Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft
File:                     oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft (raw, json)
Hash identifier:          jRGcOOlIyTAWiQ2oHP10JYZ6ZuKUS7484s8nYwr5ROg=
Subject key identifier:   5B:C6:CF:D5:98:F6:68:33:83:19:6B:A2:C1:E7:51:EC:82:4E:A5:32
Authority key identifier: A1:0F:57:83:C8:F9:A6:D9:4D:29:B4:AA:90:C5:6E:01:6B:B5:14:56
Certificate issuer:       /CN=A91B65AC/serialNumber=A10F5783C8F9A6D94D29B4AA90C56E016BB51456
Certificate serial:       01C7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft
Manifest number:          01BF
Signing time:             Thu 23 Jul 2026 05:18:13 +0000
Manifest this update:     Thu 23 Jul 2026 05:18:12 +0000
Manifest next update:     Thu 30 Jul 2026 05:18:12 +0000
Files and hashes:         1: oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.crl (hash: bFwFEvHrtOfd+gzfP5V62GoL/L+b+6xBlesBKv5EwLk=)
                          2: 48005D9EE5AE11EE9ECE4023C4F9AE02.roa (hash: Km37wq6aDw75/u5KZyWOq+MrrDlARwtAXstjS4OwvhE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.crl
                          rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455 (0x1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B65AC, serialNumber=A10F5783C8F9A6D94D29B4AA90C56E016BB51456
        Validity
            Not Before: Jul 23 05:18:12 2026 GMT
            Not After : Jul 30 05:18:12 2026 GMT
        Subject: CN=6a61a415-9200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:29:e3:d6:8d:be:8e:97:c3:d8:07:99:2b:1a:
                    dd:30:be:73:c7:89:db:6f:89:c1:0d:b3:df:b9:82:
                    b7:71:c0:34:e7:ed:41:9a:87:80:c8:89:ee:37:53:
                    b2:1e:d2:78:08:6e:7b:e0:b9:c4:70:05:76:94:06:
                    2c:3f:bc:63:8b:5a:25:6b:9e:7a:dd:dc:28:f7:74:
                    17:cf:01:83:bd:2c:cc:08:71:05:0e:21:57:41:a2:
                    c6:86:32:be:49:48:8f:79:22:d9:8f:48:95:2b:89:
                    2f:83:2d:82:21:d7:48:0e:37:4d:05:73:ce:6c:6b:
                    46:d2:1b:cd:da:73:47:89:9e:e2:67:b9:dd:4a:a5:
                    f3:00:f6:4d:ef:9b:88:b6:95:88:11:d0:76:22:df:
                    05:98:7c:c5:df:88:93:09:24:b8:5a:c5:c1:78:fd:
                    c6:3f:c6:4c:6c:15:ec:f5:ec:12:40:05:89:8f:9e:
                    c9:c4:36:63:0f:08:08:0c:ad:19:7e:4f:7a:4e:54:
                    34:52:81:c7:50:fd:d8:54:47:7c:5b:d7:b7:49:00:
                    ce:43:7c:05:b4:1b:23:cf:49:80:44:77:79:bb:c9:
                    02:c1:0e:1a:06:80:06:b1:6d:28:91:a4:e6:d8:16:
                    d3:36:f0:cb:00:54:dd:b5:a4:5c:5a:fd:95:b1:5e:
                    85:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C6:CF:D5:98:F6:68:33:83:19:6B:A2:C1:E7:51:EC:82:4E:A5:32
            X509v3 Authority Key Identifier:
                keyid:A1:0F:57:83:C8:F9:A6:D9:4D:29:B4:AA:90:C5:6E:01:6B:B5:14:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:5e:9c:f1:f9:bb:f9:08:c9:16:47:1d:d6:6d:2a:fc:12:da:
         cd:10:9f:0a:c7:50:a7:10:d7:7e:ae:fb:5f:3a:69:4e:97:58:
         40:e1:ce:86:a9:ee:36:52:41:cb:4c:86:e6:b1:64:b9:5a:04:
         bf:c0:7e:d3:09:8a:12:14:60:c7:7c:69:60:f1:49:71:91:a6:
         de:16:fd:50:4f:c1:b5:76:ec:5f:53:de:0f:48:1b:4c:52:a0:
         99:9f:99:04:03:3d:48:09:22:83:c5:9c:0e:94:55:5a:50:e1:
         21:6b:73:f5:dd:e6:ce:f0:d5:3f:c4:a6:3a:b3:6e:55:de:43:
         bf:eb:27:79:c2:ee:f6:b7:8d:2b:18:d3:f8:0c:bd:3e:11:8e:
         59:ca:d0:4b:e0:03:27:0d:02:a7:2f:9b:94:16:9d:bb:66:d2:
         02:76:83:3f:c8:91:f0:3b:33:37:1a:85:38:c2:52:f5:56:e3:
         f5:60:87:39:c9:6d:38:d6:31:aa:ad:38:4a:df:aa:20:8b:2c:
         c0:b3:8a:0f:b0:30:a5:06:b0:d2:c2:11:6b:25:13:58:bf:13:
         ea:2a:cb:e5:82:e2:6e:1a:3a:17:f2:9c:38:de:4b:71:51:f6:
         95:e6:a0:14:c2:12:50:d2:3d:b8:b0:19:0f:7d:a1:c3:37:75:
         7d:62:c7:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjY1QUMxMTAvBgNVBAUTKEExMEY1NzgzQzhGOUE2RDk0RDI5QjRBQTkwQzU2RTAx
NkJCNTE0NTYwHhcNMjYwNzIzMDUxODEyWhcNMjYwNzMwMDUxODEyWjAYMRYwFAYD
VQQDEw02YTYxYTQxNS05MjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4Snj1o2+jpfD2AeZKxrdML5zx4nbb4nBDbPfuYK3ccA05+1BmoeAyInuN1Oy
HtJ4CG574LnEcAV2lAYsP7xji1ola5563dwo93QXzwGDvSzMCHEFDiFXQaLGhjK+
SUiPeSLZj0iVK4kvgy2CIddIDjdNBXPObGtG0hvN2nNHiZ7iZ7ndSqXzAPZN75uI
tpWIEdB2It8FmHzF34iTCSS4WsXBeP3GP8ZMbBXs9ewSQAWJj57JxDZjDwgIDK0Z
fk96TlQ0UoHHUP3YVEd8W9e3SQDOQ3wFtBsjz0mARHd5u8kCwQ4aBoAGsW0okaTm
2BbTNvDLAFTdtaRcWv2VsV6FjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFvGz9WY
9mgzgxlrosHnUeyCTqUyMB8GA1UdIwQYMBaAFKEPV4PI+abZTSm0qpDFbgFrtRRW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjVBQy9DQjc0RjhCRUUx
RTAxMUVFQUY2RTFFNjhDNEY5QUUwMi9vUTlYZzhqNXB0bE5LYlNxa01WdUFXdTFG
RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL29ROVhnOGo1cHRsTktiU3FrTVZ1QVd1MUZGWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NjVBQy9DQjc0RjhCRUUxRTAxMUVFQUY2RTFFNjhDNEY5QUUwMi9vUTlYZzhqNXB0
bE5LYlNxa01WdUFXdTFGRlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAul6c8fm7+QjJFkcd1m0q/BLazRCfCsdQpxDXfq77XzppTpdYQOHOhqnuNlJB
y0yG5rFkuVoEv8B+0wmKEhRgx3xpYPFJcZGm3hb9UE/BtXbsX1PeD0gbTFKgmZ+Z
BAM9SAkig8WcDpRVWlDhIWtz9d3mzvDVP8SmOrNuVd5Dv+snecLu9reNKxjT+Ay9
PhGOWcrQS+ADJw0Cpy+blBadu2bSAnaDP8iR8DszNxqFOMJS9Vbj9WCHOcltONYx
qq04St+qIIsswLOKD7AwpQaw0sIRayUTWL8T6irL5YLibho6F/KcON5LcVH2leag
FMISUNI9uLAZD32hwzd1fWLHSw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:22 2026 by rpki-client