Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
File:                     cx4n4S-z2wtszAsg8YaAm6CNCRU.mft (raw, json)
Hash identifier:          DQ4NmLzfV/YGxl4JWVCRJp/UoyPAQnPPl46ZgSGtV08=
Subject key identifier:   71:FB:5C:60:70:B6:E1:A5:8C:9C:29:3F:9F:28:B8:94:39:8F:F3:9C
Authority key identifier: 73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15
Certificate issuer:       /CN=A91D58EC/serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915
Certificate serial:       0FF4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
Manifest number:          0FDC
Signing time:             Wed 22 Jul 2026 17:39:57 +0000
Manifest this update:     Wed 22 Jul 2026 17:39:57 +0000
Manifest next update:     Wed 29 Jul 2026 17:39:57 +0000
Files and hashes:         1: cx4n4S-z2wtszAsg8YaAm6CNCRU.crl (hash: ZUdvf047OB3aUHSr0VqFarUYGORoIIF4bSPkm+QFCxw=)
                          2: oReYY3U_uAerOA1RBd6AfkOH-Qs.asa (hash: DmMFlOH0x9CBXu3QawMuTIKK4RotGJe3cmBZrESz284=)
                          3: 76C782CC836811E9B8830935C4F9AE02.roa (hash: FZ9WjrL5+VtnGr4MpsQD7BeQfVLvm8j2z6Poj/AmVsA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl
                          rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:39:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4084 (0xff4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D58EC, serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915
        Validity
            Not Before: Jul 22 17:39:57 2026 GMT
            Not After : Jul 29 17:39:57 2026 GMT
        Subject: CN=6a61006d-f773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d0:71:d6:c0:35:8d:c5:c7:2f:98:96:45:56:
                    1b:51:86:45:f4:dc:0b:1f:d7:61:dd:26:ab:f7:3c:
                    e3:35:c2:f8:43:22:92:c1:2a:e0:13:f4:c2:c1:1d:
                    c6:ff:cb:d7:e8:d2:43:2e:b2:09:7b:b0:4d:43:37:
                    26:05:26:8f:dc:4d:9a:0f:fa:23:8d:85:8f:71:c8:
                    f7:f6:54:13:fe:85:08:5a:bf:43:a4:ba:df:49:d7:
                    9c:3f:55:4c:bc:a1:e5:e6:89:7b:4f:7c:58:d4:e9:
                    ea:db:19:78:e3:b2:5e:32:15:2a:8c:10:4c:3e:b3:
                    35:3b:fb:ba:f8:a7:01:49:ee:d7:63:50:26:89:8e:
                    7c:22:c1:9e:03:d9:fb:6d:4d:0a:b6:70:82:a2:46:
                    46:b7:5e:f5:f3:74:41:2a:58:f8:ed:fa:4e:24:ff:
                    50:ae:92:26:3d:35:bb:88:2f:7a:4b:44:1b:13:81:
                    a4:0c:b9:4f:bd:4a:0b:4b:3b:f0:db:b6:f3:89:7d:
                    e6:85:09:d3:d0:6a:15:c2:e3:98:88:56:45:3d:d0:
                    ec:39:72:f0:87:d4:17:68:13:74:4c:a5:87:8f:31:
                    e2:5e:c2:31:24:b0:50:8b:99:13:64:0c:1c:a5:07:
                    c7:48:e7:ae:ad:07:68:70:7f:d8:dc:2d:3a:28:5e:
                    bf:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FB:5C:60:70:B6:E1:A5:8C:9C:29:3F:9F:28:B8:94:39:8F:F3:9C
            X509v3 Authority Key Identifier:
                keyid:73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:bb:61:99:63:95:ad:12:b5:aa:c4:e9:0f:ab:dd:ec:fa:51:
         d0:f6:89:24:84:52:da:d0:aa:e0:34:45:1d:30:bf:59:25:b4:
         08:29:11:a9:b1:0b:9a:1b:09:a1:84:9f:a2:35:5d:0a:71:a4:
         d3:a2:e3:43:8b:66:5c:da:96:21:1d:aa:e9:a1:1e:d7:0e:5b:
         8d:ab:44:39:1d:3a:7b:83:4e:54:c0:52:67:db:6d:37:61:8c:
         ed:c8:4c:07:5b:a4:7b:0c:fb:e4:d6:43:32:ba:15:9c:45:20:
         20:e1:97:da:b8:e0:c6:55:9a:43:d1:a8:00:80:f0:ee:f5:84:
         a0:29:3c:e3:21:fc:5a:eb:70:15:71:f9:d2:df:75:05:4c:79:
         ef:a1:77:3c:d4:ee:c9:67:5c:5d:2d:10:3c:52:e9:13:69:29:
         9d:18:c5:4f:92:5e:a4:e1:72:03:9d:d0:24:4c:09:2e:9b:99:
         6a:c7:0b:89:ef:6c:bb:a8:cf:b7:33:82:14:68:07:7a:e2:c5:
         7e:bb:33:cd:77:49:33:e2:d9:f2:82:9d:e4:ba:1a:1a:a7:23:
         76:7c:61:66:d2:c9:7f:c3:4a:e9:a8:d7:57:07:5c:6b:f9:99:
         31:5a:ac:e8:8c:c4:29:3c:36:9b:0f:48:4d:3c:59:56:d8:d0:
         42:b1:01:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICD/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDU4RUMxMTAvBgNVBAUTKDczMUUyN0UxMkZCM0RCMEI2Q0NDMEIyMEYxODY4MDlC
QTA4RDA5MTUwHhcNMjYwNzIyMTczOTU3WhcNMjYwNzI5MTczOTU3WjAYMRYwFAYD
VQQDEw02YTYxMDA2ZC1mNzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2tBx1sA1jcXHL5iWRVYbUYZF9NwLH9dh3Sar9zzjNcL4QyKSwSrgE/TCwR3G
/8vX6NJDLrIJe7BNQzcmBSaP3E2aD/ojjYWPccj39lQT/oUIWr9DpLrfSdecP1VM
vKHl5ol7T3xY1Onq2xl447JeMhUqjBBMPrM1O/u6+KcBSe7XY1AmiY58IsGeA9n7
bU0KtnCCokZGt17183RBKlj47fpOJP9QrpImPTW7iC96S0QbE4GkDLlPvUoLSzvw
27bziX3mhQnT0GoVwuOYiFZFPdDsOXLwh9QXaBN0TKWHjzHiXsIxJLBQi5kTZAwc
pQfHSOeurQdocH/Y3C06KF6/IwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHH7XGBw
tuGljJwpP58ouJQ5j/OcMB8GA1UdIwQYMBaAFHMeJ+Evs9sLbMwLIPGGgJugjQkV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThFQy9BRjUwQTBFODgz
NjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3dHN6QXNnOFlhQW02Q05D
UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2N4NG40Uy16Mnd0c3pBc2c4WWFBbTZDTkNSVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NThFQy9BRjUwQTBFODgzNjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3
dHN6QXNnOFlhQW02Q05DUlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwLthmWOVrRK1qsTpD6vd7PpR0PaJJIRS2tCq4DRFHTC/WSW0CCkRqbELmhsJ
oYSfojVdCnGk06LjQ4tmXNqWIR2q6aEe1w5bjatEOR06e4NOVMBSZ9ttN2GM7chM
B1ukewz75NZDMroVnEUgIOGX2rjgxlWaQ9GoAIDw7vWEoCk84yH8WutwFXH50t91
BUx576F3PNTuyWdcXS0QPFLpE2kpnRjFT5JepOFyA53QJEwJLpuZascLie9su6jP
tzOCFGgHeuLFfrszzXdJM+LZ8oKd5LoaGqcjdnxhZtLJf8NK6ajXVwdca/mZMVqs
6IzEKTw2mw9ITTxZVtjQQrEBZQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:36 2026 by rpki-client