Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft
File:                     g86FOnpm6rnh8jNGcR09yX1XWXg.mft (raw, json)
Hash identifier:          FUVowFIafQ50bgOWHUjeoq+yPPBebNHgBBqmFwQTxOg=
Subject key identifier:   DF:87:1B:E0:8D:01:98:29:A9:E3:F1:91:DA:D8:C0:CF:64:6B:4C:D7
Authority key identifier: 83:CE:85:3A:7A:66:EA:B9:E1:F2:33:46:71:1D:3D:C9:7D:57:59:78
Certificate issuer:       /CN=A91E9BC4/serialNumber=83CE853A7A66EAB9E1F23346711D3DC97D575978
Certificate serial:       0F12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g86FOnpm6rnh8jNGcR09yX1XWXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft
Manifest number:          0F06
Signing time:             Wed 22 Jul 2026 17:47:48 +0000
Manifest this update:     Wed 22 Jul 2026 17:47:48 +0000
Manifest next update:     Wed 29 Jul 2026 17:47:48 +0000
Files and hashes:         1: g86FOnpm6rnh8jNGcR09yX1XWXg.crl (hash: OaYTHsUed4o6Q1wWKjBlx9o62PXwKH/S/A0GIlVB1Ok=)
                          2: 3B495FFCA46211E9B730310FC4F9AE02.roa (hash: 4lDpGUim/KAgzaEuEFqQeILbJPyTanzET71bwtPn5Wc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.crl
                          rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g86FOnpm6rnh8jNGcR09yX1XWXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3858 (0xf12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9BC4, serialNumber=83CE853A7A66EAB9E1F23346711D3DC97D575978
        Validity
            Not Before: Jul 22 17:47:48 2026 GMT
            Not After : Jul 29 17:47:48 2026 GMT
        Subject: CN=6a610244-7a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:de:54:a4:78:eb:2e:e8:b1:5f:31:f0:4c:bb:
                    48:a7:65:03:d2:67:c5:a2:14:2e:44:24:da:5b:bd:
                    97:68:47:15:03:51:31:36:6c:f1:f8:c9:61:db:4c:
                    4a:ac:ba:10:eb:c9:0d:e6:3a:56:be:43:3d:10:2a:
                    e0:e6:5c:97:ca:99:18:a2:b9:ee:e7:f9:ea:fe:86:
                    bd:8e:4d:5a:ab:44:b9:54:af:d2:c8:02:2e:57:d5:
                    1c:33:39:c1:e2:56:d8:f4:e6:f8:d8:c9:71:48:75:
                    ff:d8:b7:6c:c8:1e:b5:6f:95:88:c1:e1:a9:ad:e8:
                    bc:36:2e:ac:7e:65:d2:fb:45:d3:65:f1:e7:8e:85:
                    3d:2c:0c:85:ce:ba:d6:0f:50:aa:73:ce:be:ef:94:
                    ad:60:2a:9d:c6:9e:98:9a:01:f2:cc:c3:fb:6b:30:
                    ef:09:28:e6:bd:d4:dd:d3:0f:be:ba:06:66:83:20:
                    a5:8f:a2:6d:0e:91:ac:0c:e5:d2:99:97:7f:de:cd:
                    e8:53:4f:ba:2f:96:22:06:d5:c4:15:4c:9a:27:f8:
                    66:28:db:76:fd:68:4d:c8:ec:d6:b6:73:b3:ec:b5:
                    a8:bf:2a:19:1b:f2:c1:01:d6:fd:94:4b:f9:ea:89:
                    9e:ef:2e:cc:28:a4:51:c6:96:6f:85:9d:b4:a5:79:
                    7b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:87:1B:E0:8D:01:98:29:A9:E3:F1:91:DA:D8:C0:CF:64:6B:4C:D7
            X509v3 Authority Key Identifier:
                keyid:83:CE:85:3A:7A:66:EA:B9:E1:F2:33:46:71:1D:3D:C9:7D:57:59:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g86FOnpm6rnh8jNGcR09yX1XWXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:73:fb:5b:e5:8f:cd:4e:0a:55:b9:7b:96:3f:48:8a:5b:6f:
         af:85:16:67:9c:36:e0:04:8e:a8:36:8e:77:ab:05:5a:9e:49:
         c4:d5:30:89:fe:b3:bf:54:95:e2:ca:11:24:20:0c:85:43:a1:
         c2:98:64:a1:bb:41:18:15:9c:12:a0:a6:48:cc:fe:45:65:93:
         bc:e4:39:4f:73:0b:d7:50:21:93:48:65:5f:b1:84:cb:67:80:
         c7:0d:34:57:4a:5f:d6:d2:1b:d6:cc:51:e0:e1:a7:16:1f:e7:
         78:9d:dc:14:0d:7a:bb:e1:98:d0:ed:0c:ae:6b:64:83:35:6e:
         11:51:2a:06:ee:fd:70:ee:db:cc:3d:20:ca:68:55:94:2e:23:
         cb:79:77:83:c3:67:07:fb:8d:a8:05:c4:87:08:d4:f2:8f:79:
         8f:09:38:2f:1b:29:44:52:1c:3e:72:06:75:d6:b4:9b:ee:3f:
         56:7f:ac:33:82:b2:57:1d:a7:ec:b3:5b:4b:06:16:d8:48:2f:
         5b:3c:b9:59:96:bf:1e:a9:58:9b:87:d9:8f:02:c9:e2:be:51:
         45:7b:ba:18:cf:7f:25:df:fe:c9:54:e1:88:9b:a2:8c:61:aa:
         68:c7:23:3c:1c:46:62:f2:a0:21:af:d0:ac:63:1a:de:59:0e:
         59:68:98:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTlCQzQxMTAvBgNVBAUTKDgzQ0U4NTNBN0E2NkVBQjlFMUYyMzM0NjcxMUQzREM5
N0Q1NzU5NzgwHhcNMjYwNzIyMTc0NzQ4WhcNMjYwNzI5MTc0NzQ4WjAYMRYwFAYD
VQQDEw02YTYxMDI0NC03YTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx95UpHjrLuixXzHwTLtIp2UD0mfFohQuRCTaW72XaEcVA1ExNmzx+Mlh20xK
rLoQ68kN5jpWvkM9ECrg5lyXypkYornu5/nq/oa9jk1aq0S5VK/SyAIuV9UcMznB
4lbY9Ob42MlxSHX/2LdsyB61b5WIweGprei8Ni6sfmXS+0XTZfHnjoU9LAyFzrrW
D1Cqc86+75StYCqdxp6YmgHyzMP7azDvCSjmvdTd0w++ugZmgyClj6JtDpGsDOXS
mZd/3s3oU0+6L5YiBtXEFUyaJ/hmKNt2/WhNyOzWtnOz7LWovyoZG/LBAdb9lEv5
6ome7y7MKKRRxpZvhZ20pXl7MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN+HG+CN
AZgpqePxkdrYwM9ka0zXMB8GA1UdIwQYMBaAFIPOhTp6Zuq54fIzRnEdPcl9V1l4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUJDNC85MkU4MjFGMEE0
NjAxMUU5ODEwQTVDMEJDNEY5QUUwMi9nODZGT25wbTZybmg4ak5HY1IwOXlYMVhX
WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2c4NkZPbnBtNnJuaDhqTkdjUjA5eVgxWFdYZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OUJDNC85MkU4MjFGMEE0NjAxMUU5ODEwQTVDMEJDNEY5QUUwMi9nODZGT25wbTZy
bmg4ak5HY1IwOXlYMVhXWGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWXP7W+WPzU4KVbl7lj9Iiltvr4UWZ5w24ASOqDaOd6sFWp5JxNUwif6zv1SV
4soRJCAMhUOhwphkobtBGBWcEqCmSMz+RWWTvOQ5T3ML11Ahk0hlX7GEy2eAxw00
V0pf1tIb1sxR4OGnFh/neJ3cFA16u+GY0O0MrmtkgzVuEVEqBu79cO7bzD0gymhV
lC4jy3l3g8NnB/uNqAXEhwjU8o95jwk4LxspRFIcPnIGdda0m+4/Vn+sM4KyVx2n
7LNbSwYW2EgvWzy5WZa/HqlYm4fZjwLJ4r5RRXu6GM9/Jd/+yVThiJuijGGqaMcj
PBxGYvKgIa/QrGMa3lkOWWiYgQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:43:34 2026 by rpki-client