Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
File:                     JYQfp3wFcWWF_nvbBgC5hk40BtI.mft (raw, json)
Hash identifier:          uce4vUf4J9KFSRzIB0j6Mz80EQe34DKepMY+1NR8uVk=
Subject key identifier:   00:85:49:7B:8C:34:C9:9B:FD:0A:7C:D1:A4:44:65:93:91:19:2E:0B
Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2
Certificate issuer:       /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2
Certificate serial:       0A4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
Manifest number:          0A2C
Signing time:             Wed 22 Jul 2026 20:10:06 +0000
Manifest this update:     Wed 22 Jul 2026 20:10:06 +0000
Manifest next update:     Wed 29 Jul 2026 20:10:06 +0000
Files and hashes:         1: JYQfp3wFcWWF_nvbBgC5hk40BtI.crl (hash: mvpjI78ON4t7kTS+ss71+6zrjQQSNYgaWWnBfON6Z4Y=)
                          2: FCC951D6FB1211EDBFADE86AC4F9AE02.roa (hash: 8dSZPcTAakCu9QFROWtp0AtwoX7QWCqBkxw8aYFakak=)
                          3: 14A4E3F099E211EAAC99C833C4F9AE02.roa (hash: icEGC8iWrZAuCb+Toy7ITwaY5wPDLr4xdAi9iPNhR7A=)
                          4: 91FD24BA23C511EDA6D7F073C4F9AE02.roa (hash: 5herfVtiX3Vkwm/8fsoSk+EzMfC6vIVDvWWZDlnOkKU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl
                          rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2634 (0xa4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E28C1, serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2
        Validity
            Not Before: Jul 22 20:10:06 2026 GMT
            Not After : Jul 29 20:10:06 2026 GMT
        Subject: CN=6a61239e-e6db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:77:37:27:f3:31:bd:1a:c7:f8:d4:92:9a:e5:
                    73:a3:6c:43:10:01:ca:64:5d:c8:9c:5a:03:77:fb:
                    20:c1:63:80:f9:1d:d0:b3:6c:d9:70:f4:ee:c9:8d:
                    55:29:46:ce:17:70:61:97:7e:13:39:c0:ee:15:d2:
                    26:48:c0:25:e9:2c:90:0d:93:7e:fa:1d:0f:c9:06:
                    1c:78:30:f5:46:94:6d:78:fa:b3:5a:59:54:c0:7e:
                    47:69:92:28:e4:43:3a:74:65:2a:9a:42:40:ef:42:
                    e9:65:2d:bf:44:a7:ef:fe:25:47:48:92:0d:0f:eb:
                    d3:d6:f3:80:1b:b9:41:f9:19:0b:07:df:65:37:bd:
                    ad:8b:a0:7c:8d:a3:75:d4:d3:1b:f2:5c:49:55:7e:
                    7c:80:85:07:6d:62:8f:c5:a1:35:9d:1d:1f:f6:72:
                    79:ce:70:66:a6:41:ca:8f:6c:fa:cf:f8:f5:fd:30:
                    89:bb:a5:70:51:eb:81:40:e0:94:b1:ef:5d:ea:c7:
                    84:cd:ad:1b:93:e6:10:c3:53:28:0a:b1:26:e5:1d:
                    71:3f:58:80:92:b5:29:e1:5c:07:5b:a5:3d:d2:5d:
                    f2:b6:e6:e6:c2:f1:04:0a:ff:2b:cc:8e:14:67:9a:
                    b5:34:26:4a:71:c6:02:be:3c:67:8b:d2:8a:fa:8a:
                    2f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:85:49:7B:8C:34:C9:9B:FD:0A:7C:D1:A4:44:65:93:91:19:2E:0B
            X509v3 Authority Key Identifier:
                keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ca:77:23:f0:6e:10:5f:4c:28:b1:1e:48:52:75:b8:f6:d5:
         b2:98:24:06:23:4c:16:61:ae:38:44:2d:98:2b:e4:79:d1:ac:
         4b:0d:68:03:83:85:70:a9:26:25:e6:cf:8d:a0:1e:30:87:1f:
         db:17:85:a4:75:aa:38:1e:50:70:b1:65:dc:99:80:fd:93:08:
         c7:22:80:7e:5d:b4:9b:48:2e:96:76:b2:03:ee:dd:06:e6:40:
         96:3d:6a:c8:72:7f:cc:97:19:3b:47:55:ae:38:77:e8:3e:23:
         f7:83:ce:71:ae:e9:57:08:89:52:4c:47:e3:30:52:55:df:a8:
         5c:00:14:9a:b4:0d:4c:af:82:ed:6c:b6:49:97:01:e5:18:18:
         17:05:05:e6:25:2f:2d:7d:4e:4b:8a:2f:5b:e3:2f:08:44:82:
         c7:6a:6e:df:ba:12:a8:13:e0:76:28:b9:83:10:c2:41:d9:bc:
         c9:1e:7d:d9:3a:bc:f5:e2:b9:1b:b7:a2:ef:e6:6c:e1:45:fe:
         a1:f4:79:c9:1c:42:73:34:a4:82:ac:20:68:c7:81:e8:29:59:
         b0:f9:07:98:b7:1e:7d:71:6a:50:6b:ae:88:f0:64:41:54:26:
         78:8f:42:e4:e1:50:b0:66:13:f7:15:28:78:3d:0b:24:43:80:
         2c:a5:63:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTI4QzExMTAvBgNVBAUTKDI1ODQxRkE3N0MwNTcxNjU4NUZFN0JEQjA2MDBCOTg2
NEUzNDA2RDIwHhcNMjYwNzIyMjAxMDA2WhcNMjYwNzI5MjAxMDA2WjAYMRYwFAYD
VQQDEw02YTYxMjM5ZS1lNmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApXc3J/MxvRrH+NSSmuVzo2xDEAHKZF3InFoDd/sgwWOA+R3Qs2zZcPTuyY1V
KUbOF3Bhl34TOcDuFdImSMAl6SyQDZN++h0PyQYceDD1RpRtePqzWllUwH5HaZIo
5EM6dGUqmkJA70LpZS2/RKfv/iVHSJIND+vT1vOAG7lB+RkLB99lN72ti6B8jaN1
1NMb8lxJVX58gIUHbWKPxaE1nR0f9nJ5znBmpkHKj2z6z/j1/TCJu6VwUeuBQOCU
se9d6seEza0bk+YQw1MoCrEm5R1xP1iAkrUp4VwHW6U90l3ytubmwvEECv8rzI4U
Z5q1NCZKccYCvjxni9KK+oovFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFACFSXuM
NMmb/Qp80aREZZORGS4LMB8GA1UdIwQYMBaAFCWEH6d8BXFlhf572wYAuYZONAbS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhDMS9GOEFGQTE0MDk5
RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNXV0ZfbnZiQmdDNWhrNDBC
dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pZUWZwM3dGY1dXRl9udmJCZ0M1aGs0MEJ0SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MjhDMS9GOEFGQTE0MDk5RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNX
V0ZfbnZiQmdDNWhrNDBCdEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASMp3I/BuEF9MKLEeSFJ1uPbVspgkBiNMFmGuOEQtmCvkedGsSw1oA4OFcKkm
JebPjaAeMIcf2xeFpHWqOB5QcLFl3JmA/ZMIxyKAfl20m0gulnayA+7dBuZAlj1q
yHJ/zJcZO0dVrjh36D4j94POca7pVwiJUkxH4zBSVd+oXAAUmrQNTK+C7Wy2SZcB
5RgYFwUF5iUvLX1OS4ovW+MvCESCx2pu37oSqBPgdii5gxDCQdm8yR592Tq89eK5
G7ei7+Zs4UX+ofR5yRxCczSkgqwgaMeB6ClZsPkHmLcefXFqUGuuiPBkQVQmeI9C
5OFQsGYT9xUoeD0LJEOALKVjNw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:24:04 2026 by rpki-client