Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft
File:                     b9CIejkD49bhe7nP2O8mknC6ywc.mft (raw, json)
Hash identifier:          ikn/9U7eBCD6MGWq0qZ2QnLdo8VnhGfhnPMkiMeK7cM=
Subject key identifier:   BA:62:68:4E:4D:56:A0:4A:2E:9B:9E:3E:78:90:40:26:30:72:CE:35
Authority key identifier: 6F:D0:88:7A:39:03:E3:D6:E1:7B:B9:CF:D8:EF:26:92:70:BA:CB:07
Certificate issuer:       /CN=A91E8BE3/serialNumber=6FD0887A3903E3D6E17BB9CFD8EF269270BACB07
Certificate serial:       013A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft
Manifest number:          0132
Signing time:             Thu 23 Jul 2026 07:20:13 +0000
Manifest this update:     Thu 23 Jul 2026 07:20:12 +0000
Manifest next update:     Thu 30 Jul 2026 07:20:12 +0000
Files and hashes:         1: b9CIejkD49bhe7nP2O8mknC6ywc.crl (hash: oSJ+62yNP/0Sbtd6i4/RLVACt9GIXhcGYx/zrCZIpYk=)
                          2: 3139D35EBFA811EFA9B7DC2AC4F9AE02.roa (hash: 7y7RETYbuZ100fvQ4OZzDzZF974c+TgTdz2U9WNxBsM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.crl
                          rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8BE3, serialNumber=6FD0887A3903E3D6E17BB9CFD8EF269270BACB07
        Validity
            Not Before: Jul 23 07:20:12 2026 GMT
            Not After : Jul 30 07:20:12 2026 GMT
        Subject: CN=6a61c0ad-6acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:82:08:d0:fe:f5:a2:2b:21:38:27:a7:44:c6:
                    35:cb:a7:89:40:12:80:8b:4b:a8:1e:04:20:7d:e6:
                    0d:1f:7a:12:c1:27:d6:4c:a9:e1:23:6f:c1:66:7a:
                    bb:be:2f:d9:e3:b8:54:df:fb:8e:91:4c:9e:25:8b:
                    33:54:ec:16:d0:26:6f:25:1b:72:c6:d3:bc:fd:3d:
                    3d:80:2b:dc:fe:c6:e8:ea:f0:f2:87:03:a3:69:0c:
                    f8:af:e4:79:2b:78:77:b4:68:4e:9a:0b:a4:e7:11:
                    e6:9b:51:36:3e:1b:0c:b3:33:75:33:1f:b0:22:4a:
                    1e:ed:48:57:21:3b:8c:1d:7d:13:74:8a:07:c5:16:
                    18:57:ae:5f:ab:1d:c9:ae:29:93:65:e9:91:b8:a2:
                    84:16:64:44:ea:cb:db:b0:28:6e:3a:36:39:99:1c:
                    47:3e:3e:b2:54:ef:dd:96:f4:e7:96:1f:ed:c3:14:
                    65:2e:3f:bb:a4:f5:b7:2b:f1:96:3f:7a:0e:e2:5a:
                    ba:95:c1:71:5f:6a:da:ee:31:94:2b:bc:39:f2:c0:
                    33:1d:6b:f1:06:da:23:f2:48:5f:d0:be:b3:5f:22:
                    3d:b3:fa:e1:6d:91:f0:32:fb:84:3c:93:9c:c6:24:
                    20:0a:1f:2a:91:bd:7f:fd:54:7c:6d:d5:34:3e:e7:
                    bc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:62:68:4E:4D:56:A0:4A:2E:9B:9E:3E:78:90:40:26:30:72:CE:35
            X509v3 Authority Key Identifier:
                keyid:6F:D0:88:7A:39:03:E3:D6:E1:7B:B9:CF:D8:EF:26:92:70:BA:CB:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a9:c8:a6:c4:fc:22:97:a1:af:57:60:52:4a:61:09:f8:08:
         12:65:b2:fb:ff:67:4d:31:44:19:fa:4f:9a:cf:4f:6d:0a:31:
         64:47:38:5d:89:b5:d7:0c:d6:a8:ac:7c:7f:16:08:33:b7:71:
         a8:75:4a:f6:10:96:54:d6:d1:e4:22:c6:6d:98:e1:bf:77:c4:
         eb:5b:a5:f5:0f:7f:40:f0:f6:c1:f1:f6:9f:11:46:ad:7b:a7:
         25:63:1c:bb:f4:b1:39:29:ab:1d:af:8e:14:b4:08:e1:d0:a3:
         f6:70:20:b6:d2:04:a1:f3:49:0f:57:8c:b3:47:4c:7c:dd:90:
         68:93:c0:6d:e3:6f:d2:c3:2c:0c:81:ce:1d:30:14:c8:f7:cd:
         11:81:2d:67:28:55:98:13:6c:8b:07:6b:d4:a8:6c:39:d8:33:
         71:31:17:ab:2f:e9:c4:7e:81:20:54:0e:6a:dd:b0:45:38:d7:
         9a:76:96:92:72:d2:5c:4e:6c:bf:85:00:95:dc:ef:1c:80:a1:
         ad:cf:5a:94:6c:5c:09:9f:0f:a0:c0:5b:a7:d6:25:a3:86:87:
         44:e0:58:d5:97:81:40:61:93:ad:ab:9a:54:9b:23:dd:3e:0b:
         e7:cf:90:55:c4:55:9b:d2:81:ab:32:5e:32:63:2a:a9:8f:50:
         97:75:90:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThCRTMxMTAvBgNVBAUTKDZGRDA4ODdBMzkwM0UzRDZFMTdCQjlDRkQ4RUYyNjky
NzBCQUNCMDcwHhcNMjYwNzIzMDcyMDEyWhcNMjYwNzMwMDcyMDEyWjAYMRYwFAYD
VQQDEw02YTYxYzBhZC02YWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp4II0P71oishOCenRMY1y6eJQBKAi0uoHgQgfeYNH3oSwSfWTKnhI2/BZnq7
vi/Z47hU3/uOkUyeJYszVOwW0CZvJRtyxtO8/T09gCvc/sbo6vDyhwOjaQz4r+R5
K3h3tGhOmguk5xHmm1E2PhsMszN1Mx+wIkoe7UhXITuMHX0TdIoHxRYYV65fqx3J
rimTZemRuKKEFmRE6svbsChuOjY5mRxHPj6yVO/dlvTnlh/twxRlLj+7pPW3K/GW
P3oO4lq6lcFxX2ra7jGUK7w58sAzHWvxBtoj8khf0L6zXyI9s/rhbZHwMvuEPJOc
xiQgCh8qkb1//VR8bdU0Pue8cQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLpiaE5N
VqBKLpuePniQQCYwcs41MB8GA1UdIwQYMBaAFG/QiHo5A+PW4Xu5z9jvJpJwussH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEJFMy9FNkU2QkU0NEJG
OUMxMUVGOURBODgyODJDNEY5QUUwMi9iOUNJZWprRDQ5YmhlN25QMk84bWtuQzZ5
d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2I5Q0llamtENDliaGU3blAyTzhta25DNnl3Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OEJFMy9FNkU2QkU0NEJGOUMxMUVGOURBODgyODJDNEY5QUUwMi9iOUNJZWprRDQ5
YmhlN25QMk84bWtuQzZ5d2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT6nIpsT8Ipehr1dgUkphCfgIEmWy+/9nTTFEGfpPms9PbQoxZEc4XYm11wzW
qKx8fxYIM7dxqHVK9hCWVNbR5CLGbZjhv3fE61ul9Q9/QPD2wfH2nxFGrXunJWMc
u/SxOSmrHa+OFLQI4dCj9nAgttIEofNJD1eMs0dMfN2QaJPAbeNv0sMsDIHOHTAU
yPfNEYEtZyhVmBNsiwdr1KhsOdgzcTEXqy/pxH6BIFQOat2wRTjXmnaWknLSXE5s
v4UAldzvHIChrc9alGxcCZ8PoMBbp9Ylo4aHROBY1ZeBQGGTrauaVJsj3T4L58+Q
VcRVm9KBqzJeMmMqqY9Ql3WQlw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:42:19 2026 by rpki-client