Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F110A/3FA12996706F11F18815716276A30FBC/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.mft
File:                     TRmVqeZ5N2cvLE8nhg9St9Ym1A8.mft (raw, json)
Hash identifier:          brNEJUBcTYXXahBenPpVUusBRahNln8pKpMQe//g3ok=
Subject key identifier:   65:67:53:D9:62:35:B8:E3:7E:6B:07:94:4C:27:43:44:06:22:B5:6B
Authority key identifier: 4D:19:95:A9:E6:79:37:67:2F:2C:4F:27:86:0F:52:B7:D6:26:D4:0F
Certificate issuer:       /CN=A91F110A/serialNumber=4D1995A9E67937672F2C4F27860F52B7D626D40F
Certificate serial:       1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F110A/3FA12996706F11F18815716276A30FBC/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.mft
Manifest number:          15
Signing time:             Thu 23 Jul 2026 11:11:07 +0000
Manifest this update:     Thu 23 Jul 2026 11:11:06 +0000
Manifest next update:     Thu 30 Jul 2026 11:11:06 +0000
Files and hashes:         1: TRmVqeZ5N2cvLE8nhg9St9Ym1A8.crl (hash: kJJozRiQIJjDDQnY8Ya+cYyLoWILGfojtZRwSkrmC04=)
                          2: 9175DEAA7C1411F18096A0D294A30FBC.roa (hash: cp+vN6cTIS/69N+GxuJvTs1MveCOnCGKIrNsu4gNmRg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F110A/3FA12996706F11F18815716276A30FBC/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.crl
                          rsync://rpki.apnic.net/member_repository/A91F110A/3FA12996706F11F18815716276A30FBC/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:11:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F110A, serialNumber=4D1995A9E67937672F2C4F27860F52B7D626D40F
        Validity
            Not Before: Jul 23 11:11:06 2026 GMT
            Not After : Jul 30 11:11:06 2026 GMT
        Subject: CN=6a61f6ca-e00d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:58:f5:72:99:bf:40:b8:5a:27:27:0d:6b:ce:
                    e9:b8:24:7f:59:0a:81:90:74:cf:02:df:1e:c2:bc:
                    57:13:b6:bd:a3:94:2d:99:9c:c3:cc:27:e2:17:0e:
                    8f:41:8b:ab:9e:42:e6:75:bf:9d:fc:f2:04:46:3f:
                    8a:d5:da:21:42:c3:89:da:04:94:a0:55:a0:4c:93:
                    e9:18:a4:2c:50:d3:39:61:b1:c2:b4:ef:0f:83:bd:
                    b0:44:ba:b1:1d:00:ee:75:95:a4:17:09:60:9b:9e:
                    99:d8:1a:2a:a0:e9:0d:70:2c:e0:6c:aa:d5:22:fa:
                    14:83:29:3b:6a:3d:da:8d:64:c3:a2:8f:8d:66:01:
                    1b:e7:e2:b4:29:53:7c:3c:21:dc:80:a7:5e:9e:81:
                    6e:65:e8:f8:50:f3:db:82:a4:05:3b:8c:ee:93:c2:
                    9c:23:f2:72:a6:c4:cb:aa:78:db:08:cf:ad:09:33:
                    f9:d3:6e:f9:c3:8b:c4:e2:8e:e8:8e:3f:37:2b:fc:
                    23:da:5f:2b:af:15:f1:1d:71:10:6e:8b:bf:db:45:
                    7f:89:3a:d5:d5:ae:60:35:54:12:d0:e6:70:b4:44:
                    85:fa:1c:0a:5f:dc:8a:5e:11:df:74:08:f5:7a:8d:
                    d7:f2:19:5e:1d:17:2b:10:4a:7f:a3:19:07:3f:c8:
                    b0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:67:53:D9:62:35:B8:E3:7E:6B:07:94:4C:27:43:44:06:22:B5:6B
            X509v3 Authority Key Identifier:
                keyid:4D:19:95:A9:E6:79:37:67:2F:2C:4F:27:86:0F:52:B7:D6:26:D4:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F110A/3FA12996706F11F18815716276A30FBC/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F110A/3FA12996706F11F18815716276A30FBC/TRmVqeZ5N2cvLE8nhg9St9Ym1A8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:8d:0c:32:8d:9d:71:c7:41:11:3e:1e:a9:f5:2a:a1:8f:4d:
         c9:b4:f7:3f:a0:c4:c5:34:be:94:5e:ff:a9:17:f4:fb:ed:c6:
         30:f3:43:12:53:17:21:78:60:41:bb:47:da:64:ce:ef:0f:41:
         7e:e8:aa:2c:06:db:95:51:12:88:9c:c0:8d:3e:7c:f0:20:34:
         c2:4f:3e:d7:df:9b:32:2d:5d:bd:a5:a8:2d:42:9e:60:56:ea:
         c0:3c:f5:4a:b6:85:c3:c2:44:5d:ea:ee:b2:7a:f4:7a:ef:b3:
         88:2c:90:1f:2d:7e:30:ba:32:a0:3d:c3:3f:9d:fb:2c:eb:dd:
         30:48:e7:83:0d:12:5a:55:7d:bb:73:db:1d:86:aa:8c:3a:50:
         b3:47:cc:ff:e4:c5:d9:63:6b:fb:67:da:a3:cc:e5:fd:6a:41:
         8c:8a:cd:2f:ac:dd:68:98:5f:4e:e0:2d:01:d7:21:63:50:e1:
         eb:5a:16:f7:f3:87:69:b3:43:b0:c4:db:38:e0:03:a5:3f:f0:
         a0:e9:62:30:71:e0:6f:24:25:34:f3:61:c8:c5:f9:d1:e3:19:
         af:5d:43:8c:28:40:50:06:40:fc:9e:10:91:b8:b0:d6:ce:12:
         d7:fd:3c:fe:e9:33:f7:44:84:9f:17:f3:f3:2c:97:d3:fd:5d:
         ed:f5:b1:51
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
MTEwQTExMC8GA1UEBRMoNEQxOTk1QTlFNjc5Mzc2NzJGMkM0RjI3ODYwRjUyQjdE
NjI2RDQwRjAeFw0yNjA3MjMxMTExMDZaFw0yNjA3MzAxMTExMDZaMBgxFjAUBgNV
BAMTDTZhNjFmNmNhLWUwMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQClWPVymb9AuFonJw1rzum4JH9ZCoGQdM8C3x7CvFcTtr2jlC2ZnMPMJ+IXDo9B
i6ueQuZ1v5388gRGP4rV2iFCw4naBJSgVaBMk+kYpCxQ0zlhscK07w+DvbBEurEd
AO51laQXCWCbnpnYGiqg6Q1wLOBsqtUi+hSDKTtqPdqNZMOij41mARvn4rQpU3w8
IdyAp16egW5l6PhQ89uCpAU7jO6Twpwj8nKmxMuqeNsIz60JM/nTbvnDi8TijuiO
Pzcr/CPaXyuvFfEdcRBui7/bRX+JOtXVrmA1VBLQ5nC0RIX6HApf3IpeEd90CPV6
jdfyGV4dFysQSn+jGQc/yLCLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZWdT2WI1
uON+aweUTCdDRAYitWswHwYDVR0jBBgwFoAUTRmVqeZ5N2cvLE8nhg9St9Ym1A8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxMTBBLzNGQTEyOTk2NzA2
RjExRjE4ODE1NzE2Mjc2QTMwRkJDL1RSbVZxZVo1TjJjdkxFOG5oZzlTdDlZbTFB
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVFJtVnFlWjVOMmN2TEU4bmhnOVN0OVltMUE4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx
MTBBLzNGQTEyOTk2NzA2RjExRjE4ODE1NzE2Mjc2QTMwRkJDL1RSbVZxZVo1TjJj
dkxFOG5oZzlTdDlZbTFBOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAYjQwyjZ1xx0ERPh6p9Sqhj03JtPc/oMTFNL6UXv+pF/T77cYw80MSUxcheGBB
u0faZM7vD0F+6KosBtuVURKInMCNPnzwIDTCTz7X35syLV29pagtQp5gVurAPPVK
toXDwkRd6u6yevR677OILJAfLX4wujKgPcM/nfss690wSOeDDRJaVX27c9sdhqqM
OlCzR8z/5MXZY2v7Z9qjzOX9akGMis0vrN1omF9O4C0B1yFjUOHrWhb384dps0Ow
xNs44AOlP/Cg6WIwceBvJCU082HIxfnR4xmvXUOMKEBQBkD8nhCRuLDWzhLX/Tz+
6TP3RISfF/PzLJfT/V3t9bFR
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:25:23 2026 by rpki-client