Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
File:                     C5I347CGtYw82c5v1JrCYffVJaM.mft (raw, json)
Hash identifier:          jcgUT1JFVLgyP22kuH2Isgl77A0ykL5u3DANDkaprOs=
Subject key identifier:   BA:77:2C:79:79:AE:61:1A:99:A1:8A:53:E6:D0:50:14:2B:A4:33:64
Authority key identifier: 0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3
Certificate issuer:       /CN=A91F08FA/serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
Certificate serial:       0127
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
Manifest number:          0117
Signing time:             Thu 23 Jul 2026 07:40:42 +0000
Manifest this update:     Thu 23 Jul 2026 07:40:42 +0000
Manifest next update:     Thu 30 Jul 2026 07:40:42 +0000
Files and hashes:         1: C5I347CGtYw82c5v1JrCYffVJaM.crl (hash: k/lGX27yY3JutLtnXZMSfNo1FRKaG7ozXCctX0Qr68U=)
                          2: 24E20F9E6B7011F0ACA1BB56C4F9AE02.roa (hash: RLjdUAVnjKgzwqmaXAIPV1P+6YSNLAkKqfL9Zn2hSIQ=)
                          3: 9C9C1046F7CD11EF9245601CC4F9AE02.roa (hash: DZs/ioNjiGTQdREG+zE+daNHAc/dwChZtpeTTorEq9w=)
                          4: B4F27262FA2911EFA783CE2DC4F9AE02.roa (hash: uufA5ZmNxri3hkizmrTV+/5I7T9shm+y03oLPhZQF5k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl
                          rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F08FA, serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
        Validity
            Not Before: Jul 23 07:40:42 2026 GMT
            Not After : Jul 30 07:40:42 2026 GMT
        Subject: CN=6a61c57a-c720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c4:95:88:45:f9:e6:30:6a:9b:33:c5:f1:20:
                    5d:c6:c7:25:45:01:5d:de:72:28:0a:a4:66:6d:c3:
                    e4:87:ab:d7:59:43:d6:a1:e2:8e:55:f6:e9:5f:fb:
                    70:41:ad:4e:90:c8:50:a1:ab:42:09:6d:82:b3:33:
                    e0:e2:d8:3e:ac:6b:59:d0:de:17:e1:b8:67:6d:26:
                    f0:91:4d:75:8b:82:d3:2d:76:06:69:be:3a:67:1d:
                    cf:18:be:27:e9:1e:8e:d2:1a:d7:2c:50:69:38:a9:
                    f1:b7:f3:ff:5e:53:d7:73:6e:dd:97:f7:c1:6a:04:
                    05:a4:f5:ea:31:f0:d5:fd:b7:bd:c0:d6:c5:7c:01:
                    c8:8b:99:6a:de:20:16:4c:9c:84:6e:30:28:a5:9f:
                    5d:cd:bd:01:3d:75:23:a4:01:d0:1c:c3:92:49:0a:
                    96:c8:9f:89:15:dc:29:0d:b4:00:bc:53:d4:a2:4e:
                    e4:73:b3:58:4c:ef:24:8f:24:2d:ee:00:76:84:f5:
                    0d:7f:05:6f:74:c8:30:71:05:8d:f5:cd:d4:5b:f8:
                    89:86:e5:f8:a1:dc:d1:57:31:5d:f8:e2:da:34:b9:
                    5a:24:c4:f2:30:40:79:31:66:a0:d4:f3:0a:07:c0:
                    5f:f4:26:e9:03:9e:3a:ad:d3:55:e4:3c:8e:a5:8f:
                    78:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:77:2C:79:79:AE:61:1A:99:A1:8A:53:E6:D0:50:14:2B:A4:33:64
            X509v3 Authority Key Identifier:
                keyid:0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:80:18:45:60:57:7b:30:9b:b2:e6:f8:05:39:2d:96:90:7d:
         71:bd:89:3b:e2:79:42:b8:ab:f1:a0:1e:33:89:70:80:cd:20:
         2d:0f:d7:da:35:2f:28:4b:d7:6d:ae:df:c7:eb:c8:3f:44:2e:
         c1:6e:b9:ae:1e:dc:0d:89:99:dc:e6:5f:17:01:c3:3b:8e:fa:
         03:27:e5:55:dd:9a:a2:e5:53:71:70:64:4c:e9:48:6f:0a:a6:
         2b:59:43:88:54:b4:92:78:0e:81:04:06:66:0f:b1:ae:58:81:
         25:36:fb:0a:48:cf:d5:bf:54:c0:98:16:c9:24:f2:68:81:f7:
         cb:79:e6:c4:f8:a6:3f:37:23:cc:66:cb:35:0f:4e:49:fe:ca:
         5c:bb:69:ac:8f:05:e9:13:4d:ef:60:68:81:71:7c:03:bb:b2:
         cc:d9:22:40:5b:20:b7:f2:69:ae:83:d6:da:91:fa:78:50:8f:
         67:5e:25:db:96:4b:91:13:78:cd:be:45:61:35:ad:23:49:f0:
         f5:d4:99:95:e7:3c:92:ae:6e:2d:4a:5b:b7:6a:0e:ba:d1:0e:
         c6:e6:13:96:8d:2f:0e:f8:d0:98:86:a9:f1:e6:f7:71:38:b7:
         f2:7b:bd:68:f4:c2:a8:17:52:0a:3a:09:92:d4:30:c0:6d:02:
         b1:0c:2f:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjA4RkExMTAvBgNVBAUTKDBCOTIzN0UzQjA4NkI1OEMzQ0Q5Q0U2RkQ0OUFDMjYx
RjdENTI1QTMwHhcNMjYwNzIzMDc0MDQyWhcNMjYwNzMwMDc0MDQyWjAYMRYwFAYD
VQQDEw02YTYxYzU3YS1jNzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA68SViEX55jBqmzPF8SBdxsclRQFd3nIoCqRmbcPkh6vXWUPWoeKOVfbpX/tw
Qa1OkMhQoatCCW2CszPg4tg+rGtZ0N4X4bhnbSbwkU11i4LTLXYGab46Zx3PGL4n
6R6O0hrXLFBpOKnxt/P/XlPXc27dl/fBagQFpPXqMfDV/be9wNbFfAHIi5lq3iAW
TJyEbjAopZ9dzb0BPXUjpAHQHMOSSQqWyJ+JFdwpDbQAvFPUok7kc7NYTO8kjyQt
7gB2hPUNfwVvdMgwcQWN9c3UW/iJhuX4odzRVzFd+OLaNLlaJMTyMEB5MWag1PMK
B8Bf9CbpA546rdNV5DyOpY946wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLp3LHl5
rmEamaGKU+bQUBQrpDNkMB8GA1UdIwQYMBaAFAuSN+OwhrWMPNnOb9SawmH31SWj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDhGQS9EMzdGNjI1Q0U3
M0QxMUVGOEEwNDYyMTdDNEY5QUUwMi9DNUkzNDdDR3RZdzgyYzV2MUpyQ1lmZlZK
YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0M1STM0N0NHdFl3ODJjNXYxSnJDWWZmVkphTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MDhGQS9EMzdGNjI1Q0U3M0QxMUVGOEEwNDYyMTdDNEY5QUUwMi9DNUkzNDdDR3RZ
dzgyYzV2MUpyQ1lmZlZKYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeYAYRWBXezCbsub4BTktlpB9cb2JO+J5Qrir8aAeM4lwgM0gLQ/X2jUvKEvX
ba7fx+vIP0QuwW65rh7cDYmZ3OZfFwHDO476AyflVd2aouVTcXBkTOlIbwqmK1lD
iFS0kngOgQQGZg+xrliBJTb7CkjP1b9UwJgWySTyaIH3y3nmxPimPzcjzGbLNQ9O
Sf7KXLtprI8F6RNN72BogXF8A7uyzNkiQFsgt/JproPW2pH6eFCPZ14l25ZLkRN4
zb5FYTWtI0nw9dSZlec8kq5uLUpbt2oOutEOxuYTlo0vDvjQmIap8eb3cTi38nu9
aPTCqBdSCjoJktQwwG0CsQwvJA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:55:46 2026 by rpki-client