Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.mft
File:                     1bm7ozBeiMAA9WKTnROLpQYieyo.mft (raw, json)
Hash identifier:          kdwGFBqBjmCJi77nGMctqlQcNpV7mIVOplwikyQHeFs=
Subject key identifier:   9A:8F:68:97:94:8B:30:0C:8C:E3:74:84:76:00:D4:4F:75:1E:3F:DC
Authority key identifier: D5:B9:BB:A3:30:5E:88:C0:00:F5:62:93:9D:13:8B:A5:06:22:7B:2A
Certificate issuer:       /CN=A91EAF4B/serialNumber=D5B9BBA3305E88C000F562939D138BA506227B2A
Certificate serial:       0BE2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bm7ozBeiMAA9WKTnROLpQYieyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.mft
Manifest number:          0D9D
Signing time:             Wed 22 Jul 2026 19:20:24 +0000
Manifest this update:     Wed 22 Jul 2026 19:20:24 +0000
Manifest next update:     Wed 29 Jul 2026 19:20:24 +0000
Files and hashes:         1: 1bm7ozBeiMAA9WKTnROLpQYieyo.crl (hash: gu9dBkL+7FMbSg5MY/YN9aQ/77fR9a0j/pXJPojhDIU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.crl
                          rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bm7ozBeiMAA9WKTnROLpQYieyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3042 (0xbe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAF4B, serialNumber=D5B9BBA3305E88C000F562939D138BA506227B2A
        Validity
            Not Before: Jul 22 19:20:24 2026 GMT
            Not After : Jul 29 19:20:24 2026 GMT
        Subject: CN=6a6117f8-e7dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:b9:13:e2:c6:05:fc:03:09:02:6b:94:27:
                    c2:0f:41:dd:36:a2:a9:85:f9:43:84:6f:cc:4c:7f:
                    7d:36:49:2f:8c:d9:61:cd:60:04:5f:87:42:28:c2:
                    b5:92:52:46:8d:3a:d0:a6:04:63:73:0f:2f:3c:0a:
                    87:d4:e8:58:4a:09:3e:1b:4d:cb:85:72:08:28:84:
                    97:77:19:cb:6f:ca:ec:14:a8:65:e2:c0:6b:09:f4:
                    4e:4e:55:32:55:aa:d5:cb:2b:02:9c:ca:ec:cd:c9:
                    57:05:17:a6:68:bd:d1:18:50:66:83:61:3c:6b:db:
                    8e:3c:a5:cb:96:1a:bc:d2:57:80:90:13:92:6f:b7:
                    9d:f5:28:7a:45:3e:5c:19:83:b2:67:8b:29:49:d3:
                    93:b3:fa:76:a1:d8:a5:14:ef:09:bc:5b:21:22:d9:
                    bf:5f:de:b7:c2:cc:f4:e2:ec:81:e6:9e:ec:17:a3:
                    5f:3f:d4:b3:47:fe:76:72:ef:1b:7a:5d:19:cb:5b:
                    14:53:20:ab:1b:ce:d6:ad:af:6a:4f:a1:69:79:bf:
                    17:56:db:ca:fb:09:93:db:ca:43:62:09:d4:f0:ef:
                    a3:29:3f:65:29:45:e4:ec:b9:40:bf:06:24:94:6c:
                    7f:41:59:d8:f7:74:15:11:bc:b1:43:8e:7d:58:ec:
                    2f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8F:68:97:94:8B:30:0C:8C:E3:74:84:76:00:D4:4F:75:1E:3F:DC
            X509v3 Authority Key Identifier:
                keyid:D5:B9:BB:A3:30:5E:88:C0:00:F5:62:93:9D:13:8B:A5:06:22:7B:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bm7ozBeiMAA9WKTnROLpQYieyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ee:06:49:92:ef:fe:23:0f:fd:da:65:fb:7b:3d:29:4f:87:
         fb:d1:89:03:fe:d9:cd:6f:23:79:11:b2:16:65:09:6a:9f:6e:
         87:3d:d1:70:71:74:51:12:13:62:35:51:eb:4f:39:66:4a:ad:
         bf:09:13:7b:38:4e:46:f9:64:15:1f:08:fc:02:87:45:ad:cb:
         09:10:12:5f:eb:b8:a4:cb:18:12:f6:89:a4:7b:e0:b3:54:1b:
         be:ea:af:7b:95:14:9c:d8:e9:e2:34:f4:08:50:98:24:cc:c9:
         a1:be:b8:8b:46:57:ee:ab:94:9a:88:ac:fb:a5:38:69:50:e4:
         1a:47:23:2b:7b:69:e4:2e:91:4e:77:c3:03:ac:58:7c:f3:d1:
         ec:13:49:68:ef:5f:97:3d:22:f8:33:93:fd:12:6a:27:27:e6:
         c1:74:27:26:46:f1:a5:bc:ef:73:29:24:61:3f:5b:c3:cc:fe:
         60:0d:dd:21:8a:65:77:a7:95:7c:75:80:9f:5d:ac:12:24:05:
         c9:be:99:59:32:55:45:43:8f:1c:e0:2a:33:b8:46:a2:cc:1c:
         36:2f:74:36:51:2c:db:34:aa:bf:21:e4:eb:36:62:c6:11:b9:
         df:4f:97:89:e9:fa:0a:98:f0:44:1a:de:e2:13:44:01:fc:77:
         23:e8:02:cb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFGNEIxMTAvBgNVBAUTKEQ1QjlCQkEzMzA1RTg4QzAwMEY1NjI5MzlEMTM4QkE1
MDYyMjdCMkEwHhcNMjYwNzIyMTkyMDI0WhcNMjYwNzI5MTkyMDI0WjAYMRYwFAYD
VQQDEw02YTYxMTdmOC1lN2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtr65E+LGBfwDCQJrlCfCD0HdNqKphflDhG/MTH99NkkvjNlhzWAEX4dCKMK1
klJGjTrQpgRjcw8vPAqH1OhYSgk+G03LhXIIKISXdxnLb8rsFKhl4sBrCfROTlUy
VarVyysCnMrszclXBRemaL3RGFBmg2E8a9uOPKXLlhq80leAkBOSb7ed9Sh6RT5c
GYOyZ4spSdOTs/p2odilFO8JvFshItm/X963wsz04uyB5p7sF6NfP9SzR/52cu8b
el0Zy1sUUyCrG87Wra9qT6Fpeb8XVtvK+wmT28pDYgnU8O+jKT9lKUXk7LlAvwYk
lGx/QVnY93QVEbyxQ459WOwvFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJqPaJeU
izAMjON0hHYA1E91Hj/cMB8GA1UdIwQYMBaAFNW5u6MwXojAAPVik50Ti6UGInsq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUY0Qi84NDg1OEY2QTQ3
MTkxMUVBOTA4NjMwNzJDNEY5QUUwMi8xYm03b3pCZWlNQUE5V0tUblJPTHBRWWll
eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFibTdvekJlaU1BQTlXS1RuUk9McFFZaWV5by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QUY0Qi84NDg1OEY2QTQ3MTkxMUVBOTA4NjMwNzJDNEY5QUUwMi8xYm03b3pCZWlN
QUE5V0tUblJPTHBRWWlleW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcO4GSZLv/iMP/dpl+3s9KU+H+9GJA/7ZzW8jeRGyFmUJap9uhz3RcHF0URIT
YjVR6085ZkqtvwkTezhORvlkFR8I/AKHRa3LCRASX+u4pMsYEvaJpHvgs1Qbvuqv
e5UUnNjp4jT0CFCYJMzJob64i0ZX7quUmois+6U4aVDkGkcjK3tp5C6RTnfDA6xY
fPPR7BNJaO9flz0i+DOT/RJqJyfmwXQnJkbxpbzvcykkYT9bw8z+YA3dIYpld6eV
fHWAn12sEiQFyb6ZWTJVRUOPHOAqM7hGoswcNi90NlEs2zSqvyHk6zZixhG530+X
ien6CpjwRBre4hNEAfx3I+gCyw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:27:45 2026 by rpki-client