Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
File:                     o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft (raw, json)
Hash identifier:          jU9b0zYLP6Q2t628pw/7RdAR/v26ROxuqCFVazn9Lk8=
Subject key identifier:   66:60:7D:FA:9A:67:6C:C0:00:C9:26:65:45:B8:9C:ED:BC:F8:D5:08
Authority key identifier: A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF
Certificate issuer:       /CN=A91C913E/serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
Certificate serial:       040F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
Manifest number:          0404
Signing time:             Thu 23 Jul 2026 01:18:06 +0000
Manifest this update:     Thu 23 Jul 2026 01:18:05 +0000
Manifest next update:     Thu 30 Jul 2026 01:18:05 +0000
Files and hashes:         1: o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl (hash: chIrc7st4B2cYSB4Q2ixXTCNC2oRQUV2zfIw2t0fAG0=)
                          2: 24578ECED56A11EFB764F716C4F9AE02.roa (hash: znPEMd590TcR/3IMAM9N/494V66QspV9NulehEdGj6g=)
                          3: 1445557CC6C011EC9D09EF1DC4F9AE02.roa (hash: ioqugPebSQF2gysJZ13DhVnh23alifn8w8A9RVCFn1g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl
                          rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:18:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1039 (0x40f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C913E, serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
        Validity
            Not Before: Jul 23 01:18:05 2026 GMT
            Not After : Jul 30 01:18:05 2026 GMT
        Subject: CN=6a616bce-7df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2b:fa:03:3e:54:03:ce:f1:71:f7:e4:55:f5:
                    cc:68:6c:d1:8f:71:15:33:d5:f8:de:5a:71:b6:d3:
                    39:e1:62:5c:da:3f:01:9c:a4:0c:95:5f:f3:17:9a:
                    c7:95:dd:d6:34:2e:4b:37:c5:7f:3f:ac:3c:39:c9:
                    ce:c7:a2:dc:b5:7a:65:5e:14:79:13:c8:af:d8:26:
                    8e:b0:a7:11:04:cb:05:6d:a4:12:d2:90:ed:d5:93:
                    f5:a3:78:c2:fa:91:d0:54:56:0b:b0:5d:46:00:aa:
                    92:ac:36:71:55:8c:da:08:ba:5b:73:73:0f:12:2d:
                    e6:98:47:1d:2d:02:2c:a0:3d:ee:23:7d:af:15:eb:
                    24:40:39:a7:87:eb:87:50:61:0d:3c:54:06:65:1c:
                    5c:fd:a6:ab:fd:14:74:cc:8a:c7:d3:4c:ad:fc:01:
                    6e:50:de:79:56:10:27:ca:3c:0e:db:6d:e1:4b:a4:
                    ca:06:58:60:58:8d:66:16:d9:15:24:49:d4:dc:3a:
                    f9:49:82:62:34:0f:62:b2:46:55:2c:74:c3:05:b3:
                    f0:62:9e:ad:65:22:a2:5b:02:c2:e9:41:6b:ef:5c:
                    05:b1:82:4c:da:d0:40:79:7a:92:9b:d8:b8:d4:6c:
                    33:fb:5d:c0:11:ad:ce:38:cf:f2:17:cf:f6:f4:2a:
                    ce:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:60:7D:FA:9A:67:6C:C0:00:C9:26:65:45:B8:9C:ED:BC:F8:D5:08
            X509v3 Authority Key Identifier:
                keyid:A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:35:0e:80:9c:6d:cc:86:e6:48:12:f7:b1:d0:73:68:43:3a:
         e8:07:e2:48:3b:98:30:2f:5f:5a:c7:07:cd:fd:89:0c:ed:a0:
         aa:87:6d:40:86:23:29:b3:7b:b4:6c:ca:b8:09:6a:ba:3b:5a:
         ea:29:ce:97:60:75:b2:3b:07:12:5c:5e:4c:c7:74:14:7e:36:
         20:04:ef:40:33:62:c9:6e:e4:b2:f1:05:6a:da:93:d0:ce:e5:
         e2:72:a6:b3:cf:7b:d3:21:f0:b1:8b:66:29:18:db:1d:2d:18:
         35:76:97:94:6c:2e:cd:d7:2e:d0:57:08:09:40:5e:40:32:37:
         90:c2:98:c8:ef:c9:e6:74:14:ba:5b:16:a8:70:dc:cc:f2:41:
         a3:26:14:22:92:64:6b:dc:41:b1:38:9f:d0:b6:78:a6:1a:72:
         b5:0d:51:52:6d:ac:96:49:9a:9a:d7:32:dd:15:ff:ec:08:d0:
         dc:15:d3:d1:a6:01:81:aa:a5:8f:d8:0d:3e:10:bd:1e:6d:a4:
         b4:20:2e:20:95:be:8b:2f:1a:07:69:0d:90:37:68:73:10:47:
         2a:f9:01:02:25:03:36:3f:2c:50:08:b4:c0:2c:86:08:95:27:
         cc:e6:77:09:45:7f:da:ac:9d:28:8c:f5:68:41:0d:3f:98:96:
         7b:27:af:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzkxM0UxMTAvBgNVBAUTKEEzNDcxQzMxNTMzQjg4RDFCRjhBNDBBMzJBN0RERTNC
QTBCQjFDQkYwHhcNMjYwNzIzMDExODA1WhcNMjYwNzMwMDExODA1WjAYMRYwFAYD
VQQDEw02YTYxNmJjZS03ZGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsiv6Az5UA87xcffkVfXMaGzRj3EVM9X43lpxttM54WJc2j8BnKQMlV/zF5rH
ld3WNC5LN8V/P6w8OcnOx6LctXplXhR5E8iv2CaOsKcRBMsFbaQS0pDt1ZP1o3jC
+pHQVFYLsF1GAKqSrDZxVYzaCLpbc3MPEi3mmEcdLQIsoD3uI32vFeskQDmnh+uH
UGENPFQGZRxc/aar/RR0zIrH00yt/AFuUN55VhAnyjwO223hS6TKBlhgWI1mFtkV
JEnU3Dr5SYJiNA9iskZVLHTDBbPwYp6tZSKiWwLC6UFr71wFsYJM2tBAeXqSm9i4
1Gwz+13AEa3OOM/yF8/29CrOOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGZgffqa
Z2zAAMkmZUW4nO28+NUIMB8GA1UdIwQYMBaAFKNHHDFTO4jRv4pAoyp93juguxy/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTEzRS9ERDA4OThGMEM2
QkQxMUVDODk2Mzc0MURDNEY5QUUwMi9vMGNjTVZNN2lOR19pa0NqS24zZU82QzdI
TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL28wY2NNVk03aU5HX2lrQ2pLbjNlTzZDN0hMOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTEzRS9ERDA4OThGMEM2QkQxMUVDODk2Mzc0MURDNEY5QUUwMi9vMGNjTVZNN2lO
R19pa0NqS24zZU82QzdITDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXTUOgJxtzIbmSBL3sdBzaEM66AfiSDuYMC9fWscHzf2JDO2gqodtQIYjKbN7
tGzKuAlqujta6inOl2B1sjsHElxeTMd0FH42IATvQDNiyW7ksvEFatqT0M7l4nKm
s8970yHwsYtmKRjbHS0YNXaXlGwuzdcu0FcICUBeQDI3kMKYyO/J5nQUulsWqHDc
zPJBoyYUIpJka9xBsTif0LZ4phpytQ1RUm2slkmamtcy3RX/7AjQ3BXT0aYBgaql
j9gNPhC9Hm2ktCAuIJW+iy8aB2kNkDdocxBHKvkBAiUDNj8sUAi0wCyGCJUnzOZ3
CUV/2qydKIz1aEENP5iWeyeviw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:42 2026 by rpki-client