Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0468/8EE5FA68866311F18896D37E96A30FBC/EF4GES4JwRrGtuM_Do2j9uYn8zI.mft
File:                     EF4GES4JwRrGtuM_Do2j9uYn8zI.mft (raw, json)
Hash identifier:          b17E9i93U3WvcpHqdc8kEA2Ygf21EyzeGtDTGETfut0=
Subject key identifier:   78:41:73:15:45:B5:7C:41:57:2F:23:B3:BC:96:7A:AC:AA:A3:C0:4C
Authority key identifier: 10:5E:06:11:2E:09:C1:1A:C6:B6:E3:3F:0E:8D:A3:F6:E6:27:F3:32
Certificate issuer:       /CN=A91D0468/serialNumber=105E06112E09C11AC6B6E33F0E8DA3F6E627F332
Certificate serial:       03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EF4GES4JwRrGtuM_Do2j9uYn8zI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0468/8EE5FA68866311F18896D37E96A30FBC/EF4GES4JwRrGtuM_Do2j9uYn8zI.mft
Manifest number:          02
Signing time:             Thu 23 Jul 2026 06:59:03 +0000
Manifest this update:     Thu 23 Jul 2026 06:59:02 +0000
Manifest next update:     Thu 30 Jul 2026 06:59:02 +0000
Files and hashes:         1: EF4GES4JwRrGtuM_Do2j9uYn8zI.crl (hash: gQ4ACcVYZF6iIB2dQqZMb4HjoQmRVVXi339P0MBx5Ak=)
                          2: F7D72646866311F18181548196A30FBC.roa (hash: YWqTKDIpSAxFUM6HW5snbyR2J7jAqm3hUt37+u8FRTc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0468/8EE5FA68866311F18896D37E96A30FBC/EF4GES4JwRrGtuM_Do2j9uYn8zI.crl
                          rsync://rpki.apnic.net/member_repository/A91D0468/8EE5FA68866311F18896D37E96A30FBC/EF4GES4JwRrGtuM_Do2j9uYn8zI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EF4GES4JwRrGtuM_Do2j9uYn8zI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0468, serialNumber=105E06112E09C11AC6B6E33F0E8DA3F6E627F332
        Validity
            Not Before: Jul 23 06:59:02 2026 GMT
            Not After : Jul 30 06:59:02 2026 GMT
        Subject: CN=6a61bbb6-5864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:80:20:aa:68:a4:42:4b:e2:40:68:16:e5:23:
                    d0:07:7c:d1:c5:e4:84:5f:0d:b0:30:f2:c8:6e:66:
                    c0:f6:7d:59:ac:be:4c:4a:ce:86:74:07:94:41:11:
                    5c:00:e6:f0:9c:c6:f8:1a:2c:0f:23:2e:6f:7b:57:
                    96:5a:a9:b3:c4:79:21:39:b9:ef:5f:b0:8a:57:26:
                    7b:d9:29:09:f4:4b:f5:af:f4:c6:a1:82:f2:70:fd:
                    96:4a:01:0c:c0:2a:48:03:7b:a9:b3:6e:79:fc:1a:
                    49:c3:be:89:a7:77:16:6b:68:e4:f0:72:2b:dc:57:
                    f0:55:a6:42:4a:42:3f:0c:28:4b:22:ed:8c:b9:aa:
                    cd:cb:58:dd:ab:65:65:cc:10:db:69:f3:74:20:b0:
                    c2:89:50:31:5f:d2:93:88:48:45:bf:4f:67:d5:a3:
                    82:d7:5f:50:01:ce:f7:b2:04:b9:0e:9a:7c:5c:b6:
                    6c:3f:89:30:79:e9:58:32:c7:c2:41:b5:93:06:a1:
                    7c:cb:14:43:a5:a7:5e:cc:d1:d5:11:c7:99:63:6e:
                    42:de:da:6e:54:db:7b:e1:63:a4:63:a1:01:af:52:
                    10:cb:b7:64:2e:3c:fd:b6:6b:de:f1:f8:8d:ba:f2:
                    e4:34:bd:f5:d0:54:69:c6:6e:3d:d2:40:9d:52:75:
                    8f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:41:73:15:45:B5:7C:41:57:2F:23:B3:BC:96:7A:AC:AA:A3:C0:4C
            X509v3 Authority Key Identifier:
                keyid:10:5E:06:11:2E:09:C1:1A:C6:B6:E3:3F:0E:8D:A3:F6:E6:27:F3:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0468/8EE5FA68866311F18896D37E96A30FBC/EF4GES4JwRrGtuM_Do2j9uYn8zI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EF4GES4JwRrGtuM_Do2j9uYn8zI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0468/8EE5FA68866311F18896D37E96A30FBC/EF4GES4JwRrGtuM_Do2j9uYn8zI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:95:af:0b:18:51:6a:13:1c:b6:a8:db:23:c0:80:7d:84:a3:
         13:c6:d3:93:de:56:ce:d9:e9:6d:cb:4e:d9:6e:04:d2:8f:c8:
         42:12:ea:81:ad:49:23:39:7d:96:dd:7c:bb:ee:fe:67:9c:ac:
         c1:8e:e2:2b:48:c0:9e:c6:67:15:e0:6c:34:8b:3f:5c:3a:6d:
         95:90:c1:9b:bb:83:41:3d:40:c8:9b:3f:d6:8b:37:03:02:b2:
         27:00:70:07:7e:a2:f0:df:08:2f:ae:48:d8:21:e0:81:89:86:
         81:7f:58:e2:bc:ff:7e:13:e7:00:cc:1f:18:7b:bb:c2:f4:0b:
         f5:e6:ad:c5:5e:7b:a4:29:df:7b:4a:1c:2d:94:83:55:9d:92:
         a8:ea:74:82:12:1c:4a:74:5f:08:37:a1:34:fe:29:d4:ca:d3:
         74:02:52:38:b3:00:90:78:a2:7f:a9:99:66:62:4f:88:bd:37:
         71:4b:a6:1c:8a:86:73:80:28:4c:b7:f5:67:28:56:d4:22:8e:
         eb:95:0d:0f:0d:df:7b:2c:50:ae:b2:6d:78:56:62:b2:a5:cf:
         e2:b3:01:d2:f3:be:b6:94:bc:ba:40:ec:10:94:db:1a:7f:ed:
         df:84:b0:ae:b4:bd:c3:d6:5b:1e:4a:b3:c4:90:58:55:9d:c6:
         89:b9:95:e8
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MDQ2ODExMC8GA1UEBRMoMTA1RTA2MTEyRTA5QzExQUM2QjZFMzNGMEU4REEzRjZF
NjI3RjMzMjAeFw0yNjA3MjMwNjU5MDJaFw0yNjA3MzAwNjU5MDJaMBgxFjAUBgNV
BAMTDTZhNjFiYmI2LTU4NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDOgCCqaKRCS+JAaBblI9AHfNHF5IRfDbAw8shuZsD2fVmsvkxKzoZ0B5RBEVwA
5vCcxvgaLA8jLm97V5ZaqbPEeSE5ue9fsIpXJnvZKQn0S/Wv9MahgvJw/ZZKAQzA
KkgDe6mzbnn8GknDvomndxZraOTwcivcV/BVpkJKQj8MKEsi7Yy5qs3LWN2rZWXM
ENtp83QgsMKJUDFf0pOISEW/T2fVo4LXX1ABzveyBLkOmnxctmw/iTB56Vgyx8JB
tZMGoXzLFEOlp17M0dURx5ljbkLe2m5U23vhY6RjoQGvUhDLt2QuPP22a97x+I26
8uQ0vfXQVGnGbj3SQJ1SdY8/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUeEFzFUW1
fEFXLyOzvJZ6rKqjwEwwHwYDVR0jBBgwFoAUEF4GES4JwRrGtuM/Do2j9uYn8zIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwNDY4LzhFRTVGQTY4ODY2
MzExRjE4ODk2RDM3RTk2QTMwRkJDL0VGNEdFUzRKd1JyR3R1TV9EbzJqOXVZbjh6
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRUY0R0VTNEp3UnJHdHVNX0RvMmo5dVluOHpJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw
NDY4LzhFRTVGQTY4ODY2MzExRjE4ODk2RDM3RTk2QTMwRkJDL0VGNEdFUzRKd1Jy
R3R1TV9EbzJqOXVZbjh6SS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB2la8LGFFqExy2qNsjwIB9hKMTxtOT3lbO2elty07ZbgTSj8hCEuqBrUkjOX2W
3Xy77v5nnKzBjuIrSMCexmcV4Gw0iz9cOm2VkMGbu4NBPUDImz/WizcDArInAHAH
fqLw3wgvrkjYIeCBiYaBf1jivP9+E+cAzB8Ye7vC9Av15q3FXnukKd97ShwtlINV
nZKo6nSCEhxKdF8IN6E0/inUytN0AlI4swCQeKJ/qZlmYk+IvTdxS6YcioZzgChM
t/VnKFbUIo7rlQ0PDd97LFCusm14VmKypc/iswHS8762lLy6QOwQlNsaf+3fhLCu
tL3D1lseSrPEkFhVncaJuZXo
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:28 2026 by rpki-client