Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft
File:                     _IC0m1BzMv1MnJLdXiei38qAZNo.mft (raw, json)
Hash identifier:          E2snE86N6ph+F1bYzljKOoguqbybFEo/SKUTbDeYR4k=
Subject key identifier:   79:B5:FF:01:3E:1E:E4:08:15:22:B0:C4:0C:F9:A5:53:46:9E:AE:16
Authority key identifier: FC:80:B4:9B:50:73:32:FD:4C:9C:92:DD:5E:27:A2:DF:CA:80:64:DA
Certificate issuer:       /CN=A91E13D0/serialNumber=FC80B49B507332FD4C9C92DD5E27A2DFCA8064DA
Certificate serial:       05FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft
Manifest number:          05F4
Signing time:             Wed 22 Jul 2026 23:42:17 +0000
Manifest this update:     Wed 22 Jul 2026 23:42:17 +0000
Manifest next update:     Wed 29 Jul 2026 23:42:17 +0000
Files and hashes:         1: _IC0m1BzMv1MnJLdXiei38qAZNo.crl (hash: DxdZ2DTmi3ZGJL6QyBFDXQjGY8R/k0kghn/fggokNrk=)
                          2: E86C4B1E04AE11EC92C8D079C4F9AE02.roa (hash: wf2a4w67T5LlxEVDGfGnefxaFfP9ax9DaJiTme9ygjQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.crl
                          rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1533 (0x5fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E13D0, serialNumber=FC80B49B507332FD4C9C92DD5E27A2DFCA8064DA
        Validity
            Not Before: Jul 22 23:42:17 2026 GMT
            Not After : Jul 29 23:42:17 2026 GMT
        Subject: CN=6a615559-afb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3e:0f:ba:c1:a7:45:88:13:5b:a2:bc:05:df:
                    72:51:3e:38:a4:65:f5:a9:6e:ed:38:6c:f0:24:fc:
                    58:ec:df:5d:6a:c9:c8:04:f6:a0:e8:ef:43:9f:92:
                    c1:d4:81:84:0b:be:fc:53:e3:49:0f:2c:76:be:32:
                    e8:c8:16:43:33:61:bf:0f:00:ec:b8:2b:1e:19:a5:
                    59:8e:f5:21:ee:7f:5a:9e:2e:c1:a8:90:3b:32:4b:
                    8d:94:5f:77:22:d0:85:06:a5:ee:5d:fd:cd:9a:25:
                    47:76:03:4a:f9:90:89:60:b2:10:47:ed:06:75:20:
                    25:de:ed:f1:84:5c:cb:59:f3:a4:6c:e7:95:ad:b8:
                    db:cf:52:a7:a8:a9:4f:d9:cd:62:e3:a9:26:30:12:
                    92:8f:f3:18:a1:67:02:00:7f:0e:30:97:9e:f1:e0:
                    20:0d:a4:da:b2:bf:06:c3:01:22:dd:84:ce:5d:af:
                    a1:9d:87:aa:24:9a:94:a3:b8:60:c8:92:3f:24:9d:
                    e2:f4:47:59:1a:a8:96:94:2e:03:78:5b:99:5b:53:
                    17:cb:3f:2e:95:ab:33:56:1d:3a:09:82:06:02:e0:
                    56:02:a0:90:ae:d2:51:aa:a5:cf:4e:40:d3:42:c9:
                    d5:e7:96:50:c7:d0:da:0e:d2:b2:67:a4:d3:2d:e4:
                    3c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B5:FF:01:3E:1E:E4:08:15:22:B0:C4:0C:F9:A5:53:46:9E:AE:16
            X509v3 Authority Key Identifier:
                keyid:FC:80:B4:9B:50:73:32:FD:4C:9C:92:DD:5E:27:A2:DF:CA:80:64:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ae:02:1c:d3:70:db:c4:62:b0:fe:22:af:41:32:0b:bc:f2:
         5f:e0:13:dd:6a:6d:9d:41:5b:fb:ec:2d:57:06:20:8c:2d:c7:
         10:5d:34:6c:95:de:89:7d:75:13:ea:2c:09:3e:23:42:11:43:
         2b:ed:3e:3c:e5:cc:40:5b:d6:48:18:0d:9b:02:2f:91:15:a7:
         37:3c:6c:bf:9b:d5:1d:56:0a:59:43:01:c7:b6:d3:d3:49:ed:
         fa:54:3f:d2:cb:92:7c:5f:4e:ce:45:77:10:2f:da:c1:dd:10:
         81:ab:c3:c8:bd:80:ff:f8:92:ff:20:c7:7a:94:8a:7a:b8:b1:
         6b:6f:a2:c0:34:58:87:3e:8d:c2:95:87:60:3b:cd:b3:07:03:
         36:b0:af:9a:9e:c1:92:df:82:30:eb:3c:6f:e8:bd:92:6c:99:
         94:63:9d:21:57:a7:29:5d:6e:07:5a:7e:1d:fa:4a:6d:9d:2c:
         43:03:d7:31:e4:fa:12:1c:08:65:15:78:7c:f4:5f:5f:cd:5c:
         75:b0:0c:42:73:d3:61:44:43:0f:12:a9:d6:e4:58:65:b0:ed:
         b3:70:38:b0:b7:51:f0:fd:30:f4:cd:ad:e2:35:ef:d1:df:6e:
         1c:24:9e:4c:f0:b3:43:6c:b1:55:56:78:5d:7b:13:18:56:dd:
         56:a4:9a:32
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTEzRDAxMTAvBgNVBAUTKEZDODBCNDlCNTA3MzMyRkQ0QzlDOTJERDVFMjdBMkRG
Q0E4MDY0REEwHhcNMjYwNzIyMjM0MjE3WhcNMjYwNzI5MjM0MjE3WjAYMRYwFAYD
VQQDEw02YTYxNTU1OS1hZmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyD4PusGnRYgTW6K8Bd9yUT44pGX1qW7tOGzwJPxY7N9dasnIBPag6O9Dn5LB
1IGEC778U+NJDyx2vjLoyBZDM2G/DwDsuCseGaVZjvUh7n9ani7BqJA7MkuNlF93
ItCFBqXuXf3NmiVHdgNK+ZCJYLIQR+0GdSAl3u3xhFzLWfOkbOeVrbjbz1KnqKlP
2c1i46kmMBKSj/MYoWcCAH8OMJee8eAgDaTasr8GwwEi3YTOXa+hnYeqJJqUo7hg
yJI/JJ3i9EdZGqiWlC4DeFuZW1MXyz8ulaszVh06CYIGAuBWAqCQrtJRqqXPTkDT
QsnV55ZQx9DaDtKyZ6TTLeQ8MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHm1/wE+
HuQIFSKwxAz5pVNGnq4WMB8GA1UdIwQYMBaAFPyAtJtQczL9TJyS3V4not/KgGTa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTNEMC9EN0E0QkI1NjA0
QUMxMUVDQkVCNTBDNzlDNEY5QUUwMi9fSUMwbTFCek12MU1uSkxkWGllaTM4cUFa
Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19JQzBtMUJ6TXYxTW5KTGRYaWVpMzhxQVpOby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MTNEMC9EN0E0QkI1NjA0QUMxMUVDQkVCNTBDNzlDNEY5QUUwMi9fSUMwbTFCek12
MU1uSkxkWGllaTM4cUFaTm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbK4CHNNw28RisP4ir0EyC7zyX+AT3WptnUFb++wtVwYgjC3HEF00bJXeiX11
E+osCT4jQhFDK+0+POXMQFvWSBgNmwIvkRWnNzxsv5vVHVYKWUMBx7bT00nt+lQ/
0suSfF9OzkV3EC/awd0QgavDyL2A//iS/yDHepSKerixa2+iwDRYhz6NwpWHYDvN
swcDNrCvmp7Bkt+CMOs8b+i9kmyZlGOdIVenKV1uB1p+HfpKbZ0sQwPXMeT6EhwI
ZRV4fPRfX81cdbAMQnPTYURDDxKp1uRYZbDts3A4sLdR8P0w9M2t4jXv0d9uHCSe
TPCzQ2yxVVZ4XXsTGFbdVqSaMg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:06:21 2026 by rpki-client