Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft
File:                     JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft (raw, json)
Hash identifier:          FHN4sMJkgn1xTp6qOCZmu+oJlk615W46OnEKNo4u5SQ=
Subject key identifier:   9E:D2:3E:84:A4:2B:5E:10:3A:8F:11:BE:D4:1F:6B:E0:F7:24:20:67
Authority key identifier: 24:52:18:1C:B1:08:AF:11:F4:62:87:37:1B:04:13:FF:5F:82:E8:2E
Certificate issuer:       /CN=A91D8392/serialNumber=2452181CB108AF11F46287371B0413FF5F82E82E
Certificate serial:       071A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft
Manifest number:          0712
Signing time:             Wed 22 Jul 2026 22:43:05 +0000
Manifest this update:     Wed 22 Jul 2026 22:43:04 +0000
Manifest next update:     Wed 29 Jul 2026 22:43:04 +0000
Files and hashes:         1: JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl (hash: H4P7PSW+kkDkK0w3HAGrkwg9lCiHXgtEiBPnt0fZmL0=)
                          2: 7510FBA2928911EBB0B38272C4F9AE02.roa (hash: 1QVha8WZ/zcOH92BRLJAh5okmG4VseGZWRktSE8OCCY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl
                          rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:43:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1818 (0x71a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8392, serialNumber=2452181CB108AF11F46287371B0413FF5F82E82E
        Validity
            Not Before: Jul 22 22:43:04 2026 GMT
            Not After : Jul 29 22:43:04 2026 GMT
        Subject: CN=6a614779-8605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:62:94:86:a7:8c:dc:5c:38:0b:41:3a:26:d4:
                    10:52:3c:f4:42:44:4b:78:b5:2e:1c:0b:96:0a:c8:
                    2b:e8:99:c5:bc:61:ef:5c:ab:8b:e5:4d:5f:de:52:
                    87:99:a7:0f:01:b0:62:c8:d7:a0:d0:2e:d1:33:f0:
                    c6:00:79:f3:fb:be:43:66:54:c6:9b:6c:42:5d:85:
                    44:0d:c6:e4:db:50:a9:19:81:f9:00:70:a4:6a:3c:
                    0b:52:32:11:92:ec:5f:fe:75:47:65:4b:f1:09:87:
                    f0:cd:96:0f:b1:ce:66:16:55:7e:82:c1:89:04:92:
                    f2:86:45:1c:a0:ce:ba:db:fb:65:72:56:5a:3b:3a:
                    d4:b4:34:29:e1:8c:43:86:22:54:32:84:ae:7f:ee:
                    23:2b:8d:81:da:56:6c:26:9d:dd:b7:1c:a4:d9:ed:
                    fc:6d:46:36:c8:c3:23:46:be:7c:45:ee:93:1e:a2:
                    bf:b6:5a:bf:4e:ea:06:76:cd:c8:a3:6c:8d:cb:19:
                    08:ef:f5:e3:7d:6f:94:42:5f:3d:ff:ab:fd:b1:7d:
                    73:4f:46:d6:5d:6b:40:98:96:a6:00:9d:16:84:67:
                    f8:2b:0f:fe:12:29:94:92:a3:7f:dc:ca:f3:49:7b:
                    e0:22:cd:c5:11:c6:fc:70:ca:e3:b6:4d:df:6e:c0:
                    94:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D2:3E:84:A4:2B:5E:10:3A:8F:11:BE:D4:1F:6B:E0:F7:24:20:67
            X509v3 Authority Key Identifier:
                keyid:24:52:18:1C:B1:08:AF:11:F4:62:87:37:1B:04:13:FF:5F:82:E8:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:07:32:ce:b7:73:84:6f:85:b7:d2:c7:66:d3:25:76:ff:db:
         ff:20:f3:a8:bd:96:ac:8b:a7:44:d2:93:06:a4:5f:ba:43:d1:
         36:b7:6e:15:56:16:6e:9b:cb:c7:93:dd:33:1c:50:e1:40:56:
         65:63:cc:64:87:e1:72:80:db:da:47:e4:72:37:56:33:48:b6:
         0e:30:3a:18:a5:11:43:bc:c5:13:54:95:d7:64:45:78:25:08:
         73:ff:31:37:9f:f7:fe:b9:c3:88:4e:01:a7:a0:8c:4c:ac:0c:
         b5:06:5e:6c:a5:da:d9:7f:30:00:12:db:1b:70:b4:07:69:c6:
         f7:74:e0:50:02:c0:b6:e7:3d:6b:70:22:66:42:b5:5f:72:55:
         e0:1a:a8:8b:8d:fc:ba:47:b8:a7:bf:f0:10:6b:f7:2e:38:28:
         71:f8:71:82:31:71:bf:d0:7f:37:00:18:cf:29:5f:55:e7:6a:
         03:2c:d6:78:b2:53:cb:7a:95:de:cd:83:47:96:57:a4:64:e8:
         5d:28:66:52:ea:2b:f1:b8:05:c6:d3:19:88:7d:df:ea:f5:b4:
         27:db:e7:10:a4:41:58:cc:a0:97:8a:d0:08:16:45:c1:3b:50:
         ff:70:9c:5a:d4:09:99:f6:10:87:c9:d9:33:6b:49:a8:10:ed:
         6d:19:0c:a0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDgzOTIxMTAvBgNVBAUTKDI0NTIxODFDQjEwOEFGMTFGNDYyODczNzFCMDQxM0ZG
NUY4MkU4MkUwHhcNMjYwNzIyMjI0MzA0WhcNMjYwNzI5MjI0MzA0WjAYMRYwFAYD
VQQDEw02YTYxNDc3OS04NjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu2KUhqeM3Fw4C0E6JtQQUjz0QkRLeLUuHAuWCsgr6JnFvGHvXKuL5U1f3lKH
macPAbBiyNeg0C7RM/DGAHnz+75DZlTGm2xCXYVEDcbk21CpGYH5AHCkajwLUjIR
kuxf/nVHZUvxCYfwzZYPsc5mFlV+gsGJBJLyhkUcoM662/tlclZaOzrUtDQp4YxD
hiJUMoSuf+4jK42B2lZsJp3dtxyk2e38bUY2yMMjRr58Re6THqK/tlq/TuoGds3I
o2yNyxkI7/XjfW+UQl89/6v9sX1zT0bWXWtAmJamAJ0WhGf4Kw/+EimUkqN/3Mrz
SXvgIs3FEcb8cMrjtk3fbsCU2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ7SPoSk
K14QOo8RvtQfa+D3JCBnMB8GA1UdIwQYMBaAFCRSGByxCK8R9GKHNxsEE/9fgugu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODM5Mi8xNEQ5RTM4QTky
ODgxMUVCQkJENDU2NzFDNEY5QUUwMi9KRklZSExFSXJ4SDBZb2MzR3dRVF8xLUM2
QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pGSVlITEVJcnhIMFlvYzNHd1FUXzEtQzZDNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODM5Mi8xNEQ5RTM4QTkyODgxMUVCQkJENDU2NzFDNEY5QUUwMi9KRklZSExFSXJ4
SDBZb2MzR3dRVF8xLUM2QzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZQcyzrdzhG+Ft9LHZtMldv/b/yDzqL2WrIunRNKTBqRfukPRNrduFVYWbpvL
x5PdMxxQ4UBWZWPMZIfhcoDb2kfkcjdWM0i2DjA6GKURQ7zFE1SV12RFeCUIc/8x
N5/3/rnDiE4Bp6CMTKwMtQZebKXa2X8wABLbG3C0B2nG93TgUALAtuc9a3AiZkK1
X3JV4Bqoi438uke4p7/wEGv3LjgocfhxgjFxv9B/NwAYzylfVedqAyzWeLJTy3qV
3s2DR5ZXpGToXShmUuor8bgFxtMZiH3f6vW0J9vnEKRBWMygl4rQCBZFwTtQ/3Cc
WtQJmfYQh8nZM2tJqBDtbRkMoA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:46:52 2026 by rpki-client