Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
File:                     0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft (raw, json)
Hash identifier:          CKdGDcmw9hHK2m1SvAz7XkpXiVSh55oYJ0cSq0Sm0/Q=
Subject key identifier:   D9:C2:F2:19:E1:2D:BA:F2:33:FA:C1:B6:02:E3:79:9F:96:51:BB:84
Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
Certificate issuer:       /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Certificate serial:       0A4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
Manifest number:          09F5
Signing time:             Wed 22 Jul 2026 20:23:03 +0000
Manifest this update:     Wed 22 Jul 2026 20:23:02 +0000
Manifest next update:     Wed 29 Jul 2026 20:23:02 +0000
Files and hashes:         1: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl (hash: zqt3kpau4YIqcpBkGLv2Vv6YMUjQGUp5LyxFJVIOhWs=)
                          2: 51B031C80E8D11EE89A0B128C4F9AE02.roa (hash: /AqzGVP/RU7VivZQf679uLu1hQ4PEwap68JYs68UOUA=)
                          3: DF72CB82640811F1A119CBC19847A888.roa (hash: cEvyr/Gl0yrys7VxpYexlrU+a3/SL1hP/5swCnKr6iM=)
                          4: 6B7D02AEB4A111F08515F713C4F9AE02.roa (hash: KSjOH0qSpAK/DBNETg1G0TL4OaIKzJinGTqF6Z++SO4=)
                          5: BDB203466B5D11EF84E04577C4F9AE02.roa (hash: ktr77GGT9fUMH7Uwa9KLHv2apdlBRjzWDQ3Us8CVMz4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
                          rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2638 (0xa4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8F27, serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
        Validity
            Not Before: Jul 22 20:23:02 2026 GMT
            Not After : Jul 29 20:23:02 2026 GMT
        Subject: CN=6a6126a7-4630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:57:43:8a:57:8a:20:19:95:b1:c0:1b:a5:33:
                    95:8b:97:ff:dc:9a:23:ba:5b:4a:15:17:57:9d:ff:
                    76:45:03:44:a3:c0:19:f2:b6:88:cb:d2:8a:cf:c8:
                    ea:f0:c9:fe:cd:3a:ae:8c:75:cd:47:7b:a5:f8:23:
                    e7:70:28:30:97:50:ab:f7:e5:15:92:0b:26:e9:94:
                    93:0b:c0:d5:df:a1:b7:7e:35:a8:23:a6:af:b9:36:
                    56:54:5e:ee:cb:04:48:8a:b1:18:79:cb:aa:39:a9:
                    a7:93:23:7f:c9:55:fa:73:6f:08:25:0d:c1:67:4a:
                    14:88:46:9a:71:6b:40:9c:7e:a6:68:6e:55:18:94:
                    6c:01:c8:c7:06:8a:48:33:12:f7:e8:6c:6e:1f:34:
                    eb:1a:71:7a:43:d9:56:e6:bc:f2:57:c5:4e:6f:83:
                    a5:12:35:e9:01:4d:f4:53:24:2a:75:81:7b:de:b5:
                    49:1f:5c:12:ea:02:9f:e2:16:00:05:c2:e9:c5:b9:
                    b1:0f:a1:d7:ed:35:72:9b:bf:8b:41:fd:a0:26:0d:
                    2c:73:57:d6:6d:29:16:46:55:e5:14:23:bd:5a:1c:
                    b4:e9:38:96:05:58:65:df:1e:31:e6:0e:ff:f1:46:
                    ed:cd:d8:e9:2a:4f:6c:8a:66:90:ff:8b:1c:bf:bd:
                    c3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C2:F2:19:E1:2D:BA:F2:33:FA:C1:B6:02:E3:79:9F:96:51:BB:84
            X509v3 Authority Key Identifier:
                keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:3a:57:1f:2b:81:1b:14:5c:4e:86:81:f5:f6:3f:97:0b:76:
         01:38:1e:71:4e:a9:1c:f2:c4:44:68:de:0d:33:50:62:af:f9:
         4b:03:7f:7c:c9:fa:c1:78:90:7f:dc:3f:2d:a4:ba:b8:27:02:
         92:d1:30:a7:4c:93:73:a4:6a:f7:54:1d:7a:7e:c8:a7:93:03:
         17:b0:49:c4:0d:61:d2:be:4d:b6:14:be:5a:d9:39:60:19:fc:
         cf:3e:f4:fa:b9:f5:b6:9e:23:4e:ff:eb:ae:6c:ba:f6:1d:bf:
         69:35:49:a1:ae:af:b5:5e:42:06:8e:4d:49:aa:f6:c3:13:3a:
         14:6d:9d:85:8c:e8:a0:22:84:86:37:69:80:41:35:7a:f2:41:
         8f:00:5c:67:60:69:b4:a4:d0:60:54:f2:2b:87:c5:52:18:e1:
         e4:4e:f9:89:f5:05:87:47:43:4c:e6:d9:cf:e2:13:38:49:11:
         4e:d8:29:a9:64:c3:92:ca:b9:34:25:4d:61:84:46:38:d5:0c:
         f1:0d:b1:e6:c4:5a:97:e9:90:f9:59:62:41:c2:68:32:db:a1:
         fb:f7:bc:e3:18:df:61:76:b5:3c:18:54:26:5e:a4:22:45:d0:
         b1:6b:08:ab:a9:96:01:26:5b:b6:82:0b:20:54:06:23:91:88:
         14:dd:90:e8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzhGMjcxMTAvBgNVBAUTKEQxQTM2Q0Q4RUQyMzU1MDgyNzYxQTNEQjEzRUREMzBE
RkRBMkNGRDAwHhcNMjYwNzIyMjAyMzAyWhcNMjYwNzI5MjAyMzAyWjAYMRYwFAYD
VQQDEw02YTYxMjZhNy00NjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtVdDileKIBmVscAbpTOVi5f/3JojultKFRdXnf92RQNEo8AZ8raIy9KKz8jq
8Mn+zTqujHXNR3ul+CPncCgwl1Cr9+UVkgsm6ZSTC8DV36G3fjWoI6avuTZWVF7u
ywRIirEYecuqOamnkyN/yVX6c28IJQ3BZ0oUiEaacWtAnH6maG5VGJRsAcjHBopI
MxL36GxuHzTrGnF6Q9lW5rzyV8VOb4OlEjXpAU30UyQqdYF73rVJH1wS6gKf4hYA
BcLpxbmxD6HX7TVym7+LQf2gJg0sc1fWbSkWRlXlFCO9Why06TiWBVhl3x4x5g7/
8UbtzdjpKk9simaQ/4scv73DnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNnC8hnh
LbryM/rBtgLjeZ+WUbuEMB8GA1UdIwQYMBaAFNGjbNjtI1UIJ2Gj2xPt0w39os/Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEYyNy83RjUyMjlBOEIw
OTIxMUVBQjVEQkVDNThDNEY5QUUwMi8wYU5zMk8walZRZ25ZYVBiRS0zVERmMml6
OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBhTnMyTzBqVlFnbllhUGJFLTNURGYyaXo5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OEYyNy83RjUyMjlBOEIwOTIxMUVBQjVEQkVDNThDNEY5QUUwMi8wYU5zMk8walZR
Z25ZYVBiRS0zVERmMml6OUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgDpXHyuBGxRcToaB9fY/lwt2ATgecU6pHPLERGjeDTNQYq/5SwN/fMn6wXiQ
f9w/LaS6uCcCktEwp0yTc6Rq91Qden7Ip5MDF7BJxA1h0r5NthS+Wtk5YBn8zz70
+rn1tp4jTv/rrmy69h2/aTVJoa6vtV5CBo5NSar2wxM6FG2dhYzooCKEhjdpgEE1
evJBjwBcZ2BptKTQYFTyK4fFUhjh5E75ifUFh0dDTObZz+ITOEkRTtgpqWTDksq5
NCVNYYRGONUM8Q2x5sRal+mQ+VliQcJoMtuh+/e84xjfYXa1PBhUJl6kIkXQsWsI
q6mWASZbtoILIFQGI5GIFN2Q6A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:37:21 2026 by rpki-client