Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
File:                     o_JydS7F2eEp5N_KCAuI05t5SUQ.mft (raw, json)
Hash identifier:          VaYGL6lEByj0oA8/Swc5ozcjzzotJmQaHGwU2csYriI=
Subject key identifier:   82:ED:E7:BF:59:60:C3:B2:0C:50:EA:95:A8:A1:B5:1F:52:57:27:9F
Authority key identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44
Certificate issuer:       /CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944
Certificate serial:       04B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
Manifest number:          0498
Signing time:             Thu 23 Jul 2026 01:26:28 +0000
Manifest this update:     Thu 23 Jul 2026 01:26:27 +0000
Manifest next update:     Thu 30 Jul 2026 01:26:27 +0000
Files and hashes:         1: o_JydS7F2eEp5N_KCAuI05t5SUQ.crl (hash: 5OX7Eoru2m0MQ4TlMnXWhHCeJtSIsloEuKxejG7GAaQ=)
                          2: 39574A98960D11ECAAC81D60C4F9AE02.roa (hash: vKCveSRO1lmMSMepRjwFMH5hVO6szfi6cYdihL340nY=)
                          3: 60523BEA0CA411ED96936D79C4F9AE02.roa (hash: kXLkRG4xYfLnM0J2YdWVuS+q04wt6hKsDNBBad1HXsc=)
                          4: 0B5742C234AD11F1851A1E75B8833773.roa (hash: PgHm8kIkg0ILltI3AvO0evXqOsp4h8xbRfxnnSTT31c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:26:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1202 (0x4b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E504E, serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944
        Validity
            Not Before: Jul 23 01:26:27 2026 GMT
            Not After : Jul 30 01:26:27 2026 GMT
        Subject: CN=6a616dc3-2952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:69:0e:3e:3a:3b:e6:31:1f:97:0e:0f:e1:b7:
                    82:92:96:26:ed:3b:70:e3:ef:2a:3b:c8:08:e3:fd:
                    ff:c1:09:92:14:80:18:07:b9:bb:23:9a:3b:97:60:
                    09:0c:84:b3:a7:19:3c:6a:c2:e3:7d:ee:bf:30:1d:
                    90:87:cb:b8:ae:b7:14:b4:3b:41:cd:bf:04:87:50:
                    57:20:c6:a8:60:4c:f0:a2:2a:3b:8f:2b:01:5e:77:
                    ee:f3:3f:5d:17:14:7d:fa:b2:24:6c:18:17:4a:63:
                    9b:3b:e8:28:4b:12:96:df:a9:eb:bd:5e:75:59:6f:
                    32:9c:87:e4:6d:53:fa:14:78:0d:51:8d:d4:b6:dc:
                    99:f2:c9:4e:30:6b:fc:31:55:24:8e:3d:6a:f2:77:
                    09:5e:f1:2f:eb:02:17:6b:a2:e4:38:70:70:77:15:
                    ef:86:e7:45:a2:27:85:c0:7f:9d:54:52:9f:74:48:
                    89:2a:da:6a:59:c0:7f:85:16:35:5e:cf:f9:5d:c9:
                    f4:a2:4c:3e:40:64:68:d1:80:46:34:50:77:41:61:
                    64:9b:07:34:ac:0e:2c:44:06:a3:43:38:31:10:09:
                    b4:7d:1e:59:dc:ce:ac:87:0c:fc:2a:1e:4e:78:9d:
                    29:05:1b:65:27:2f:7c:c3:e8:46:6d:f2:c1:9f:b7:
                    e6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:ED:E7:BF:59:60:C3:B2:0C:50:EA:95:A8:A1:B5:1F:52:57:27:9F
            X509v3 Authority Key Identifier:
                keyid:A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:b8:4c:d9:ff:0c:59:05:0e:13:06:89:a2:6f:83:48:d4:b0:
         ee:b7:bd:de:dc:35:d4:c5:ee:0a:43:77:91:84:44:51:a2:aa:
         9f:30:58:e9:50:be:79:9f:65:85:46:08:9a:bc:b2:a3:a5:6b:
         91:01:e3:ed:f3:f7:40:43:76:e1:ab:af:24:bb:36:1b:2d:cc:
         43:b6:6f:df:59:58:a4:56:ef:f9:3d:cb:51:bb:69:93:2b:88:
         11:67:e7:e3:1e:49:41:4c:70:b3:f9:59:74:96:b9:fd:0b:38:
         3f:3f:c9:e3:a5:77:8b:0e:46:24:78:06:b6:38:51:2f:89:7c:
         c7:6b:a3:c2:b3:c9:01:70:fa:1a:94:3f:30:e5:ef:9e:e6:51:
         53:f7:0f:ab:d9:4a:1e:14:9d:ab:30:a3:da:7d:35:bf:d5:1f:
         da:81:f9:7a:67:0a:db:32:b4:0b:42:5f:cf:5e:42:42:f0:9a:
         5d:0b:39:0a:31:8c:c0:d3:2f:ba:73:38:2b:97:e9:72:ad:e9:
         a9:02:8e:0c:1a:d4:2c:ee:e1:e8:ed:a1:4a:4d:28:a6:c5:20:
         be:72:67:53:23:0b:60:1d:3c:09:c2:6a:20:52:dd:d0:3a:3d:
         e5:24:7b:c6:df:25:4f:ed:3a:ed:ab:45:c5:0d:55:f1:37:61:
         1f:0e:8c:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTUwNEUxMTAvBgNVBAUTKEEzRjI3Mjc1MkVDNUQ5RTEyOUU0REZDQTA4MEI4OEQz
OUI3OTQ5NDQwHhcNMjYwNzIzMDEyNjI3WhcNMjYwNzMwMDEyNjI3WjAYMRYwFAYD
VQQDEw02YTYxNmRjMy0yOTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA72kOPjo75jEflw4P4beCkpYm7Ttw4+8qO8gI4/3/wQmSFIAYB7m7I5o7l2AJ
DISzpxk8asLjfe6/MB2Qh8u4rrcUtDtBzb8Eh1BXIMaoYEzwoio7jysBXnfu8z9d
FxR9+rIkbBgXSmObO+goSxKW36nrvV51WW8ynIfkbVP6FHgNUY3UttyZ8slOMGv8
MVUkjj1q8ncJXvEv6wIXa6LkOHBwdxXvhudFoieFwH+dVFKfdEiJKtpqWcB/hRY1
Xs/5Xcn0okw+QGRo0YBGNFB3QWFkmwc0rA4sRAajQzgxEAm0fR5Z3M6shwz8Kh5O
eJ0pBRtlJy98w+hGbfLBn7fmCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFILt579Z
YMOyDFDqlaihtR9SVyefMB8GA1UdIwQYMBaAFKPycnUuxdnhKeTfyggLiNObeUlE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS81OTA5NDk5MDk2
MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJlRXA1Tl9LQ0F1STA1dDVT
VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29fSnlkUzdGMmVFcDVOX0tDQXVJMDV0NVNVUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NTA0RS81OTA5NDk5MDk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJl
RXA1Tl9LQ0F1STA1dDVTVVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAB7hM2f8MWQUOEwaJom+DSNSw7re93tw11MXuCkN3kYREUaKqnzBY6VC+eZ9l
hUYImryyo6VrkQHj7fP3QEN24auvJLs2Gy3MQ7Zv31lYpFbv+T3LUbtpkyuIEWfn
4x5JQUxws/lZdJa5/Qs4Pz/J46V3iw5GJHgGtjhRL4l8x2ujwrPJAXD6GpQ/MOXv
nuZRU/cPq9lKHhSdqzCj2n01v9Uf2oH5emcK2zK0C0Jfz15CQvCaXQs5CjGMwNMv
unM4K5fpcq3pqQKODBrULO7h6O2hSk0opsUgvnJnUyMLYB08CcJqIFLd0Do95SR7
xt8lT+067atFxQ1V8TdhHw6MOw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:12:53 2026 by rpki-client