Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
File:                     U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft (raw, json)
Hash identifier:          mcAcCHTFeomUYlUmb67xuUEUB4vVRmQMKr05B5ivo5M=
Subject key identifier:   B3:D8:42:4B:C7:4E:6A:99:D3:2F:50:BC:FD:93:0F:63:A6:3A:BB:03
Authority key identifier: 53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4
Certificate issuer:       /CN=A91BA251/serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4
Certificate serial:       061F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
Manifest number:          0611
Signing time:             Wed 22 Jul 2026 23:34:21 +0000
Manifest this update:     Wed 22 Jul 2026 23:34:21 +0000
Manifest next update:     Wed 29 Jul 2026 23:34:21 +0000
Files and hashes:         1: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl (hash: 2SU9rSHfSfr6l7O54wwmClS99zORzGsHjf4oHs/RNRo=)
                          2: 567C8DB8354111ECBCC05B63C4F9AE02.roa (hash: 3Myni48C8MqbnkMOucThNgI8mHbpIgv3RcenlXVut6k=)
                          3: DEA2CCF8050511EEB4D8141FC4F9AE02.roa (hash: n7blhtr8CeB1GQILH2tbTNGZrE0mtz4/kPdd9dFJxPM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:34:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1567 (0x61f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA251, serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4
        Validity
            Not Before: Jul 22 23:34:21 2026 GMT
            Not After : Jul 29 23:34:21 2026 GMT
        Subject: CN=6a61537d-a833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:65:32:b6:f9:9a:58:52:61:b3:55:4a:e9:d8:
                    53:05:8d:67:ca:c9:c7:6a:93:63:f0:a7:31:61:e9:
                    f5:ad:eb:97:87:0c:b7:74:d4:cd:2d:06:08:79:b4:
                    a7:bb:39:c9:db:dc:1f:d1:55:70:f9:f9:db:99:10:
                    30:85:cc:07:c0:a8:9e:98:fa:6f:d3:58:d3:12:06:
                    7a:27:8a:1a:d4:fd:c6:c8:4c:69:db:79:bc:8f:7b:
                    63:c3:57:3d:a4:bd:32:25:b8:9e:b8:37:82:ce:7e:
                    16:ed:00:8c:46:cc:d9:12:29:92:07:93:7f:b6:c2:
                    57:71:a5:09:f3:6c:1a:f3:6c:6b:97:62:85:39:91:
                    1b:6c:41:f3:da:85:74:5d:a9:33:de:3a:0f:d8:07:
                    6b:62:37:e7:bd:bb:92:59:bb:6b:59:0b:e6:3e:19:
                    08:10:dd:bb:fb:f7:ea:8e:f6:d0:50:71:26:7e:9d:
                    5f:05:5d:12:40:d3:ae:50:1a:a0:4c:c0:9a:31:aa:
                    a9:db:2f:ca:32:d3:e1:63:ac:f2:44:8d:d5:6c:65:
                    e3:86:f3:d4:4f:05:f5:15:30:0d:cb:58:0b:78:38:
                    a5:c7:12:10:b2:6c:e5:62:df:4e:0e:e5:49:43:ca:
                    eb:3e:ca:82:f7:67:05:9f:f8:9d:f5:0b:89:e4:d3:
                    33:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D8:42:4B:C7:4E:6A:99:D3:2F:50:BC:FD:93:0F:63:A6:3A:BB:03
            X509v3 Authority Key Identifier:
                keyid:53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ae:37:4a:c6:12:0d:83:28:5b:be:75:c6:be:99:bd:90:64:
         11:f4:a0:4c:be:b2:eb:da:57:72:20:4f:c3:2b:c7:36:16:03:
         3f:c1:b3:91:f1:46:ec:84:0e:c2:fe:53:80:63:98:fa:13:f1:
         19:73:d8:5b:4a:33:7c:92:e4:53:29:d0:81:df:5d:54:39:fe:
         57:bb:b1:49:e6:07:3c:44:cb:10:17:41:59:71:f1:ab:1c:29:
         a2:8f:9e:17:29:cb:bd:3e:23:46:9b:00:27:64:ee:72:8a:39:
         ad:d1:9a:07:73:92:95:92:eb:76:a4:02:0d:7a:56:da:cc:c7:
         d6:16:c2:fe:1f:f5:71:66:5e:67:22:f0:0b:ab:8f:d3:96:b8:
         4c:be:3b:82:38:2e:2a:03:bd:64:1a:d7:20:5f:ed:e6:0a:89:
         ce:d5:1f:3a:27:7b:88:b8:7b:3d:0e:d8:41:1a:27:71:a2:0f:
         f2:bc:74:51:33:0e:0a:0c:6e:f8:fb:36:d6:e2:31:07:86:47:
         d8:80:b5:32:71:1e:c7:a4:53:9f:bf:7b:fe:d4:05:92:5a:8c:
         7e:ac:67:72:eb:ba:00:46:99:4a:b9:ce:56:2b:10:13:de:8a:
         0f:4f:3e:5c:71:32:80:f8:19:81:3d:8d:26:c8:c2:55:44:2c:
         d9:41:c5:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkEyNTExMTAvBgNVBAUTKDUzRDVEQjg3MEU1Q0NENDhFOThENzM1NjBEQkQ1RTY1
OTQ2QzJERDQwHhcNMjYwNzIyMjMzNDIxWhcNMjYwNzI5MjMzNDIxWjAYMRYwFAYD
VQQDEw02YTYxNTM3ZC1hODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA02UytvmaWFJhs1VK6dhTBY1nysnHapNj8KcxYen1reuXhwy3dNTNLQYIebSn
uznJ29wf0VVw+fnbmRAwhcwHwKiemPpv01jTEgZ6J4oa1P3GyExp23m8j3tjw1c9
pL0yJbieuDeCzn4W7QCMRszZEimSB5N/tsJXcaUJ82wa82xrl2KFOZEbbEHz2oV0
Xakz3joP2AdrYjfnvbuSWbtrWQvmPhkIEN27+/fqjvbQUHEmfp1fBV0SQNOuUBqg
TMCaMaqp2y/KMtPhY6zyRI3VbGXjhvPUTwX1FTANy1gLeDilxxIQsmzlYt9ODuVJ
Q8rrPsqC92cFn/id9QuJ5NMzywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLPYQkvH
TmqZ0y9QvP2TD2OmOrsDMB8GA1UdIwQYMBaAFFPV24cOXM1I6Y1zVg29XmWUbC3U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTI1MS9EOTNENzk2MEY3
NDgxMUVCQTc1RkNDMTNDNEY5QUUwMi9VOVhiaHc1Y3pVanBqWE5XRGIxZVpaUnNM
ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1U5WGJodzVjelVqcGpYTldEYjFlWlpSc0xkUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QTI1MS9EOTNENzk2MEY3NDgxMUVCQTc1RkNDMTNDNEY5QUUwMi9VOVhiaHc1Y3pV
anBqWE5XRGIxZVpaUnNMZFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAha43SsYSDYMoW751xr6ZvZBkEfSgTL6y69pXciBPwyvHNhYDP8GzkfFG7IQO
wv5TgGOY+hPxGXPYW0ozfJLkUynQgd9dVDn+V7uxSeYHPETLEBdBWXHxqxwpoo+e
FynLvT4jRpsAJ2Tucoo5rdGaB3OSlZLrdqQCDXpW2szH1hbC/h/1cWZeZyLwC6uP
05a4TL47gjguKgO9ZBrXIF/t5gqJztUfOid7iLh7PQ7YQRoncaIP8rx0UTMOCgxu
+Ps21uIxB4ZH2IC1MnEex6RTn797/tQFklqMfqxncuu6AEaZSrnOVisQE96KD08+
XHEygPgZgT2NJsjCVUQs2UHFNw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:09 2026 by rpki-client