Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
File:                     DtUqdvMcJCF0oq0ZSByVcDty4jY.mft (raw, json)
Hash identifier:          acnlMUqgiRbpNRpJZ5Ez7gBwYnZdPOLGj6urx6zosAQ=
Subject key identifier:   14:CF:9C:DF:8C:6C:93:A0:83:DE:A8:5E:A8:38:14:52:8E:10:30:46
Authority key identifier: 0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36
Certificate issuer:       /CN=A91E33D7/serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236
Certificate serial:       0EE6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
Manifest number:          0ED7
Signing time:             Wed 22 Jul 2026 17:51:01 +0000
Manifest this update:     Wed 22 Jul 2026 17:51:01 +0000
Manifest next update:     Wed 29 Jul 2026 17:51:01 +0000
Files and hashes:         1: DtUqdvMcJCF0oq0ZSByVcDty4jY.crl (hash: joeWc3Hs5bos5uYC8jEV8x4QVQvcHU4yEHSFCuwFPAE=)
                          2: AFAF715E4F6111F180E0E950C4833773.roa (hash: f1Qtrg6zMcuoal6t/eOY7kCkc2ldrxW+UAv8fqMIKbE=)
                          3: C26576D4F4ED11E9ACC51713C4F9AE02.roa (hash: +8+LmzfERPVvTvelw5uwc+I3y328jDcfohQEW7SsOnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl
                          rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3814 (0xee6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E33D7, serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236
        Validity
            Not Before: Jul 22 17:51:01 2026 GMT
            Not After : Jul 29 17:51:01 2026 GMT
        Subject: CN=6a610305-0194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3c:d8:66:b5:b1:45:5a:b2:dc:36:3c:c5:23:
                    6c:80:b0:4e:44:36:6b:71:03:87:ce:33:4d:6b:29:
                    5a:71:e6:37:19:0c:f9:58:c0:d3:d8:24:c4:4e:8f:
                    a5:eb:99:71:af:c3:7c:42:ae:bf:8a:4f:e4:9b:a3:
                    f7:d0:92:a0:19:60:78:85:42:21:85:26:17:70:8c:
                    7a:15:7d:1e:bc:c5:dd:83:b6:31:f5:87:6c:cf:d5:
                    fb:f0:1b:f8:53:10:71:3c:0e:00:af:1c:6d:52:3b:
                    2e:b4:a0:47:be:5d:f2:54:74:cf:c3:c2:25:fd:09:
                    0a:7b:db:97:5d:c2:f5:9a:3d:89:f7:ab:a7:cf:34:
                    76:bf:ec:5e:20:51:29:53:c2:43:be:db:74:5b:f4:
                    f2:13:5b:ab:e3:04:b7:28:f2:2a:4f:6a:a9:31:0d:
                    c7:1a:72:72:22:66:34:4c:df:cc:fc:e2:44:1c:08:
                    06:aa:28:ae:fd:3f:10:47:6f:7f:be:2c:0c:1d:dc:
                    35:0a:a5:0f:e4:5b:18:72:68:69:dd:54:6c:7f:d2:
                    ff:d2:a1:2d:eb:4a:a4:8e:7d:f0:d7:98:b7:6a:91:
                    f8:27:55:8b:5a:c1:cf:bf:d7:93:8d:13:d1:00:e8:
                    ba:5a:9e:8b:50:a6:52:c3:29:4f:da:d3:04:b6:bb:
                    28:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CF:9C:DF:8C:6C:93:A0:83:DE:A8:5E:A8:38:14:52:8E:10:30:46
            X509v3 Authority Key Identifier:
                keyid:0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:c4:b4:26:51:b3:bf:d6:dc:88:d6:2e:e4:b8:44:51:bd:88:
         7b:ba:ca:6e:67:66:9f:30:3f:d6:10:be:fb:62:a7:5c:0b:6b:
         01:31:d9:f6:26:61:90:ec:10:9c:68:4c:a1:27:fd:fa:19:e5:
         bf:57:e0:23:f2:b3:14:e1:38:1e:d3:13:f2:66:9e:c5:8c:50:
         95:10:30:28:b4:94:8c:f7:99:ed:9c:46:99:25:6b:19:f4:94:
         c8:0a:48:92:8f:ad:f0:a7:53:a3:8b:68:06:7a:58:8e:ca:ee:
         97:f0:94:e0:b3:d1:c4:39:39:93:e6:3e:8d:49:9c:e5:28:6d:
         7f:f8:6a:30:a5:9d:fe:ce:34:c7:cb:dd:d7:c1:72:fd:15:d5:
         d2:b0:43:df:ed:a5:22:46:d3:32:f7:8e:20:1b:96:2a:8b:25:
         cc:26:67:3f:62:16:fe:f6:d2:80:8f:89:e5:2e:ad:30:e3:45:
         ce:b4:da:8b:b1:80:6c:1d:59:74:73:d8:86:ce:bb:33:7e:59:
         ea:0c:f2:be:c6:de:97:1d:5c:d5:fc:2a:ea:60:d3:4d:f4:f5:
         1c:74:e2:a0:13:5f:cf:f2:65:08:57:be:af:0d:ad:b8:60:f4:
         9d:31:db:e4:32:14:bf:44:0c:28:1e:86:8d:d8:68:56:41:c7:
         54:6a:af:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTMzRDcxMTAvBgNVBAUTKDBFRDUyQTc2RjMxQzI0MjE3NEEyQUQxOTQ4MUM5NTcw
M0I3MkUyMzYwHhcNMjYwNzIyMTc1MTAxWhcNMjYwNzI5MTc1MTAxWjAYMRYwFAYD
VQQDEw02YTYxMDMwNS0wMTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1zzYZrWxRVqy3DY8xSNsgLBORDZrcQOHzjNNaylaceY3GQz5WMDT2CTETo+l
65lxr8N8Qq6/ik/km6P30JKgGWB4hUIhhSYXcIx6FX0evMXdg7Yx9Ydsz9X78Bv4
UxBxPA4ArxxtUjsutKBHvl3yVHTPw8Il/QkKe9uXXcL1mj2J96unzzR2v+xeIFEp
U8JDvtt0W/TyE1ur4wS3KPIqT2qpMQ3HGnJyImY0TN/M/OJEHAgGqiiu/T8QR29/
viwMHdw1CqUP5FsYcmhp3VRsf9L/0qEt60qkjn3w15i3apH4J1WLWsHPv9eTjRPR
AOi6Wp6LUKZSwylP2tMEtrso0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBTPnN+M
bJOgg96oXqg4FFKOEDBGMB8GA1UdIwQYMBaAFA7VKnbzHCQhdKKtGUgclXA7cuI2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzNENy9EQzdEODg2NEFF
QjAxMUU5OEQwOEUxM0NDNEY5QUUwMi9EdFVxZHZNY0pDRjBvcTBaU0J5VmNEdHk0
alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0R0VXFkdk1jSkNGMG9xMFpTQnlWY0R0eTRqWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MzNENy9EQzdEODg2NEFFQjAxMUU5OEQwOEUxM0NDNEY5QUUwMi9EdFVxZHZNY0pD
RjBvcTBaU0J5VmNEdHk0alkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAu8S0JlGzv9bciNYu5LhEUb2Ie7rKbmdmnzA/1hC++2KnXAtrATHZ9iZhkOwQ
nGhMoSf9+hnlv1fgI/KzFOE4HtMT8maexYxQlRAwKLSUjPeZ7ZxGmSVrGfSUyApI
ko+t8KdTo4toBnpYjsrul/CU4LPRxDk5k+Y+jUmc5Shtf/hqMKWd/s40x8vd18Fy
/RXV0rBD3+2lIkbTMveOIBuWKoslzCZnP2IW/vbSgI+J5S6tMONFzrTai7GAbB1Z
dHPYhs67M35Z6gzyvsbelx1c1fwq6mDTTfT1HHTioBNfz/JlCFe+rw2tuGD0nTHb
5DIUv0QMKB6GjdhoVkHHVGqvlQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:27:15 2026 by rpki-client