Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
File:                     _J3Ma6xPPZvsntHpBk2bytz5o6k.mft (raw, json)
Hash identifier:          AOqPyS5MDkOBl2WcZ7LcIEJgC91HJ4beU8fEBSkv5tc=
Subject key identifier:   87:E5:A4:ED:3B:E3:7C:9C:82:ED:E6:0C:AC:58:B0:CA:27:4D:7B:43
Authority key identifier: FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9
Certificate issuer:       /CN=A91B673B/serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9
Certificate serial:       0172
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
Manifest number:          016A
Signing time:             Thu 23 Jul 2026 06:23:04 +0000
Manifest this update:     Thu 23 Jul 2026 06:23:04 +0000
Manifest next update:     Thu 30 Jul 2026 06:23:04 +0000
Files and hashes:         1: _J3Ma6xPPZvsntHpBk2bytz5o6k.crl (hash: u/WxNekZeY0EWUo2ysu/aZu+5CqVkn004LVXYzmpGnY=)
                          2: 390757225E1511EFB04EDA1DC4F9AE02.roa (hash: 99UGo5KWvnN+gHhR9yWsZo5dAMlhKMO/SbxWG6qrgCo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl
                          rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:23:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B673B, serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9
        Validity
            Not Before: Jul 23 06:23:04 2026 GMT
            Not After : Jul 30 06:23:04 2026 GMT
        Subject: CN=6a61b348-cf1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c2:4f:2a:e7:15:5e:b4:35:e5:3d:15:b0:27:
                    53:3e:af:ee:89:f0:9b:59:1a:0c:55:af:d7:01:87:
                    f8:c9:8a:79:7b:a0:3d:c7:93:ab:1c:bd:c2:7a:29:
                    32:00:3d:f0:53:1d:3e:98:de:74:17:a8:b4:bb:49:
                    9a:04:c7:95:e4:8f:23:b5:7b:d8:5d:e4:31:0d:ae:
                    96:d6:b4:a6:75:ec:9a:f7:91:c2:ac:25:d0:bc:83:
                    fd:ec:d1:0c:36:29:14:38:a7:41:61:09:12:65:c9:
                    98:ab:2f:90:3f:2e:16:c0:31:29:dd:ca:f1:77:2b:
                    71:ce:50:cc:25:d7:1c:d1:25:1b:6e:3d:da:0c:cf:
                    91:86:97:4d:28:4a:1e:c4:7a:02:bd:73:31:4b:9d:
                    bc:7e:0d:4c:c9:03:66:05:b1:65:13:fd:22:57:47:
                    da:10:e2:55:4d:19:17:50:6e:29:19:ea:40:24:1c:
                    7b:8d:5a:c4:9d:7e:2b:3a:70:d7:b4:e2:5a:93:e8:
                    52:da:fe:7b:97:e4:ab:72:96:a0:40:d8:f9:3d:82:
                    04:3d:e7:56:a9:7d:22:c9:4d:65:5e:62:50:76:b9:
                    7f:28:4c:5e:32:7f:9c:4b:ca:9b:94:94:fc:4e:93:
                    ca:02:a5:88:cf:e2:c1:33:7f:0f:bf:5c:b5:00:77:
                    ec:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E5:A4:ED:3B:E3:7C:9C:82:ED:E6:0C:AC:58:B0:CA:27:4D:7B:43
            X509v3 Authority Key Identifier:
                keyid:FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:05:83:d9:cb:a2:be:cb:75:39:65:cf:c6:72:53:e9:1c:f8:
         9b:7b:6c:67:e3:bc:a6:05:0f:8c:93:f2:a3:2b:aa:d2:3d:bc:
         ca:af:38:61:19:77:6b:20:82:cf:e6:0f:a0:db:e7:08:57:e6:
         79:7d:3c:a4:7c:76:b0:86:81:db:02:d0:11:d0:a7:8c:82:06:
         60:c1:7f:b3:93:d3:46:41:fc:6d:b8:be:29:32:8b:84:fd:90:
         94:41:c8:ff:80:83:25:e3:dd:3e:4f:bf:b9:18:23:bf:ef:7c:
         7e:32:59:f3:8d:47:46:2e:28:73:c5:94:8a:69:19:93:af:8b:
         ba:06:bf:f3:3d:aa:88:92:7e:8d:4f:c1:d3:69:1f:ab:85:8f:
         5a:a9:bd:7c:d8:4c:a9:0e:b5:06:31:e4:b8:fa:f8:0d:f5:ec:
         cb:f5:82:d2:11:fd:8e:c2:68:cf:2b:e9:a2:4a:6f:eb:3d:d2:
         ca:2f:54:e0:aa:4d:a0:67:df:f2:a5:26:d9:5e:33:b1:89:c8:
         ff:d9:e2:7d:63:c6:73:36:89:6b:63:d2:26:58:5c:e7:87:a5:
         87:de:5d:c3:ae:33:e1:da:5c:b2:31:bf:79:25:7d:b1:ad:3f:
         c0:aa:c8:66:b2:11:6e:fc:f0:9a:12:bd:d4:8a:99:6a:06:08:
         17:c6:21:98
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjY3M0IxMTAvBgNVBAUTKEZDOURDQzZCQUM0RjNEOUJFQzlFRDFFOTA2NEQ5QkNB
RENGOUEzQTkwHhcNMjYwNzIzMDYyMzA0WhcNMjYwNzMwMDYyMzA0WjAYMRYwFAYD
VQQDEw02YTYxYjM0OC1jZjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo8JPKucVXrQ15T0VsCdTPq/uifCbWRoMVa/XAYf4yYp5e6A9x5OrHL3Ceiky
AD3wUx0+mN50F6i0u0maBMeV5I8jtXvYXeQxDa6W1rSmdeya95HCrCXQvIP97NEM
NikUOKdBYQkSZcmYqy+QPy4WwDEp3crxdytxzlDMJdcc0SUbbj3aDM+RhpdNKEoe
xHoCvXMxS528fg1MyQNmBbFlE/0iV0faEOJVTRkXUG4pGepAJBx7jVrEnX4rOnDX
tOJak+hS2v57l+SrcpagQNj5PYIEPedWqX0iyU1lXmJQdrl/KExeMn+cS8qblJT8
TpPKAqWIz+LBM38Pv1y1AHfsMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIflpO07
43ycgu3mDKxYsMonTXtDMB8GA1UdIwQYMBaAFPydzGusTz2b7J7R6QZNm8rc+aOp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjczQi83OTQ2MzBDQzVE
RkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9fSjNNYTZ4UFBadnNudEhwQmsyYnl0ejVv
NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL19KM01hNnhQUFp2c250SHBCazJieXR6NW82ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NjczQi83OTQ2MzBDQzVERkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9fSjNNYTZ4UFBa
dnNudEhwQmsyYnl0ejVvNmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXAWD2cuivst1OWXPxnJT6Rz4m3tsZ+O8pgUPjJPyoyuq0j28yq84YRl3ayCC
z+YPoNvnCFfmeX08pHx2sIaB2wLQEdCnjIIGYMF/s5PTRkH8bbi+KTKLhP2QlEHI
/4CDJePdPk+/uRgjv+98fjJZ841HRi4oc8WUimkZk6+Luga/8z2qiJJ+jU/B02kf
q4WPWqm9fNhMqQ61BjHkuPr4DfXsy/WC0hH9jsJozyvpokpv6z3Syi9U4KpNoGff
8qUm2V4zsYnI/9nifWPGczaJa2PSJlhc54elh95dw64z4dpcsjG/eSV9sa0/wKrI
ZrIRbvzwmhK91IqZagYIF8YhmA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:26:37 2026 by rpki-client