Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft
File:                     23LIuvHa9pOYGFLuAyIwMF7ICRA.mft (raw, json)
Hash identifier:          UMXgT1Kvrf+LUZF8Ylacj3VCwPv7XLAEXTMgFK+y0K8=
Subject key identifier:   92:33:A2:D8:AC:2E:AE:CC:F0:A9:5C:F2:02:EB:8C:7D:4B:9D:18:91
Authority key identifier: DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10
Certificate issuer:       /CN=A91B289C/serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910
Certificate serial:       0979
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft
Manifest number:          096F
Signing time:             Wed 22 Jul 2026 20:31:58 +0000
Manifest this update:     Wed 22 Jul 2026 20:31:57 +0000
Manifest next update:     Wed 29 Jul 2026 20:31:57 +0000
Files and hashes:         1: 23LIuvHa9pOYGFLuAyIwMF7ICRA.crl (hash: 8/OFazQH8AqCtZBaCDdB/EwWKbZ38IvOjC7mcXTh0HM=)
                          2: E6F3687CBCE711EAACD6466CC4F9AE02.roa (hash: /BHXZw097Vnx6svspg9H0QFXzJ+pPqoQmyYjSxe8qDA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl
                          rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2425 (0x979)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B289C, serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910
        Validity
            Not Before: Jul 22 20:31:57 2026 GMT
            Not After : Jul 29 20:31:57 2026 GMT
        Subject: CN=6a6128be-bf6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:41:9b:d6:f0:a7:ae:cb:4e:da:7b:f1:6f:3a:
                    80:9b:8f:a4:40:7e:b2:7c:4d:05:a5:e0:12:5c:55:
                    aa:16:65:ce:36:29:ea:be:81:88:f3:1d:2c:f7:d9:
                    3c:7e:5f:aa:40:5a:b3:bf:bc:f1:e5:28:89:f3:06:
                    8b:ae:5e:78:56:78:f8:d6:8b:5c:5d:c7:01:83:12:
                    80:cd:e6:ec:01:35:83:a1:90:30:15:3c:e9:96:ee:
                    e5:80:7a:d5:3d:1a:64:db:85:43:9f:30:70:08:7d:
                    73:0e:1e:4d:cb:5a:69:db:0b:6d:f7:9a:41:2b:ba:
                    21:f9:7e:4c:3d:72:7f:d7:62:b9:ac:51:25:9d:40:
                    93:53:c0:7d:17:ad:20:76:7b:6f:6b:76:1e:c2:67:
                    34:b7:18:fa:5a:3c:ee:6a:d5:3e:d5:fe:90:36:3d:
                    d9:39:68:b6:a5:ff:f8:27:8e:03:29:d8:3d:e1:84:
                    54:b9:70:e3:cd:69:82:28:ff:ae:29:14:28:ea:ce:
                    ee:b1:f5:ac:5d:3a:96:16:7f:8c:d7:bd:9c:65:28:
                    d8:6b:a8:c7:87:d8:ef:0c:4b:6d:a6:da:0d:b5:e0:
                    09:43:b2:61:4f:3a:c2:49:9c:17:02:c0:10:69:b5:
                    9c:56:4f:05:a9:41:05:fc:a2:b8:f6:6b:eb:2e:58:
                    bd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:33:A2:D8:AC:2E:AE:CC:F0:A9:5C:F2:02:EB:8C:7D:4B:9D:18:91
            X509v3 Authority Key Identifier:
                keyid:DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0f:3a:28:0b:27:2b:3f:d4:98:e2:a9:c5:a6:f3:67:ae:99:
         50:8f:6b:71:49:89:7e:27:55:50:51:2d:00:cb:09:aa:b3:a3:
         95:d7:f9:e0:bb:1c:e7:05:ed:60:1a:67:5c:fc:7f:d8:cd:d1:
         e3:30:90:03:cd:55:b2:39:7f:76:38:68:62:d2:b1:10:60:67:
         26:4b:40:c1:bb:c1:19:34:10:af:c5:9e:22:2c:7a:aa:e5:fc:
         9e:b1:7e:e2:fe:46:1f:e2:5a:98:5a:08:9e:bf:b3:a4:64:ba:
         26:aa:b4:83:72:30:7f:51:89:24:7a:97:0a:b2:83:af:44:29:
         f1:66:26:b2:93:49:74:9e:de:3c:90:36:9b:94:f0:8e:99:1c:
         56:69:38:54:de:ae:62:4e:f2:9d:ae:be:d5:91:e6:7a:26:17:
         c7:d5:52:a7:f2:be:83:af:a4:ae:56:1c:81:41:d7:dc:1b:81:
         2b:ce:0c:29:0c:2e:19:e9:75:10:30:25:2b:c6:4c:4a:82:f6:
         58:de:17:e6:f5:1d:4c:61:3a:ff:ac:e2:09:9f:52:9d:a4:ac:
         b7:a0:d5:41:74:23:97:15:19:c4:5b:6a:e1:0e:54:46:38:a9:
         05:fc:a4:59:a4:be:11:d0:6e:a2:f3:c6:cb:c4:e8:af:d3:cd:
         5f:fa:d4:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjI4OUMxMTAvBgNVBAUTKERCNzJDOEJBRjFEQUY2OTM5ODE4NTJFRTAzMjIzMDMw
NUVDODA5MTAwHhcNMjYwNzIyMjAzMTU3WhcNMjYwNzI5MjAzMTU3WjAYMRYwFAYD
VQQDEw02YTYxMjhiZS1iZjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtEGb1vCnrstO2nvxbzqAm4+kQH6yfE0FpeASXFWqFmXONinqvoGI8x0s99k8
fl+qQFqzv7zx5SiJ8waLrl54Vnj41otcXccBgxKAzebsATWDoZAwFTzplu7lgHrV
PRpk24VDnzBwCH1zDh5Ny1pp2wtt95pBK7oh+X5MPXJ/12K5rFElnUCTU8B9F60g
dntva3Yewmc0txj6WjzuatU+1f6QNj3ZOWi2pf/4J44DKdg94YRUuXDjzWmCKP+u
KRQo6s7usfWsXTqWFn+M172cZSjYa6jHh9jvDEttptoNteAJQ7JhTzrCSZwXAsAQ
abWcVk8FqUEF/KK49mvrLli9VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJIzotis
Lq7M8Klc8gLrjH1LnRiRMB8GA1UdIwQYMBaAFNtyyLrx2vaTmBhS7gMiMDBeyAkQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjg5Qy8zQUIxRTJEQ0JD
RTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlwT1lHRkx1QXlJd01GN0lD
UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzIzTEl1dkhhOXBPWUdGTHVBeUl3TUY3SUNSQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Mjg5Qy8zQUIxRTJEQ0JDRTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlw
T1lHRkx1QXlJd01GN0lDUkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADQ86KAsnKz/UmOKpxabzZ66ZUI9rcUmJfidVUFEtAMsJqrOjldf54Lsc5wXt
YBpnXPx/2M3R4zCQA81Vsjl/djhoYtKxEGBnJktAwbvBGTQQr8WeIix6quX8nrF+
4v5GH+JamFoInr+zpGS6Jqq0g3Iwf1GJJHqXCrKDr0Qp8WYmspNJdJ7ePJA2m5Tw
jpkcVmk4VN6uYk7yna6+1ZHmeiYXx9VSp/K+g6+krlYcgUHX3BuBK84MKQwuGel1
EDAlK8ZMSoL2WN4X5vUdTGE6/6ziCZ9SnaSst6DVQXQjlxUZxFtq4Q5URjipBfyk
WaS+EdBuovPGy8Tor9PNX/rUOQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:45:17 2026 by rpki-client