Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft
File:                     0I2GgcK-TUfCopBV9m5olVhGF_c.mft (raw, json)
Hash identifier:          FD1eLpeTh1N7Ltsj+RLxiS2T/j4oRBfM15wEZ+7HslI=
Subject key identifier:   D9:B1:E4:2E:68:0D:6B:BA:54:50:D4:DE:E1:BF:E3:E2:C4:4D:00:7A
Authority key identifier: D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7
Certificate issuer:       /CN=A91FCEB1/serialNumber=D08D8681C2BE4D47C2A29055F66E6895584617F7
Certificate serial:       1B4E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft
Manifest number:          2325
Signing time:             Wed 22 Jul 2026 15:59:43 +0000
Manifest this update:     Wed 22 Jul 2026 15:59:43 +0000
Manifest next update:     Wed 29 Jul 2026 15:59:43 +0000
Files and hashes:         1: 0I2GgcK-TUfCopBV9m5olVhGF_c.crl (hash: EUo7j3u+8tLloLJ0A1kG0CxxAHIwubaXbJAVF6BbwsA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.crl
                          rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:59:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6990 (0x1b4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCEB1, serialNumber=D08D8681C2BE4D47C2A29055F66E6895584617F7
        Validity
            Not Before: Jul 22 15:59:43 2026 GMT
            Not After : Jul 29 15:59:43 2026 GMT
        Subject: CN=6a60e8ef-490d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:18:69:72:b6:8d:fd:71:18:ee:84:73:ce:d1:
                    4d:1d:19:ac:ca:47:ce:82:af:97:cc:5b:c5:1e:ea:
                    87:cd:37:93:4e:88:cc:22:77:32:80:2e:56:2e:c8:
                    86:62:28:72:33:ef:31:d1:c5:cc:b5:df:31:99:c6:
                    13:ba:2e:4e:a9:1b:ec:fc:1f:b7:05:62:8a:a8:a0:
                    73:5b:81:99:9d:ed:0e:e9:55:a0:76:a9:91:c6:dc:
                    fb:5c:d0:01:98:b7:ee:13:e8:95:9b:6e:93:e8:e0:
                    fe:24:38:48:e9:2f:ff:f9:64:77:aa:b1:ee:a1:1c:
                    18:da:ec:8c:e8:b3:06:cd:45:57:7d:24:1d:c6:b3:
                    9d:30:ba:26:eb:87:71:c0:27:0a:48:3d:5e:57:36:
                    9e:c5:3c:aa:2e:ae:7b:d7:5a:70:5c:34:fe:1f:61:
                    3f:9a:8c:5e:4f:26:09:4d:30:23:40:74:56:2c:58:
                    8d:a0:b1:05:ad:18:1d:77:a6:6e:27:79:73:53:4f:
                    22:b7:3e:9b:a7:05:28:0e:25:39:77:b3:1e:d5:0a:
                    ea:00:09:0f:15:8a:a9:82:0c:2b:f9:fe:55:b1:30:
                    11:9d:f0:51:ff:c3:62:5c:71:ef:2c:0c:22:59:c3:
                    90:5a:9d:29:10:b2:b2:95:ad:bf:ca:56:ab:c0:b3:
                    c5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B1:E4:2E:68:0D:6B:BA:54:50:D4:DE:E1:BF:E3:E2:C4:4D:00:7A
            X509v3 Authority Key Identifier:
                keyid:D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a1:52:4e:a6:02:4d:6c:74:87:01:cc:7e:a6:be:07:55:d4:
         18:01:7c:1a:87:b5:9f:39:e3:c2:87:c6:25:76:28:e0:2b:6d:
         08:a2:3e:e9:be:c0:b6:43:61:72:02:e4:6b:3b:15:9c:35:78:
         48:5f:58:8c:f9:66:3a:ed:c2:a7:b0:a8:f5:ab:f9:64:2e:16:
         db:1b:65:81:4c:8f:58:41:27:d7:bd:44:75:f7:d7:18:0a:b7:
         74:45:8e:d8:b4:b9:84:f3:47:4f:dd:7f:d5:55:34:d7:21:8f:
         bb:08:a0:a6:d5:95:63:ba:70:50:10:9b:43:1d:ed:9b:44:a6:
         cc:d3:88:87:ab:43:b8:64:8a:ab:86:9b:af:e2:ec:36:53:ec:
         b5:a9:43:a4:9a:f5:8c:9d:ae:01:b1:53:b8:17:10:bf:02:76:
         e9:4d:18:b4:c4:96:63:89:ec:7b:41:b4:2a:a8:05:54:ac:99:
         78:9f:bd:66:e1:45:90:41:7d:35:1e:5f:b6:39:59:62:a8:ba:
         ea:28:25:27:a6:09:0c:a4:88:d7:83:1d:44:76:15:22:c5:1a:
         54:41:a5:b1:6e:d3:18:66:2d:29:0e:f8:31:13:70:bc:a1:a6:
         8b:18:42:96:1f:fb:a0:e8:58:1c:03:6a:9e:f9:09:62:96:84:
         a5:1c:b0:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICG04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkNFQjExMTAvBgNVBAUTKEQwOEQ4NjgxQzJCRTRENDdDMkEyOTA1NUY2NkU2ODk1
NTg0NjE3RjcwHhcNMjYwNzIyMTU1OTQzWhcNMjYwNzI5MTU1OTQzWjAYMRYwFAYD
VQQDEw02YTYwZThlZi00OTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnRhpcraN/XEY7oRzztFNHRmsykfOgq+XzFvFHuqHzTeTTojMIncygC5WLsiG
YihyM+8x0cXMtd8xmcYTui5OqRvs/B+3BWKKqKBzW4GZne0O6VWgdqmRxtz7XNAB
mLfuE+iVm26T6OD+JDhI6S//+WR3qrHuoRwY2uyM6LMGzUVXfSQdxrOdMLom64dx
wCcKSD1eVzaexTyqLq5711pwXDT+H2E/moxeTyYJTTAjQHRWLFiNoLEFrRgdd6Zu
J3lzU08itz6bpwUoDiU5d7Me1QrqAAkPFYqpggwr+f5VsTARnfBR/8NiXHHvLAwi
WcOQWp0pELKyla2/ylarwLPFPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNmx5C5o
DWu6VFDU3uG/4+LETQB6MB8GA1UdIwQYMBaAFNCNhoHCvk1HwqKQVfZuaJVYRhf3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS85QzE0QjQwNjNB
MjExMUU3OUFBMEQ1MUNDNEY5QUUwMi8wSTJHZ2NLLVRVZkNvcEJWOW01b2xWaEdG
X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzBJMkdnY0stVFVmQ29wQlY5bTVvbFZoR0ZfYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Q0VCMS85QzE0QjQwNjNBMjExMUU3OUFBMEQ1MUNDNEY5QUUwMi8wSTJHZ2NLLVRV
ZkNvcEJWOW01b2xWaEdGX2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcaFSTqYCTWx0hwHMfqa+B1XUGAF8Goe1nznjwofGJXYo4CttCKI+6b7AtkNh
cgLkazsVnDV4SF9YjPlmOu3Cp7Co9av5ZC4W2xtlgUyPWEEn171EdffXGAq3dEWO
2LS5hPNHT91/1VU01yGPuwigptWVY7pwUBCbQx3tm0SmzNOIh6tDuGSKq4abr+Ls
NlPstalDpJr1jJ2uAbFTuBcQvwJ26U0YtMSWY4nse0G0KqgFVKyZeJ+9ZuFFkEF9
NR5ftjlZYqi66iglJ6YJDKSI14MdRHYVIsUaVEGlsW7TGGYtKQ74MRNwvKGmixhC
lh/7oOhYHANqnvkJYpaEpRywTw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:34 2026 by rpki-client