Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
File:                     CiozEuCLqcQb5-D7WKpkLG0BuHU.mft (raw, json)
Hash identifier:          +6yUmcRS7yZpWPixcis6sVMdCFrbzbJHjHjkb+MvX9g=
Subject key identifier:   21:4C:4B:B7:28:1F:53:BA:18:72:04:CC:28:5B:14:4A:0A:C5:5A:1C
Authority key identifier: 0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75
Certificate issuer:       /CN=A91B7DCB/serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875
Certificate serial:       FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
Manifest number:          ED
Signing time:             Thu 23 Jul 2026 08:14:50 +0000
Manifest this update:     Thu 23 Jul 2026 08:14:50 +0000
Manifest next update:     Thu 30 Jul 2026 08:14:50 +0000
Files and hashes:         1: CiozEuCLqcQb5-D7WKpkLG0BuHU.crl (hash: mzGTX7M2NrDbjjyZbvS2WuyHkVUXBVgXSG9T5mw+Dp4=)
                          2: 07D143BC294811F0BE054340C4F9AE02.roa (hash: vheeXG/vC/HIJ00AInyN8xWUpuBcivs+sqQSJ/QC26k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl
                          rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7DCB, serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875
        Validity
            Not Before: Jul 23 08:14:50 2026 GMT
            Not After : Jul 30 08:14:50 2026 GMT
        Subject: CN=6a61cd7a-ca0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d4:50:ce:e3:8c:f4:7d:8b:7c:a1:87:fa:e9:
                    73:43:7f:b5:b6:9f:9a:6d:8c:ed:00:f6:6a:af:7d:
                    ba:ed:53:1a:b6:16:dc:f9:03:59:24:ec:e9:27:8c:
                    6d:73:6b:ab:89:6f:b0:59:cb:b1:d9:24:9d:90:0e:
                    78:a9:2d:b2:e8:9e:bc:33:e2:69:c4:98:c9:45:64:
                    5f:7d:ee:c6:1a:0b:61:a3:5d:ee:89:8c:fe:3e:44:
                    38:1a:2a:83:dd:61:0c:8b:0e:b5:81:ab:a1:e5:2f:
                    3f:93:a8:83:05:18:7a:66:35:6a:70:e9:2e:40:59:
                    54:31:3c:f2:cb:1e:1f:bd:aa:57:f0:8d:49:c5:55:
                    f3:d8:69:e8:a6:11:63:24:e6:f0:8d:0b:f1:41:95:
                    9e:ed:0f:28:11:27:23:ad:e6:3a:c5:49:8e:6b:b8:
                    61:32:69:6f:3b:78:f0:fd:78:ea:20:6d:d3:b3:9d:
                    d7:9c:80:8a:37:da:01:41:4c:b9:0a:60:39:82:f5:
                    a1:2b:37:ff:37:8b:28:c6:9b:49:18:9d:ed:ce:c1:
                    10:ac:97:c8:4d:07:46:60:ae:09:55:cf:32:90:32:
                    69:27:b6:64:11:56:ab:00:24:1a:93:11:49:9a:8e:
                    7e:8a:7f:31:ad:ad:8d:92:83:17:e3:11:00:ce:e4:
                    08:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4C:4B:B7:28:1F:53:BA:18:72:04:CC:28:5B:14:4A:0A:C5:5A:1C
            X509v3 Authority Key Identifier:
                keyid:0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:80:0d:69:8e:33:09:89:bf:d0:61:fd:bd:87:ce:1e:bc:71:
         7e:5c:66:a0:94:dd:b9:51:3e:5e:c4:6d:75:8f:41:49:46:73:
         92:28:30:50:a4:7b:98:93:c7:f4:ce:b6:dc:65:17:e9:6c:8b:
         c3:fa:c1:a1:83:e4:a4:29:84:f6:19:01:07:9a:0a:2e:14:e0:
         09:fa:0c:5d:aa:5b:a2:0a:67:63:6a:e1:4b:2e:a0:48:00:cb:
         49:3a:05:f0:98:c2:aa:3e:3d:d9:70:56:a6:35:45:81:6e:bb:
         5d:33:8c:48:4a:d6:e1:dd:1e:5c:a8:60:85:06:dd:2e:b0:e1:
         9c:cc:30:55:e0:82:7a:35:d5:9a:f0:53:f6:fe:a2:a5:1d:4b:
         d0:26:c5:9a:92:27:47:48:97:f6:e9:a1:e6:24:fc:2f:8e:70:
         79:0f:02:f6:89:28:09:e8:a5:6e:da:f7:c8:09:17:bc:1a:25:
         ef:53:34:01:23:84:86:99:d8:7e:1a:23:9a:74:7e:12:6f:89:
         3a:54:8e:f4:94:b9:a2:84:bb:fd:cd:5d:4e:c3:fe:ed:cb:85:
         42:5e:a7:78:c3:33:0b:b6:67:2c:e5:56:99:15:45:da:ad:be:
         00:bd:5b:91:87:58:25:d3:cc:b1:88:0c:fe:00:c6:63:98:9f:
         b5:fb:12:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjdEQ0IxMTAvBgNVBAUTKDBBMkEzMzEyRTA4QkE5QzQxQkU3RTBGQjU4QUE2NDJD
NkQwMUI4NzUwHhcNMjYwNzIzMDgxNDUwWhcNMjYwNzMwMDgxNDUwWjAYMRYwFAYD
VQQDEw02YTYxY2Q3YS1jYTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0NRQzuOM9H2LfKGH+ulzQ3+1tp+abYztAPZqr3267VMathbc+QNZJOzpJ4xt
c2uriW+wWcux2SSdkA54qS2y6J68M+JpxJjJRWRffe7GGgtho13uiYz+PkQ4GiqD
3WEMiw61gauh5S8/k6iDBRh6ZjVqcOkuQFlUMTzyyx4fvapX8I1JxVXz2GnophFj
JObwjQvxQZWe7Q8oEScjreY6xUmOa7hhMmlvO3jw/XjqIG3Ts53XnICKN9oBQUy5
CmA5gvWhKzf/N4soxptJGJ3tzsEQrJfITQdGYK4JVc8ykDJpJ7ZkEVarACQakxFJ
mo5+in8xra2NkoMX4xEAzuQI8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCFMS7co
H1O6GHIEzChbFEoKxVocMB8GA1UdIwQYMBaAFAoqMxLgi6nEG+fg+1iqZCxtAbh1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0RDQi8wMTUwNUEzMDI5
NDUxMUYwQUUxQUJDNzRDNEY5QUUwMi9DaW96RXVDTHFjUWI1LUQ3V0twa0xHMEJ1
SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Npb3pFdUNMcWNRYjUtRDdXS3BrTEcwQnVIVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
N0RDQi8wMTUwNUEzMDI5NDUxMUYwQUUxQUJDNzRDNEY5QUUwMi9DaW96RXVDTHFj
UWI1LUQ3V0twa0xHMEJ1SFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhIANaY4zCYm/0GH9vYfOHrxxflxmoJTduVE+XsRtdY9BSUZzkigwUKR7mJPH
9M623GUX6WyLw/rBoYPkpCmE9hkBB5oKLhTgCfoMXapbogpnY2rhSy6gSADLSToF
8JjCqj492XBWpjVFgW67XTOMSErW4d0eXKhghQbdLrDhnMwwVeCCejXVmvBT9v6i
pR1L0CbFmpInR0iX9umh5iT8L45weQ8C9okoCeilbtr3yAkXvBol71M0ASOEhpnY
fhojmnR+Em+JOlSO9JS5ooS7/c1dTsP+7cuFQl6neMMzC7ZnLOVWmRVF2q2+AL1b
kYdYJdPMsYgM/gDGY5iftfsSGQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:04 2026 by rpki-client