Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft
File:                     D429p9DJoeyhlFxhtykg9aoOlGc.mft (raw, json)
Hash identifier:          OrfcSAfP5ilV81v+S/RKNx1CQuFYCIeUFcvlz8WyrVA=
Subject key identifier:   B0:1A:EF:1B:29:DE:CF:35:CE:12:81:4E:7E:8F:0E:C0:07:8A:A3:D8
Authority key identifier: 0F:8D:BD:A7:D0:C9:A1:EC:A1:94:5C:61:B7:29:20:F5:AA:0E:94:67
Certificate issuer:       /CN=A91FAF20/serialNumber=0F8DBDA7D0C9A1ECA1945C61B72920F5AA0E9467
Certificate serial:       1CCD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft
Manifest number:          1CB7
Signing time:             Wed 22 Jul 2026 16:14:50 +0000
Manifest this update:     Wed 22 Jul 2026 16:14:50 +0000
Manifest next update:     Wed 29 Jul 2026 16:14:50 +0000
Files and hashes:         1: D429p9DJoeyhlFxhtykg9aoOlGc.crl (hash: wqHDWXFyqzYjXqb36sG+BVN8R/xRYt4qgl5ofQCBffQ=)
                          2: C3ACDB568E9311E9AA8A2877C4F9AE02.roa (hash: GM2/Zg+eI19YNP6sUwovNgmANsfWwnnAjBpybeU+09Q=)
                          3: D59EA6F4F5C611E6A4FFEF0AC4F9AE02.roa (hash: Mltlh2bx7WYK1xzaK+H07Yqp+mKuF+w3gv8nIlWhSn8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.crl
                          rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7373 (0x1ccd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAF20, serialNumber=0F8DBDA7D0C9A1ECA1945C61B72920F5AA0E9467
        Validity
            Not Before: Jul 22 16:14:50 2026 GMT
            Not After : Jul 29 16:14:50 2026 GMT
        Subject: CN=6a60ec7a-053b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:41:ca:55:62:b9:aa:90:0e:8a:bd:43:b2:a0:
                    89:c6:8f:c5:fb:57:08:6d:36:01:c3:cb:91:06:81:
                    d5:d5:67:5c:5a:26:af:53:2a:cb:44:31:89:7f:b8:
                    37:08:4a:6d:38:d0:84:6b:ac:bf:33:f2:95:8f:92:
                    3f:c4:7f:6c:2a:0c:fe:a2:57:94:ae:63:6d:54:eb:
                    d6:af:1d:2a:48:ce:fa:6f:44:6a:0e:32:02:12:cc:
                    2b:f6:71:b7:90:ed:be:e3:95:76:7f:18:37:bf:cd:
                    1c:2c:b9:db:8d:b2:6e:35:2e:32:3d:c1:3e:e1:e5:
                    e0:eb:e4:a0:0e:3f:a8:81:3f:fa:ee:6c:06:63:b4:
                    8d:5b:53:95:43:cf:4c:6f:43:50:a6:c6:08:b5:17:
                    72:5d:56:ab:57:a4:3a:1c:5b:24:7a:e3:d6:20:d6:
                    ee:44:39:7d:39:87:39:ba:95:32:b7:e8:ab:c8:62:
                    14:cc:e1:9b:2e:f5:1a:4b:3b:43:8d:ec:49:95:2a:
                    ba:be:b6:ba:18:79:6e:67:8d:ff:50:0a:36:2b:26:
                    23:a8:70:b5:8d:38:41:bb:9c:3e:14:bf:96:6d:05:
                    dc:f6:72:26:98:5b:f8:84:08:14:c5:41:d4:6c:d4:
                    26:6e:1e:ab:ec:2a:8a:b2:5a:83:67:86:ed:74:84:
                    5e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1A:EF:1B:29:DE:CF:35:CE:12:81:4E:7E:8F:0E:C0:07:8A:A3:D8
            X509v3 Authority Key Identifier:
                keyid:0F:8D:BD:A7:D0:C9:A1:EC:A1:94:5C:61:B7:29:20:F5:AA:0E:94:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:1c:a5:a9:35:b6:36:bf:35:41:ab:df:be:2d:97:b2:be:7e:
         52:9c:bb:ce:36:bb:2e:62:cd:60:d2:7a:bd:ed:39:cd:51:b0:
         4d:4f:37:f2:62:88:56:6a:0c:ff:58:a5:9b:0c:66:f8:cb:af:
         ba:7f:32:57:ed:24:8a:4b:9c:5c:de:f0:c3:f4:65:dc:55:65:
         11:3b:54:d1:fe:05:8b:3a:f3:f6:8c:59:d4:99:77:cd:81:b3:
         9a:11:28:b5:f0:08:ae:02:45:79:c9:05:cf:c5:85:a3:15:23:
         37:e6:48:e7:cb:c2:60:88:c0:95:80:8e:8f:d7:3e:d1:06:e2:
         13:67:72:74:83:4c:bd:69:d7:ce:eb:1a:45:02:fc:c0:ec:04:
         42:41:28:2e:8a:c1:f7:fd:fc:b8:f3:28:7d:a3:46:78:57:7a:
         ce:8e:bc:b1:2e:00:56:9f:46:bf:c5:da:27:77:ee:3e:39:43:
         bb:96:52:11:7b:ae:92:ff:fc:bd:97:1c:37:3c:ca:8e:0c:cd:
         2c:d9:26:a6:7a:43:01:3b:ae:67:c2:b6:1e:73:a4:d0:78:22:
         91:e1:29:46:df:2e:9e:62:69:85:94:e9:3e:44:64:42:23:84:
         a9:25:ab:f2:16:45:c8:ec:1c:19:79:02:0a:cc:64:76:cc:31:
         db:51:27:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkFGMjAxMTAvBgNVBAUTKDBGOERCREE3RDBDOUExRUNBMTk0NUM2MUI3MjkyMEY1
QUEwRTk0NjcwHhcNMjYwNzIyMTYxNDUwWhcNMjYwNzI5MTYxNDUwWjAYMRYwFAYD
VQQDEw02YTYwZWM3YS0wNTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtUHKVWK5qpAOir1DsqCJxo/F+1cIbTYBw8uRBoHV1WdcWiavUyrLRDGJf7g3
CEptONCEa6y/M/KVj5I/xH9sKgz+oleUrmNtVOvWrx0qSM76b0RqDjICEswr9nG3
kO2+45V2fxg3v80cLLnbjbJuNS4yPcE+4eXg6+SgDj+ogT/67mwGY7SNW1OVQ89M
b0NQpsYItRdyXVarV6Q6HFskeuPWINbuRDl9OYc5upUyt+iryGIUzOGbLvUaSztD
jexJlSq6vra6GHluZ43/UAo2KyYjqHC1jThBu5w+FL+WbQXc9nImmFv4hAgUxUHU
bNQmbh6r7CqKslqDZ4btdIRewQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLAa7xsp
3s81zhKBTn6PDsAHiqPYMB8GA1UdIwQYMBaAFA+NvafQyaHsoZRcYbcpIPWqDpRn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUYyMC82NUE5QTI0MkY1
QzQxMUU2OEFBQTAwODVDNEY5QUUwMi9ENDI5cDlESm9leWhsRnhodHlrZzlhb09s
R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Q0MjlwOURKb2V5aGxGeGh0eWtnOWFvT2xHYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QUYyMC82NUE5QTI0MkY1QzQxMUU2OEFBQTAwODVDNEY5QUUwMi9ENDI5cDlESm9l
eWhsRnhodHlrZzlhb09sR2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfRylqTW2Nr81Qavfvi2Xsr5+Upy7zja7LmLNYNJ6ve05zVGwTU838mKIVmoM
/1ilmwxm+Muvun8yV+0kikucXN7ww/Rl3FVlETtU0f4Fizrz9oxZ1Jl3zYGzmhEo
tfAIrgJFeckFz8WFoxUjN+ZI58vCYIjAlYCOj9c+0QbiE2dydINMvWnXzusaRQL8
wOwEQkEoLorB9/38uPMofaNGeFd6zo68sS4AVp9Gv8XaJ3fuPjlDu5ZSEXuukv/8
vZccNzzKjgzNLNkmpnpDATuuZ8K2HnOk0HgikeEpRt8unmJphZTpPkRkQiOEqSWr
8hZFyOwcGXkCCsxkdswx21Enkg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:49:34 2026 by rpki-client