Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft
File:                     raiu0ysVuH5hElLSnR4dW95YFkY.mft (raw, json)
Hash identifier:          LNgWverqBMaIfbP6U9EZaqFQKREWTS6yWxsBocxE8tc=
Subject key identifier:   AC:7A:23:CE:EB:3F:C9:EA:F2:32:7E:02:A7:07:EA:DA:30:92:73:6D
Authority key identifier: AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46
Certificate issuer:       /CN=A91DC5BE/serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646
Certificate serial:       3669
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft
Manifest number:          35D3
Signing time:             Wed 22 Jul 2026 14:16:29 +0000
Manifest this update:     Wed 22 Jul 2026 14:16:29 +0000
Manifest next update:     Wed 29 Jul 2026 14:16:29 +0000
Files and hashes:         1: raiu0ysVuH5hElLSnR4dW95YFkY.crl (hash: EFcLks0fmTqKStfACfOPBBTXeK8fqqK4QgR0JBQg8Hs=)
                          2: E2446DD228AA11E79582F36BC4F9AE02.roa (hash: oS/2Yr0f0AX3IY6Qw0kprzC/haS0V2Vl/e9gsEC9t0o=)
                          3: DCD41E8E98D511F0B3824663C4F9AE02.roa (hash: 46CC9LcyzFfBkRedCj8zONrcqyJIMjuxJScGt32qKqY=)
                          4: 662A2F2286B411E6BAEB2614C4F9AE02.roa (hash: y6ZiKIpbO8nVe1RhgWjLdE8kQETpbK+AjZQf/Ewa3Fk=)
                          5: 7C836BA46C8E11EEA38B9554C4F9AE02.roa (hash: 13OCzHbeP84SVts3fLFM8ezvX9wYG+xk9oztS8IQ/oo=)
                          6: FC72B9529F0311EAB6B8EA87C4F9AE02.roa (hash: US7l9IRW6KnysaR3hgfIHQKP61jxpaRsUq+BQajlvlE=)
                          7: zJRz-1c5houizgFGumguKRn1Clg.asa (hash: 0pjUIAe0fXtb3i3avT3dUDDXCRYt+tr2uS+SBzKFiVE=)
                          8: woCjYFsvUmdhypHZ5nFLfWxYzak.asa (hash: maY7sNrNwk9jrLA6Yj9C3sO+z56TyqAAlLtSFQjzBnc=)
                          9: CAFK4K4j3zsZH6YjzyiPQXtzH-0.asa (hash: OFgzbOFR7cWIcyO0nD8LJZP/oxj+UNNBCwjlq9DcI3Y=)
                          10: aN2iDVOHmPp2ny-zekFfqNg-XH0.asa (hash: KKcDTJ5obXcUbT0l1jSZ7QFTW7ljWQN+P+SZY0FCmp4=)
                          11: DB3F9CA4817B11F0BDC51985C4F9AE02.roa (hash: Zl7CL1hILK98z1K1OQnmQBFBX3AF5k+q1EWP8nnTBiE=)
                          12: C9B8A270483411ECA6C7C085C4F9AE02.roa (hash: 0TLVORl6wSPXD4zN0o2eNo/c7mH0Sa6LVUUSVrU3gGs=)
                          13: uC-toPD9VWu8EjtdZpJZizsqe5g.asa (hash: 2XTg91PvdmzFZO5xkwVBLaVB3XyJdwjrFAY8bIAUWGo=)
                          14: VVhuMwTL81PFRVMa9-1fXA7HwHM.asa (hash: mBpazvK1JO7XQxRtLpgMvlrnxREAE0vs3vWkxv3+B6E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.crl
                          rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:16:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13929 (0x3669)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC5BE, serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646
        Validity
            Not Before: Jul 22 14:16:29 2026 GMT
            Not After : Jul 29 14:16:29 2026 GMT
        Subject: CN=6a60d0bd-78b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f7:ed:e0:e0:48:2f:df:02:68:d6:34:bb:30:
                    1b:28:23:e5:23:98:76:a8:75:0d:f9:e0:39:67:14:
                    2e:44:56:5d:28:4d:8e:99:29:8d:37:c0:cb:bc:cc:
                    5c:f7:36:85:fd:b4:41:70:be:91:19:63:c1:06:d0:
                    a3:51:df:21:8d:36:92:f8:3c:d0:ee:e0:fe:98:8a:
                    f8:d1:e8:c0:fa:26:ca:44:0b:fd:d3:ea:2d:a8:44:
                    61:c6:34:05:36:e8:f9:86:94:71:3e:e3:af:57:5e:
                    28:66:22:0d:a9:35:6c:b1:03:8b:2c:bc:ac:a3:32:
                    1c:0f:86:5f:49:92:ec:49:72:2a:94:0f:d3:09:a5:
                    e3:d6:4d:bc:45:03:09:87:57:c5:27:7e:51:fb:45:
                    64:8f:b6:09:d1:2d:bb:80:13:9d:bf:49:e5:40:7f:
                    aa:20:3d:5a:56:7a:c7:88:6a:63:0b:dc:00:85:35:
                    ae:92:42:61:f0:97:c5:fe:06:c2:9d:4c:b8:04:c2:
                    a0:c2:bd:cf:2c:75:a0:2c:00:34:d5:eb:a9:93:ba:
                    be:53:e6:f4:67:92:94:06:c5:27:19:29:f6:2d:8a:
                    47:dd:c4:5a:8e:28:cd:3b:1a:c0:55:c4:34:a0:7b:
                    fb:1a:bd:3c:1f:f8:66:99:71:1f:ad:06:e9:96:db:
                    71:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7A:23:CE:EB:3F:C9:EA:F2:32:7E:02:A7:07:EA:DA:30:92:73:6D
            X509v3 Authority Key Identifier:
                keyid:AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:6c:0d:f4:d4:6c:21:9c:fd:af:5e:45:59:d3:eb:55:0c:3d:
         f8:2b:59:c0:99:3a:d3:6e:0c:2a:83:6a:b7:8c:47:d8:ae:fe:
         5c:13:42:3c:bf:ee:71:b8:65:76:2f:33:47:4b:67:ed:18:8d:
         67:c4:60:4d:89:1a:ad:47:77:cc:a1:e5:d9:59:87:3c:8a:cc:
         bf:51:5f:b5:84:99:38:80:0b:0f:08:29:9f:b9:a8:d4:87:30:
         e4:61:d6:7f:7c:21:a0:74:3b:e1:2e:18:74:1b:ee:7b:dd:48:
         2b:0a:60:37:2d:06:a1:25:6c:f5:90:76:c3:fa:41:0e:f3:b7:
         8b:42:48:cd:ff:76:e5:67:f5:f4:ba:70:36:80:87:55:ef:29:
         5e:12:1e:71:2f:0d:a9:66:dd:b8:b5:bc:44:4c:64:12:f0:16:
         bb:a4:26:2f:24:98:b2:ae:ca:e7:f1:71:8f:24:91:36:9b:cb:
         37:69:81:a5:9a:4c:33:33:be:ba:d5:54:82:bd:11:cd:a6:d1:
         33:38:66:17:96:af:da:6e:af:26:1e:ec:0b:42:9c:64:c9:16:
         7a:e5:83:29:84:de:7d:e9:6e:68:24:9f:0d:4f:a2:d4:1c:7b:
         04:19:5f:d3:08:45:ed:ec:b6:eb:81:94:66:be:18:72:fa:1c:
         09:8c:5b:5b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REM1QkUxMTAvBgNVBAUTKEFEQThBRUQzMkIxNUI4N0U2MTEyNTJEMjlEMUUxRDVC
REU1ODE2NDYwHhcNMjYwNzIyMTQxNjI5WhcNMjYwNzI5MTQxNjI5WjAYMRYwFAYD
VQQDEw02YTYwZDBiZC03OGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Pft4OBIL98CaNY0uzAbKCPlI5h2qHUN+eA5ZxQuRFZdKE2OmSmNN8DLvMxc
9zaF/bRBcL6RGWPBBtCjUd8hjTaS+DzQ7uD+mIr40ejA+ibKRAv90+otqERhxjQF
Nuj5hpRxPuOvV14oZiINqTVssQOLLLysozIcD4ZfSZLsSXIqlA/TCaXj1k28RQMJ
h1fFJ35R+0Vkj7YJ0S27gBOdv0nlQH+qID1aVnrHiGpjC9wAhTWukkJh8JfF/gbC
nUy4BMKgwr3PLHWgLAA01eupk7q+U+b0Z5KUBsUnGSn2LYpH3cRajijNOxrAVcQ0
oHv7Gr08H/hmmXEfrQbplttxvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKx6I87r
P8nq8jJ+AqcH6towknNtMB8GA1UdIwQYMBaAFK2ortMrFbh+YRJS0p0eHVveWBZG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzVCRS9ENDAxNjE5QTFE
NjkxMUUyQUZCNjRFQTcwOEIwMkNEMi9yYWl1MHlzVnVINWhFbExTblI0ZFc5NVlG
a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JhaXUweXNWdUg1aEVsTFNuUjRkVzk1WUZrWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QzVCRS9ENDAxNjE5QTFENjkxMUUyQUZCNjRFQTcwOEIwMkNEMi9yYWl1MHlzVnVI
NWhFbExTblI0ZFc5NVlGa1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC2wN9NRsIZz9r15FWdPrVQw9+CtZwJk6024MKoNqt4xH2K7+XBNCPL/ucbhl
di8zR0tn7RiNZ8RgTYkarUd3zKHl2VmHPIrMv1FftYSZOIALDwgpn7mo1Icw5GHW
f3whoHQ74S4YdBvue91IKwpgNy0GoSVs9ZB2w/pBDvO3i0JIzf925Wf19LpwNoCH
Ve8pXhIecS8NqWbduLW8RExkEvAWu6QmLySYsq7K5/FxjySRNpvLN2mBpZpMMzO+
utVUgr0RzabRMzhmF5av2m6vJh7sC0KcZMkWeuWDKYTefeluaCSfDU+i1Bx7BBlf
0whF7ey264GUZr4YcvocCYxbWw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:49 2026 by rpki-client