Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft
File:                     MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft (raw, json)
Hash identifier:          CJnJmIbRwwaCFfaqICvi30OUlGKraGkA34T0dPubYyU=
Subject key identifier:   84:D0:EB:5B:8A:D3:06:80:4A:48:D4:32:9B:26:FC:A4:3E:2F:08:8A
Authority key identifier: 32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96
Certificate issuer:       /CN=A91CBF47/serialNumber=326371E399824F8004ED96756819760881B7CD96
Certificate serial:       3577
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft
Manifest number:          356E
Signing time:             Fri 24 Jul 2026 14:34:47 +0000
Manifest this update:     Fri 24 Jul 2026 14:34:47 +0000
Manifest next update:     Fri 31 Jul 2026 14:34:47 +0000
Files and hashes:         1: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl (hash: AQYI8ejBD4RVi8BgGKUTrZ2DuFmKS/DKS1Ela2wST40=)
                          2: 608C129E33E011ED979ED20EC4F9AE02.roa (hash: rxf3DHMFewfYjEmU/j0BdMyIOehzcE11rbLSMoX1rKg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl
                          rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 14:34:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13687 (0x3577)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBF47, serialNumber=326371E399824F8004ED96756819760881B7CD96
        Validity
            Not Before: Jul 24 14:34:47 2026 GMT
            Not After : Jul 31 14:34:47 2026 GMT
        Subject: CN=6a637807-7234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:07:ca:c2:7e:8b:c3:3a:44:62:f0:dc:77:6f:
                    ac:1e:83:02:79:93:bf:1d:58:f0:52:0a:7e:cf:44:
                    cf:bb:2c:10:fe:2e:57:67:56:7d:47:7c:8d:2f:75:
                    1f:9a:ce:13:ac:77:fa:b6:d2:c8:db:44:64:fe:26:
                    89:f2:6e:94:65:cc:20:9a:ca:51:41:2a:99:86:0a:
                    89:26:ec:32:a8:e5:76:2a:da:9a:3b:ca:44:0b:d6:
                    82:47:0d:90:33:9f:14:96:f3:04:d9:8e:b3:64:21:
                    73:b9:d6:d0:db:47:6a:cf:da:d9:6f:f5:37:0a:fc:
                    74:a3:ba:51:01:85:e5:e6:78:f0:c9:a8:54:4b:67:
                    66:fa:84:0f:a8:8d:e0:e3:24:07:61:8d:56:2c:91:
                    ed:17:14:79:5e:15:a6:e4:55:6a:40:f6:48:c4:79:
                    23:90:d2:1a:2f:0c:42:2d:85:12:0f:bb:ca:31:da:
                    59:6c:f3:58:99:6f:d4:72:9d:57:7f:7c:08:3f:9d:
                    ca:3b:6e:65:46:04:e2:c6:0f:06:67:ed:1a:b4:f5:
                    ac:56:6b:1a:29:6d:a7:2d:44:25:86:bb:6f:41:2d:
                    6c:4b:70:59:73:08:af:11:fa:48:76:0c:b2:2e:96:
                    99:48:83:2c:30:5e:cd:05:78:50:41:68:c9:8b:36:
                    16:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D0:EB:5B:8A:D3:06:80:4A:48:D4:32:9B:26:FC:A4:3E:2F:08:8A
            X509v3 Authority Key Identifier:
                keyid:32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:3c:b9:ed:80:33:47:04:d3:50:ca:18:de:d6:5d:ac:d6:18:
         63:71:78:3d:17:95:31:b3:64:83:85:9c:96:c4:50:07:f6:a6:
         dd:c4:47:cc:28:75:49:9c:ce:08:01:14:f6:bb:14:70:22:e5:
         db:37:89:f2:79:b9:cf:8d:d3:9f:be:95:4f:56:da:4f:7a:5e:
         79:11:d4:72:2c:fa:1e:a4:7e:a8:8f:9f:a7:95:ec:af:77:b0:
         06:e3:52:45:a1:5d:f1:6b:60:a5:6a:dd:1e:7d:c9:f3:85:57:
         9a:6e:f3:12:84:97:cd:f8:28:ff:01:18:f3:7f:0e:7d:48:9f:
         a1:96:0a:8d:10:aa:73:1c:bc:ea:2d:2f:20:a5:c2:64:a3:8c:
         a5:e3:ad:93:28:3a:68:8f:ee:7c:22:b0:02:e2:3b:08:88:6b:
         5a:a3:af:c0:a5:fa:ac:96:17:5c:f9:84:64:f5:ba:64:83:f7:
         20:28:36:8b:51:e3:7f:f1:f8:f7:1a:83:c8:32:1f:95:a3:bb:
         42:8b:d1:a8:a5:f1:4c:8d:cb:e1:48:b9:47:59:ec:07:e0:04:
         a2:07:98:e5:02:5c:dd:1b:4d:94:5f:5f:a9:30:49:00:12:16:
         46:c3:26:50:6e:3d:14:73:13:aa:dd:62:82:f5:2c:83:73:59:
         a3:24:bd:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0JGNDcxMTAvBgNVBAUTKDMyNjM3MUUzOTk4MjRGODAwNEVEOTY3NTY4MTk3NjA4
ODFCN0NEOTYwHhcNMjYwNzI0MTQzNDQ3WhcNMjYwNzMxMTQzNDQ3WjAYMRYwFAYD
VQQDEw02YTYzNzgwNy03MjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqAfKwn6LwzpEYvDcd2+sHoMCeZO/HVjwUgp+z0TPuywQ/i5XZ1Z9R3yNL3Uf
ms4TrHf6ttLI20Rk/iaJ8m6UZcwgmspRQSqZhgqJJuwyqOV2KtqaO8pEC9aCRw2Q
M58UlvME2Y6zZCFzudbQ20dqz9rZb/U3Cvx0o7pRAYXl5njwyahUS2dm+oQPqI3g
4yQHYY1WLJHtFxR5XhWm5FVqQPZIxHkjkNIaLwxCLYUSD7vKMdpZbPNYmW/Ucp1X
f3wIP53KO25lRgTixg8GZ+0atPWsVmsaKW2nLUQlhrtvQS1sS3BZcwivEfpIdgyy
LpaZSIMsMF7NBXhQQWjJizYWjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFITQ61uK
0waASkjUMpsm/KQ+LwiKMB8GA1UdIwQYMBaAFDJjceOZgk+ABO2WdWgZdgiBt82W
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkY0Ny8zNzBDQTJDMDFE
OEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0QUU3WloxYUJsMkNJRzN6
WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01tTng0NW1DVDRBRTdaWjFhQmwyQ0lHM3paWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QkY0Ny8zNzBDQTJDMDFEOEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0
QUU3WloxYUJsMkNJRzN6WlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnjy57YAzRwTTUMoY3tZdrNYYY3F4PReVMbNkg4WclsRQB/am3cRHzCh1SZzO
CAEU9rsUcCLl2zeJ8nm5z43Tn76VT1baT3peeRHUciz6HqR+qI+fp5Xsr3ewBuNS
RaFd8WtgpWrdHn3J84VXmm7zEoSXzfgo/wEY838OfUifoZYKjRCqcxy86i0vIKXC
ZKOMpeOtkyg6aI/ufCKwAuI7CIhrWqOvwKX6rJYXXPmEZPW6ZIP3ICg2i1Hjf/H4
9xqDyDIflaO7QovRqKXxTI3L4Ui5R1nsB+AEogeY5QJc3RtNlF9fqTBJABIWRsMm
UG49FHMTqt1igvUsg3NZoyS9kg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:33:14 2026 by rpki-client