Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
File:                     enMAIRE9JFEdbouFYuck7J6YJRs.mft (raw, json)
Hash identifier:          vz3zCcvGYcg+hD0B3QON9UrgsRkYUIPOrtqkAIX7+eE=
Subject key identifier:   DD:96:EA:FD:AB:58:47:45:DB:36:B1:70:6D:DD:66:BF:90:2C:E1:C3
Authority key identifier: 7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B
Certificate issuer:       /CN=A91EA9C0/serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B
Certificate serial:       EA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
Manifest number:          E1
Signing time:             Thu 23 Jul 2026 08:22:51 +0000
Manifest this update:     Thu 23 Jul 2026 08:22:50 +0000
Manifest next update:     Thu 30 Jul 2026 08:22:50 +0000
Files and hashes:         1: enMAIRE9JFEdbouFYuck7J6YJRs.crl (hash: H3ttdUXG4+QENrMdfEJBlth72lPyogVqm0QlerwcAXM=)
                          2: 38A5CCEC0EFD11F198037EE50C3D8C67.roa (hash: 05pC1QjdXz/JcKagpqRB8Es2Hu2WFfz+kHjfBEq36Yo=)
                          3: 51E2DA3C032811F1B93270B91D3D8C67.roa (hash: ZdHxlT3OqwPC+xGI71Ljv6ozI4riSBo2nvgbAgHx1Rg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl
                          rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA9C0, serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B
        Validity
            Not Before: Jul 23 08:22:50 2026 GMT
            Not After : Jul 30 08:22:50 2026 GMT
        Subject: CN=6a61cf5a-ac16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b5:af:e7:27:d7:44:12:22:a8:9b:9b:5c:b6:
                    d0:01:9e:e3:65:01:2a:bd:52:0e:6b:de:07:d2:1e:
                    d4:b2:ae:16:3d:02:98:89:0f:0b:e4:d7:4c:5f:1e:
                    27:a5:46:07:2a:d8:00:c7:50:0e:1e:89:ca:98:08:
                    21:0a:0f:a3:4d:c5:66:4f:0f:da:7c:fc:a3:d9:27:
                    10:8c:c5:5c:4e:eb:41:35:38:f5:28:59:82:b1:51:
                    e4:67:89:ec:04:50:b3:d3:0a:e0:05:bb:2b:7a:90:
                    e7:c0:0d:2b:16:71:49:30:72:aa:87:11:b3:61:18:
                    6e:8d:e3:bc:6c:79:ed:54:fc:e5:e5:9b:96:e3:f6:
                    68:0e:8a:16:3f:d4:2d:6b:9b:79:ba:32:a1:ef:81:
                    ba:7d:d6:b9:43:24:86:e7:5a:16:26:bb:f3:45:be:
                    dd:13:6b:fe:0b:53:0f:64:c9:69:53:fd:e3:09:a5:
                    e6:1d:a3:2e:6c:4c:51:f6:ab:e4:51:5f:59:9d:3d:
                    cb:5d:45:4d:af:1d:7a:9a:be:6f:c0:39:a5:41:76:
                    5d:f2:2b:f8:d0:1d:7a:6a:c0:07:52:b9:98:dd:7d:
                    b5:5b:38:30:66:0c:3d:06:77:a4:ab:9e:73:ba:fc:
                    05:64:55:e1:18:be:d1:23:05:04:11:2d:68:6f:33:
                    50:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:96:EA:FD:AB:58:47:45:DB:36:B1:70:6D:DD:66:BF:90:2C:E1:C3
            X509v3 Authority Key Identifier:
                keyid:7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:95:14:5c:5c:47:48:3f:6b:cd:11:e9:ab:42:a7:03:e0:ff:
         96:cb:b5:63:b0:26:be:ba:1f:d2:96:bf:7f:80:2e:cd:e6:d9:
         a1:70:f9:f8:5b:e3:92:1b:89:57:5f:bf:a2:f9:c0:8c:a3:37:
         f5:5d:24:74:f0:7e:6f:40:f9:59:4a:90:b6:ac:a0:39:b1:21:
         dd:2c:82:7f:c3:3e:c5:ac:7f:b9:ec:7b:f2:79:00:f7:12:00:
         81:ec:db:06:26:09:c4:16:00:9d:c4:be:89:a5:e5:c7:f1:70:
         b4:22:55:06:f7:61:b1:a9:6d:8a:8e:0e:cf:5e:25:70:ba:89:
         eb:31:32:29:91:a0:db:76:0c:19:32:5d:9c:db:37:de:22:2c:
         68:1f:8d:a6:a8:a2:8a:c7:07:9d:b3:7b:4d:d2:86:fb:78:a2:
         0b:34:b6:39:9f:20:4b:2c:f6:9f:f8:38:66:fe:e5:88:a9:a2:
         75:9d:7a:be:68:f0:06:0b:3e:5f:ff:6d:38:c8:3c:cc:00:3c:
         61:53:c7:a8:f7:ea:1e:02:9c:e0:59:61:4a:d8:51:1e:64:c5:
         9c:26:b9:93:c1:85:b6:83:ab:d2:35:eb:18:f4:87:c0:fc:f5:
         5a:fd:56:8a:ff:4a:bc:2a:0e:bc:bf:a8:9a:ba:58:59:fd:f9:
         a6:d8:f9:cf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE5QzAxMTAvBgNVBAUTKDdBNzMwMDIxMTEzRDI0NTExRDZFOEI4NTYyRTcyNEVD
OUU5ODI1MUIwHhcNMjYwNzIzMDgyMjUwWhcNMjYwNzMwMDgyMjUwWjAYMRYwFAYD
VQQDEw02YTYxY2Y1YS1hYzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArbWv5yfXRBIiqJubXLbQAZ7jZQEqvVIOa94H0h7Usq4WPQKYiQ8L5NdMXx4n
pUYHKtgAx1AOHonKmAghCg+jTcVmTw/afPyj2ScQjMVcTutBNTj1KFmCsVHkZ4ns
BFCz0wrgBbsrepDnwA0rFnFJMHKqhxGzYRhujeO8bHntVPzl5ZuW4/ZoDooWP9Qt
a5t5ujKh74G6fda5QySG51oWJrvzRb7dE2v+C1MPZMlpU/3jCaXmHaMubExR9qvk
UV9ZnT3LXUVNrx16mr5vwDmlQXZd8iv40B16asAHUrmY3X21WzgwZgw9Bnekq55z
uvwFZFXhGL7RIwUEES1obzNQXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN2W6v2r
WEdF2zaxcG3dZr+QLOHDMB8GA1UdIwQYMBaAFHpzACERPSRRHW6LhWLnJOyemCUb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTlDMC81MjlCQzJGQzM4
ODIxMUYwOENDQjE4NjZDNEY5QUUwMi9lbk1BSVJFOUpGRWRib3VGWXVjazdKNllK
UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2VuTUFJUkU5SkZFZGJvdUZZdWNrN0o2WUpScy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTlDMC81MjlCQzJGQzM4ODIxMUYwOENDQjE4NjZDNEY5QUUwMi9lbk1BSVJFOUpG
RWRib3VGWXVjazdKNllKUnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYJUUXFxHSD9rzRHpq0KnA+D/lsu1Y7Amvrof0pa/f4AuzebZoXD5+FvjkhuJ
V1+/ovnAjKM39V0kdPB+b0D5WUqQtqygObEh3SyCf8M+xax/uex78nkA9xIAgezb
BiYJxBYAncS+iaXlx/FwtCJVBvdhsaltio4Oz14lcLqJ6zEyKZGg23YMGTJdnNs3
3iIsaB+NpqiiiscHnbN7TdKG+3iiCzS2OZ8gSyz2n/g4Zv7liKmidZ16vmjwBgs+
X/9tOMg8zAA8YVPHqPfqHgKc4FlhSthRHmTFnCa5k8GFtoOr0jXrGPSHwPz1Wv1W
iv9KvCoOvL+omrpYWf35ptj5zw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:50:09 2026 by rpki-client