Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft
File:                     T-9lB7JV2AZqDaP_J9OVRosVLTg.mft (raw, json)
Hash identifier:          8TBv9tmALqrt1xcPvRjtOGMrv91+8W+DCoNmO7Xq9QY=
Subject key identifier:   12:CE:64:80:62:8C:58:2F:90:22:4B:70:40:FB:0A:57:AE:C9:1B:5B
Authority key identifier: 4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38
Certificate issuer:       /CN=A91E3C42/serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38
Certificate serial:       0D78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft
Manifest number:          0D6E
Signing time:             Wed 22 Jul 2026 18:13:05 +0000
Manifest this update:     Wed 22 Jul 2026 18:13:05 +0000
Manifest next update:     Wed 29 Jul 2026 18:13:05 +0000
Files and hashes:         1: T-9lB7JV2AZqDaP_J9OVRosVLTg.crl (hash: DLBlNcrBkOvDZ8gjjmOFTH/ze8fpxXHFR/QDOLkTdkc=)
                          2: C41C9EFEF55A11E9BF182559C4F9AE02.roa (hash: glrqd12FYLCjxlnpQQmc9rytFHslPrUcTMQsV2ywiP0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl
                          rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3448 (0xd78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3C42, serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38
        Validity
            Not Before: Jul 22 18:13:05 2026 GMT
            Not After : Jul 29 18:13:05 2026 GMT
        Subject: CN=6a610831-e1fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b6:30:d1:ce:d1:16:ed:51:ec:4d:a3:99:a0:
                    da:c0:dd:6f:cb:90:dd:23:1a:38:fe:96:8a:9c:df:
                    3c:f2:12:39:9e:94:8f:67:9a:47:3f:30:fa:2f:37:
                    94:eb:88:e0:f2:3e:5e:29:1f:c2:36:1c:83:12:b5:
                    2c:fd:a4:06:96:9b:ac:d3:7c:e4:57:f4:96:1a:9e:
                    44:1f:25:a8:b1:20:e4:4d:1f:67:a6:b2:19:c2:a0:
                    a6:a6:04:5f:4a:79:f4:7d:f7:c7:a9:96:99:89:f7:
                    e1:fb:f9:fd:98:aa:f1:04:06:5b:54:ab:e7:e3:c2:
                    bb:91:47:d1:d3:49:46:7c:86:7a:fe:bb:93:5f:be:
                    29:f7:e3:01:82:ec:0d:f8:fb:68:c9:c3:01:92:a1:
                    df:39:07:51:a4:56:cb:bc:a9:80:5d:2e:a2:e5:74:
                    ef:5e:af:66:21:79:a9:01:9a:88:e2:8e:98:92:e4:
                    24:78:eb:07:28:59:f8:60:1b:38:a6:23:bd:22:25:
                    26:05:1d:8d:26:f4:63:2e:87:ba:36:42:cf:a9:87:
                    09:7a:42:71:c4:a3:9e:ec:07:45:d4:09:8f:4d:cc:
                    3f:9c:64:57:56:7b:94:db:b1:b7:93:bb:f7:5e:4f:
                    9f:d0:68:bd:23:c2:30:71:ed:86:b6:49:25:9a:4b:
                    54:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CE:64:80:62:8C:58:2F:90:22:4B:70:40:FB:0A:57:AE:C9:1B:5B
            X509v3 Authority Key Identifier:
                keyid:4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:92:bb:dd:f4:1f:b2:c5:26:9f:e4:86:f8:6c:e5:7e:ec:d9:
         31:3d:0e:00:a1:d0:e6:12:84:dd:54:e9:6e:65:f2:63:65:69:
         26:e3:d1:1e:14:a5:fd:7f:0e:46:26:4b:91:6c:75:1b:58:32:
         d3:8b:5e:26:3b:bb:b5:c7:26:54:89:83:99:c7:05:ee:07:38:
         38:e7:b7:23:5a:41:7b:05:cc:f3:4e:64:73:8d:c2:f3:46:e7:
         f6:89:0a:94:de:ac:f7:e7:f2:41:a3:3c:59:fa:cc:ea:38:3e:
         02:43:19:ee:44:08:e3:df:e9:f6:aa:0b:81:78:54:f1:a3:0a:
         35:17:d4:77:f2:35:54:2e:45:fb:8f:2e:13:c7:d2:17:86:b2:
         5b:b2:07:42:9e:7a:96:d4:83:bc:20:4a:6e:24:fc:76:c2:74:
         c7:63:34:c1:70:03:07:20:2e:d8:b8:f6:90:4d:be:66:20:b6:
         9c:ba:c8:95:9a:17:e0:60:d0:b3:55:9a:9b:01:5c:b2:74:7f:
         a2:ba:d2:98:59:28:41:b1:54:72:43:d8:67:4c:1d:94:eb:6c:
         82:85:39:fc:69:af:cd:6c:ec:ba:e7:95:f5:12:0b:b5:60:33:
         28:70:71:ed:07:b9:4a:ca:aa:43:b6:b5:64:09:3c:44:c5:9d:
         71:5c:2b:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTNDNDIxMTAvBgNVBAUTKDRGRUY2NTA3QjI1NUQ4MDY2QTBEQTNGRjI3RDM5NTQ2
OEIxNTJEMzgwHhcNMjYwNzIyMTgxMzA1WhcNMjYwNzI5MTgxMzA1WjAYMRYwFAYD
VQQDEw02YTYxMDgzMS1lMWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy7Yw0c7RFu1R7E2jmaDawN1vy5DdIxo4/paKnN888hI5npSPZ5pHPzD6LzeU
64jg8j5eKR/CNhyDErUs/aQGlpus03zkV/SWGp5EHyWosSDkTR9nprIZwqCmpgRf
Snn0fffHqZaZiffh+/n9mKrxBAZbVKvn48K7kUfR00lGfIZ6/ruTX74p9+MBguwN
+PtoycMBkqHfOQdRpFbLvKmAXS6i5XTvXq9mIXmpAZqI4o6YkuQkeOsHKFn4YBs4
piO9IiUmBR2NJvRjLoe6NkLPqYcJekJxxKOe7AdF1AmPTcw/nGRXVnuU27G3k7v3
Xk+f0Gi9I8Iwce2GtkklmktUBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBLOZIBi
jFgvkCJLcED7CleuyRtbMB8GA1UdIwQYMBaAFE/vZQeyVdgGag2j/yfTlUaLFS04
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M0Mi8zRkIzQjhEOEY1
NTkxMUU5Qjc1NzQ5NTZDNEY5QUUwMi9ULTlsQjdKVjJBWnFEYVBfSjlPVlJvc1ZM
VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1QtOWxCN0pWMkFacURhUF9KOU9WUm9zVkxUZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
M0M0Mi8zRkIzQjhEOEY1NTkxMUU5Qjc1NzQ5NTZDNEY5QUUwMi9ULTlsQjdKVjJB
WnFEYVBfSjlPVlJvc1ZMVGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUZK73fQfssUmn+SG+GzlfuzZMT0OAKHQ5hKE3VTpbmXyY2VpJuPRHhSl/X8O
RiZLkWx1G1gy04teJju7tccmVImDmccF7gc4OOe3I1pBewXM805kc43C80bn9okK
lN6s9+fyQaM8WfrM6jg+AkMZ7kQI49/p9qoLgXhU8aMKNRfUd/I1VC5F+48uE8fS
F4ayW7IHQp56ltSDvCBKbiT8dsJ0x2M0wXADByAu2Lj2kE2+ZiC2nLrIlZoX4GDQ
s1WamwFcsnR/orrSmFkoQbFUckPYZ0wdlOtsgoU5/GmvzWzsuueV9RILtWAzKHBx
7Qe5SsqqQ7a1ZAk8RMWdcVwrkw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:46:13 2026 by rpki-client