Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
File:                     mV1wqX9WsuAAuspuykNz5iB7uY0.mft (raw, json)
Hash identifier:          SsXrc5rQZE8yc97O5QsMd0mAAvyqrcAGk6xVH1B9GZQ=
Subject key identifier:   9A:03:15:10:57:10:E5:9A:CE:CB:57:2F:C4:E2:8A:CD:CE:9A:54:0D
Authority key identifier: 99:5D:70:A9:7F:56:B2:E0:00:BA:CA:6E:CA:43:73:E6:20:7B:B9:8D
Certificate issuer:       /CN=A91EA850/serialNumber=995D70A97F56B2E000BACA6ECA4373E6207BB98D
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
Manifest number:          6A
Signing time:             Thu 23 Jul 2026 09:56:14 +0000
Manifest this update:     Thu 23 Jul 2026 09:56:14 +0000
Manifest next update:     Thu 30 Jul 2026 09:56:14 +0000
Files and hashes:         1: mV1wqX9WsuAAuspuykNz5iB7uY0.crl (hash: kNVk4P/+zDBuwxsEBLP6IPw3WrTDUMO93yiP29LT4fc=)
                          2: CE6915C0ED3A11F0A5B7B5054B6F56BC.roa (hash: 18c0IjqREvvCbFh1OonuDqpoKVFbN0WBr8JimtNfp4Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.crl
                          rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:56:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA850, serialNumber=995D70A97F56B2E000BACA6ECA4373E6207BB98D
        Validity
            Not Before: Jul 23 09:56:14 2026 GMT
            Not After : Jul 30 09:56:14 2026 GMT
        Subject: CN=6a61e53e-af24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:eb:de:b8:26:e6:ca:91:cd:18:b8:75:41:ce:
                    a0:e1:7b:62:41:7a:15:cf:e2:70:22:2b:c1:05:cb:
                    6f:7b:7c:91:5d:1a:e9:96:04:6d:a9:ac:34:8d:79:
                    6e:07:33:08:16:78:3c:c6:5f:c9:f3:82:33:7a:17:
                    63:14:a1:05:f9:97:c5:95:d7:5c:16:42:40:5e:3b:
                    fe:67:ba:a3:a4:a6:70:ae:98:6d:fa:33:cb:8b:d4:
                    f2:3a:6c:3b:ed:ee:d4:6d:43:84:07:f8:c0:f1:a1:
                    52:61:8b:ea:bf:07:65:58:11:4a:af:60:e2:16:a6:
                    4d:56:45:d1:05:d2:fe:0f:ec:28:4e:75:20:b6:48:
                    b7:9c:51:62:11:e7:b0:fd:78:86:7e:30:2d:92:fb:
                    74:1a:3c:70:62:ed:66:09:30:e2:23:3a:bf:7b:77:
                    fe:f2:05:1b:90:08:0e:0f:07:28:9f:54:c5:d5:c1:
                    f3:41:19:6d:ff:97:bd:68:8b:1a:5e:cc:bb:97:f5:
                    12:80:bd:55:ff:55:53:d5:5b:11:f0:fa:49:f7:5e:
                    c0:8e:da:87:1a:20:df:61:f8:01:d4:81:61:e9:e0:
                    cf:05:a2:fc:19:05:6a:11:fa:13:2d:a8:92:8d:f1:
                    a5:b7:82:a7:1c:2c:42:3e:93:4e:cd:d6:95:af:da:
                    ca:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:03:15:10:57:10:E5:9A:CE:CB:57:2F:C4:E2:8A:CD:CE:9A:54:0D
            X509v3 Authority Key Identifier:
                keyid:99:5D:70:A9:7F:56:B2:E0:00:BA:CA:6E:CA:43:73:E6:20:7B:B9:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:17:d5:64:43:30:f0:b7:8f:d4:7d:51:26:ec:96:c7:b5:a5:
         7d:50:14:0f:db:a1:f9:12:5a:11:9f:0d:d8:19:1c:12:1c:3d:
         79:e9:b4:10:d5:76:7b:15:87:e2:01:71:c9:ff:fd:14:4f:e4:
         db:06:76:d0:9b:00:46:25:ba:83:af:68:a3:a2:22:83:07:af:
         4f:3d:16:a7:c3:16:b2:cc:12:5d:eb:1f:d7:64:47:50:91:c5:
         ad:e1:b0:c0:ad:38:f2:63:14:15:21:23:c3:d4:92:4f:58:26:
         0c:8e:6b:f4:6a:fa:14:27:a3:dd:8f:e3:90:2c:fd:af:06:7a:
         aa:4c:1a:06:ff:20:ba:c8:3b:44:a8:a3:f9:86:45:a9:2d:d2:
         72:89:fe:dd:5e:1b:54:66:28:4c:3b:10:92:5f:25:63:e4:95:
         53:f8:3d:34:44:c3:80:5d:cf:e4:4d:f5:69:44:c2:e3:eb:7b:
         8f:f6:db:d0:9c:94:a2:e9:ad:f7:89:f3:ea:11:66:5c:85:0c:
         2b:db:16:63:48:47:7f:28:a8:a1:0a:1a:6b:3f:63:9c:d1:c7:
         d5:17:57:61:53:63:09:ff:3a:19:31:dc:e4:c5:69:95:8c:9c:
         7b:8c:58:7b:79:70:ca:1c:64:21:b7:d7:37:f1:f7:70:69:fb:
         76:83:9c:9d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
QTg1MDExMC8GA1UEBRMoOTk1RDcwQTk3RjU2QjJFMDAwQkFDQTZFQ0E0MzczRTYy
MDdCQjk4RDAeFw0yNjA3MjMwOTU2MTRaFw0yNjA3MzAwOTU2MTRaMBgxFjAUBgNV
BAMTDTZhNjFlNTNlLWFmMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCq6964JubKkc0YuHVBzqDhe2JBehXP4nAiK8EFy297fJFdGumWBG2prDSNeW4H
MwgWeDzGX8nzgjN6F2MUoQX5l8WV11wWQkBeO/5nuqOkpnCumG36M8uL1PI6bDvt
7tRtQ4QH+MDxoVJhi+q/B2VYEUqvYOIWpk1WRdEF0v4P7ChOdSC2SLecUWIR57D9
eIZ+MC2S+3QaPHBi7WYJMOIjOr97d/7yBRuQCA4PByifVMXVwfNBGW3/l71oixpe
zLuX9RKAvVX/VVPVWxHw+kn3XsCO2ocaIN9h+AHUgWHp4M8FovwZBWoR+hMtqJKN
8aW3gqccLEI+k07N1pWv2soDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmgMVEFcQ
5ZrOy1cvxOKKzc6aVA0wHwYDVR0jBBgwFoAUmV1wqX9WsuAAuspuykNz5iB7uY0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBODUwLzJEQkM0OTQ4RUQy
NzExRjBCMzk3RDM3OTQ0NkY1NkJDL21WMXdxWDlXc3VBQXVzcHV5a056NWlCN3VZ
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvbVYxd3FYOVdzdUFBdXNwdXlrTno1aUI3dVkwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB
ODUwLzJEQkM0OTQ4RUQyNzExRjBCMzk3RDM3OTQ0NkY1NkJDL21WMXdxWDlXc3VB
QXVzcHV5a056NWlCN3VZMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCYF9VkQzDwt4/UfVEm7JbHtaV9UBQP26H5EloRnw3YGRwSHD156bQQ1XZ7FYfi
AXHJ//0UT+TbBnbQmwBGJbqDr2ijoiKDB69PPRanwxayzBJd6x/XZEdQkcWt4bDA
rTjyYxQVISPD1JJPWCYMjmv0avoUJ6Pdj+OQLP2vBnqqTBoG/yC6yDtEqKP5hkWp
LdJyif7dXhtUZihMOxCSXyVj5JVT+D00RMOAXc/kTfVpRMLj63uP9tvQnJSi6a33
ifPqEWZchQwr2xZjSEd/KKihChprP2Oc0cfVF1dhU2MJ/zoZMdzkxWmVjJx7jFh7
eXDKHGQht9c38fdwaft2g5yd
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:41:43 2026 by rpki-client