Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft
File:                     oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft (raw, json)
Hash identifier:          JSzK+5M1V3+xsbTCexzPX2dv335mgbxpS+/nMuwVTM8=
Subject key identifier:   C9:41:48:FF:E1:E3:7A:88:B8:B4:9B:BE:34:FC:E8:9E:CF:1C:76:1A
Authority key identifier: A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57
Certificate issuer:       /CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657
Certificate serial:       0298
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft
Manifest number:          0270
Signing time:             Thu 23 Jul 2026 03:36:17 +0000
Manifest this update:     Thu 23 Jul 2026 03:36:16 +0000
Manifest next update:     Thu 30 Jul 2026 03:36:16 +0000
Files and hashes:         1: oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl (hash: UoFgj3jf5gyAi/qMs7q5et+ySOOLURrq9oe+LScci6w=)
                          2: 803597528D5911F087734E0BC4F9AE02.roa (hash: qjwNHVxj8rh4p5dbVDJ7FmnGLRA0aF4pw1XtOGgQ9/I=)
                          3: 28454DF268A611F1A734D2E87947A888.roa (hash: n4ycj6ArWVaLi7Ew1oxQxTzWoZohtycWjHjC7iISPLQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl
                          rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:36:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 664 (0x298)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAA91, serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657
        Validity
            Not Before: Jul 23 03:36:16 2026 GMT
            Not After : Jul 30 03:36:16 2026 GMT
        Subject: CN=6a618c31-31f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:02:52:b9:e1:70:9e:6c:49:b4:fc:f4:66:aa:
                    9a:9f:61:37:67:9a:db:ba:54:fd:71:f1:55:50:2e:
                    b4:67:88:46:8c:ef:c0:a5:fd:cc:cb:ae:8c:ba:58:
                    b0:7e:58:2c:04:9e:05:34:ce:6c:45:4e:f1:ad:1e:
                    48:52:00:92:02:29:2a:7d:71:4d:b3:99:46:85:76:
                    cd:1f:be:fc:54:f9:e9:5a:b5:b1:f0:d6:15:45:b6:
                    be:4c:d1:21:77:0b:c0:d4:bc:e8:c3:86:87:e4:03:
                    f1:68:18:ed:2d:b2:ba:66:62:1d:ef:ce:6f:e5:63:
                    20:06:39:cd:3e:34:70:cb:3a:f5:3a:13:56:44:00:
                    f5:a5:d4:bd:48:0a:8a:3a:b6:15:b2:6a:33:1f:25:
                    2c:fa:e5:24:a6:6b:07:db:ed:06:a6:dd:8d:b7:3e:
                    61:a8:c5:48:4d:fa:55:b7:d6:70:8a:63:76:f6:55:
                    13:ab:f6:80:ea:39:fb:52:b5:d3:b5:3c:70:93:57:
                    ec:ba:8a:27:1a:e4:ca:08:d7:6d:c0:38:4c:47:c9:
                    65:30:4c:91:e8:2c:57:41:11:02:c9:a2:99:c9:30:
                    06:94:c0:5c:27:c7:3e:71:98:09:5a:6d:1a:fa:50:
                    9b:c7:00:6a:9e:13:47:a0:e2:06:41:0e:08:5d:b2:
                    b9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:41:48:FF:E1:E3:7A:88:B8:B4:9B:BE:34:FC:E8:9E:CF:1C:76:1A
            X509v3 Authority Key Identifier:
                keyid:A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:5f:ac:ff:83:d8:48:8b:bc:a9:05:d1:5d:ab:98:1a:01:b7:
         d7:cb:fb:58:e7:25:e1:53:75:1e:32:d2:c9:27:59:74:1c:53:
         53:d6:64:76:5b:9d:93:ac:b6:4a:09:c5:d1:40:4d:87:2f:74:
         f7:1b:4b:60:83:8e:13:79:60:ad:97:3e:25:30:68:2e:b2:1d:
         f1:21:26:e0:86:61:0d:36:a3:7b:fd:d0:b5:c0:92:e3:9b:bc:
         bf:a5:77:63:17:c3:95:4b:04:a6:fe:17:07:53:c3:24:21:41:
         80:d0:62:ac:16:1f:4a:a0:87:6b:2e:37:1c:e6:32:89:5a:94:
         cb:07:36:d8:4d:e6:fe:0f:a4:62:1f:79:aa:35:09:31:dd:a0:
         2b:a6:04:4f:f1:44:56:df:83:38:13:39:b3:91:de:50:7e:f9:
         34:71:cf:e3:83:84:e5:bf:2c:5e:4c:62:87:73:ec:c4:10:92:
         f6:82:6c:f1:26:fd:9d:b1:a7:eb:30:91:db:71:61:91:9f:f0:
         15:99:8f:c1:ec:13:7f:08:e0:72:9f:bd:67:8e:c4:48:66:12:
         3f:ad:d3:5b:a5:bc:73:12:98:9c:82:ea:0b:5a:3c:8d:89:5a:
         6e:42:17:7a:c4:9f:77:cb:19:5c:0a:81:62:bc:78:36:47:81:
         13:64:35:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkFBOTExMTAvBgNVBAUTKEEwQzgwQ0VFMDYzQzlDQzgyQ0RDQjBCQzc0NUM0RkU0
NkREMDI2NTcwHhcNMjYwNzIzMDMzNjE2WhcNMjYwNzMwMDMzNjE2WjAYMRYwFAYD
VQQDEw02YTYxOGMzMS0zMWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsAJSueFwnmxJtPz0Zqqan2E3Z5rbulT9cfFVUC60Z4hGjO/Apf3My66Muliw
flgsBJ4FNM5sRU7xrR5IUgCSAikqfXFNs5lGhXbNH778VPnpWrWx8NYVRba+TNEh
dwvA1Lzow4aH5APxaBjtLbK6ZmId785v5WMgBjnNPjRwyzr1OhNWRAD1pdS9SAqK
OrYVsmozHyUs+uUkpmsH2+0Gpt2Ntz5hqMVITfpVt9ZwimN29lUTq/aA6jn7UrXT
tTxwk1fsuoonGuTKCNdtwDhMR8llMEyR6CxXQRECyaKZyTAGlMBcJ8c+cZgJWm0a
+lCbxwBqnhNHoOIGQQ4IXbK50QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMlBSP/h
43qIuLSbvjT86J7PHHYaMB8GA1UdIwQYMBaAFKDIDO4GPJzILNywvHRcT+Rt0CZX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUE5MS85NDIwRDIxMDBB
NUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5NZ3MzTEM4ZEZ4UDVHM1FK
bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29NZ003Z1k4bk1nczNMQzhkRnhQNUczUUpsYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QUE5MS85NDIwRDIxMDBBNUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5N
Z3MzTEM4ZEZ4UDVHM1FKbGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf1+s/4PYSIu8qQXRXauYGgG318v7WOcl4VN1HjLSySdZdBxTU9Zkdludk6y2
SgnF0UBNhy909xtLYIOOE3lgrZc+JTBoLrId8SEm4IZhDTaje/3QtcCS45u8v6V3
YxfDlUsEpv4XB1PDJCFBgNBirBYfSqCHay43HOYyiVqUywc22E3m/g+kYh95qjUJ
Md2gK6YET/FEVt+DOBM5s5HeUH75NHHP44OE5b8sXkxih3PsxBCS9oJs8Sb9nbGn
6zCR23FhkZ/wFZmPwewTfwjgcp+9Z47ESGYSP63TW6W8cxKYnILqC1o8jYlabkIX
esSfd8sZXAqBYrx4NkeBE2Q1uA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:06:51 2026 by rpki-client