Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft
File:                     ItyTZY3G6XAwereu8eJV3j1D9bc.mft (raw, json)
Hash identifier:          NVSoE05b2qYbu02GIvnF7CZ6GeqQf+FbBM4yuReALVU=
Subject key identifier:   A5:05:27:CB:10:BD:20:84:A5:60:92:16:13:9D:78:75:74:66:A1:52
Authority key identifier: 22:DC:93:65:8D:C6:E9:70:30:7A:B7:AE:F1:E2:55:DE:3D:43:F5:B7
Certificate issuer:       /CN=A91F0C45/serialNumber=22DC93658DC6E970307AB7AEF1E255DE3D43F5B7
Certificate serial:       B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItyTZY3G6XAwereu8eJV3j1D9bc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft
Manifest number:          AE
Signing time:             Thu 23 Jul 2026 09:04:00 +0000
Manifest this update:     Thu 23 Jul 2026 09:04:00 +0000
Manifest next update:     Thu 30 Jul 2026 09:04:00 +0000
Files and hashes:         1: ItyTZY3G6XAwereu8eJV3j1D9bc.crl (hash: r53M7ZNHeTzAiSSImxNs0ptlfh6/a16yRIcpjta/8qs=)
                          2: 96AF1D609A0F11F09F475111C4F9AE02.roa (hash: lCi752ligH/UO1OJEHoof5FIfLu807frgAct0rFSMSY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.crl
                          rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItyTZY3G6XAwereu8eJV3j1D9bc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0C45, serialNumber=22DC93658DC6E970307AB7AEF1E255DE3D43F5B7
        Validity
            Not Before: Jul 23 09:04:00 2026 GMT
            Not After : Jul 30 09:04:00 2026 GMT
        Subject: CN=6a61d900-c542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bb:13:b6:f3:53:f2:13:86:43:a2:d1:1b:d5:
                    47:d4:08:7b:be:ef:58:f2:83:de:14:3d:e5:9d:16:
                    82:57:89:bd:e7:eb:36:8e:5b:64:c2:ef:59:f9:a0:
                    07:7b:56:dd:a4:03:d0:44:f7:25:6a:6d:13:89:5e:
                    4e:0d:ab:9e:d0:fa:d0:09:b3:6f:43:de:eb:66:7a:
                    8e:00:35:a1:13:60:ac:24:6e:4e:62:22:56:ba:68:
                    c1:ca:cf:94:b2:d4:80:53:6f:d1:cb:99:67:80:cf:
                    44:83:64:b4:a7:37:c1:8a:87:0e:36:a5:1b:f9:ff:
                    fc:11:cd:ea:ef:59:99:90:be:24:f8:b6:77:d4:37:
                    2a:a6:a6:26:72:2c:61:33:c8:7c:f2:18:9f:60:0d:
                    fb:b2:c8:42:01:40:5f:9e:a8:cc:15:5c:24:b6:80:
                    dd:0d:2a:e1:67:3f:30:81:14:a7:d5:0e:1e:6a:c3:
                    08:00:21:0e:d1:d3:c8:f4:aa:8e:b1:f0:20:ec:7f:
                    33:dc:32:59:2d:f7:ae:b8:d8:1f:a4:3f:1e:ad:a5:
                    ad:27:b1:85:ef:ae:e9:10:77:a6:0d:33:ca:97:1b:
                    3a:0f:97:7c:fa:d2:24:56:4a:6e:f9:51:26:11:db:
                    50:e9:17:3c:b7:dc:dd:4d:ad:8b:61:84:2e:66:32:
                    24:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:05:27:CB:10:BD:20:84:A5:60:92:16:13:9D:78:75:74:66:A1:52
            X509v3 Authority Key Identifier:
                keyid:22:DC:93:65:8D:C6:E9:70:30:7A:B7:AE:F1:E2:55:DE:3D:43:F5:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItyTZY3G6XAwereu8eJV3j1D9bc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:51:e2:2e:01:c0:ac:80:64:5b:f7:03:a7:14:3e:5a:7b:b4:
         d7:e4:87:16:68:6e:78:4c:1e:b6:6c:78:3d:cc:3b:e4:f1:fc:
         19:11:fe:12:60:e9:b3:54:70:46:81:85:a7:17:ce:2d:60:08:
         3a:de:26:04:0c:e9:f6:56:ee:0e:2b:46:49:cb:81:3f:32:9d:
         e3:b3:3f:e9:7a:5a:25:a9:ea:5d:50:70:6b:00:16:68:97:3e:
         a4:78:0a:2b:11:63:bf:4c:e3:57:f8:46:b1:b1:d3:b6:d8:14:
         49:00:d5:c4:05:8f:65:98:9e:2e:03:c0:e2:e0:73:af:00:2e:
         d7:9d:e9:56:d0:b1:ea:ba:55:a4:4a:91:15:b4:cf:8c:92:c8:
         4b:8a:f6:f0:c7:ae:3a:d0:4b:5e:e4:d8:01:a2:7e:9a:2a:f0:
         3c:0e:eb:4b:5c:bc:cc:ff:f7:6a:47:e3:a8:22:4d:53:12:69:
         4b:d5:55:f8:87:2f:a1:ad:e2:46:48:4d:95:2d:0b:4d:34:26:
         1b:ff:af:43:83:80:46:55:35:76:b1:15:36:03:ea:52:f9:72:
         88:8d:f6:3c:ec:32:fd:0f:01:a8:01:54:65:e1:79:55:1a:43:
         a1:10:dd:e9:da:bf:cb:dd:08:50:1e:69:99:3b:8a:df:a0:1e:
         7e:8e:b5:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjBDNDUxMTAvBgNVBAUTKDIyREM5MzY1OERDNkU5NzAzMDdBQjdBRUYxRTI1NURF
M0Q0M0Y1QjcwHhcNMjYwNzIzMDkwNDAwWhcNMjYwNzMwMDkwNDAwWjAYMRYwFAYD
VQQDEw02YTYxZDkwMC1jNTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyLsTtvNT8hOGQ6LRG9VH1Ah7vu9Y8oPeFD3lnRaCV4m95+s2jltkwu9Z+aAH
e1bdpAPQRPclam0TiV5ODaue0PrQCbNvQ97rZnqOADWhE2CsJG5OYiJWumjBys+U
stSAU2/Ry5lngM9Eg2S0pzfBiocONqUb+f/8Ec3q71mZkL4k+LZ31DcqpqYmcixh
M8h88hifYA37sshCAUBfnqjMFVwktoDdDSrhZz8wgRSn1Q4easMIACEO0dPI9KqO
sfAg7H8z3DJZLfeuuNgfpD8eraWtJ7GF767pEHemDTPKlxs6D5d8+tIkVkpu+VEm
EdtQ6Rc8t9zdTa2LYYQuZjIkawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKUFJ8sQ
vSCEpWCSFhOdeHV0ZqFSMB8GA1UdIwQYMBaAFCLck2WNxulwMHq3rvHiVd49Q/W3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEM0NS85MUExODk5RTg5
MkUxMUYwOTdBQzY2MkZDNEY5QUUwMi9JdHlUWlkzRzZYQXdlcmV1OGVKVjNqMUQ5
YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0l0eVRaWTNHNlhBd2VyZXU4ZUpWM2oxRDliYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MEM0NS85MUExODk5RTg5MkUxMUYwOTdBQzY2MkZDNEY5QUUwMi9JdHlUWlkzRzZY
QXdlcmV1OGVKVjNqMUQ5YmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUFHiLgHArIBkW/cDpxQ+Wnu01+SHFmhueEwetmx4Pcw75PH8GRH+EmDps1Rw
RoGFpxfOLWAIOt4mBAzp9lbuDitGScuBPzKd47M/6XpaJanqXVBwawAWaJc+pHgK
KxFjv0zjV/hGsbHTttgUSQDVxAWPZZieLgPA4uBzrwAu153pVtCx6rpVpEqRFbTP
jJLIS4r28MeuOtBLXuTYAaJ+mirwPA7rS1y8zP/3akfjqCJNUxJpS9VV+Icvoa3i
RkhNlS0LTTQmG/+vQ4OARlU1drEVNgPqUvlyiI32POwy/Q8BqAFUZeF5VRpDoRDd
6dq/y90IUB5pmTuK36Aefo61tg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:31:53 2026 by rpki-client