Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft
File:                     8eD9e9rxcZiQ9rJJs7xBghS6iss.mft (raw, json)
Hash identifier:          aryqUvLC2g335ecaXHG81AVWlZzySM81jF41PmSQmaw=
Subject key identifier:   17:24:46:19:54:33:B2:2E:9F:02:58:BB:83:F6:E0:FA:E8:7A:04:22
Authority key identifier: F1:E0:FD:7B:DA:F1:71:98:90:F6:B2:49:B3:BC:41:82:14:BA:8A:CB
Certificate issuer:       /CN=A91C9706/serialNumber=F1E0FD7BDAF1719890F6B249B3BC418214BA8ACB
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8eD9e9rxcZiQ9rJJs7xBghS6iss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft
Manifest number:          51
Signing time:             Thu 23 Jul 2026 10:19:00 +0000
Manifest this update:     Thu 23 Jul 2026 10:19:00 +0000
Manifest next update:     Thu 30 Jul 2026 10:19:00 +0000
Files and hashes:         1: 8eD9e9rxcZiQ9rJJs7xBghS6iss.crl (hash: y57G0+OwwJeUJCtCA5tjHshhgmwx1F6RKhvGx/g1Mas=)
                          2: B7B7EE46118411F1951E019C333D8C67.roa (hash: nTrTUgHl4VUdhScRvQ7M38Aw7fBG/zsPSb6R6Q8BgHU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.crl
                          rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8eD9e9rxcZiQ9rJJs7xBghS6iss.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9706, serialNumber=F1E0FD7BDAF1719890F6B249B3BC418214BA8ACB
        Validity
            Not Before: Jul 23 10:19:00 2026 GMT
            Not After : Jul 30 10:19:00 2026 GMT
        Subject: CN=6a61ea94-4266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:72:d6:cd:7a:79:7b:50:f7:3a:e6:5a:6e:a3:
                    14:9c:78:09:43:03:76:5d:2a:ec:a0:6e:82:aa:ea:
                    eb:b7:fd:9b:0b:59:74:0b:ad:d5:01:b6:3a:7d:47:
                    a1:16:3f:ba:0f:b5:05:90:f9:b2:b4:15:8d:1b:1d:
                    23:9f:ba:80:c0:61:53:8a:e1:d2:cd:f6:a2:c9:fd:
                    fd:b1:86:1e:92:5d:9b:42:01:5d:82:f4:bd:03:85:
                    27:94:18:b8:81:4f:f9:e0:9d:21:72:67:b4:e7:40:
                    0e:f3:0f:ef:31:77:e5:58:52:3d:0d:d0:0d:4c:fe:
                    f8:3a:78:2b:bf:7c:12:b4:e7:1c:12:5e:13:2e:09:
                    6a:60:37:ca:3a:82:48:2b:a1:43:2a:35:17:39:04:
                    d6:fb:0c:6a:62:7f:05:64:3d:fc:18:75:81:b3:b7:
                    56:83:64:c8:e0:64:4a:73:4f:9a:6c:09:d4:17:44:
                    dd:c7:93:65:de:fa:4e:7a:7d:ae:d1:82:89:b8:a1:
                    57:8b:8e:84:e2:ff:ca:bc:b8:2b:14:6c:1e:c2:5c:
                    0b:69:5e:91:83:1b:32:fc:a0:1f:d6:db:2f:b9:4a:
                    51:cf:3d:be:75:dd:ba:29:7e:25:e0:a8:bd:72:5a:
                    a1:a4:64:07:f6:17:7c:e7:df:4a:c3:d2:5e:23:8b:
                    cd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:24:46:19:54:33:B2:2E:9F:02:58:BB:83:F6:E0:FA:E8:7A:04:22
            X509v3 Authority Key Identifier:
                keyid:F1:E0:FD:7B:DA:F1:71:98:90:F6:B2:49:B3:BC:41:82:14:BA:8A:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8eD9e9rxcZiQ9rJJs7xBghS6iss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:d4:09:17:6f:5a:56:8c:ab:b1:cb:37:90:5e:3e:bc:11:bd:
         f3:dd:31:64:ef:b2:68:87:ce:86:bd:0a:83:ae:6a:d0:44:89:
         90:6d:cf:58:25:c6:4d:86:53:8d:85:a6:59:fd:de:0d:e7:14:
         61:4e:1b:1a:a9:a5:f4:ab:1f:80:46:b8:08:6c:ce:ba:ba:de:
         f8:85:48:ee:35:99:9c:21:8e:44:25:19:aa:05:05:95:86:ad:
         5e:e4:d6:46:0b:c0:65:87:c9:78:81:a8:16:9b:15:50:d2:54:
         0a:67:b8:de:df:89:02:40:81:91:ae:47:b3:ed:cf:da:4a:49:
         d8:91:e4:94:d4:82:fd:ec:5d:1b:b8:83:4a:c4:8b:66:b6:f4:
         c0:80:dd:44:99:8f:cf:c4:07:7f:2d:d5:2a:06:7c:67:e3:09:
         c3:a2:fd:05:1a:b1:b0:b1:a5:ad:59:b9:d5:87:bb:d5:89:26:
         25:6f:da:67:3c:de:88:82:82:16:5a:e5:0b:ae:4d:df:ab:25:
         ed:6c:d2:47:a8:7e:85:dc:09:f1:5c:b3:90:00:8e:6b:f1:f5:
         bc:ea:30:12:fa:54:c6:a6:cc:25:fb:8c:28:62:5f:ba:85:db:
         b1:2a:b9:a4:fa:38:88:87:35:34:58:fd:f9:61:8a:04:87:9a:
         ce:89:b1:85
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
OTcwNjExMC8GA1UEBRMoRjFFMEZEN0JEQUYxNzE5ODkwRjZCMjQ5QjNCQzQxODIx
NEJBOEFDQjAeFw0yNjA3MjMxMDE5MDBaFw0yNjA3MzAxMDE5MDBaMBgxFjAUBgNV
BAMTDTZhNjFlYTk0LTQyNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDcctbNenl7UPc65lpuoxSceAlDA3ZdKuygboKq6uu3/ZsLWXQLrdUBtjp9R6EW
P7oPtQWQ+bK0FY0bHSOfuoDAYVOK4dLN9qLJ/f2xhh6SXZtCAV2C9L0DhSeUGLiB
T/ngnSFyZ7TnQA7zD+8xd+VYUj0N0A1M/vg6eCu/fBK05xwSXhMuCWpgN8o6gkgr
oUMqNRc5BNb7DGpifwVkPfwYdYGzt1aDZMjgZEpzT5psCdQXRN3Hk2Xe+k56fa7R
gom4oVeLjoTi/8q8uCsUbB7CXAtpXpGDGzL8oB/W2y+5SlHPPb513bopfiXgqL1y
WqGkZAf2F3zn30rD0l4ji80xAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFyRGGVQz
si6fAli7g/bg+uh6BCIwHwYDVR0jBBgwFoAU8eD9e9rxcZiQ9rJJs7xBghS6issw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5NzA2L0Y4ODg0NDNBMTE0
NzExRjE4QkI0NTRBRjIyM0Q4QzY3LzhlRDllOXJ4Y1ppUTlySkpzN3hCZ2hTNmlz
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvOGVEOWU5cnhjWmlROXJKSnM3eEJnaFM2aXNzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5
NzA2L0Y4ODg0NDNBMTE0NzExRjE4QkI0NTRBRjIyM0Q4QzY3LzhlRDllOXJ4Y1pp
UTlySkpzN3hCZ2hTNmlzcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCh1AkXb1pWjKuxyzeQXj68Eb3z3TFk77Joh86GvQqDrmrQRImQbc9YJcZNhlON
haZZ/d4N5xRhThsaqaX0qx+ARrgIbM66ut74hUjuNZmcIY5EJRmqBQWVhq1e5NZG
C8Blh8l4gagWmxVQ0lQKZ7je34kCQIGRrkez7c/aSknYkeSU1IL97F0buINKxItm
tvTAgN1EmY/PxAd/LdUqBnxn4wnDov0FGrGwsaWtWbnVh7vViSYlb9pnPN6IgoIW
WuULrk3fqyXtbNJHqH6F3AnxXLOQAI5r8fW86jAS+lTGpswl+4woYl+6hduxKrmk
+jiIhzU0WP35YYoEh5rOibGF
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:10:36 2026 by rpki-client