Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
File:                     edZsZKYWWi5Ms31JcA5sdhhBw5o.mft (raw, json)
Hash identifier:          LUISKwOlGLk5f8sWUMtlPh+NaZe8ElmkMURmtNCpcEM=
Subject key identifier:   6B:06:0A:87:FC:F9:B2:D9:7A:8E:03:B0:1A:83:1E:97:47:E0:9E:F6
Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
Certificate issuer:       /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Certificate serial:       14E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
Manifest number:          1477
Signing time:             Wed 22 Jul 2026 16:58:55 +0000
Manifest this update:     Wed 22 Jul 2026 16:58:54 +0000
Manifest next update:     Wed 29 Jul 2026 16:58:54 +0000
Files and hashes:         1: edZsZKYWWi5Ms31JcA5sdhhBw5o.crl (hash: +y4MLrO0AbdZh4CA5ppKATuPBaYRYHKtdQZO7iAB1Ds=)
                          2: 1DE5F30A87F211ECBEBC5339C4F9AE02.roa (hash: 3JrsTAYAGHynUAu7FXh7i6mKx20TisYQ8rxOPDDqL30=)
                          3: 7CD480F64E4D11EAAE4CAC65C4F9AE02.roa (hash: wx0Bxj5s6AtaxYxKTNAOFbXAlN9uVO+TgC5goivQpV0=)
                          4: 85C534069AA711EBB9BBD670C4F9AE02.roa (hash: wFgqxtjBGSnNz0V3JbbMZbJffl0S6xGyyA4P8cQ+F5Q=)
                          5: 92F5E790172E11EA9CCC934DC4F9AE02.roa (hash: JVqWfxQ3Imk/tHtB1lFlgnw7x7J3sXEP1K4IX9cY6Sk=)
                          6: 1F90160E87F211ECBEBC5339C4F9AE02.roa (hash: RY4kpnbvPpjFeHSCdD9BLyLv0qAmm+duLbNyMu+5+gA=)
                          7: CC7502F8670E11EC90C22B7EC4F9AE02.roa (hash: XTo7hzo+YS5Mx8+cYSyBvlAGKzskb8sqYpNZv6UbZw0=)
                          8: C24FF4C8050D11EA8626AD5DC4F9AE02.roa (hash: xKENUn13Ef2bP0B62DPkEXchyNaPtBjxu7QmsrqxB9E=)
                          9: 17780EF09B3C11E8A13BA63AC4F9AE02.roa (hash: 35M/vR3gb3Yiy8oN9cgMH76bee2iK7+OfBfGhUwH558=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
                          rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:58:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5352 (0x14e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
        Validity
            Not Before: Jul 22 16:58:54 2026 GMT
            Not After : Jul 29 16:58:54 2026 GMT
        Subject: CN=6a60f6cf-a122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:df:51:2e:df:02:93:e9:64:ae:45:cf:f7:d9:
                    1b:c3:37:96:8a:64:17:81:19:1f:e9:31:8a:da:43:
                    6e:c4:91:23:70:82:7c:96:91:50:b4:21:7d:64:7a:
                    dc:87:7e:7f:53:c3:9d:1e:8f:90:49:7e:cf:39:22:
                    dd:04:f6:e7:1c:f7:b1:03:e4:3a:e6:e9:c4:a1:52:
                    20:4e:a5:d6:18:b4:cc:19:15:5c:8f:f6:19:fb:29:
                    31:6b:69:43:e5:ea:71:bf:fc:f8:81:9c:e1:91:72:
                    29:d7:ba:e6:c1:f8:84:cf:79:ef:94:ea:84:71:b3:
                    1d:55:7a:fe:28:3a:7b:5d:f4:80:a3:fa:2d:74:83:
                    5a:f4:3a:ac:74:7c:ce:bc:fa:8a:f4:b1:dc:49:e8:
                    f2:88:37:29:cf:54:6e:7f:7b:c2:63:0e:e8:75:38:
                    60:72:5e:d7:3a:f2:58:02:c5:91:76:88:fe:73:e6:
                    07:88:51:86:59:83:5a:92:ab:27:fe:38:c8:bb:49:
                    27:bd:1b:07:2d:af:62:8a:31:69:fa:43:4d:45:ec:
                    64:a9:5e:e6:f1:d7:bd:4a:97:f7:48:23:e3:fc:ac:
                    1a:73:3f:cd:26:75:22:f1:7f:a9:a1:93:28:ee:94:
                    07:3c:31:d4:f6:62:2c:ba:ae:b7:39:78:00:28:66:
                    38:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:06:0A:87:FC:F9:B2:D9:7A:8E:03:B0:1A:83:1E:97:47:E0:9E:F6
            X509v3 Authority Key Identifier:
                keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:93:e7:b7:cf:43:11:47:db:32:88:a4:cd:72:fa:7f:a1:fb:
         61:05:ac:1b:bd:f0:21:03:94:9a:de:1b:ce:67:44:3f:68:7a:
         3e:2e:f9:f0:61:8d:cf:a5:d0:2c:64:fd:02:20:ed:83:08:0c:
         0b:45:98:93:2b:21:71:3a:f5:6c:fb:0d:5c:6d:f0:ea:b0:20:
         9c:29:d8:9d:1e:86:d6:da:2a:fa:7e:9a:03:7f:e0:5e:d0:23:
         18:ae:cf:87:b1:5c:30:96:08:3c:3b:5d:41:8f:4e:f8:af:0e:
         d3:f8:27:52:1f:1d:e0:50:b2:a6:1f:e8:e2:30:0e:bf:7e:78:
         8b:c8:d6:fc:39:63:a7:e9:af:ab:fe:8e:ee:c5:63:be:70:85:
         74:41:14:60:ee:bc:90:8a:20:c0:df:40:32:08:2a:f7:80:15:
         52:0e:97:fd:9e:07:9d:57:9c:70:b9:e4:40:2f:95:5b:69:6e:
         bc:02:c8:38:10:2b:ce:69:7c:a0:36:e2:74:db:94:f2:7d:2d:
         e0:33:c0:12:01:67:b2:f5:95:bd:ec:6c:79:20:01:3b:a8:4b:
         32:74:ac:e0:29:26:7c:d3:45:dc:a5:8e:88:4f:01:71:c5:b3:
         3f:81:15:fb:f2:a7:bf:d8:22:1a:69:34:fa:68:c5:64:3b:0e:
         08:a5:d9:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkM4NDcxMTAvBgNVBAUTKDc5RDY2QzY0QTYxNjVBMkU0Q0IzN0Q0OTcwMEU2Qzc2
MTg0MUMzOUEwHhcNMjYwNzIyMTY1ODU0WhcNMjYwNzI5MTY1ODU0WjAYMRYwFAYD
VQQDEw02YTYwZjZjZi1hMTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA099RLt8Ck+lkrkXP99kbwzeWimQXgRkf6TGK2kNuxJEjcIJ8lpFQtCF9ZHrc
h35/U8OdHo+QSX7POSLdBPbnHPexA+Q65unEoVIgTqXWGLTMGRVcj/YZ+ykxa2lD
5epxv/z4gZzhkXIp17rmwfiEz3nvlOqEcbMdVXr+KDp7XfSAo/otdINa9DqsdHzO
vPqK9LHcSejyiDcpz1Ruf3vCYw7odThgcl7XOvJYAsWRdoj+c+YHiFGGWYNakqsn
/jjIu0knvRsHLa9iijFp+kNNRexkqV7m8de9Spf3SCPj/Kwacz/NJnUi8X+poZMo
7pQHPDHU9mIsuq63OXgAKGY42wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGsGCof8
+bLZeo4DsBqDHpdH4J72MB8GA1UdIwQYMBaAFHnWbGSmFlouTLN9SXAObHYYQcOa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzg0Ny9BQ0Y5NDM1MjlB
RjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dpNU1zMzFKY0E1c2RoaEJ3
NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VkWnNaS1lXV2k1TXMzMUpjQTVzZGhoQnc1by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Qzg0Ny9BQ0Y5NDM1MjlBRjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dp
NU1zMzFKY0E1c2RoaEJ3NW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAL5Pnt89DEUfbMoikzXL6f6H7YQWsG73wIQOUmt4bzmdEP2h6Pi758GGNz6XQ
LGT9AiDtgwgMC0WYkyshcTr1bPsNXG3w6rAgnCnYnR6G1toq+n6aA3/gXtAjGK7P
h7FcMJYIPDtdQY9O+K8O0/gnUh8d4FCyph/o4jAOv354i8jW/Dljp+mvq/6O7sVj
vnCFdEEUYO68kIogwN9AMggq94AVUg6X/Z4HnVeccLnkQC+VW2luvALIOBArzml8
oDbidNuU8n0t4DPAEgFnsvWVvexseSABO6hLMnSs4CkmfNNF3KWOiE8BccWzP4EV
+/Knv9giGmk0+mjFZDsOCKXZBw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:45:50 2026 by rpki-client