Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
File:                     R4pL3QESHRxrMz7MPiW6Gohxmao.mft (raw, json)
Hash identifier:          jNAhMzi/95Kdnzm87eOKLMSBcQb0lH+A/kbnEOHrvzY=
Subject key identifier:   F4:B8:90:A3:1A:79:60:1F:B8:ED:65:9A:ED:7E:11:91:33:CB:84:B4
Authority key identifier: 47:8A:4B:DD:01:12:1D:1C:6B:33:3E:CC:3E:25:BA:1A:88:71:99:AA
Certificate issuer:       /CN=A91DF076/serialNumber=478A4BDD01121D1C6B333ECC3E25BA1A887199AA
Certificate serial:       0EAF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
Manifest number:          0EA3
Signing time:             Wed 22 Jul 2026 17:54:26 +0000
Manifest this update:     Wed 22 Jul 2026 17:54:25 +0000
Manifest next update:     Wed 29 Jul 2026 17:54:25 +0000
Files and hashes:         1: R4pL3QESHRxrMz7MPiW6Gohxmao.crl (hash: NiklfRKxnSSx8c0Imi3E1NkddUjv+vW06AYbJ9Gfmes=)
                          2: 7043D43679BB11ECB6D72266C4F9AE02.roa (hash: 4apSZMW7Vfs833gnnmQpU2EzXDtEcmjJdHV9lEBaG8o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.crl
                          rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3759 (0xeaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF076, serialNumber=478A4BDD01121D1C6B333ECC3E25BA1A887199AA
        Validity
            Not Before: Jul 22 17:54:25 2026 GMT
            Not After : Jul 29 17:54:25 2026 GMT
        Subject: CN=6a6103d2-f015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ad:76:30:84:f9:69:d7:aa:c3:c5:cd:87:b3:
                    a0:83:7e:61:c8:c3:15:60:1a:95:73:de:d1:27:71:
                    57:36:d0:21:34:b8:6b:3c:36:a9:5f:9a:95:c0:04:
                    b3:2c:6a:e3:4e:00:d7:2f:b2:ae:c2:66:8f:67:de:
                    06:b5:86:f0:f4:8d:a2:7f:54:46:6f:92:6e:f0:29:
                    20:2f:bb:65:a3:34:f5:b8:74:fd:80:5b:63:0f:0e:
                    f6:a1:4d:9a:a6:fa:8b:85:b0:23:df:d9:cb:95:4e:
                    ff:1c:0f:7a:ff:79:18:a3:e2:f2:3c:b2:4b:08:fb:
                    5e:9e:c6:01:f2:80:a8:7c:ba:b3:9f:57:a6:2d:ec:
                    e0:b1:f4:d7:3a:ed:d2:45:88:ed:2b:0f:94:43:e7:
                    24:36:60:39:fe:55:9c:5a:7b:e1:d4:d8:60:51:1f:
                    12:d0:86:de:01:50:a9:f2:1e:d2:e5:2a:18:4f:f3:
                    3b:20:f9:3f:e7:67:4f:c1:95:df:37:b4:f5:c8:11:
                    eb:10:a0:8c:75:5a:b6:c1:62:ca:fd:33:20:e3:d1:
                    51:2d:21:25:5e:c9:e6:de:0e:1b:19:a7:05:6e:25:
                    5d:75:9c:50:0d:f2:37:10:32:6e:7e:99:bf:df:99:
                    91:55:bd:98:6f:64:cb:cf:d7:0a:8d:c7:22:9e:3c:
                    01:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B8:90:A3:1A:79:60:1F:B8:ED:65:9A:ED:7E:11:91:33:CB:84:B4
            X509v3 Authority Key Identifier:
                keyid:47:8A:4B:DD:01:12:1D:1C:6B:33:3E:CC:3E:25:BA:1A:88:71:99:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:4e:02:fd:9e:de:5e:f8:3b:c4:16:06:f9:57:4b:70:e8:a8:
         61:70:92:f5:f8:87:51:ed:4d:d8:35:04:40:2d:01:22:d8:bd:
         7d:d1:68:a2:b6:78:56:a7:bf:4b:82:a5:13:04:c8:7e:db:22:
         cf:c7:98:29:e5:f5:a9:e4:73:9e:49:07:fb:c0:ee:13:ca:16:
         cc:e3:e5:1a:6e:51:2e:fb:fa:0f:9a:19:82:c4:09:42:01:67:
         42:aa:ff:e5:9c:28:70:85:23:94:9c:ff:99:86:0a:27:2a:6d:
         f2:8c:8e:ae:6f:a7:68:73:41:a1:70:20:dc:36:f3:be:67:e9:
         5c:0e:da:bb:cd:1e:0e:f0:fd:2e:49:72:5f:64:4d:6d:23:3b:
         34:ad:a0:94:27:01:8b:56:04:91:3f:1e:ad:b4:b4:af:73:29:
         b9:00:ed:d7:b4:4a:cf:a3:6e:ce:f8:14:b7:46:78:e6:04:21:
         86:74:42:be:75:37:d4:53:f9:b2:cd:96:a7:e3:4e:e6:2d:f0:
         05:1e:5b:1f:db:e8:a0:4f:ff:3f:6f:4e:a1:16:1c:0b:8a:d5:
         d9:64:db:49:1c:aa:a8:24:9d:7e:4b:ba:d3:59:47:fd:4f:6a:
         5f:e4:62:64:ab:36:55:c0:30:ac:24:f3:6a:b7:43:4e:f2:55:
         1c:b2:b8:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REYwNzYxMTAvBgNVBAUTKDQ3OEE0QkREMDExMjFEMUM2QjMzM0VDQzNFMjVCQTFB
ODg3MTk5QUEwHhcNMjYwNzIyMTc1NDI1WhcNMjYwNzI5MTc1NDI1WjAYMRYwFAYD
VQQDEw02YTYxMDNkMi1mMDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvK12MIT5adeqw8XNh7Ogg35hyMMVYBqVc97RJ3FXNtAhNLhrPDapX5qVwASz
LGrjTgDXL7KuwmaPZ94GtYbw9I2if1RGb5Ju8CkgL7tlozT1uHT9gFtjDw72oU2a
pvqLhbAj39nLlU7/HA96/3kYo+LyPLJLCPtensYB8oCofLqzn1emLezgsfTXOu3S
RYjtKw+UQ+ckNmA5/lWcWnvh1NhgUR8S0IbeAVCp8h7S5SoYT/M7IPk/52dPwZXf
N7T1yBHrEKCMdVq2wWLK/TMg49FRLSElXsnm3g4bGacFbiVddZxQDfI3EDJufpm/
35mRVb2Yb2TLz9cKjccinjwB9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPS4kKMa
eWAfuO1lmu1+EZEzy4S0MB8GA1UdIwQYMBaAFEeKS90BEh0cazM+zD4luhqIcZmq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjA3Ni9BNDA4RjU4MkI5
MDQxMUU5QjFENTBCNDFDNEY5QUUwMi9SNHBMM1FFU0hSeHJNejdNUGlXNkdvaHht
YW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1I0cEwzUUVTSFJ4ck16N01QaVc2R29oeG1hby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RjA3Ni9BNDA4RjU4MkI5MDQxMUU5QjFENTBCNDFDNEY5QUUwMi9SNHBMM1FFU0hS
eHJNejdNUGlXNkdvaHhtYW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOk4C/Z7eXvg7xBYG+VdLcOioYXCS9fiHUe1N2DUEQC0BIti9fdFoorZ4Vqe/
S4KlEwTIftsiz8eYKeX1qeRznkkH+8DuE8oWzOPlGm5RLvv6D5oZgsQJQgFnQqr/
5ZwocIUjlJz/mYYKJypt8oyOrm+naHNBoXAg3DbzvmfpXA7au80eDvD9LklyX2RN
bSM7NK2glCcBi1YEkT8erbS0r3MpuQDt17RKz6NuzvgUt0Z45gQhhnRCvnU31FP5
ss2Wp+NO5i3wBR5bH9vooE//P29OoRYcC4rV2WTbSRyqqCSdfku601lH/U9qX+Ri
ZKs2VcAwrCTzardDTvJVHLK4/Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:19:29 2026 by rpki-client