Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft
File:                     Ci5d8bLD15feoVNn-qncOITNGzM.mft (raw, json)
Hash identifier:          44rV1b4ZlO163W875zZ0DUdpVIErlmqOMtkYDItzt6M=
Subject key identifier:   7D:F0:A9:56:BB:E6:BD:A5:09:77:A7:0E:EB:E7:AB:8A:A8:2E:B1:6F
Authority key identifier: 0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33
Certificate issuer:       /CN=A91CD096/serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33
Certificate serial:       0E63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft
Manifest number:          0E52
Signing time:             Wed 22 Jul 2026 17:57:54 +0000
Manifest this update:     Wed 22 Jul 2026 17:57:53 +0000
Manifest next update:     Wed 29 Jul 2026 17:57:53 +0000
Files and hashes:         1: Ci5d8bLD15feoVNn-qncOITNGzM.crl (hash: M44x97qym6Bsekxw9SWQn0qzt1e4G2DHFkGzS9Rw9es=)
                          2: 4EEE01FCE15611EF9560323EC4F9AE02.roa (hash: Oe6fD+duyYHx1i3JnxJrf+wYRUhty7bgyE0KAoS88lo=)
                          3: 50F4F6B0568811F19D24CC9CA4833773.roa (hash: x7z0A4IAOy3lQhdaI+36pKi+NGAYatEd3lQQF69dAk4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.crl
                          rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:57:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3683 (0xe63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD096, serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33
        Validity
            Not Before: Jul 22 17:57:53 2026 GMT
            Not After : Jul 29 17:57:53 2026 GMT
        Subject: CN=6a6104a2-fa39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b6:0a:46:ff:dd:73:0b:c3:bc:fb:43:f2:5a:
                    74:74:d7:48:f5:6c:8f:d3:ff:09:0f:11:54:24:61:
                    9e:ff:f5:0f:d7:ae:c1:2e:ce:e7:dd:c8:a1:5f:7f:
                    7c:60:07:3d:88:a0:d5:82:13:9d:6b:5e:76:bd:02:
                    52:10:2d:23:34:19:9b:20:1a:38:98:89:19:a7:48:
                    10:bc:f2:79:5b:bc:7e:44:75:d2:fb:48:b0:e7:b9:
                    55:ba:ac:7c:8a:cf:af:4f:51:6f:d5:8c:e3:c3:fc:
                    60:9d:9b:b0:16:74:f2:6d:6b:60:81:4b:5b:9d:49:
                    92:f2:e8:6d:64:87:e8:87:86:be:3b:14:96:49:c2:
                    e8:86:62:9e:a4:b5:dc:26:b2:52:25:16:8e:c8:dc:
                    19:0b:bd:76:74:c3:47:ed:99:93:4d:47:0b:9a:1e:
                    9e:71:a6:d1:d4:f8:42:e0:38:52:de:fe:6a:76:c4:
                    b0:69:fa:c5:cb:39:84:46:dc:2e:92:5b:2a:68:ed:
                    65:10:76:4a:d4:7b:b3:6f:d3:27:31:75:cc:dc:e8:
                    b1:eb:02:d9:00:27:b3:aa:dd:0f:5c:59:08:7c:cf:
                    a0:36:57:30:42:c7:6e:a7:c0:70:13:e0:a8:ba:d1:
                    01:78:33:eb:7c:5b:9d:08:54:f9:cf:c1:e6:51:32:
                    ef:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F0:A9:56:BB:E6:BD:A5:09:77:A7:0E:EB:E7:AB:8A:A8:2E:B1:6F
            X509v3 Authority Key Identifier:
                keyid:0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:da:98:f0:df:ab:f8:51:56:62:73:74:7c:d2:5f:39:b7:d4:
         ad:00:db:08:a5:c9:05:c2:f1:d8:96:39:7e:44:41:8b:c0:17:
         a4:5c:1a:34:ee:0a:62:47:b9:d4:3b:d3:45:9d:9d:b1:ca:c6:
         ee:af:b1:22:ff:f3:cf:a5:40:41:ba:5a:0f:56:ca:38:4c:99:
         ea:88:3b:ce:56:65:43:df:9a:e8:70:80:92:cc:03:4c:3e:d5:
         da:4e:25:2e:42:df:ac:09:51:94:15:5d:cf:2b:30:b3:31:78:
         5b:7c:92:44:c7:2c:c5:c4:fe:21:e3:3f:a5:16:15:6c:21:95:
         0a:dc:29:4d:59:39:e7:00:a4:f2:58:5c:af:c1:bd:c3:89:08:
         5a:1e:96:a2:20:b9:c5:75:78:fa:37:d5:d4:c9:95:01:7a:67:
         c1:3e:9c:1e:da:7e:7d:02:89:7b:3c:62:43:97:33:1d:84:dc:
         81:82:f9:62:a2:ce:b6:ba:78:1a:fd:4c:fe:26:d5:50:a2:9b:
         42:54:4e:cc:c1:5f:df:25:ea:87:53:93:11:a6:46:a4:8b:e9:
         1f:70:43:99:cd:d8:6f:be:52:0d:ba:b5:dd:92:23:d2:cc:62:
         99:8a:f9:90:7b:e5:11:07:b1:b7:71:1e:6c:e3:ad:3d:1d:a2:
         d5:5f:69:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0QwOTYxMTAvBgNVBAUTKDBBMkU1REYxQjJDM0Q3OTdERUExNTM2N0ZBQTlEQzM4
ODRDRDFCMzMwHhcNMjYwNzIyMTc1NzUzWhcNMjYwNzI5MTc1NzUzWjAYMRYwFAYD
VQQDEw02YTYxMDRhMi1mYTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxbYKRv/dcwvDvPtD8lp0dNdI9WyP0/8JDxFUJGGe//UP167BLs7n3cihX398
YAc9iKDVghOda152vQJSEC0jNBmbIBo4mIkZp0gQvPJ5W7x+RHXS+0iw57lVuqx8
is+vT1Fv1Yzjw/xgnZuwFnTybWtggUtbnUmS8uhtZIfoh4a+OxSWScLohmKepLXc
JrJSJRaOyNwZC712dMNH7ZmTTUcLmh6ecabR1PhC4DhS3v5qdsSwafrFyzmERtwu
klsqaO1lEHZK1Huzb9MnMXXM3Oix6wLZACezqt0PXFkIfM+gNlcwQsdup8BwE+Co
utEBeDPrfFudCFT5z8HmUTLvBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH3wqVa7
5r2lCXenDuvnq4qoLrFvMB8GA1UdIwQYMBaAFAouXfGyw9eX3qFTZ/qp3DiEzRsz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDA5Ni9FNTA0MkMyQUNB
MzIxMUU5QTczOUI3NTNDNEY5QUUwMi9DaTVkOGJMRDE1ZmVvVk5uLXFuY09JVE5H
ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NpNWQ4YkxEMTVmZW9WTm4tcW5jT0lUTkd6TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RDA5Ni9FNTA0MkMyQUNBMzIxMUU5QTczOUI3NTNDNEY5QUUwMi9DaTVkOGJMRDE1
ZmVvVk5uLXFuY09JVE5Hek0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAitqY8N+r+FFWYnN0fNJfObfUrQDbCKXJBcLx2JY5fkRBi8AXpFwaNO4KYke5
1DvTRZ2dscrG7q+xIv/zz6VAQbpaD1bKOEyZ6og7zlZlQ9+a6HCAkswDTD7V2k4l
LkLfrAlRlBVdzyswszF4W3ySRMcsxcT+IeM/pRYVbCGVCtwpTVk55wCk8lhcr8G9
w4kIWh6WoiC5xXV4+jfV1MmVAXpnwT6cHtp+fQKJezxiQ5czHYTcgYL5YqLOtrp4
Gv1M/ibVUKKbQlROzMFf3yXqh1OTEaZGpIvpH3BDmc3Yb75SDbq13ZIj0sximYr5
kHvlEQext3EebOOtPR2i1V9pBQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:32:26 2026 by rpki-client