Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.mft
File:                     iu4p2y_pFAf-QOS-eMQGJtfhj7E.mft (raw, json)
Hash identifier:          lwBDpWY2691tq6SeZH6QmFQahgPDAGtGT3xdm10THoc=
Subject key identifier:   F7:D2:AF:CC:C4:83:DC:D5:3E:1F:AA:DB:7B:90:0E:27:4B:93:E9:4C
Authority key identifier: 8A:EE:29:DB:2F:E9:14:07:FE:40:E4:BE:78:C4:06:26:D7:E1:8F:B1
Certificate issuer:       /CN=A91F090C/serialNumber=8AEE29DB2FE91407FE40E4BE78C40626D7E18FB1
Certificate serial:       3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.mft
Manifest number:          0B93
Signing time:             Wed 22 Jul 2026 19:33:02 +0000
Manifest this update:     Wed 22 Jul 2026 19:33:01 +0000
Manifest next update:     Wed 29 Jul 2026 19:33:01 +0000
Files and hashes:         1: iu4p2y_pFAf-QOS-eMQGJtfhj7E.crl (hash: gHo1vhoeQozKrQHrsatfiBb1SgYNUWvoMQN0wrKfFA0=)
                          2: 1EDAC9BA85AA11F1B700E1E55BA30FBC.roa (hash: kf1pHs/8bNvsCfkzb+oZx7Nt2agM4ptLzDTnsP5UWjI=)
                          3: FD86FDF6707311F1B807F94B77A30FBC.roa (hash: gDZWZJSsCK5hepLcVhYuiySc2jdwfmmWoqRN6NOgOZY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.crl
                          rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F090C, serialNumber=8AEE29DB2FE91407FE40E4BE78C40626D7E18FB1
        Validity
            Not Before: Jul 22 19:33:01 2026 GMT
            Not After : Jul 29 19:33:01 2026 GMT
        Subject: CN=6a611aee-24f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6b:fd:7d:fd:f0:f9:33:7f:63:92:bf:90:b2:
                    85:15:42:82:0b:48:5a:4a:b4:72:bf:0a:03:d4:34:
                    05:6b:28:55:85:91:d4:f9:3f:0e:40:3d:c8:44:bc:
                    3f:4b:c0:01:8f:d2:a8:37:1d:28:15:2d:53:39:3a:
                    92:b2:aa:03:71:45:39:6e:e5:c5:c1:1a:ef:4a:d1:
                    da:7d:16:f1:6e:09:fa:99:2f:4c:68:27:94:85:63:
                    d9:af:2c:82:d0:d0:81:92:1a:63:de:45:4f:b9:a7:
                    d8:ff:4d:ea:b9:4a:ae:51:6c:15:69:27:62:e6:b1:
                    31:15:f5:41:d5:b4:dc:92:e9:f9:58:a7:81:c6:34:
                    6b:1c:cc:e4:3c:95:0b:b1:75:2b:3b:1b:8e:c1:22:
                    a1:78:d2:86:c5:9f:09:f7:1c:35:5f:96:26:c4:59:
                    46:de:9c:e7:fc:9b:d4:d1:d2:82:5c:29:82:01:de:
                    44:8e:cb:d6:ab:c9:92:0d:35:5b:6e:10:19:0f:58:
                    72:dd:e5:08:12:2d:ad:c4:ca:9f:e0:fe:5b:c6:26:
                    ff:01:3e:66:ff:59:a5:18:7a:26:3d:de:b0:55:dc:
                    22:40:99:c0:bf:61:f6:af:c6:2c:d5:81:f6:1e:cb:
                    86:60:88:e3:a5:8b:b2:b5:08:cb:6c:f3:48:a4:ab:
                    8d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D2:AF:CC:C4:83:DC:D5:3E:1F:AA:DB:7B:90:0E:27:4B:93:E9:4C
            X509v3 Authority Key Identifier:
                keyid:8A:EE:29:DB:2F:E9:14:07:FE:40:E4:BE:78:C4:06:26:D7:E1:8F:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:69:97:9f:ab:4f:ea:7f:37:c5:11:fd:ac:b5:77:87:84:17:
         aa:c9:32:13:04:66:56:22:d8:b0:af:c5:f2:82:3c:4b:3e:cc:
         bb:df:da:1c:81:b2:2c:4d:41:5d:51:f3:f0:bc:dc:21:b1:1b:
         fa:9b:ac:0a:df:8c:34:b1:d3:6a:16:a8:f2:eb:c8:c6:06:21:
         e6:c5:15:8b:73:30:e9:79:a5:49:05:a3:13:de:6a:44:3d:75:
         6c:d7:53:4c:0e:61:ab:a0:fe:1c:98:f4:3b:93:92:65:d4:70:
         5c:51:b0:0a:98:88:c7:53:e4:d1:08:dc:79:17:8f:54:73:24:
         fe:ca:98:be:09:e6:c5:1f:e6:b2:92:76:97:88:33:5c:17:96:
         58:20:b1:ea:11:1b:a0:be:27:b3:f1:54:46:a3:a7:4a:41:8b:
         9e:b7:b8:33:2a:53:76:75:24:2e:53:b6:39:27:a0:c0:b2:42:
         33:5d:9c:db:a1:a6:aa:04:10:7a:73:93:71:78:48:ac:9e:a5:
         19:e7:c7:d6:d9:e1:1f:46:28:f3:af:8b:9a:97:1c:58:34:39:
         b3:e3:c1:d4:62:04:1e:54:8e:ba:47:d3:95:3e:31:49:a7:ef:
         0b:c2:d4:eb:bc:48:08:b8:ea:90:d1:84:85:01:fc:ab:79:83:
         d1:3a:94:14
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
MDkwQzExMC8GA1UEBRMoOEFFRTI5REIyRkU5MTQwN0ZFNDBFNEJFNzhDNDA2MjZE
N0UxOEZCMTAeFw0yNjA3MjIxOTMzMDFaFw0yNjA3MjkxOTMzMDFaMBgxFjAUBgNV
BAMTDTZhNjExYWVlLTI0ZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCka/19/fD5M39jkr+QsoUVQoILSFpKtHK/CgPUNAVrKFWFkdT5Pw5APchEvD9L
wAGP0qg3HSgVLVM5OpKyqgNxRTlu5cXBGu9K0dp9FvFuCfqZL0xoJ5SFY9mvLILQ
0IGSGmPeRU+5p9j/Teq5Sq5RbBVpJ2LmsTEV9UHVtNyS6flYp4HGNGsczOQ8lQux
dSs7G47BIqF40obFnwn3HDVflibEWUbenOf8m9TR0oJcKYIB3kSOy9aryZINNVtu
EBkPWHLd5QgSLa3Eyp/g/lvGJv8BPmb/WaUYeiY93rBV3CJAmcC/YfavxizVgfYe
y4ZgiOOli7K1CMts80ikq42bAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU99KvzMSD
3NU+H6rbe5AOJ0uT6UwwHwYDVR0jBBgwFoAUiu4p2y/pFAf+QOS+eMQGJtfhj7Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwOTBDL0I3QzRFOTM2NUQy
OTExRUFCMDU0RkYzQkM0RjlBRTAyL2l1NHAyeV9wRkFmLVFPUy1lTVFHSnRmaGo3
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaXU0cDJ5X3BGQWYtUU9TLWVNUUdKdGZoajdFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw
OTBDL0I3QzRFOTM2NUQyOTExRUFCMDU0RkYzQkM0RjlBRTAyL2l1NHAyeV9wRkFm
LVFPUy1lTVFHSnRmaGo3RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBAaZefq0/qfzfFEf2stXeHhBeqyTITBGZWItiwr8XygjxLPsy739ocgbIsTUFd
UfPwvNwhsRv6m6wK34w0sdNqFqjy68jGBiHmxRWLczDpeaVJBaMT3mpEPXVs11NM
DmGroP4cmPQ7k5Jl1HBcUbAKmIjHU+TRCNx5F49UcyT+ypi+CebFH+ayknaXiDNc
F5ZYILHqERugviez8VRGo6dKQYuet7gzKlN2dSQuU7Y5J6DAskIzXZzboaaqBBB6
c5NxeEisnqUZ58fW2eEfRijzr4ualxxYNDmz48HUYgQeVI66R9OVPjFJp+8LwtTr
vEgIuOqQ0YSFAfyreYPROpQU
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:23:45 2026 by rpki-client