Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
File:                     CyVhxLV9qB1w85cksN4scQF0n10.mft (raw, json)
Hash identifier:          a+1QvMJanmxutLqP2+9UIhRN0qbJdgagrZZIJKRiAhI=
Subject key identifier:   C0:C4:51:7C:E1:23:35:B5:FE:F6:EE:2C:AB:FC:3C:87:2D:4D:9A:62
Authority key identifier: 0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D
Certificate issuer:       /CN=A91E1155/serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D
Certificate serial:       0FE2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
Manifest number:          0FCF
Signing time:             Wed 22 Jul 2026 17:39:13 +0000
Manifest this update:     Wed 22 Jul 2026 17:39:12 +0000
Manifest next update:     Wed 29 Jul 2026 17:39:12 +0000
Files and hashes:         1: CyVhxLV9qB1w85cksN4scQF0n10.crl (hash: ae+cGSYKtL4v+ScluYEQzDbwObhkVEG06OEVZSrwu6Q=)
                          2: 4B1E3E947EB411E994ED5B25C4F9AE02.roa (hash: kSNCg22bt6PXx3rEaTBPvjpdHaLrIf1YauM4yC/A/tE=)
                          3: AC8695B8A60611EE8FEB2160C4F9AE02.roa (hash: vtr7yAZ74kddk2JEZlUucC+/G3kf3cROk0g8PEEHH8Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl
                          rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4066 (0xfe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1155, serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D
        Validity
            Not Before: Jul 22 17:39:12 2026 GMT
            Not After : Jul 29 17:39:12 2026 GMT
        Subject: CN=6a610041-f113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0f:58:d8:42:da:95:c4:15:b7:94:35:32:0b:
                    2f:1e:35:de:ed:d5:71:67:7e:03:b6:ab:56:df:0b:
                    43:39:55:38:05:aa:70:80:50:6d:d9:88:12:45:4e:
                    4a:a9:db:10:e4:1b:bf:b2:6e:93:98:b5:66:77:93:
                    98:0c:6a:23:9c:7a:87:5c:af:76:f7:18:bc:76:e5:
                    cd:05:ba:51:36:5f:31:61:ff:86:15:5f:d6:cb:8c:
                    ef:5d:e2:a6:7d:26:5d:2e:2b:c9:23:66:5a:6f:32:
                    e7:4a:b2:73:e0:c2:02:83:86:34:88:d4:33:8c:5e:
                    59:af:b9:6d:3b:2e:06:88:b7:2e:4d:98:e3:f5:ff:
                    d5:6a:b9:7f:a4:15:30:5b:9b:7d:19:e6:43:8f:ac:
                    9a:89:e4:70:cc:cb:07:84:7d:91:35:7e:f6:80:d7:
                    b9:d6:a7:08:4b:50:51:c5:47:af:6d:e5:3a:30:d8:
                    8f:d5:fa:22:c1:ca:22:cb:db:0e:2e:01:00:c1:5a:
                    eb:70:ec:23:0f:a1:b6:0b:b2:38:16:bd:55:07:5f:
                    5d:fc:6e:11:b5:4d:5d:48:77:df:b2:1a:1f:3f:0b:
                    ec:dd:ca:51:2f:3e:89:75:d4:bf:2b:30:ec:1e:d0:
                    5c:b0:58:0f:27:a0:92:d5:f5:ee:37:d0:36:bd:07:
                    02:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C4:51:7C:E1:23:35:B5:FE:F6:EE:2C:AB:FC:3C:87:2D:4D:9A:62
            X509v3 Authority Key Identifier:
                keyid:0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:1b:5f:6f:09:f0:d4:87:46:48:7f:29:9c:45:4e:11:db:b1:
         9f:c0:ed:b4:7b:82:dd:7d:cc:0a:23:ef:d2:8f:51:5d:de:d5:
         6b:46:26:b1:eb:9c:05:ec:2d:98:65:15:23:f8:ec:a0:0b:6f:
         47:a1:57:65:69:5c:3c:09:ea:f4:6d:bd:39:cc:57:b4:e8:fd:
         22:f5:ff:e4:38:7f:8b:df:c1:cc:70:6b:56:8e:ea:7e:b6:72:
         76:02:04:4f:88:b6:af:c7:ee:c7:43:48:d1:f8:cc:31:b4:96:
         4c:11:ec:17:b4:a4:6c:5c:9b:1e:b2:7a:ed:fa:ee:21:06:57:
         02:c5:33:da:75:27:b5:09:33:69:0e:e8:21:82:fe:42:ac:b9:
         79:2a:ac:96:78:44:5c:90:0f:9f:ca:ce:30:c9:07:54:9e:4f:
         1e:eb:36:c8:70:8e:fe:3f:06:0b:8a:1d:dc:da:be:62:0c:bc:
         02:cc:67:e2:51:a4:6b:16:30:2c:a2:c6:68:6f:80:57:64:ae:
         44:4d:8d:da:fb:c8:a1:2a:a0:17:e0:32:87:2c:ba:c3:b6:fb:
         ff:30:3e:5d:7d:fa:f6:7f:18:35:1b:db:15:13:e0:44:cf:d0:
         bf:1e:d7:6d:a5:f5:26:ff:85:0d:02:a2:a2:3d:9f:3a:03:41:
         b6:9f:bb:66
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICD+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTExNTUxMTAvBgNVBAUTKDBCMjU2MUM0QjU3REE4MUQ3MEYzOTcyNEIwREUyQzcx
MDE3NDlGNUQwHhcNMjYwNzIyMTczOTEyWhcNMjYwNzI5MTczOTEyWjAYMRYwFAYD
VQQDEw02YTYxMDA0MS1mMTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkQ9Y2ELalcQVt5Q1MgsvHjXe7dVxZ34DtqtW3wtDOVU4BapwgFBt2YgSRU5K
qdsQ5Bu/sm6TmLVmd5OYDGojnHqHXK929xi8duXNBbpRNl8xYf+GFV/Wy4zvXeKm
fSZdLivJI2ZabzLnSrJz4MICg4Y0iNQzjF5Zr7ltOy4GiLcuTZjj9f/Varl/pBUw
W5t9GeZDj6yaieRwzMsHhH2RNX72gNe51qcIS1BRxUevbeU6MNiP1foiwcoiy9sO
LgEAwVrrcOwjD6G2C7I4Fr1VB19d/G4RtU1dSHffshofPwvs3cpRLz6JddS/KzDs
HtBcsFgPJ6CS1fXuN9A2vQcCzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMDEUXzh
IzW1/vbuLKv8PIctTZpiMB8GA1UdIwQYMBaAFAslYcS1fagdcPOXJLDeLHEBdJ9d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTE1NS81Mzk5OEEzNDdF
QjMxMUU5QUI5QzdCMjRDNEY5QUUwMi9DeVZoeExWOXFCMXc4NWNrc040c2NRRjBu
MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0N5Vmh4TFY5cUIxdzg1Y2tzTjRzY1FGMG4xMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MTE1NS81Mzk5OEEzNDdFQjMxMUU5QUI5QzdCMjRDNEY5QUUwMi9DeVZoeExWOXFC
MXc4NWNrc040c2NRRjBuMTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQBtfbwnw1IdGSH8pnEVOEduxn8DttHuC3X3MCiPv0o9RXd7Va0YmseucBewt
mGUVI/jsoAtvR6FXZWlcPAnq9G29OcxXtOj9IvX/5Dh/i9/BzHBrVo7qfrZydgIE
T4i2r8fux0NI0fjMMbSWTBHsF7SkbFybHrJ67fruIQZXAsUz2nUntQkzaQ7oIYL+
Qqy5eSqslnhEXJAPn8rOMMkHVJ5PHus2yHCO/j8GC4od3Nq+Ygy8Asxn4lGkaxYw
LKLGaG+AV2SuRE2N2vvIoSqgF+Ayhyy6w7b7/zA+XX369n8YNRvbFRPgRM/Qvx7X
baX1Jv+FDQKioj2fOgNBtp+7Zg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:30:31 2026 by rpki-client