Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
File:                     cjdHbP3kFQq5UJerug_t7UKtuas.mft (raw, json)
Hash identifier:          K8eZD+wjDTdXXa85o2VPt7V80KGMYotC9trKtrz+66w=
Subject key identifier:   20:D3:47:CC:C6:96:19:31:F3:66:F9:1A:2C:CE:A4:F5:68:76:41:9B
Authority key identifier: 72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB
Certificate issuer:       /CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB
Certificate serial:       0AD7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
Manifest number:          0ABB
Signing time:             Wed 22 Jul 2026 19:51:46 +0000
Manifest this update:     Wed 22 Jul 2026 19:51:46 +0000
Manifest next update:     Wed 29 Jul 2026 19:51:46 +0000
Files and hashes:         1: cjdHbP3kFQq5UJerug_t7UKtuas.crl (hash: UG1I5nd3prr7pCZ5iaB44azRmueLMstePB0H0mjw/O8=)
                          2: B42A4FEE9A0611F0A22A7A5EC4F9AE02.roa (hash: 69MhSA35Y7+oCxeHTa4ZtgrfWQvl9S9VgT4gK56n3vE=)
                          3: A6C9DA80974111F08BFA4E71C4F9AE02.roa (hash: ub4EJQqnSlf7Goi2AexBlDLgYVz7bOdibjQieFCvb3s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl
                          rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2775 (0xad7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4FE6, serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB
        Validity
            Not Before: Jul 22 19:51:46 2026 GMT
            Not After : Jul 29 19:51:46 2026 GMT
        Subject: CN=6a611f52-5f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1f:90:95:d3:ea:88:a0:94:0d:31:4d:66:68:
                    11:09:37:4b:f7:e3:a8:66:e6:97:da:46:70:c9:01:
                    20:87:77:13:c5:40:16:2a:bc:43:e3:be:7d:42:44:
                    b4:75:6e:2c:bd:6f:6b:26:24:7a:86:7c:67:e0:89:
                    34:b3:64:28:53:75:e9:2d:9c:e1:84:9c:fa:9f:1e:
                    e1:7e:19:e4:f9:f6:01:3f:28:a4:bf:09:10:8e:80:
                    6c:a0:bc:82:04:f9:29:cf:80:ab:5f:a4:56:ad:61:
                    61:45:0b:ae:4b:1d:f7:d1:24:94:f8:fb:6a:82:de:
                    27:16:1f:02:b0:e5:d1:71:e0:2d:63:25:4a:45:8a:
                    47:bd:79:18:26:77:0d:4f:2a:ad:6b:71:64:7a:61:
                    8d:2f:79:7a:31:c9:c0:3d:83:93:b0:b9:ac:1e:b0:
                    e2:26:1b:11:b1:0b:ba:df:5a:cb:61:3c:68:08:d4:
                    96:a1:ee:44:5d:82:29:9c:f3:34:62:15:9d:54:a3:
                    e6:4f:93:c9:9c:49:15:21:4e:44:3f:31:a6:d5:96:
                    98:d2:68:cd:e3:62:3f:cd:51:00:89:84:fe:e1:c0:
                    21:f2:10:3c:3c:bb:be:5c:18:e8:f8:d3:4f:dd:9c:
                    14:a8:76:31:30:5d:c1:65:a3:b1:33:14:72:a1:36:
                    b6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D3:47:CC:C6:96:19:31:F3:66:F9:1A:2C:CE:A4:F5:68:76:41:9B
            X509v3 Authority Key Identifier:
                keyid:72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:f0:da:f9:b9:89:b8:78:1d:2e:c1:bb:34:29:be:30:4f:27:
         59:28:63:46:fb:fa:90:5b:20:bc:f3:ab:f7:85:1f:85:e6:7d:
         f4:a2:31:c4:66:1f:1d:ed:fa:18:f9:c9:f0:3e:9b:c0:14:78:
         60:7c:1f:cb:af:44:c5:32:1d:ab:04:80:ef:d8:e9:7d:1e:fa:
         39:a2:96:7a:07:c4:fd:6d:d6:2e:24:85:37:48:06:16:f5:13:
         a1:e2:1c:8f:a2:7c:25:06:ee:f5:92:94:6f:2a:eb:05:03:75:
         3e:79:38:33:2f:30:1f:68:1a:1d:eb:88:2e:0b:eb:b3:82:16:
         50:fb:a8:1b:e4:0f:b5:60:f9:50:58:2e:15:18:4d:e7:ef:93:
         19:5d:ef:2c:54:20:7e:dc:68:02:84:fd:ff:83:d7:39:c0:72:
         52:b1:88:a3:bd:4b:60:88:af:00:74:de:3f:8b:9b:d3:61:7c:
         fd:9f:29:69:66:8c:73:96:4e:dc:f6:33:dc:dc:1b:cc:03:56:
         07:45:3b:a3:75:76:46:4a:d5:6e:16:0c:e7:a3:1e:64:fb:38:
         40:e8:4c:2c:7a:37:6e:86:05:bc:cb:1a:a1:0a:f7:56:95:a9:
         0e:d0:4e:ce:41:49:52:aa:81:81:b6:f1:5b:cc:83:d8:e7:f4:
         35:39:a5:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjRGRTYxMTAvBgNVBAUTKDcyMzc0NzZDRkRFNDE1MEFCOTUwOTdBQkJBMEZFREVE
NDJBREI5QUIwHhcNMjYwNzIyMTk1MTQ2WhcNMjYwNzI5MTk1MTQ2WjAYMRYwFAYD
VQQDEw02YTYxMWY1Mi01ZjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAox+QldPqiKCUDTFNZmgRCTdL9+OoZuaX2kZwyQEgh3cTxUAWKrxD4759QkS0
dW4svW9rJiR6hnxn4Ik0s2QoU3XpLZzhhJz6nx7hfhnk+fYBPyikvwkQjoBsoLyC
BPkpz4CrX6RWrWFhRQuuSx330SSU+Ptqgt4nFh8CsOXRceAtYyVKRYpHvXkYJncN
Tyqta3FkemGNL3l6McnAPYOTsLmsHrDiJhsRsQu631rLYTxoCNSWoe5EXYIpnPM0
YhWdVKPmT5PJnEkVIU5EPzGm1ZaY0mjN42I/zVEAiYT+4cAh8hA8PLu+XBjo+NNP
3ZwUqHYxMF3BZaOxMxRyoTa2twIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCDTR8zG
lhkx82b5GizOpPVodkGbMB8GA1UdIwQYMBaAFHI3R2z95BUKuVCXq7oP7e1Crbmr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZFNi9CQjA5NTgyQzdE
RDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZRcTVVSmVydWdfdDdVS3R1
YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NqZEhiUDNrRlFxNVVKZXJ1Z190N1VLdHVhcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NEZFNi9CQjA5NTgyQzdERDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZR
cTVVSmVydWdfdDdVS3R1YXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiPDa+bmJuHgdLsG7NCm+ME8nWShjRvv6kFsgvPOr94UfheZ99KIxxGYfHe36
GPnJ8D6bwBR4YHwfy69ExTIdqwSA79jpfR76OaKWegfE/W3WLiSFN0gGFvUToeIc
j6J8JQbu9ZKUbyrrBQN1Pnk4My8wH2gaHeuILgvrs4IWUPuoG+QPtWD5UFguFRhN
5++TGV3vLFQgftxoAoT9/4PXOcByUrGIo71LYIivAHTeP4ub02F8/Z8paWaMc5ZO
3PYz3NwbzANWB0U7o3V2RkrVbhYM56MeZPs4QOhMLHo3boYFvMsaoQr3VpWpDtBO
zkFJUqqBgbbxW8yD2Of0NTml2w==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:07:00 2026 by rpki-client