi4XL2
TWnZIYIJkjJ5oU+o6uI4Vp8Zgg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:08:08 2026 by rpki-client