Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft
File:                     l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft (raw, json)
Hash identifier:          49lFx/8dM+zyyftyAHggzu6DAU/7hflaz38QyltRZJk=
Subject key identifier:   9C:D9:43:2B:FC:40:11:6C:3F:87:A1:57:66:98:AE:6C:00:32:DD:20
Authority key identifier: 97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4
Certificate issuer:       /CN=A91CBB09/serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4
Certificate serial:       04DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft
Manifest number:          04C6
Signing time:             Thu 23 Jul 2026 00:39:12 +0000
Manifest this update:     Thu 23 Jul 2026 00:39:12 +0000
Manifest next update:     Thu 30 Jul 2026 00:39:12 +0000
Files and hashes:         1: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl (hash: 2TOrt2OzkXxpdlw85VH4RE3jzpkpBVYew2TuOwEKGCg=)
                          2: F865B8887CEB11ECA79BD83DC4F9AE02.roa (hash: 2aYC0ELWow+IfSe343bqAO+DbKR4exbO+moWs9x1JMo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl
                          rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:39:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1242 (0x4da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBB09, serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4
        Validity
            Not Before: Jul 23 00:39:12 2026 GMT
            Not After : Jul 30 00:39:12 2026 GMT
        Subject: CN=6a6162b0-534b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b9:81:8b:d6:c8:c4:7f:9b:f2:58:ff:16:f4:
                    fc:14:70:7f:86:6e:26:01:d8:0a:60:00:fe:93:2b:
                    c7:b9:27:35:3f:9c:20:84:70:8a:40:92:a6:d7:8f:
                    82:56:9b:43:e5:cd:4e:13:79:17:1f:87:4c:87:d1:
                    f6:02:34:1e:d5:d6:c4:69:51:8e:9b:f5:b6:f0:d8:
                    44:1d:c2:c6:e6:ae:04:2e:79:c4:ba:9f:73:e9:d1:
                    b9:2f:af:ff:83:a0:d1:5c:5a:bf:05:6b:d9:ea:07:
                    8c:9a:2c:7f:48:4f:d8:22:8e:05:93:31:70:50:c0:
                    f8:f4:a6:13:72:aa:19:6a:26:30:1c:82:4c:82:b6:
                    c8:2c:80:b6:0e:5b:fe:55:96:ab:65:56:94:3e:14:
                    d5:76:a2:f8:f1:fe:04:c7:f7:53:a4:dc:86:7d:22:
                    36:b9:89:64:ed:fe:28:37:0b:70:71:f9:e1:94:bc:
                    e3:cd:10:bc:83:db:44:07:e5:c5:b3:85:24:cf:ff:
                    b1:b8:55:23:67:98:ea:c0:e9:5a:34:15:33:15:d0:
                    91:3b:cd:03:6a:71:b5:9a:58:7d:fe:f0:ee:e1:0f:
                    73:ef:06:94:66:ce:03:32:5d:dc:46:0a:ec:d8:b0:
                    54:d0:39:45:16:7b:c8:f2:8c:95:82:09:d0:70:fb:
                    d3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D9:43:2B:FC:40:11:6C:3F:87:A1:57:66:98:AE:6C:00:32:DD:20
            X509v3 Authority Key Identifier:
                keyid:97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:05:32:52:d8:e1:04:7f:84:e6:43:10:cd:8c:c5:02:f6:28:
         11:6b:62:2a:e8:5d:07:6e:5e:61:f5:19:df:0c:66:25:57:47:
         fa:26:38:f6:c0:15:b4:7b:5f:b6:80:a7:19:34:3e:a9:ff:b6:
         7b:10:2c:04:cc:49:f2:82:01:85:7d:f2:b8:af:9e:33:95:1d:
         93:b8:f5:48:be:1d:48:1b:85:e9:24:7a:80:ed:d1:cf:b2:ba:
         99:67:63:c8:7e:02:50:c2:8f:14:fa:85:3a:9e:f0:56:2b:dd:
         3d:fc:d8:ae:11:52:5d:de:35:f3:f8:fa:b9:8e:6f:7f:84:c1:
         59:35:f7:4d:49:66:9c:e9:f5:1e:ef:65:37:b5:06:ea:e4:59:
         f1:eb:cb:02:6a:4d:e0:6b:f0:73:57:60:96:1f:7d:c6:19:56:
         93:87:8c:f4:6e:b1:2b:4a:e8:0a:f9:3b:d1:b8:35:a8:1d:91:
         43:55:f8:55:4f:6c:ed:30:ce:e8:e7:6f:a3:bf:81:18:7e:a3:
         f6:f6:25:43:27:d1:f4:4a:06:dc:23:28:bb:65:c9:3b:e4:6a:
         16:b9:26:1e:3b:c0:06:5e:7c:25:b9:54:7c:98:29:6d:ab:3f:
         d5:c1:8d:65:73:04:4f:47:77:90:84:69:f3:5d:c2:30:b2:59:
         a5:c7:94:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0JCMDkxMTAvBgNVBAUTKDk3NUJENTVENjE1Qzk4NjBBQ0NGRDg2MDk5ODUzQkNC
MTlBOTlCRTQwHhcNMjYwNzIzMDAzOTEyWhcNMjYwNzMwMDAzOTEyWjAYMRYwFAYD
VQQDEw02YTYxNjJiMC01MzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzrmBi9bIxH+b8lj/FvT8FHB/hm4mAdgKYAD+kyvHuSc1P5wghHCKQJKm14+C
VptD5c1OE3kXH4dMh9H2AjQe1dbEaVGOm/W28NhEHcLG5q4ELnnEup9z6dG5L6//
g6DRXFq/BWvZ6geMmix/SE/YIo4FkzFwUMD49KYTcqoZaiYwHIJMgrbILIC2Dlv+
VZarZVaUPhTVdqL48f4Ex/dTpNyGfSI2uYlk7f4oNwtwcfnhlLzjzRC8g9tEB+XF
s4Ukz/+xuFUjZ5jqwOlaNBUzFdCRO80DanG1mlh9/vDu4Q9z7waUZs4DMl3cRgrs
2LBU0DlFFnvI8oyVggnQcPvTBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJzZQyv8
QBFsP4ehV2aYrmwAMt0gMB8GA1UdIwQYMBaAFJdb1V1hXJhgrM/YYJmFO8sZqZvk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIwOS82MTFEQUJBMDdD
RTgxMUVDQUM4OTQ4MzlDNEY5QUUwMi9sMXZWWFdGY21HQ3N6OWhnbVlVN3l4bXBt
LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2wxdlZYV0ZjbUdDc3o5aGdtWVU3eXhtcG0tUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QkIwOS82MTFEQUJBMDdDRTgxMUVDQUM4OTQ4MzlDNEY5QUUwMi9sMXZWWFdGY21H
Q3N6OWhnbVlVN3l4bXBtLVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANQUyUtjhBH+E5kMQzYzFAvYoEWtiKuhdB25eYfUZ3wxmJVdH+iY49sAVtHtf
toCnGTQ+qf+2exAsBMxJ8oIBhX3yuK+eM5Udk7j1SL4dSBuF6SR6gO3Rz7K6mWdj
yH4CUMKPFPqFOp7wVivdPfzYrhFSXd418/j6uY5vf4TBWTX3TUlmnOn1Hu9lN7UG
6uRZ8evLAmpN4Gvwc1dglh99xhlWk4eM9G6xK0roCvk70bg1qB2RQ1X4VU9s7TDO
6Odvo7+BGH6j9vYlQyfR9EoG3CMou2XJO+RqFrkmHjvABl58JblUfJgpbas/1cGN
ZXMET0d3kIRp813CMLJZpceUGQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:06:49 2026 by rpki-client