Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
File:                     _oJu6bwS2q07GXRxsEE_HrIIJjU.mft (raw, json)
Hash identifier:          0GSZ/e4vDxzjxI6BDudsckT7nEQwfHv45xZ4SPZGqRM=
Subject key identifier:   6E:16:9F:DC:D6:29:C3:B6:05:E4:A5:DF:48:44:33:74:96:41:97:A4
Authority key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35
Certificate issuer:       /CN=A91CEBCA/serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635
Certificate serial:       35A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
Manifest number:          3585
Signing time:             Fri 24 Jul 2026 14:32:36 +0000
Manifest this update:     Fri 24 Jul 2026 14:32:35 +0000
Manifest next update:     Fri 31 Jul 2026 14:32:35 +0000
Files and hashes:         1: _oJu6bwS2q07GXRxsEE_HrIIJjU.crl (hash: BXcBfTgBkKId2ZCglX1fTRj/9vP0SbTfgHeZfiXgqlY=)
                          2: BFABA2D6BECE11F0B218C045C4F9AE02.roa (hash: /QkgzfATlH/sUZdlcC1kixai5w0E/QTcB6zQhhCEKdA=)
                          3: 9954B962F02D11EFBA26B94FC4F9AE02.roa (hash: vc754wKZ9fTuYsd5eWhSpeKuauP2yCgdWc//OMaJAOo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl
                          rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 14:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13733 (0x35a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEBCA, serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635
        Validity
            Not Before: Jul 24 14:32:35 2026 GMT
            Not After : Jul 31 14:32:35 2026 GMT
        Subject: CN=6a637783-d305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5d:64:bf:8b:c3:57:11:e7:28:71:17:bd:1d:
                    a8:ec:d5:6c:74:3e:07:e0:fc:d1:3d:e7:40:22:be:
                    b0:bf:fd:fa:32:54:c7:57:9f:e9:d6:9f:a1:19:01:
                    2f:7d:7b:57:14:4f:33:e9:bd:79:1f:5d:96:ab:fe:
                    a5:64:db:aa:9d:23:5d:95:3d:b7:d2:95:1c:6f:9a:
                    d1:18:2c:a4:81:1e:54:24:09:a4:22:76:97:7a:61:
                    3d:d8:68:7e:49:2c:f0:60:f8:dc:51:73:5e:1d:a9:
                    69:f4:36:2b:9f:cf:d9:a5:28:0d:c2:d7:f7:f7:cb:
                    4a:57:52:c7:bd:e9:2b:ce:ae:95:0c:86:0d:41:dc:
                    90:ba:c1:4e:32:93:11:10:e5:c0:b8:94:04:49:c7:
                    a2:1b:54:c3:ad:8f:3d:5e:6c:1b:18:ed:b3:5a:f6:
                    d9:73:a0:c4:80:a1:6c:0b:4e:37:02:06:fd:74:98:
                    64:5a:ba:89:96:f6:6c:3a:d3:de:79:5d:80:f4:ea:
                    3a:85:3a:35:0e:56:7c:1b:fb:54:08:a3:35:11:40:
                    8f:fe:7f:a8:06:7b:39:96:c1:ac:b9:bf:87:7d:58:
                    d4:54:94:1e:74:9a:48:c8:57:cd:ef:8b:63:e3:db:
                    5b:47:b8:49:81:ed:b0:6a:ac:3b:af:d5:6d:01:e6:
                    fe:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:16:9F:DC:D6:29:C3:B6:05:E4:A5:DF:48:44:33:74:96:41:97:A4
            X509v3 Authority Key Identifier:
                keyid:FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:48:8d:23:71:9d:6a:34:9f:45:b6:a7:01:cc:4d:68:b5:39:
         ec:0d:bc:d2:29:96:97:1b:5d:fe:93:87:6b:e1:ca:ea:60:74:
         79:ec:1b:37:45:a0:bd:0b:b4:df:b8:aa:f0:60:b4:99:d2:dc:
         ca:ad:41:84:55:46:dc:35:21:bd:4f:3a:54:45:0e:2c:1a:64:
         c7:27:d8:87:58:32:e8:70:c5:3a:35:f7:b4:7d:1d:e4:49:bb:
         2c:b4:c4:7a:a4:6b:11:fc:28:64:f3:97:9a:57:9a:44:39:00:
         16:6c:6c:85:d7:9b:69:2f:5a:8e:66:98:1a:15:65:6c:1f:eb:
         1c:81:08:7b:8e:59:24:8c:f1:bc:95:7b:3e:e8:01:a6:a9:7d:
         b5:ad:11:70:11:e0:36:e1:2c:9e:59:57:47:48:40:3f:e7:e9:
         f2:9e:cf:91:fb:54:8a:4a:54:00:a3:92:c2:d9:c5:6b:18:18:
         6a:4c:4a:cd:ee:c6:36:4c:28:ad:8b:d3:ec:93:7b:46:ce:03:
         29:85:b9:77:43:60:b6:16:e5:e4:ef:49:d4:e6:75:36:01:d3:
         b4:3d:33:3d:b4:aa:64:dc:d9:53:f2:f2:35:4e:e9:5d:15:f8:
         15:b2:65:53:6f:2a:2e:97:71:99:49:d8:b0:17:21:b6:03:68:
         36:d4:e7:ae
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0VCQ0ExMTAvBgNVBAUTKEZFODI2RUU5QkMxMkRBQUQzQjE5NzQ3MUIwNDEzRjFF
QjIwODI2MzUwHhcNMjYwNzI0MTQzMjM1WhcNMjYwNzMxMTQzMjM1WjAYMRYwFAYD
VQQDEw02YTYzNzc4My1kMzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt11kv4vDVxHnKHEXvR2o7NVsdD4H4PzRPedAIr6wv/36MlTHV5/p1p+hGQEv
fXtXFE8z6b15H12Wq/6lZNuqnSNdlT230pUcb5rRGCykgR5UJAmkInaXemE92Gh+
SSzwYPjcUXNeHalp9DYrn8/ZpSgNwtf398tKV1LHvekrzq6VDIYNQdyQusFOMpMR
EOXAuJQESceiG1TDrY89XmwbGO2zWvbZc6DEgKFsC043Agb9dJhkWrqJlvZsOtPe
eV2A9Oo6hTo1DlZ8G/tUCKM1EUCP/n+oBns5lsGsub+HfVjUVJQedJpIyFfN74tj
49tbR7hJge2waqw7r9VtAeb+zQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG4Wn9zW
KcO2BeSl30hEM3SWQZekMB8GA1UdIwQYMBaAFP6Cbum8EtqtOxl0cbBBPx6yCCY1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJDQS9CNTg4QjRBNjFE
ODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJxMDdHWFJ4c0VFX0hySUlK
alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19vSnU2YndTMnEwN0dYUnhzRUVfSHJJSUpqVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RUJDQS9CNTg4QjRBNjFEODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJx
MDdHWFJ4c0VFX0hySUlKalUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPkiNI3GdajSfRbanAcxNaLU57A280imWlxtd/pOHa+HK6mB0eewbN0WgvQu0
37iq8GC0mdLcyq1BhFVG3DUhvU86VEUOLBpkxyfYh1gy6HDFOjX3tH0d5Em7LLTE
eqRrEfwoZPOXmleaRDkAFmxshdebaS9ajmaYGhVlbB/rHIEIe45ZJIzxvJV7PugB
pql9ta0RcBHgNuEsnllXR0hAP+fp8p7PkftUikpUAKOSwtnFaxgYakxKze7GNkwo
rYvT7JN7Rs4DKYW5d0Ngthbl5O9J1OZ1NgHTtD0zPbSqZNzZU/LyNU7pXRX4FbJl
U28qLpdxmUnYsBchtgNoNtTnrg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:05:05 2026 by rpki-client