Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
File:                     0y2jboghgi5r08gs_6mE56kJw_Y.mft (raw, json)
Hash identifier:          C1QuwT/++6Xm8pzyh+ItGYc24kOd02Z5nNmyJwj+qAE=
Subject key identifier:   CA:05:F9:48:88:A7:B7:75:A5:B6:2B:E4:B5:F1:CB:C2:3E:32:6D:95
Authority key identifier: D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6
Certificate issuer:       /CN=A91B8EF9/serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
Certificate serial:       34B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
Manifest number:          34A0
Signing time:             Wed 22 Jul 2026 15:23:20 +0000
Manifest this update:     Wed 22 Jul 2026 15:23:19 +0000
Manifest next update:     Wed 29 Jul 2026 15:23:19 +0000
Files and hashes:         1: 0y2jboghgi5r08gs_6mE56kJw_Y.crl (hash: Fh7vmb5KyZwSkeONSdG3VWwh5NjWWw3rdnJU8fHhwc8=)
                          2: A1C2C79680FE11E985D53F55C4F9AE02.roa (hash: Ej83i8NuEYKasou7W/9D745hYaGsqd2oMKEiRlHzF4I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:23:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13490 (0x34b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8EF9, serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
        Validity
            Not Before: Jul 22 15:23:19 2026 GMT
            Not After : Jul 29 15:23:19 2026 GMT
        Subject: CN=6a60e068-8952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ab:55:25:c6:bf:43:32:1c:a1:e4:7a:f9:21:
                    df:ac:dd:33:f8:6e:f9:ce:a9:06:89:ba:2a:36:8e:
                    56:65:c9:4b:00:d4:b3:c9:8b:17:84:cb:d3:df:ca:
                    5a:b6:91:df:f2:ed:19:54:b3:9d:c9:97:00:70:37:
                    09:e3:ff:cf:7e:97:1b:2c:47:ae:ab:32:53:fd:05:
                    78:7e:e2:24:82:cd:91:78:4a:86:ca:45:c4:43:4d:
                    9b:f2:f9:88:1b:2b:5a:ec:61:40:5e:2d:96:ca:a2:
                    a3:2e:35:7a:54:fb:5f:0f:3d:98:b4:f0:dc:8b:c7:
                    9b:56:18:9c:e1:e7:d6:be:0a:66:b0:91:e6:8d:b5:
                    2b:ac:83:b1:eb:a5:36:b3:eb:ad:5d:05:61:04:17:
                    94:a6:d5:ee:36:c7:db:ac:db:9a:fc:38:e8:f7:6c:
                    45:37:db:20:5c:0b:6a:a7:a1:53:1c:fa:4d:48:a4:
                    5e:43:07:bf:ee:6c:b3:34:9f:1b:e9:c0:a5:b6:5f:
                    49:65:e6:ae:bd:1d:26:b3:b7:5f:09:3f:e4:23:d6:
                    71:75:f6:4f:9c:05:f1:93:80:43:28:68:30:6a:45:
                    ce:c8:dd:51:42:ca:1b:4f:4d:9d:21:61:dc:e9:ee:
                    a1:06:5f:84:f8:b7:27:ea:46:09:5b:8d:f9:a0:b5:
                    80:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:05:F9:48:88:A7:B7:75:A5:B6:2B:E4:B5:F1:CB:C2:3E:32:6D:95
            X509v3 Authority Key Identifier:
                keyid:D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a6:06:07:be:f7:fc:a7:18:39:a1:52:2a:cc:40:8e:bd:40:
         f2:3e:b4:1b:e6:1d:45:4f:65:22:d1:0e:d6:7b:c0:34:3e:97:
         1c:7c:ac:13:b6:31:8e:3b:37:4b:6e:b8:a9:48:04:21:cc:ed:
         1d:27:a3:e3:fd:9d:4f:02:7a:46:08:ec:7f:43:83:79:af:c2:
         08:63:da:5e:a8:8a:7a:e1:85:ff:e9:4d:32:80:24:5b:73:7e:
         6d:a3:ac:d9:a6:2b:10:cb:bc:ed:1f:30:26:ab:54:c7:f2:fb:
         e0:cd:ac:d9:3e:d4:7f:f9:f1:cd:74:66:7b:f0:1e:b9:ec:a1:
         99:3f:64:a9:e9:4e:59:6c:08:0a:a7:9c:91:04:27:af:63:e9:
         33:57:54:7b:f6:95:5a:f3:c0:5e:75:f0:a3:20:46:96:95:3b:
         40:7e:1a:34:ac:c2:68:57:2b:f3:b6:04:32:13:63:35:fc:10:
         79:45:4b:a1:5b:c0:a0:27:fd:bb:a0:50:57:82:8b:88:ba:7e:
         6b:7b:b9:a0:a4:5b:97:3d:f6:0b:0b:58:9c:7a:1c:83:f0:51:
         97:cc:bf:03:2f:eb:16:fc:23:fe:70:1c:38:f5:06:2f:ed:19:
         99:8b:b7:de:bb:dc:29:63:09:99:06:a6:03:3b:5d:94:8e:09:
         31:e1:50:b4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjhFRjkxMTAvBgNVBAUTKEQzMkRBMzZFODgyMTgyMkU2QkQzQzgyQ0ZGQTk4NEU3
QTkwOUMzRjYwHhcNMjYwNzIyMTUyMzE5WhcNMjYwNzI5MTUyMzE5WjAYMRYwFAYD
VQQDEw02YTYwZTA2OC04OTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2atVJca/QzIcoeR6+SHfrN0z+G75zqkGiboqNo5WZclLANSzyYsXhMvT38pa
tpHf8u0ZVLOdyZcAcDcJ4//PfpcbLEeuqzJT/QV4fuIkgs2ReEqGykXEQ02b8vmI
Gyta7GFAXi2WyqKjLjV6VPtfDz2YtPDci8ebVhic4efWvgpmsJHmjbUrrIOx66U2
s+utXQVhBBeUptXuNsfbrNua/Djo92xFN9sgXAtqp6FTHPpNSKReQwe/7myzNJ8b
6cCltl9JZeauvR0ms7dfCT/kI9ZxdfZPnAXxk4BDKGgwakXOyN1RQsobT02dIWHc
6e6hBl+E+Lcn6kYJW435oLWAGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMoF+UiI
p7d1pbYr5LXxy8I+Mm2VMB8GA1UdIwQYMBaAFNMto26IIYIua9PILP+phOepCcP2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEVGOS80NEE4MDVFRTQ0
QzkxMUUyQjM1QUM0ODQyOTc5QkIyMC8weTJqYm9naGdpNXIwOGdzXzZtRTU2a0p3
X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzB5Mmpib2doZ2k1cjA4Z3NfNm1FNTZrSndfWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OEVGOS80NEE4MDVFRTQ0QzkxMUUyQjM1QUM0ODQyOTc5QkIyMC8weTJqYm9naGdp
NXIwOGdzXzZtRTU2a0p3X1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGqYGB773/KcYOaFSKsxAjr1A8j60G+YdRU9lItEO1nvAND6XHHysE7Yxjjs3
S264qUgEIcztHSej4/2dTwJ6Rgjsf0ODea/CCGPaXqiKeuGF/+lNMoAkW3N+baOs
2aYrEMu87R8wJqtUx/L74M2s2T7Uf/nxzXRme/AeueyhmT9kqelOWWwICqeckQQn
r2PpM1dUe/aVWvPAXnXwoyBGlpU7QH4aNKzCaFcr87YEMhNjNfwQeUVLoVvAoCf9
u6BQV4KLiLp+a3u5oKRblz32CwtYnHocg/BRl8y/Ay/rFvwj/nAcOPUGL+0ZmYu3
3rvcKWMJmQamAztdlI4JMeFQtA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:00:22 2026 by rpki-client