Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft
File:                     hZApCIKLAzHpSNRu2zgl_2A9uYY.mft (raw, json)
Hash identifier:          +aG9cg7lSiCzf1NclHH6shTHW8voPQ61ugJ9jnPPzuU=
Subject key identifier:   A0:24:D9:0D:A7:40:B6:B4:DE:A1:20:39:A5:0F:27:F9:FC:51:3E:69
Authority key identifier: 85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86
Certificate issuer:       /CN=A91EEE1B/serialNumber=85902908828B0331E948D46EDB3825FF603DB986
Certificate serial:       07C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft
Manifest number:          07A1
Signing time:             Wed 22 Jul 2026 22:10:48 +0000
Manifest this update:     Wed 22 Jul 2026 22:10:48 +0000
Manifest next update:     Wed 29 Jul 2026 22:10:48 +0000
Files and hashes:         1: hZApCIKLAzHpSNRu2zgl_2A9uYY.crl (hash: 1xMjwhl608VayHNXQYohPnBVInd3pksxgSYD/+6PWno=)
                          2: 761C9E22171811EF81DCE817C4F9AE02.roa (hash: dTHGef/qaPXq5V6Jr39TXLuUIZibSjAipj9MsBmIQ2Y=)
                          3: 9EF5320617C811ED95FB874FC4F9AE02.roa (hash: 7S73h8W2HxXiTwsYOnuyv1jT9DvXmbAVM1IlpZiwrbQ=)
                          4: 457C2AF8210811F092050034C4F9AE02.roa (hash: WEX6LWR0ej6+sm6Apo4GxC3XFf/K0Ijx563V6zRrBlM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl
                          rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:10:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1988 (0x7c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEE1B, serialNumber=85902908828B0331E948D46EDB3825FF603DB986
        Validity
            Not Before: Jul 22 22:10:48 2026 GMT
            Not After : Jul 29 22:10:48 2026 GMT
        Subject: CN=6a613fe8-77d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:51:b2:7b:b9:4e:47:3b:23:eb:53:3d:cc:7e:
                    25:75:49:07:3e:1f:41:7f:d6:3b:de:e8:27:c8:a4:
                    74:4c:2e:34:28:b0:2a:16:fb:d8:68:96:81:89:43:
                    74:05:53:d6:ff:a6:f2:38:5d:26:68:7b:28:03:7a:
                    19:4f:a8:82:40:f2:96:97:78:d6:1d:97:d1:32:da:
                    be:15:d3:a8:d8:86:9d:68:96:f2:8c:0a:8f:c6:ac:
                    65:99:5b:11:69:c9:57:b4:2c:e3:3d:73:a0:b6:30:
                    13:c1:b9:83:2f:cb:41:11:e6:ec:6f:35:bb:fc:9d:
                    81:d2:cc:45:75:a1:ed:fa:18:f7:3a:47:e9:c1:66:
                    54:86:c7:70:28:90:0d:0d:a9:01:15:0e:63:91:5c:
                    0f:b2:1e:66:63:49:9e:47:83:77:27:57:19:f2:ed:
                    af:29:67:61:3a:93:a0:a4:74:e5:5a:73:fc:0b:f7:
                    ea:4e:7b:53:ea:7a:1a:70:17:31:49:a8:87:f6:3f:
                    d4:ab:29:b3:87:80:a0:07:12:49:84:4c:46:02:97:
                    ab:b1:b3:4c:dc:e1:88:20:02:45:3b:d6:06:65:a8:
                    0a:b6:1e:8d:4a:b1:09:20:f7:b3:18:e4:b8:6b:07:
                    c2:1f:3c:e5:5a:89:e2:e1:bd:c2:70:e5:53:23:a6:
                    92:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:24:D9:0D:A7:40:B6:B4:DE:A1:20:39:A5:0F:27:F9:FC:51:3E:69
            X509v3 Authority Key Identifier:
                keyid:85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:21:43:29:a8:fb:82:e4:bb:1e:4a:be:6c:91:e9:58:40:31:
         a2:d5:36:e0:cb:fd:4c:8b:61:29:b2:ea:40:32:b0:03:be:8c:
         5e:a3:52:96:ef:8b:dc:9d:ca:26:35:b9:a7:a9:83:9e:3d:ad:
         11:17:ec:17:9f:06:45:0f:0e:d7:29:ec:5a:37:02:87:86:66:
         fa:fe:62:f7:d1:1c:2a:38:62:6c:37:8a:19:1f:94:4b:4d:99:
         5e:85:57:62:6c:45:d4:31:37:eb:2a:8d:7c:cf:66:cb:c3:7f:
         d1:6d:e3:71:a7:93:6a:20:c8:7e:35:25:c2:f8:a9:44:d6:04:
         56:8f:bb:eb:b3:81:a9:ac:a2:26:75:52:8e:2f:84:51:ab:15:
         e5:db:af:d7:0c:8f:ac:be:ee:68:93:5f:99:8c:65:69:5f:da:
         96:35:47:f6:62:53:ae:55:f2:4a:66:79:03:69:bb:9f:be:92:
         30:28:38:23:d9:3a:f5:cc:26:51:a4:5d:02:8f:92:1e:78:eb:
         c4:60:5d:a8:a4:81:c1:11:f8:3a:02:cb:f0:cf:f3:6f:6f:69:
         18:a5:27:36:f1:77:bc:7a:c9:1a:4d:02:06:9f:41:45:b0:64:
         65:89:36:ff:31:a1:6a:51:35:b7:35:07:d8:17:88:a1:17:4e:
         e7:fa:f4:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUVFMUIxMTAvBgNVBAUTKDg1OTAyOTA4ODI4QjAzMzFFOTQ4RDQ2RURCMzgyNUZG
NjAzREI5ODYwHhcNMjYwNzIyMjIxMDQ4WhcNMjYwNzI5MjIxMDQ4WjAYMRYwFAYD
VQQDEw02YTYxM2ZlOC03N2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqFGye7lORzsj61M9zH4ldUkHPh9Bf9Y73ugnyKR0TC40KLAqFvvYaJaBiUN0
BVPW/6byOF0maHsoA3oZT6iCQPKWl3jWHZfRMtq+FdOo2IadaJbyjAqPxqxlmVsR
aclXtCzjPXOgtjATwbmDL8tBEebsbzW7/J2B0sxFdaHt+hj3OkfpwWZUhsdwKJAN
DakBFQ5jkVwPsh5mY0meR4N3J1cZ8u2vKWdhOpOgpHTlWnP8C/fqTntT6noacBcx
SaiH9j/Uqymzh4CgBxJJhExGApersbNM3OGIIAJFO9YGZagKth6NSrEJIPezGOS4
awfCHzzlWoni4b3CcOVTI6aS/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKAk2Q2n
QLa03qEgOaUPJ/n8UT5pMB8GA1UdIwQYMBaAFIWQKQiCiwMx6UjUbts4Jf9gPbmG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUUxQi8yMDZERkMyODY0
MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6SHBTTlJ1MnpnbF8yQTl1
WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2haQXBDSUtMQXpIcFNOUnUyemdsXzJBOXVZWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RUUxQi8yMDZERkMyODY0MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6
SHBTTlJ1MnpnbF8yQTl1WVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARyFDKaj7guS7Hkq+bJHpWEAxotU24Mv9TIthKbLqQDKwA76MXqNSlu+L3J3K
JjW5p6mDnj2tERfsF58GRQ8O1ynsWjcCh4Zm+v5i99EcKjhibDeKGR+US02ZXoVX
YmxF1DE36yqNfM9my8N/0W3jcaeTaiDIfjUlwvipRNYEVo+767OBqayiJnVSji+E
UasV5duv1wyPrL7uaJNfmYxlaV/aljVH9mJTrlXySmZ5A2m7n76SMCg4I9k69cwm
UaRdAo+SHnjrxGBdqKSBwRH4OgLL8M/zb29pGKUnNvF3vHrJGk0CBp9BRbBkZYk2
/zGhalE1tzUH2BeIoRdO5/r05Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:49:37 2026 by rpki-client