Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
File:                     c72yoCvL7DyQAPZfcFyW6AgOlzA.mft (raw, json)
Hash identifier:          o1vk+JzTLKGVgjE0L0aNny+TbWv6Ld2N4h6oBElZ6qg=
Subject key identifier:   D2:0C:22:16:86:B5:53:CF:C2:5A:02:0C:6F:ED:94:06:B1:03:FC:51
Authority key identifier: 73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30
Certificate issuer:       /CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730
Certificate serial:       020B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
Manifest number:          01F8
Signing time:             Thu 23 Jul 2026 04:45:55 +0000
Manifest this update:     Thu 23 Jul 2026 04:45:55 +0000
Manifest next update:     Thu 30 Jul 2026 04:45:55 +0000
Files and hashes:         1: c72yoCvL7DyQAPZfcFyW6AgOlzA.crl (hash: PD7d644/tz5J496iAiUUckCncu7NqE0BSY6qzUFLLQw=)
                          2: 13310E94FCD011EF8F21DE62C4F9AE02.roa (hash: 8yTgCW80fS9RiDmTjH0LHC/3QVMaSdsaZOMAcY3WXTc=)
                          3: 69F88E142C4011F1854404C0A3833773.roa (hash: ov1naSwaJOqZ4OJeKa4jgjcNyFHiKtIVi5npQW74gUw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl
                          rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:45:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 523 (0x20b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F34BF, serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730
        Validity
            Not Before: Jul 23 04:45:55 2026 GMT
            Not After : Jul 30 04:45:55 2026 GMT
        Subject: CN=6a619c83-bece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:81:e1:f3:47:50:5b:3d:9b:76:b8:a9:34:73:
                    34:35:6e:ed:33:df:eb:c8:b3:80:fd:f5:11:4e:a7:
                    24:df:53:81:7b:f1:45:fb:82:23:ad:01:9d:45:2a:
                    1b:c1:6d:3a:a0:7a:6f:c9:e1:b3:b3:f5:c9:1f:bf:
                    93:1f:d9:10:8b:d2:02:3f:f8:8f:c8:85:62:5c:c5:
                    e9:d0:38:07:c7:1d:48:6a:26:4a:b6:70:ea:ed:67:
                    10:6b:11:34:8b:d2:b3:14:b9:30:b7:d9:68:f6:00:
                    54:d4:cb:0b:bb:42:13:d5:85:59:2d:56:4d:f6:f5:
                    18:8e:00:fd:b6:08:10:1c:12:55:7c:b4:42:66:79:
                    48:ad:bb:0b:4b:1c:59:cf:be:f0:27:7d:a1:96:2b:
                    ba:e7:ec:58:31:94:32:46:8b:da:d2:8a:74:a4:14:
                    c7:ea:fd:ac:1b:24:83:19:14:40:25:4f:03:76:92:
                    2a:7e:c5:54:6c:54:30:0f:fe:47:0c:d2:ad:ba:35:
                    60:aa:46:73:f0:fd:71:98:7a:c8:67:08:69:58:73:
                    c8:e9:47:90:31:65:7a:5c:71:a8:48:e2:ee:21:44:
                    bd:de:e7:2c:2a:1f:8a:fc:1b:4c:19:96:c5:36:bd:
                    3b:b7:27:4f:95:ef:7d:4b:4d:e6:f6:56:22:a2:67:
                    8b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0C:22:16:86:B5:53:CF:C2:5A:02:0C:6F:ED:94:06:B1:03:FC:51
            X509v3 Authority Key Identifier:
                keyid:73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:5a:2b:1b:f6:40:36:6a:63:b8:ce:6e:c2:68:99:6d:af:8c:
         94:c0:05:ca:b7:35:e0:56:e4:36:58:c2:a6:64:91:44:96:72:
         1a:3b:06:3e:26:c2:18:ad:ec:0e:87:ec:e3:65:54:03:ad:05:
         e6:7c:fc:9d:70:1e:ba:6d:c2:86:91:cb:af:9f:02:10:f5:8e:
         f9:b8:84:f5:53:94:fa:66:19:98:8c:60:17:3e:83:f7:83:88:
         4e:5d:b9:1d:aa:49:2a:b4:01:db:bb:e8:18:45:75:84:2e:49:
         fd:09:9c:81:d1:64:e5:d6:5c:05:9c:15:05:b4:da:9b:a7:2d:
         50:21:e5:13:e0:71:35:28:98:29:97:9b:3b:ce:cd:31:f1:4a:
         33:f7:d3:8d:47:8f:c3:3b:8e:2c:0a:03:ac:b7:ad:30:16:e8:
         89:3f:0b:e7:48:ca:25:df:fb:44:52:1c:13:20:9c:b5:e2:b8:
         57:71:21:dc:0d:b1:03:6f:8e:26:2e:0e:00:a0:a5:e8:a3:25:
         7b:8c:ea:d5:b2:dd:4f:7a:6d:60:20:80:32:d3:c5:be:0e:8c:
         28:80:bf:cf:a7:d3:26:bc:57:96:ac:bc:98:89:5d:85:79:c9:
         35:e6:50:7c:fb:c4:6a:b9:a4:1e:e4:cc:8d:8c:9b:9e:a4:01:
         f0:92:cb:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjM0QkYxMTAvBgNVBAUTKDczQkRCMkEwMkJDQkVDM0M5MDAwRjY1RjcwNUM5NkU4
MDgwRTk3MzAwHhcNMjYwNzIzMDQ0NTU1WhcNMjYwNzMwMDQ0NTU1WjAYMRYwFAYD
VQQDEw02YTYxOWM4My1iZWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw4Hh80dQWz2bdripNHM0NW7tM9/ryLOA/fURTqck31OBe/FF+4IjrQGdRSob
wW06oHpvyeGzs/XJH7+TH9kQi9ICP/iPyIViXMXp0DgHxx1IaiZKtnDq7WcQaxE0
i9KzFLkwt9lo9gBU1MsLu0IT1YVZLVZN9vUYjgD9tggQHBJVfLRCZnlIrbsLSxxZ
z77wJ32hliu65+xYMZQyRova0op0pBTH6v2sGySDGRRAJU8DdpIqfsVUbFQwD/5H
DNKtujVgqkZz8P1xmHrIZwhpWHPI6UeQMWV6XHGoSOLuIUS93ucsKh+K/BtMGZbF
Nr07tydPle99S03m9lYiomeL3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNIMIhaG
tVPPwloCDG/tlAaxA/xRMB8GA1UdIwQYMBaAFHO9sqAry+w8kAD2X3BclugIDpcw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRCRi80RjAzM0Q4NDlD
RjUxMUVFOUU0QzMzMUZDNEY5QUUwMi9jNzJ5b0N2TDdEeVFBUFpmY0Z5VzZBZ09s
ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2M3MnlvQ3ZMN0R5UUFQWmZjRnlXNkFnT2x6QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MzRCRi80RjAzM0Q4NDlDRjUxMUVFOUU0QzMzMUZDNEY5QUUwMi9jNzJ5b0N2TDdE
eVFBUFpmY0Z5VzZBZ09sekEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlVorG/ZANmpjuM5uwmiZba+MlMAFyrc14FbkNljCpmSRRJZyGjsGPibCGK3s
Dofs42VUA60F5nz8nXAeum3ChpHLr58CEPWO+biE9VOU+mYZmIxgFz6D94OITl25
HapJKrQB27voGEV1hC5J/QmcgdFk5dZcBZwVBbTam6ctUCHlE+BxNSiYKZebO87N
MfFKM/fTjUePwzuOLAoDrLetMBboiT8L50jKJd/7RFIcEyCcteK4V3Eh3A2xA2+O
Ji4OAKCl6KMle4zq1bLdT3ptYCCAMtPFvg6MKIC/z6fTJrxXlqy8mIldhXnJNeZQ
fPvEarmkHuTMjYybnqQB8JLLKQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:44:19 2026 by rpki-client