Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft
File:                     sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft (raw, json)
Hash identifier:          qP0DeqHDKdjeUu3duQM/LyGr0U3GIv7ASdWH/ZpSKzk=
Subject key identifier:   6D:32:51:35:57:71:BA:4C:98:D4:48:46:5B:48:F9:15:F0:B1:14:C6
Authority key identifier: B1:5B:40:57:AB:50:96:B3:24:AB:CB:1C:7F:02:7B:6F:A3:66:C8:D5
Certificate issuer:       /CN=A91BEA8B/serialNumber=B15B4057AB5096B324ABCB1C7F027B6FA366C8D5
Certificate serial:       D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVtAV6tQlrMkq8scfwJ7b6NmyNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft
Manifest number:          D4
Signing time:             Thu 23 Jul 2026 08:32:16 +0000
Manifest this update:     Thu 23 Jul 2026 08:32:16 +0000
Manifest next update:     Thu 30 Jul 2026 08:32:16 +0000
Files and hashes:         1: sVtAV6tQlrMkq8scfwJ7b6NmyNU.crl (hash: b79tZYnpqx/rwnzxs8+FoXmih+ZIYvELbeRX9LEMhOA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.crl
                          rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVtAV6tQlrMkq8scfwJ7b6NmyNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BEA8B, serialNumber=B15B4057AB5096B324ABCB1C7F027B6FA366C8D5
        Validity
            Not Before: Jul 23 08:32:16 2026 GMT
            Not After : Jul 30 08:32:16 2026 GMT
        Subject: CN=6a61d190-30e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:46:0f:fa:a7:0d:5d:e9:67:81:f0:90:f6:69:
                    34:ed:12:98:be:3d:ce:fd:46:cd:02:28:32:1e:9b:
                    3b:76:68:99:56:a2:07:f6:bf:2d:c2:48:4a:38:ce:
                    88:a0:cf:27:a8:4f:4a:21:53:51:7c:a0:97:db:05:
                    52:a7:3b:76:ee:fd:24:35:b5:32:f6:b2:f4:9b:7a:
                    3e:49:1c:98:33:f6:81:d2:93:0b:6a:bd:67:17:6b:
                    71:a3:d6:d9:58:16:56:1d:06:22:a2:e1:8b:ee:7c:
                    84:f2:dc:f5:46:4c:54:cd:09:3a:3e:77:91:c5:3d:
                    a0:e3:70:82:9e:8f:73:5c:c5:33:ce:04:d3:78:2d:
                    74:ba:6a:34:3e:fd:bc:db:33:ac:bb:98:4b:34:23:
                    39:3a:66:23:90:ee:51:b3:23:67:71:07:71:1a:e6:
                    2c:54:d4:c3:b7:d6:82:ac:ca:69:6f:dd:77:6d:4a:
                    fc:87:99:99:15:0a:90:25:d0:93:dd:4e:4d:f7:d2:
                    a6:7d:89:ba:2b:1e:dd:e6:38:19:c0:0d:cf:63:1b:
                    ad:7c:1d:77:0d:b2:92:c2:a3:ba:5a:46:63:16:45:
                    59:ee:b1:47:42:21:ef:dc:2d:31:2e:b5:e1:ef:c7:
                    ec:08:be:f2:4a:6c:80:ef:bd:7c:40:49:36:04:da:
                    88:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:32:51:35:57:71:BA:4C:98:D4:48:46:5B:48:F9:15:F0:B1:14:C6
            X509v3 Authority Key Identifier:
                keyid:B1:5B:40:57:AB:50:96:B3:24:AB:CB:1C:7F:02:7B:6F:A3:66:C8:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVtAV6tQlrMkq8scfwJ7b6NmyNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:74:02:a1:36:f7:51:e4:4e:70:61:28:63:10:99:9e:da:60:
         aa:17:70:78:c5:4d:2f:b6:ec:12:5f:83:83:54:29:80:12:e6:
         fc:25:1d:59:2a:e3:e3:89:8d:55:b9:cf:32:0b:14:0e:48:90:
         b6:f5:a4:ef:f9:f0:52:2c:50:ba:84:82:ba:1d:cb:aa:08:3e:
         22:29:4d:6f:6d:d2:f9:4c:13:96:82:f9:e9:43:27:33:3a:a7:
         b0:d4:67:df:4e:7b:0a:8c:c3:97:9f:0d:0f:21:c7:94:dd:03:
         ab:f0:35:28:49:a7:5b:3b:01:b9:b8:71:e7:3a:7e:00:23:e3:
         e2:e7:3b:79:d3:84:f9:05:5a:80:ac:96:f6:96:50:ec:d1:ad:
         bb:14:b5:c9:ab:35:7c:1d:a7:7f:f5:16:93:95:b0:d1:1f:6d:
         cf:65:86:82:81:19:e8:c0:42:5a:0b:1f:f9:28:bb:cf:e8:5e:
         81:d3:26:03:95:c5:66:20:0a:27:32:45:d1:29:74:d5:ad:0d:
         ac:fc:3f:11:69:61:e4:ae:ca:ca:d5:66:df:02:fc:64:e6:ba:
         30:3a:10:3d:29:f1:6a:92:b2:9c:76:f0:19:74:01:1e:a9:ad:
         f6:ed:1b:1c:e8:c8:e1:17:89:49:09:e6:0d:d0:24:7c:3d:f9:
         ad:8d:92:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkVBOEIxMTAvBgNVBAUTKEIxNUI0MDU3QUI1MDk2QjMyNEFCQ0IxQzdGMDI3QjZG
QTM2NkM4RDUwHhcNMjYwNzIzMDgzMjE2WhcNMjYwNzMwMDgzMjE2WjAYMRYwFAYD
VQQDEw02YTYxZDE5MC0zMGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwUYP+qcNXelngfCQ9mk07RKYvj3O/UbNAigyHps7dmiZVqIH9r8twkhKOM6I
oM8nqE9KIVNRfKCX2wVSpzt27v0kNbUy9rL0m3o+SRyYM/aB0pMLar1nF2txo9bZ
WBZWHQYiouGL7nyE8tz1RkxUzQk6PneRxT2g43CCno9zXMUzzgTTeC10umo0Pv28
2zOsu5hLNCM5OmYjkO5RsyNncQdxGuYsVNTDt9aCrMppb913bUr8h5mZFQqQJdCT
3U5N99KmfYm6Kx7d5jgZwA3PYxutfB13DbKSwqO6WkZjFkVZ7rFHQiHv3C0xLrXh
78fsCL7ySmyA7718QEk2BNqIAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG0yUTVX
cbpMmNRIRltI+RXwsRTGMB8GA1UdIwQYMBaAFLFbQFerUJazJKvLHH8Ce2+jZsjV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUE4Qi9DMjdFMzc5NjRC
ODExMUYwOEY2NTUwN0VDNEY5QUUwMi9zVnRBVjZ0UWxyTWtxOHNjZndKN2I2Tm15
TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NWdEFWNnRRbHJNa3E4c2Nmd0o3YjZObXlOVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RUE4Qi9DMjdFMzc5NjRCODExMUYwOEY2NTUwN0VDNEY5QUUwMi9zVnRBVjZ0UWxy
TWtxOHNjZndKN2I2Tm15TlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqHQCoTb3UeROcGEoYxCZntpgqhdweMVNL7bsEl+Dg1QpgBLm/CUdWSrj44mN
VbnPMgsUDkiQtvWk7/nwUixQuoSCuh3Lqgg+IilNb23S+UwTloL56UMnMzqnsNRn
3057CozDl58NDyHHlN0Dq/A1KEmnWzsBubhx5zp+ACPj4uc7edOE+QVagKyW9pZQ
7NGtuxS1yas1fB2nf/UWk5Ww0R9tz2WGgoEZ6MBCWgsf+Si7z+hegdMmA5XFZiAK
JzJF0Sl01a0NrPw/EWlh5K7KytVm3wL8ZOa6MDoQPSnxapKynHbwGXQBHqmt9u0b
HOjI4ReJSQnmDdAkfD35rY2SLQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:14:20 2026 by rpki-client