Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft
File:                     MJk4cOkSzRkdgKzvMDV6VP80-C4.mft (raw, json)
Hash identifier:          brFoOKXj8CheJwLe0YJOd9NMh8knMffBRu/EKqCANvE=
Subject key identifier:   00:D3:52:FC:2F:34:93:31:36:EE:2E:0E:7C:A6:4A:64:26:CB:FB:69
Authority key identifier: 30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E
Certificate issuer:       /CN=A91E84A9/serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E
Certificate serial:       12ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft
Manifest number:          12E3
Signing time:             Wed 22 Jul 2026 17:09:08 +0000
Manifest this update:     Wed 22 Jul 2026 17:09:08 +0000
Manifest next update:     Wed 29 Jul 2026 17:09:08 +0000
Files and hashes:         1: MJk4cOkSzRkdgKzvMDV6VP80-C4.crl (hash: gwibvoL80V8793YPTBw0Teki/gv8MQCEV/kM87QGHjI=)
                          2: DA7E3CA6E19811E8822B8E5CC4F9AE02.roa (hash: M8bvGDd0ZBYR9yE/jwui6k77lrbOCgZ6YWG7elpbG8c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl
                          rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:09:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4845 (0x12ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E84A9, serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E
        Validity
            Not Before: Jul 22 17:09:08 2026 GMT
            Not After : Jul 29 17:09:08 2026 GMT
        Subject: CN=6a60f934-a0be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:13:bc:e9:8e:82:cf:16:f3:9d:87:f4:5c:1b:
                    b6:a2:a3:48:60:d9:5a:fa:82:94:26:a1:a5:0d:09:
                    bc:dd:b7:e8:90:08:6a:5f:92:9e:c0:0a:e6:ea:b0:
                    70:eb:4b:66:82:dd:5c:8b:70:0b:ba:ff:d3:7a:35:
                    da:e4:1e:44:78:12:6c:86:96:a9:e5:e2:21:91:ff:
                    f9:d2:ff:3b:f9:94:15:a3:85:44:c3:7b:9e:ec:3f:
                    b2:da:a2:5d:b1:74:9c:c4:a8:2d:1b:e3:6b:f6:e6:
                    22:fb:3a:65:5e:b1:d0:7d:c2:c4:31:8a:dc:a9:af:
                    6c:66:90:b5:e1:94:39:88:a5:26:32:5f:20:1c:1f:
                    62:25:b9:f5:99:78:47:84:76:69:d1:08:0f:d9:7a:
                    0e:7f:cc:e6:a2:05:f0:3f:ed:12:6e:78:2f:6e:8c:
                    0f:0b:97:4f:54:3a:56:fe:a0:12:9a:0e:be:b8:60:
                    6d:33:46:e9:2b:9f:6d:a8:11:fd:57:5d:0c:10:9d:
                    fb:5e:c6:45:b0:7c:52:69:cb:e3:8a:05:f1:45:1d:
                    6e:c1:aa:1e:87:21:9a:c0:f8:5d:35:53:83:46:f5:
                    b5:fe:2e:97:72:b4:23:23:3d:4d:b8:f8:29:50:3a:
                    9d:88:d1:b1:22:8e:26:fc:dd:ab:14:25:f3:11:c8:
                    20:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D3:52:FC:2F:34:93:31:36:EE:2E:0E:7C:A6:4A:64:26:CB:FB:69
            X509v3 Authority Key Identifier:
                keyid:30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ff:60:3f:72:c5:63:53:49:dc:91:a6:27:fb:f5:9f:d2:c8:
         8c:98:2f:98:55:9f:36:86:6c:ed:9f:16:79:d0:29:70:c8:ef:
         0b:de:64:97:af:45:9e:b4:8e:e9:91:3d:43:c4:43:de:81:c8:
         ae:21:de:a3:b0:e2:dc:67:26:8f:d7:0b:0e:de:26:4b:e9:72:
         30:ec:b7:21:17:32:b0:24:14:83:46:63:dd:26:1d:45:28:d1:
         bf:35:76:53:da:97:ab:17:96:43:28:83:d7:ec:fb:dc:c0:0f:
         32:24:4f:c5:3a:10:20:b7:ed:c5:67:6d:9f:0e:5c:dc:13:99:
         c2:e3:f4:03:9b:76:d6:95:d2:b6:f4:8a:c9:21:40:c2:5f:ba:
         bc:16:44:3c:c2:3d:84:ac:b8:e3:36:ce:bc:c8:73:37:f6:0e:
         6d:e6:ba:40:b9:94:1f:da:1b:22:72:99:6e:0b:30:b8:74:8a:
         9e:2f:2f:0a:6c:75:2b:93:99:eb:da:9e:43:ca:9b:73:e0:13:
         d2:fe:d6:9c:c1:c6:67:e7:fe:3e:5d:5f:ec:5c:7c:c4:fc:a1:
         e1:40:82:d8:80:13:9c:65:78:be:12:c5:c9:7c:a9:45:4a:11:
         7a:18:f4:eb:f9:ee:9f:4c:48:bf:d1:44:75:c5:96:70:2e:5f:
         47:1b:97:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTg0QTkxMTAvBgNVBAUTKDMwOTkzODcwRTkxMkNEMTkxRDgwQUNFRjMwMzU3QTU0
RkYzNEY4MkUwHhcNMjYwNzIyMTcwOTA4WhcNMjYwNzI5MTcwOTA4WjAYMRYwFAYD
VQQDEw02YTYwZjkzNC1hMGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArBO86Y6CzxbznYf0XBu2oqNIYNla+oKUJqGlDQm83bfokAhqX5KewArm6rBw
60tmgt1ci3ALuv/TejXa5B5EeBJshpap5eIhkf/50v87+ZQVo4VEw3ue7D+y2qJd
sXScxKgtG+Nr9uYi+zplXrHQfcLEMYrcqa9sZpC14ZQ5iKUmMl8gHB9iJbn1mXhH
hHZp0QgP2XoOf8zmogXwP+0SbngvbowPC5dPVDpW/qASmg6+uGBtM0bpK59tqBH9
V10MEJ37XsZFsHxSacvjigXxRR1uwaoehyGawPhdNVODRvW1/i6XcrQjIz1NuPgp
UDqdiNGxIo4m/N2rFCXzEcggMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFADTUvwv
NJMxNu4uDnymSmQmy/tpMB8GA1UdIwQYMBaAFDCZOHDpEs0ZHYCs7zA1elT/NPgu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODRBOS82QTkwQTlDMEUx
OTcxMUU4Qjk0QzA1NThDNEY5QUUwMi9NSms0Y09rU3pSa2RnS3p2TURWNlZQODAt
QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01KazRjT2tTelJrZGdLenZNRFY2VlA4MC1DNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODRBOS82QTkwQTlDMEUxOTcxMUU4Qjk0QzA1NThDNEY5QUUwMi9NSms0Y09rU3pS
a2RnS3p2TURWNlZQODAtQzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF/9gP3LFY1NJ3JGmJ/v1n9LIjJgvmFWfNoZs7Z8WedApcMjvC95kl69FnrSO
6ZE9Q8RD3oHIriHeo7Di3Gcmj9cLDt4mS+lyMOy3IRcysCQUg0Zj3SYdRSjRvzV2
U9qXqxeWQyiD1+z73MAPMiRPxToQILftxWdtnw5c3BOZwuP0A5t21pXStvSKySFA
wl+6vBZEPMI9hKy44zbOvMhzN/YObea6QLmUH9obInKZbgswuHSKni8vCmx1K5OZ
69qeQ8qbc+AT0v7WnMHGZ+f+Pl1f7Fx8xPyh4UCC2IATnGV4vhLFyXypRUoRehj0
6/nun0xIv9FEdcWWcC5fRxuXmw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:38:29 2026 by rpki-client