Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.mft
File:                     nGKQqKEuiIZBN0PX8QV39DkWnH0.mft (raw, json)
Hash identifier:          Kklm4wgKvRH5hUHzCRIQ7fpZS9kx9aqCL7x4D63sm08=
Subject key identifier:   BE:FF:40:3F:C3:04:3B:F7:66:E6:66:48:61:E0:81:E5:77:A5:09:49
Authority key identifier: 9C:62:90:A8:A1:2E:88:86:41:37:43:D7:F1:05:77:F4:39:16:9C:7D
Certificate issuer:       /CN=A91FCA47/serialNumber=9C6290A8A12E8886413743D7F10577F439169C7D
Certificate serial:       41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nGKQqKEuiIZBN0PX8QV39DkWnH0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.mft
Manifest number:          40
Signing time:             Thu 23 Jul 2026 10:30:23 +0000
Manifest this update:     Thu 23 Jul 2026 10:30:23 +0000
Manifest next update:     Thu 30 Jul 2026 10:30:23 +0000
Files and hashes:         1: nGKQqKEuiIZBN0PX8QV39DkWnH0.crl (hash: VG6WUWKO7x+363g6UTNryHjKd6bYIfuGrMx8lbWyvRA=)
                          2: E3BDC64224D411F191B1E656AB833773.roa (hash: AIltHDKkxFZaiNdMv+LKbbe7L1vKTPjxvnacYsn/9PA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.crl
                          rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nGKQqKEuiIZBN0PX8QV39DkWnH0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:30:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCA47, serialNumber=9C6290A8A12E8886413743D7F10577F439169C7D
        Validity
            Not Before: Jul 23 10:30:23 2026 GMT
            Not After : Jul 30 10:30:23 2026 GMT
        Subject: CN=6a61ed3f-1a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:65:cd:8c:21:e7:c0:1a:ca:f6:44:8d:c1:d1:
                    06:5a:e3:2c:71:05:a5:f4:7a:33:71:b7:4e:7b:d1:
                    1d:c0:49:fe:24:6d:6d:6f:d6:95:51:77:7a:72:b6:
                    4c:d9:3d:0a:38:39:c0:05:77:9d:9b:03:86:99:77:
                    e4:75:cc:23:f9:e1:20:42:83:45:8e:97:eb:cb:c7:
                    a3:8d:0e:96:48:05:cb:60:ca:c7:a5:20:9c:17:b4:
                    8a:2e:cf:bb:66:6a:72:11:91:d8:95:b9:ad:df:a2:
                    e6:a6:b9:c4:0c:2e:ec:53:16:d8:67:5f:46:b7:79:
                    65:b9:37:a4:15:2b:5f:7c:71:6e:d6:1c:8c:7f:a3:
                    11:e7:58:a7:8b:2e:fb:91:98:48:4c:5f:30:00:1c:
                    d4:c3:8c:bc:71:1e:1c:27:4d:63:bc:b6:c4:cc:72:
                    32:64:3c:a1:f3:42:6d:6e:75:d7:fd:94:3d:ee:d6:
                    c9:4c:5f:3f:85:dc:71:5a:d8:b9:f2:a0:fb:fd:37:
                    e9:a9:1f:88:8b:af:45:d4:49:16:e0:77:b6:17:af:
                    5f:ad:39:da:85:92:2b:ca:3b:f4:02:bb:66:06:2d:
                    30:4d:28:d3:01:66:98:d2:87:b5:e7:b5:46:f4:a4:
                    40:bd:ef:7d:cf:8d:3c:51:79:f0:7a:a9:b7:1b:f9:
                    8d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FF:40:3F:C3:04:3B:F7:66:E6:66:48:61:E0:81:E5:77:A5:09:49
            X509v3 Authority Key Identifier:
                keyid:9C:62:90:A8:A1:2E:88:86:41:37:43:D7:F1:05:77:F4:39:16:9C:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nGKQqKEuiIZBN0PX8QV39DkWnH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:f2:bd:09:89:7c:85:12:6d:93:9e:87:f6:5c:78:3a:40:9e:
         9f:c9:c6:ab:b7:14:52:d2:83:41:b4:27:f0:c7:b9:79:d5:cc:
         92:f9:9b:21:6c:a3:86:28:4d:76:1b:aa:40:7d:e4:41:c6:7b:
         25:d8:21:ec:50:b3:b6:09:dc:09:97:03:bd:2c:99:36:77:9a:
         9c:68:59:3a:ff:27:9a:62:3b:78:3c:d3:64:92:7c:2e:c4:a7:
         1c:f1:07:e3:ce:e7:6f:26:f1:f3:5c:89:54:e3:fe:3f:61:19:
         fb:ec:bd:89:d9:0c:a0:b8:86:ac:a7:ff:3e:fc:5d:3e:a1:fc:
         16:15:3d:33:c5:57:b4:81:24:a9:da:c6:47:2c:e4:20:26:e3:
         6e:cd:97:21:92:a4:21:59:22:83:ef:ea:00:d7:95:33:a2:ad:
         9d:55:5b:79:4c:28:93:f0:09:99:75:5b:08:02:8d:d1:b5:e1:
         2e:a9:97:65:aa:58:8c:45:ac:a1:36:74:58:65:7e:71:dd:9d:
         7a:c1:d4:7d:26:6b:42:73:cb:3d:80:de:4d:3b:67:e9:c2:67:
         67:4e:b7:7f:9e:67:fc:00:ef:11:33:8a:ef:18:01:fe:34:a0:
         cb:a5:df:85:37:9f:1e:f5:8c:b2:45:06:0d:ed:71:82:af:77:
         42:2d:53:fe
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
Q0E0NzExMC8GA1UEBRMoOUM2MjkwQThBMTJFODg4NjQxMzc0M0Q3RjEwNTc3RjQz
OTE2OUM3RDAeFw0yNjA3MjMxMDMwMjNaFw0yNjA3MzAxMDMwMjNaMBgxFjAUBgNV
BAMTDTZhNjFlZDNmLTFhMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCeZc2MIefAGsr2RI3B0QZa4yxxBaX0ejNxt0570R3ASf4kbW1v1pVRd3pytkzZ
PQo4OcAFd52bA4aZd+R1zCP54SBCg0WOl+vLx6ONDpZIBctgyselIJwXtIouz7tm
anIRkdiVua3fouamucQMLuxTFthnX0a3eWW5N6QVK198cW7WHIx/oxHnWKeLLvuR
mEhMXzAAHNTDjLxxHhwnTWO8tsTMcjJkPKHzQm1uddf9lD3u1slMXz+F3HFa2Lny
oPv9N+mpH4iLr0XUSRbgd7YXr1+tOdqFkivKO/QCu2YGLTBNKNMBZpjSh7XntUb0
pEC9733PjTxRefB6qbcb+Y15AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvv9AP8ME
O/dm5mZIYeCB5XelCUkwHwYDVR0jBBgwFoAUnGKQqKEuiIZBN0PX8QV39DkWnH0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDQTQ3Lzk1RTc2RDYwMjRE
NDExRjE4QUFBMDk0MkFCODMzNzczL25HS1FxS0V1aUlaQk4wUFg4UVYzOURrV25I
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbkdLUXFLRXVpSVpCTjBQWDhRVjM5RGtXbkgwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD
QTQ3Lzk1RTc2RDYwMjRENDExRjE4QUFBMDk0MkFCODMzNzczL25HS1FxS0V1aUla
Qk4wUFg4UVYzOURrV25IMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC18r0JiXyFEm2Tnof2XHg6QJ6fycartxRS0oNBtCfwx7l51cyS+ZshbKOGKE12
G6pAfeRBxnsl2CHsULO2CdwJlwO9LJk2d5qcaFk6/yeaYjt4PNNkknwuxKcc8Qfj
zudvJvHzXIlU4/4/YRn77L2J2QyguIasp/8+/F0+ofwWFT0zxVe0gSSp2sZHLOQg
JuNuzZchkqQhWSKD7+oA15Uzoq2dVVt5TCiT8AmZdVsIAo3RteEuqZdlqliMRayh
NnRYZX5x3Z16wdR9JmtCc8s9gN5NO2fpwmdnTrd/nmf8AO8RM4rvGAH+NKDLpd+F
N58e9YyyRQYN7XGCr3dCLVP+
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:25:38 2026 by rpki-client