Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft
File:                     4mhztF-I0fXYg8F-TM9wokUWIUI.mft (raw, json)
Hash identifier:          2X+KFTQFAuVszz6sluEoG7O0rhfnS5enKEd10cRJuLs=
Subject key identifier:   6E:45:F3:F9:05:7C:C2:BF:7C:87:4B:E1:3D:25:E0:D3:A6:42:74:17
Authority key identifier: E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42
Certificate issuer:       /CN=A91F4C6B/serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142
Certificate serial:       09AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft
Manifest number:          099C
Signing time:             Wed 22 Jul 2026 20:26:36 +0000
Manifest this update:     Wed 22 Jul 2026 20:26:35 +0000
Manifest next update:     Wed 29 Jul 2026 20:26:35 +0000
Files and hashes:         1: 4mhztF-I0fXYg8F-TM9wokUWIUI.crl (hash: sWss7IImAPBbrwB6kT1GW+V3M1nS6VUsdkGGxQMqH60=)
                          2: 7A54F40C4F8911F18D85090792833773.roa (hash: iEFSKuawoMKJgN/7K/NIxyh+jdfFdnwDeUD4zCSp6Wk=)
                          3: E146B994B51F11EA9146DD58C4F9AE02.roa (hash: KShq5BmuPEepsEU7x+JbRfGgfm8cmEzXAADusI8In3Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl
                          rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2478 (0x9ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4C6B, serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142
        Validity
            Not Before: Jul 22 20:26:35 2026 GMT
            Not After : Jul 29 20:26:35 2026 GMT
        Subject: CN=6a61277c-dc3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:58:01:47:05:10:73:d1:1e:9f:ba:89:6e:fe:
                    78:fd:26:b2:65:62:07:b1:41:2e:53:c2:93:46:e2:
                    1a:e8:bb:a0:12:0b:c9:43:21:aa:3f:4c:bb:88:34:
                    b1:a4:da:2e:2d:2a:7f:f5:a8:88:4d:29:70:25:a2:
                    d6:33:90:b0:a8:11:d4:50:e7:a4:e0:27:74:17:4d:
                    2f:c9:34:4d:bc:37:f4:3c:ee:9b:b8:fb:72:eb:e1:
                    69:1f:47:0b:12:15:40:88:02:24:cb:29:5b:41:4d:
                    57:2c:b2:61:b0:5e:f5:eb:7a:ed:b8:58:bd:89:c2:
                    70:9f:79:5b:b2:c6:51:61:75:3a:64:b6:b6:e9:59:
                    0c:8f:75:03:b4:27:53:b6:d3:3f:bb:f2:a9:7b:5a:
                    6f:9e:26:db:7e:1c:95:3f:c1:d4:58:8d:9b:09:4b:
                    05:d9:80:bd:84:12:5d:e4:2b:01:ee:44:d2:ad:68:
                    6b:86:d1:81:ab:6e:9a:de:63:6e:b4:a5:91:03:e0:
                    5a:7d:9c:3d:e8:7a:4e:62:c8:85:9e:c9:9b:c6:94:
                    77:fe:da:f7:fa:e5:84:64:f9:c3:e1:8f:08:2e:26:
                    9a:e0:77:56:ee:f0:7c:1e:b5:c7:71:07:de:be:ea:
                    31:8c:d3:fe:fd:f6:dc:1a:81:f7:30:28:21:4b:20:
                    ba:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:45:F3:F9:05:7C:C2:BF:7C:87:4B:E1:3D:25:E0:D3:A6:42:74:17
            X509v3 Authority Key Identifier:
                keyid:E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:ab:61:fd:49:18:a3:d4:3c:30:55:74:18:0a:95:89:cd:39:
         6b:5a:d6:4e:38:87:33:37:f1:02:a1:3b:c0:05:f6:e6:47:e2:
         b5:a4:cc:12:d4:bb:7e:b7:46:5f:84:cd:bb:4c:0f:8f:69:ff:
         56:76:9f:ac:f7:d4:80:40:82:19:8f:e3:09:1c:e5:68:df:21:
         d0:81:b5:15:39:38:67:4d:86:9c:44:6c:9b:c3:e6:a1:7c:e7:
         d8:13:81:51:0e:0d:80:21:82:66:7c:58:87:04:9e:c0:58:1e:
         f8:28:aa:34:c0:da:b7:88:e8:64:57:82:f3:f3:ea:47:a4:2f:
         e7:ae:b5:15:e7:bf:24:9a:30:14:6c:a8:64:b8:c6:fd:a5:72:
         fc:e5:f9:25:60:83:89:1d:3b:09:09:51:5e:45:18:0d:1e:dd:
         50:ff:c5:87:ee:bc:f7:d9:d5:f1:b1:17:73:e8:18:28:8e:42:
         44:1b:3a:8f:1e:df:42:b5:02:cb:ae:3b:58:c3:95:c2:d4:07:
         9f:88:1d:d4:7f:fb:9b:db:0b:9a:bc:0b:dc:37:4e:ba:c7:24:
         74:2c:52:36:36:d8:b3:13:db:a7:b9:bb:c0:14:b5:9a:69:a9:
         23:25:a9:88:44:16:53:74:8b:b5:45:f4:9f:93:4d:fa:fb:56:
         14:ed:0f:c7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjRDNkIxMTAvBgNVBAUTKEUyNjg3M0I0NUY4OEQxRjVEODgzQzE3RTRDQ0Y3MEEy
NDUxNjIxNDIwHhcNMjYwNzIyMjAyNjM1WhcNMjYwNzI5MjAyNjM1WjAYMRYwFAYD
VQQDEw02YTYxMjc3Yy1kYzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqlgBRwUQc9Een7qJbv54/SayZWIHsUEuU8KTRuIa6LugEgvJQyGqP0y7iDSx
pNouLSp/9aiITSlwJaLWM5CwqBHUUOek4Cd0F00vyTRNvDf0PO6buPty6+FpH0cL
EhVAiAIkyylbQU1XLLJhsF7163rtuFi9icJwn3lbssZRYXU6ZLa26VkMj3UDtCdT
ttM/u/Kpe1pvnibbfhyVP8HUWI2bCUsF2YC9hBJd5CsB7kTSrWhrhtGBq26a3mNu
tKWRA+BafZw96HpOYsiFnsmbxpR3/tr3+uWEZPnD4Y8ILiaa4HdW7vB8HrXHcQfe
vuoxjNP+/fbcGoH3MCghSyC61QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG5F8/kF
fMK/fIdL4T0l4NOmQnQXMB8GA1UdIwQYMBaAFOJoc7RfiNH12IPBfkzPcKJFFiFC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEM2Qi8yNzhBQTNFNEI1
MUYxMUVBOUZFOEJENThDNEY5QUUwMi80bWh6dEYtSTBmWFlnOEYtVE05d29rVVdJ
VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRtaHp0Ri1JMGZYWWc4Ri1UTTl3b2tVV0lVSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NEM2Qi8yNzhBQTNFNEI1MUYxMUVBOUZFOEJENThDNEY5QUUwMi80bWh6dEYtSTBm
WFlnOEYtVE05d29rVVdJVUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA2ath/UkYo9Q8MFV0GAqVic05a1rWTjiHMzfxAqE7wAX25kfitaTMEtS7frdG
X4TNu0wPj2n/VnafrPfUgECCGY/jCRzlaN8h0IG1FTk4Z02GnERsm8PmoXzn2BOB
UQ4NgCGCZnxYhwSewFge+CiqNMDat4joZFeC8/PqR6Qv5661Fee/JJowFGyoZLjG
/aVy/OX5JWCDiR07CQlRXkUYDR7dUP/Fh+6899nV8bEXc+gYKI5CRBs6jx7fQrUC
y647WMOVwtQHn4gd1H/7m9sLmrwL3DdOusckdCxSNjbYsxPbp7m7wBS1mmmpIyWp
iEQWU3SLtUX0n5NN+vtWFO0Pxw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:21:23 2026 by rpki-client