Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
File:                     i6wN0-SRhYlP2uKChO3IBHILRhQ.mft (raw, json)
Hash identifier:          DvSVy0cZn2gKlYcBIBgS/RnmxY1csek90JK5zz8Z3zk=
Subject key identifier:   A3:08:3D:4C:B7:12:6E:BF:F3:C4:95:EC:A1:D8:06:96:46:B1:1B:D9
Authority key identifier: 8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14
Certificate issuer:       /CN=A91EBFAE/serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614
Certificate serial:       3564
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
Manifest number:          3563
Signing time:             Wed 22 Jul 2026 14:33:40 +0000
Manifest this update:     Wed 22 Jul 2026 14:33:39 +0000
Manifest next update:     Wed 29 Jul 2026 14:33:39 +0000
Files and hashes:         1: i6wN0-SRhYlP2uKChO3IBHILRhQ.crl (hash: pgLPq7BINB7PjCAi1J0TbDCmbFtqx2UfmfCpFqp8W1I=)
                          2: 93F991501F4C11F19ED52041133D8C67.roa (hash: riV+YFoj73RGskIzJAtr/Lp7lGHXyMFCcQQ1eQ66pUQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13668 (0x3564)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBFAE, serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614
        Validity
            Not Before: Jul 22 14:33:39 2026 GMT
            Not After : Jul 29 14:33:39 2026 GMT
        Subject: CN=6a60d4c3-94c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:48:a8:fa:fe:b8:87:09:e8:dc:fe:6c:2c:b3:
                    e9:ea:d0:e3:2c:2e:d5:76:ad:b2:7a:72:98:52:7a:
                    e1:5d:68:d6:ac:ed:6c:c4:0f:72:42:76:07:4b:02:
                    ea:30:d7:e9:5e:ef:41:56:e1:88:1a:48:43:47:62:
                    d1:0b:72:94:42:77:91:cb:6c:fb:a2:ee:42:28:d3:
                    ad:e2:9c:10:dd:46:95:43:e7:74:3c:70:b4:b7:f1:
                    79:c2:3f:2e:19:c1:1a:38:11:bb:5b:46:39:40:86:
                    13:1b:27:9f:d8:55:5f:3c:ed:b0:77:b8:3b:db:74:
                    10:82:46:a0:8f:96:e2:95:24:0b:bc:bf:f9:46:90:
                    8e:da:83:99:de:38:28:bf:00:6d:75:8e:05:95:83:
                    84:7c:d9:c5:7f:e4:f8:09:92:19:9e:2d:79:0d:23:
                    67:db:47:cd:17:0d:62:22:d7:38:c7:ed:89:8b:2a:
                    2e:2a:71:53:13:b6:75:46:20:37:51:27:fb:cf:e3:
                    0b:86:56:dd:9f:8c:b4:3c:fa:95:b5:64:e6:44:03:
                    7b:61:6d:61:43:20:64:f5:03:0e:64:a5:d8:98:6a:
                    cc:16:1b:85:99:90:58:e4:d5:e4:05:6c:a5:74:24:
                    43:83:f9:d8:80:f2:bd:7a:dc:26:42:fd:da:83:fa:
                    af:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:08:3D:4C:B7:12:6E:BF:F3:C4:95:EC:A1:D8:06:96:46:B1:1B:D9
            X509v3 Authority Key Identifier:
                keyid:8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f4:5f:fb:85:b4:82:d9:37:5b:56:69:1b:1b:a0:c4:cc:b6:
         35:56:79:f6:f9:41:be:f8:80:1a:c1:2a:15:7f:0e:36:09:09:
         ff:34:60:b9:68:af:c9:8e:52:09:45:6a:c7:db:96:af:9d:17:
         36:c7:b0:de:93:aa:30:18:6a:bb:ef:e2:06:0d:76:b9:2f:4c:
         2a:20:94:5e:9d:60:2d:76:be:bb:b0:1d:1a:f1:4b:38:63:38:
         4e:cc:c1:2d:5c:14:6c:31:0a:13:e8:86:66:ac:cb:06:f3:a7:
         31:a0:5f:ab:4d:25:45:6e:38:0d:fc:10:9b:5b:6e:ae:d2:e2:
         70:52:1d:89:51:20:b6:72:a1:95:68:29:7f:5f:01:29:d1:9c:
         55:db:d0:3d:ba:77:5e:19:2c:ac:c8:99:01:7e:ab:12:6c:6c:
         f2:f4:24:0b:5f:ee:48:84:a8:10:7f:0d:45:ed:44:f1:44:28:
         38:12:ae:5e:94:0d:84:ce:a8:f7:80:4f:18:06:a1:f0:28:a1:
         a9:aa:57:42:62:18:49:e2:33:03:a9:58:82:bb:09:8e:e1:3e:
         2d:dd:d8:9a:dc:e7:95:d6:bd:06:dd:13:85:7e:25:48:54:0b:
         af:82:16:f2:7f:62:c6:d0:f4:55:75:2d:99:c9:fe:41:99:e3:
         8c:d8:db:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUJGQUUxMTAvBgNVBAUTKDhCQUMwREQzRTQ5MTg1ODk0RkRBRTI4Mjg0RURDODA0
NzIwQjQ2MTQwHhcNMjYwNzIyMTQzMzM5WhcNMjYwNzI5MTQzMzM5WjAYMRYwFAYD
VQQDEw02YTYwZDRjMy05NGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmUio+v64hwno3P5sLLPp6tDjLC7Vdq2yenKYUnrhXWjWrO1sxA9yQnYHSwLq
MNfpXu9BVuGIGkhDR2LRC3KUQneRy2z7ou5CKNOt4pwQ3UaVQ+d0PHC0t/F5wj8u
GcEaOBG7W0Y5QIYTGyef2FVfPO2wd7g723QQgkagj5bilSQLvL/5RpCO2oOZ3jgo
vwBtdY4FlYOEfNnFf+T4CZIZni15DSNn20fNFw1iItc4x+2JiyouKnFTE7Z1RiA3
USf7z+MLhlbdn4y0PPqVtWTmRAN7YW1hQyBk9QMOZKXYmGrMFhuFmZBY5NXkBWyl
dCRDg/nYgPK9etwmQv3ag/qvBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKMIPUy3
Em6/88SV7KHYBpZGsRvZMB8GA1UdIwQYMBaAFIusDdPkkYWJT9rigoTtyARyC0YU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkZBRS8xNjhGRkQ2QzFE
OEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZbFAydUtDaE8zSUJISUxS
aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2k2d04wLVNSaFlsUDJ1S0NoTzNJQkhJTFJoUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QkZBRS8xNjhGRkQ2QzFEOEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZ
bFAydUtDaE8zSUJISUxSaFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM/Rf+4W0gtk3W1ZpGxugxMy2NVZ59vlBvviAGsEqFX8ONgkJ/zRguWivyY5S
CUVqx9uWr50XNsew3pOqMBhqu+/iBg12uS9MKiCUXp1gLXa+u7AdGvFLOGM4TszB
LVwUbDEKE+iGZqzLBvOnMaBfq00lRW44DfwQm1turtLicFIdiVEgtnKhlWgpf18B
KdGcVdvQPbp3XhksrMiZAX6rEmxs8vQkC1/uSISoEH8NRe1E8UQoOBKuXpQNhM6o
94BPGAah8CihqapXQmIYSeIzA6lYgrsJjuE+Ld3Ymtznlda9Bt0ThX4lSFQLr4IW
8n9ixtD0VXUtmcn+QZnjjNjb1w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:34:58 2026 by rpki-client