Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft
File:                     BH7xoc9llmNJhmdnZVZI7vkRDFo.mft (raw, json)
Hash identifier:          ETQTys//+u/EO8XFMUwlx3ISGMA2WurysFKl1AKuR3A=
Subject key identifier:   7E:F2:D5:06:27:22:E0:CC:BF:AB:AB:D7:FB:0C:32:85:43:1F:04:DE
Authority key identifier: 04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A
Certificate issuer:       /CN=A91CE4C1/serialNumber=047EF1A1CF65966349866767655648EEF9110C5A
Certificate serial:       0120
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft
Manifest number:          0115
Signing time:             Thu 23 Jul 2026 07:42:10 +0000
Manifest this update:     Thu 23 Jul 2026 07:42:09 +0000
Manifest next update:     Thu 30 Jul 2026 07:42:09 +0000
Files and hashes:         1: BH7xoc9llmNJhmdnZVZI7vkRDFo.crl (hash: 62laQd+LIp9kFujRfJXTHVwimhRf1w7zAkMII/Ms47Y=)
                          2: 459E12EAE9C611EFB8012F10C4F9AE02.roa (hash: 0Vpr4wHkrRxShWlsrRPFVmtyt2/mJk9Z/g3wYu3DTO4=)
                          3: FB4C0514E9C311EFADA7270AC4F9AE02.roa (hash: +2yUerADc2yEVbMSngexvekNdzNxgr2F5nZV/rqxi/E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl
                          rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE4C1, serialNumber=047EF1A1CF65966349866767655648EEF9110C5A
        Validity
            Not Before: Jul 23 07:42:09 2026 GMT
            Not After : Jul 30 07:42:09 2026 GMT
        Subject: CN=6a61c5d2-ff9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ef:b9:18:1e:ea:c9:bb:c2:70:e9:d0:5f:07:
                    74:78:59:37:f6:d9:43:3d:d4:55:83:4d:a3:17:a4:
                    7a:f2:dc:fd:a0:0a:d2:db:f5:83:ae:cf:b9:25:38:
                    ca:c6:da:24:bd:06:4b:4e:f1:87:e1:11:57:af:d4:
                    9d:5e:42:2c:04:f3:de:d2:e2:37:3a:8b:63:a8:aa:
                    6f:ef:ce:b2:9c:ee:58:a9:d4:bf:6c:4e:37:cf:37:
                    3d:5a:5f:89:bd:4a:6f:66:d5:77:c2:20:e3:ec:d8:
                    51:56:4b:2b:21:0d:08:0f:ca:b4:9a:a5:ad:40:c6:
                    e9:a4:62:6a:3f:64:a2:a4:54:41:5b:a4:86:05:b0:
                    00:58:b8:28:fc:84:e5:7c:38:41:b8:60:e0:52:33:
                    e5:b4:cb:3e:a7:bd:f6:00:5c:61:c3:7e:fe:47:25:
                    eb:dd:58:9a:3d:11:be:bf:8b:cd:7a:4d:6b:cf:ef:
                    c2:f3:3a:37:e5:55:89:38:4e:4d:28:08:2f:fc:eb:
                    e2:34:d3:7d:84:e3:4a:94:00:5d:e8:a3:23:45:27:
                    ab:fa:5a:7a:75:5e:b0:57:2d:44:c5:b9:ba:a9:eb:
                    88:40:f3:81:9d:ce:85:ee:70:27:46:98:9a:46:8a:
                    43:20:89:6f:93:a3:b8:fb:a9:dd:5c:d1:58:2d:72:
                    86:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F2:D5:06:27:22:E0:CC:BF:AB:AB:D7:FB:0C:32:85:43:1F:04:DE
            X509v3 Authority Key Identifier:
                keyid:04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:b6:e9:f6:49:e4:1b:b8:db:22:64:d9:8a:38:e0:77:30:c9:
         d0:7c:8a:31:7f:ba:1c:48:28:94:96:e5:87:57:5c:4a:80:d4:
         86:cc:ea:98:39:56:52:aa:84:83:cb:c0:3e:3f:96:ff:c3:c6:
         4d:2d:39:9e:08:b5:33:14:ac:3d:bd:1b:6f:ad:78:53:00:fa:
         bf:70:a1:e8:1e:d3:3e:ae:f5:2e:ff:80:4d:e4:f7:f1:b0:b7:
         05:d9:d9:c7:e4:70:9f:55:9d:a3:9b:55:d9:61:43:4a:3d:ff:
         32:28:f2:15:fa:ff:fb:a5:cc:fb:c6:53:9a:6b:0c:e2:35:07:
         9d:02:cd:2f:2a:01:9c:5a:cd:33:10:8f:66:f6:03:72:01:4b:
         61:e2:ad:aa:bc:4b:1e:c9:4d:00:6c:d3:58:72:a2:f5:f7:eb:
         3b:ab:fc:40:93:03:19:0e:d1:62:57:1f:e4:eb:5f:af:23:59:
         3a:70:1b:cd:d6:10:51:26:be:12:07:40:6a:40:c1:6b:80:9d:
         54:f8:1c:17:0c:d3:d2:08:fd:52:47:b7:48:8b:e3:5f:af:b0:
         7d:ef:92:5e:91:87:69:96:0f:2a:0c:17:f4:0c:02:3a:9c:6a:
         f1:34:a4:21:c6:a3:f6:4a:64:b8:2e:5a:04:af:00:f8:8f:40:
         d5:e7:5c:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U0QzExMTAvBgNVBAUTKDA0N0VGMUExQ0Y2NTk2NjM0OTg2Njc2NzY1NTY0OEVF
RjkxMTBDNUEwHhcNMjYwNzIzMDc0MjA5WhcNMjYwNzMwMDc0MjA5WjAYMRYwFAYD
VQQDEw02YTYxYzVkMi1mZjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAne+5GB7qybvCcOnQXwd0eFk39tlDPdRVg02jF6R68tz9oArS2/WDrs+5JTjK
xtokvQZLTvGH4RFXr9SdXkIsBPPe0uI3OotjqKpv786ynO5YqdS/bE43zzc9Wl+J
vUpvZtV3wiDj7NhRVksrIQ0ID8q0mqWtQMbppGJqP2SipFRBW6SGBbAAWLgo/ITl
fDhBuGDgUjPltMs+p732AFxhw37+RyXr3ViaPRG+v4vNek1rz+/C8zo35VWJOE5N
KAgv/OviNNN9hONKlABd6KMjRSer+lp6dV6wVy1Exbm6qeuIQPOBnc6F7nAnRpia
RopDIIlvk6O4+6ndXNFYLXKGhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH7y1QYn
IuDMv6ur1/sMMoVDHwTeMB8GA1UdIwQYMBaAFAR+8aHPZZZjSYZnZ2VWSO75EQxa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTRDMS8zNjQ0ODg3QUU5
QkIxMUVGQkFBQzlENzBDNEY5QUUwMi9CSDd4b2M5bGxtTkpobWRuWlZaSTd2a1JE
Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JIN3hvYzlsbG1OSmhtZG5aVlpJN3ZrUkRGby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTRDMS8zNjQ0ODg3QUU5QkIxMUVGQkFBQzlENzBDNEY5QUUwMi9CSDd4b2M5bGxt
TkpobWRuWlZaSTd2a1JERm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMrbp9knkG7jbImTZijjgdzDJ0HyKMX+6HEgolJblh1dcSoDUhszqmDlWUqqE
g8vAPj+W/8PGTS05ngi1MxSsPb0bb614UwD6v3Ch6B7TPq71Lv+ATeT38bC3BdnZ
x+Rwn1Wdo5tV2WFDSj3/MijyFfr/+6XM+8ZTmmsM4jUHnQLNLyoBnFrNMxCPZvYD
cgFLYeKtqrxLHslNAGzTWHKi9ffrO6v8QJMDGQ7RYlcf5OtfryNZOnAbzdYQUSa+
EgdAakDBa4CdVPgcFwzT0gj9Uke3SIvjX6+wfe+SXpGHaZYPKgwX9AwCOpxq8TSk
Icaj9kpkuC5aBK8A+I9A1edciA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:18:28 2026 by rpki-client