Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.mft
File:                     Rg9q_mnPqJzP1gEP4rpPniH3vnM.mft (raw, json)
Hash identifier:          s5V74+DzcfRaGEfaXbkdkGkHxRvTBG4X5ul4MbBip1o=
Subject key identifier:   EF:E8:00:4E:0B:F9:6F:18:FF:2B:25:C1:DD:40:D5:61:EE:6B:95:1C
Authority key identifier: 46:0F:6A:FE:69:CF:A8:9C:CF:D6:01:0F:E2:BA:4F:9E:21:F7:BE:73
Certificate issuer:       /CN=A91CCE09/serialNumber=460F6AFE69CFA89CCFD6010FE2BA4F9E21F7BE73
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg9q_mnPqJzP1gEP4rpPniH3vnM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.mft
Manifest number:          50
Signing time:             Thu 23 Jul 2026 10:18:27 +0000
Manifest this update:     Thu 23 Jul 2026 10:18:27 +0000
Manifest next update:     Thu 30 Jul 2026 10:18:27 +0000
Files and hashes:         1: Rg9q_mnPqJzP1gEP4rpPniH3vnM.crl (hash: vM1giv9TpF+iVaA0fCKid+WhOrE/w4OJyX57qGXHxCs=)
                          2: 5396275C112A11F1ADC700F81B3D8C67.roa (hash: wxsoV6n9bNMMjGcsLAWPPKxBCyMgY8xWZ0QUFwcjolY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.crl
                          rsync://rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg9q_mnPqJzP1gEP4rpPniH3vnM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCE09, serialNumber=460F6AFE69CFA89CCFD6010FE2BA4F9E21F7BE73
        Validity
            Not Before: Jul 23 10:18:27 2026 GMT
            Not After : Jul 30 10:18:27 2026 GMT
        Subject: CN=6a61ea73-47dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:26:43:8c:47:4f:ad:81:d0:a2:5e:cc:c7:d0:
                    c9:90:34:ee:34:3e:36:eb:43:cf:ca:cd:1e:60:12:
                    74:2e:48:31:1b:cc:41:e5:d4:43:61:31:8b:e1:f8:
                    09:b7:66:0a:d8:03:ac:e9:55:57:c7:ad:a6:35:a9:
                    84:22:cd:7d:90:e9:03:c6:a5:22:e5:8c:60:ca:15:
                    7e:e4:da:03:9b:4f:a1:75:41:36:3e:5a:1f:ee:44:
                    29:3b:35:cf:0c:ce:7a:bd:60:a8:2d:4b:5e:b6:ce:
                    9b:31:61:47:57:92:55:b3:92:7b:de:df:5d:4a:8f:
                    f8:c9:37:63:53:19:bf:97:75:64:54:5d:b4:85:0d:
                    88:3d:df:0a:b1:fb:81:5c:c7:62:31:14:39:5e:ca:
                    2c:93:c1:f9:09:6d:f1:fa:08:76:c5:5b:80:36:93:
                    b2:4f:98:9f:2f:01:91:23:8c:ef:f4:b2:2f:b3:db:
                    b1:be:73:ab:71:ba:d6:ee:ea:c2:17:59:e5:7a:fb:
                    e4:c8:15:d6:6b:1e:44:47:ac:4d:b7:c8:89:6a:a7:
                    b3:6b:24:bb:cf:f0:88:00:60:bf:79:ca:e3:d9:85:
                    cd:df:8c:d0:7b:d9:7f:a8:f3:09:a1:21:5c:6d:44:
                    66:87:24:77:78:5b:b7:5c:9f:9b:56:88:ca:2d:9c:
                    29:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E8:00:4E:0B:F9:6F:18:FF:2B:25:C1:DD:40:D5:61:EE:6B:95:1C
            X509v3 Authority Key Identifier:
                keyid:46:0F:6A:FE:69:CF:A8:9C:CF:D6:01:0F:E2:BA:4F:9E:21:F7:BE:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg9q_mnPqJzP1gEP4rpPniH3vnM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:59:be:5d:ad:ba:01:2d:5c:5d:77:86:ba:2a:e9:5f:c3:d4:
         82:60:eb:59:1f:35:6f:bd:f0:8c:5d:c9:80:40:0d:04:6b:db:
         a1:47:a0:47:47:76:87:86:dd:3c:40:19:4c:bb:c9:88:ba:c8:
         76:25:16:a6:d7:38:03:e3:9d:e8:59:16:ea:a8:4f:96:25:31:
         d5:9f:fd:b6:2b:a0:61:69:3b:4e:96:fb:63:31:0e:6b:f3:ab:
         fc:fe:44:9c:bc:57:62:df:8c:50:6f:58:73:4e:37:c2:cf:54:
         fd:03:cf:89:5a:25:c1:b0:38:30:48:42:54:bc:74:b3:72:13:
         fd:77:ce:8f:56:1d:bc:89:55:48:3e:fb:e6:7d:3f:bb:f0:0c:
         75:00:ec:a1:16:d4:bc:f1:f1:ef:e8:ee:db:ca:d4:27:39:55:
         21:39:56:9c:67:26:e4:ec:72:50:1e:35:38:fb:7f:4e:76:2d:
         1e:81:f4:5f:e0:70:3c:4d:ba:7e:97:85:43:f7:03:fe:42:50:
         ab:09:21:53:0e:e8:26:5d:84:4f:8b:44:bd:09:b4:56:87:8b:
         45:e6:ca:0e:a1:35:0d:74:1d:4b:ee:d1:79:98:35:ec:9c:14:
         25:9a:31:6d:b0:43:0e:ed:7e:31:ca:65:a7:e6:a8:a2:67:b5:
         ec:ba:ab:73
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
Q0UwOTExMC8GA1UEBRMoNDYwRjZBRkU2OUNGQTg5Q0NGRDYwMTBGRTJCQTRGOUUy
MUY3QkU3MzAeFw0yNjA3MjMxMDE4MjdaFw0yNjA3MzAxMDE4MjdaMBgxFjAUBgNV
BAMTDTZhNjFlYTczLTQ3ZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCUJkOMR0+tgdCiXszH0MmQNO40PjbrQ8/KzR5gEnQuSDEbzEHl1ENhMYvh+Am3
ZgrYA6zpVVfHraY1qYQizX2Q6QPGpSLljGDKFX7k2gObT6F1QTY+Wh/uRCk7Nc8M
znq9YKgtS162zpsxYUdXklWzknve311Kj/jJN2NTGb+XdWRUXbSFDYg93wqx+4Fc
x2IxFDleyiyTwfkJbfH6CHbFW4A2k7JPmJ8vAZEjjO/0si+z27G+c6txutbu6sIX
WeV6++TIFdZrHkRHrE23yIlqp7NrJLvP8IgAYL95yuPZhc3fjNB72X+o8wmhIVxt
RGaHJHd4W7dcn5tWiMotnCmjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU7+gATgv5
bxj/KyXB3UDVYe5rlRwwHwYDVR0jBBgwFoAURg9q/mnPqJzP1gEP4rpPniH3vnMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDRTA5LzQ5MjhCMTBBMTEy
OTExRjFCNjRCRjhCQzFCM0Q4QzY3L1JnOXFfbW5QcUp6UDFnRVA0cnBQbmlIM3Zu
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUmc5cV9tblBxSnpQMWdFUDRycFBuaUgzdm5NLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND
RTA5LzQ5MjhCMTBBMTEyOTExRjFCNjRCRjhCQzFCM0Q4QzY3L1JnOXFfbW5QcUp6
UDFnRVA0cnBQbmlIM3ZuTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCzWb5drboBLVxdd4a6Kulfw9SCYOtZHzVvvfCMXcmAQA0Ea9uhR6BHR3aHht08
QBlMu8mIush2JRam1zgD453oWRbqqE+WJTHVn/22K6BhaTtOlvtjMQ5r86v8/kSc
vFdi34xQb1hzTjfCz1T9A8+JWiXBsDgwSEJUvHSzchP9d86PVh28iVVIPvvmfT+7
8Ax1AOyhFtS88fHv6O7bytQnOVUhOVacZybk7HJQHjU4+39Odi0egfRf4HA8Tbp+
l4VD9wP+QlCrCSFTDugmXYRPi0S9CbRWh4tF5soOoTUNdB1L7tF5mDXsnBQlmjFt
sEMO7X4xymWn5qiiZ7Xsuqtz
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:44:12 2026 by rpki-client