Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft
File:                     c8BwFxdufsG_l34xFvWB9RFNA2A.mft (raw, json)
Hash identifier:          GG7F5D9IaNtNzBJ53EgltBdOf4pbdci/k50Z5xwGn2s=
Subject key identifier:   57:6C:49:65:6F:4E:BB:95:08:9F:E4:74:F6:DD:19:17:BA:C9:ED:01
Authority key identifier: 73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60
Certificate issuer:       /CN=A91B9101/serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360
Certificate serial:       025D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft
Manifest number:          0258
Signing time:             Thu 23 Jul 2026 03:22:54 +0000
Manifest this update:     Thu 23 Jul 2026 03:22:53 +0000
Manifest next update:     Thu 30 Jul 2026 03:22:53 +0000
Files and hashes:         1: c8BwFxdufsG_l34xFvWB9RFNA2A.crl (hash: dUIZ34XdMWCla/gRXojhmlfRQKf3mLtKhuLtm9tvIA0=)
                          2: 0A195CD4EDCE11ED994B437AC4F9AE02.roa (hash: evrrp35v+kEqYtlZi8zcxreXxzWFEB8bQkw/fkPA/3w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl
                          rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605 (0x25d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9101, serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360
        Validity
            Not Before: Jul 23 03:22:53 2026 GMT
            Not After : Jul 30 03:22:53 2026 GMT
        Subject: CN=6a61890e-3553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2e:14:df:8c:be:84:31:a4:5d:4a:c1:a4:d1:
                    c4:ed:a0:5e:ec:ce:f0:d5:a5:d1:14:0f:ed:79:55:
                    46:2c:b8:97:e8:bd:df:2c:f9:cf:95:f8:95:04:89:
                    a4:46:12:57:bd:b4:26:ff:f0:cf:cf:2b:d2:73:c1:
                    5a:50:d4:f2:cc:0a:f2:3b:18:4f:bb:d2:18:4c:a4:
                    b5:f7:58:39:0a:1a:10:4f:10:5d:e1:62:40:78:54:
                    d9:ca:06:54:c9:b8:1b:54:1b:0f:27:62:12:2f:8f:
                    02:a5:05:27:75:bd:01:a7:fb:e5:07:e7:9b:d1:0e:
                    d5:ef:3b:2c:64:9f:05:11:33:92:0e:14:07:87:b8:
                    a6:65:15:41:e5:ec:5a:ff:ce:50:47:80:42:4f:be:
                    78:8c:51:8d:82:fa:00:e2:b5:df:0d:fd:f3:2e:5e:
                    ce:1d:8b:65:70:18:73:ec:17:d2:bf:1c:2a:af:e5:
                    f9:7b:d1:b2:97:49:f6:bd:dc:64:4c:72:86:83:41:
                    83:ca:60:0c:b6:83:b2:e7:67:a1:bd:1b:79:fa:e4:
                    6a:a5:64:b2:65:c0:a5:b6:63:1e:b4:6c:8a:38:ef:
                    27:bb:f0:20:1a:7d:ae:a6:9b:11:62:fa:75:f1:11:
                    35:cd:05:0b:6f:b3:3a:bf:24:4a:21:af:a4:5b:58:
                    a0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6C:49:65:6F:4E:BB:95:08:9F:E4:74:F6:DD:19:17:BA:C9:ED:01
            X509v3 Authority Key Identifier:
                keyid:73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:d5:a1:46:e5:01:04:29:2a:18:3c:b7:e6:15:80:b9:af:f4:
         eb:2a:03:76:9b:63:fc:88:d4:4f:b3:57:d5:5a:0b:5d:b1:fb:
         73:d7:c8:08:85:b3:8d:97:9b:ad:18:58:5c:1c:a3:82:08:82:
         4f:38:06:24:fd:de:f2:7c:4d:d0:a6:e2:b2:0c:61:35:b5:c6:
         62:7d:c8:6e:c4:c9:9a:1d:fa:a9:8b:d7:90:00:bc:de:15:10:
         76:3f:7a:22:c8:b0:7d:f8:a4:f9:6a:2d:d5:a3:fe:1a:da:c8:
         03:27:5a:90:08:52:65:c4:35:9c:39:02:0a:54:c4:99:1e:54:
         a2:e2:ab:05:70:79:ee:6d:ff:83:7e:66:56:fc:cd:2e:8d:9b:
         b2:af:f3:5d:45:1a:a0:ef:77:de:8c:23:59:32:8b:c3:c1:8f:
         3c:ce:1f:b9:97:b3:9d:1c:c1:a8:5d:36:75:89:92:78:ff:f1:
         89:e6:91:38:9d:2f:04:19:bb:82:c3:d9:1b:a9:53:1a:92:29:
         f8:c6:79:54:81:e0:95:a9:b1:d7:de:80:91:5a:47:bd:1a:63:
         33:08:66:fd:8b:1a:af:5e:aa:42:af:80:7b:06:4e:a4:23:94:
         5b:75:c6:d2:ff:2d:7b:5f:66:b4:30:3c:ac:78:51:8d:56:99:
         9d:57:a6:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjkxMDExMTAvBgNVBAUTKDczQzA3MDE3MTc2RTdFQzFCRjk3N0UzMTE2RjU4MUY1
MTE0RDAzNjAwHhcNMjYwNzIzMDMyMjUzWhcNMjYwNzMwMDMyMjUzWjAYMRYwFAYD
VQQDEw02YTYxODkwZS0zNTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvy4U34y+hDGkXUrBpNHE7aBe7M7w1aXRFA/teVVGLLiX6L3fLPnPlfiVBImk
RhJXvbQm//DPzyvSc8FaUNTyzAryOxhPu9IYTKS191g5ChoQTxBd4WJAeFTZygZU
ybgbVBsPJ2ISL48CpQUndb0Bp/vlB+eb0Q7V7zssZJ8FETOSDhQHh7imZRVB5exa
/85QR4BCT754jFGNgvoA4rXfDf3zLl7OHYtlcBhz7BfSvxwqr+X5e9Gyl0n2vdxk
THKGg0GDymAMtoOy52ehvRt5+uRqpWSyZcCltmMetGyKOO8nu/AgGn2uppsRYvp1
8RE1zQULb7M6vyRKIa+kW1ighwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFdsSWVv
TruVCJ/kdPbdGRe6ye0BMB8GA1UdIwQYMBaAFHPAcBcXbn7Bv5d+MRb1gfURTQNg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTEwMS83NzI4ODgyMkVE
QzkxMUVEQTczMDFGN0ZDNEY5QUUwMi9jOEJ3RnhkdWZzR19sMzR4RnZXQjlSRk5B
MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2M4QndGeGR1ZnNHX2wzNHhGdldCOVJGTkEyQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OTEwMS83NzI4ODgyMkVEQzkxMUVEQTczMDFGN0ZDNEY5QUUwMi9jOEJ3RnhkdWZz
R19sMzR4RnZXQjlSRk5BMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkNWhRuUBBCkqGDy35hWAua/06yoDdptj/IjUT7NX1VoLXbH7c9fICIWzjZeb
rRhYXByjggiCTzgGJP3e8nxN0KbisgxhNbXGYn3IbsTJmh36qYvXkAC83hUQdj96
Isiwffik+Wot1aP+GtrIAydakAhSZcQ1nDkCClTEmR5UouKrBXB57m3/g35mVvzN
Lo2bsq/zXUUaoO933owjWTKLw8GPPM4fuZeznRzBqF02dYmSeP/xieaROJ0vBBm7
gsPZG6lTGpIp+MZ5VIHglamx196AkVpHvRpjMwhm/Ysar16qQq+AewZOpCOUW3XG
0v8te19mtDA8rHhRjVaZnVemxA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:50:29 2026 by rpki-client