Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
File:                     aUCPaxygKBZoPM5MCOAEkyUZRLI.mft (raw, json)
Hash identifier:          frSYZff4y6guI0Z0FEzhVFw/DO2p6lAcKfngok0Dp+o=
Subject key identifier:   8F:8D:13:A1:40:3D:71:6C:04:DE:6B:D1:C0:76:A1:83:98:E3:FD:B1
Authority key identifier: 69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2
Certificate issuer:       /CN=A91166FC/serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2
Certificate serial:       0B22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
Manifest number:          0B0A
Signing time:             Sun 26 Jul 2026 19:49:17 +0000
Manifest this update:     Sun 26 Jul 2026 19:49:17 +0000
Manifest next update:     Sun 02 Aug 2026 19:49:17 +0000
Files and hashes:         1: aUCPaxygKBZoPM5MCOAEkyUZRLI.crl (hash: pb84vB3c9yqT3yYZX/Ol4qCIlHvv+hJdCvv/lh7tidg=)
                          2: 834C938A12C711F09998A234C4F9AE02.roa (hash: FGFCUH8ClLANdklj2bZ58cKTnItHntcutDN30p2U93k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl
                          rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2850 (0xb22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91166FC, serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2
        Validity
            Not Before: Jul 26 19:49:17 2026 GMT
            Not After : Aug  2 19:49:17 2026 GMT
        Subject: CN=6a6664bd-a357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fb:b3:b8:ab:35:0d:18:39:9d:67:e9:e6:56:
                    52:d7:19:41:1c:14:32:40:bc:6d:f5:18:2a:54:ef:
                    e4:5c:be:9a:7a:e1:22:04:07:05:72:eb:36:a5:05:
                    fc:b2:a7:45:06:4e:b6:b6:a9:ce:a4:f2:1e:ce:ad:
                    63:5e:f3:bd:40:84:55:59:66:9c:81:e3:a6:45:39:
                    b2:42:dd:98:50:53:78:c1:e0:27:06:b9:b3:08:df:
                    c5:d4:ad:b4:f8:e8:35:14:3e:2d:08:a1:3e:41:a1:
                    ac:dd:e3:ce:67:6c:ff:72:d6:28:c1:aa:33:60:f3:
                    99:97:b4:58:1b:38:1f:b6:11:1d:c2:21:3d:fe:3a:
                    91:d7:84:31:f3:0f:c0:5c:4d:60:e0:a6:3b:9a:e2:
                    8c:e4:1e:13:77:50:73:69:f6:e7:bb:3b:22:44:53:
                    80:e6:2a:8a:93:46:4e:6a:04:bf:6c:69:8c:72:44:
                    27:7c:61:ec:33:fd:1f:fd:99:1e:d4:a4:eb:c9:be:
                    cf:7d:1b:30:eb:11:cd:28:1b:0a:dc:dc:02:ef:3b:
                    3f:41:59:64:00:13:21:98:5c:6d:9d:58:47:9c:c5:
                    56:15:80:4f:be:c2:ac:2a:32:9f:8a:1c:68:60:65:
                    1c:f9:93:a9:15:40:87:aa:09:68:e5:82:74:86:6d:
                    07:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8D:13:A1:40:3D:71:6C:04:DE:6B:D1:C0:76:A1:83:98:E3:FD:B1
            X509v3 Authority Key Identifier:
                keyid:69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ab:55:a2:20:51:48:0f:47:b8:5a:ef:0f:0d:b4:8c:ce:17:
         e2:82:b4:ba:34:09:47:ab:db:02:f7:77:1b:c9:3b:7b:ba:b7:
         d3:95:5c:1c:3d:0c:11:22:90:ce:cb:76:38:7b:b8:80:9f:bf:
         52:c2:0f:31:d7:3b:9a:ee:cd:75:9f:c7:bd:42:5a:33:e3:fc:
         47:e9:0c:f2:97:29:a9:88:ec:de:f9:61:36:5f:c2:9e:79:18:
         78:c1:9b:8d:bd:3e:f7:7f:9d:c9:cf:a0:4f:c7:72:1a:78:c5:
         b1:81:82:3a:ff:d8:68:44:6f:3e:a6:43:e0:6c:6b:0c:1a:f5:
         28:c4:07:ee:ff:f7:92:5f:de:8a:11:47:64:c7:48:22:b0:00:
         f6:7a:71:b8:e1:b6:33:8c:19:2d:c4:b2:ec:01:7a:f0:27:fd:
         6e:5e:46:7f:70:5a:a9:ef:e2:4f:0d:07:0d:9b:45:2f:84:0d:
         13:fc:5d:28:5f:69:82:43:c2:57:bb:74:44:b4:76:fc:a6:e3:
         dc:c8:3b:04:27:13:cc:b0:dc:e2:44:35:bd:2a:7a:3c:ca:87:
         86:ba:49:9d:05:09:e2:29:8f:fb:ff:26:6c:74:77:fb:8b:36:
         77:59:10:b3:68:83:b7:79:04:5b:d7:76:35:9d:67:40:67:1c:
         38:a7:c6:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY2RkMxMTAvBgNVBAUTKDY5NDA4RjZCMUNBMDI4MTY2ODNDQ0U0QzA4RTAwNDkz
MjUxOTQ0QjIwHhcNMjYwNzI2MTk0OTE3WhcNMjYwODAyMTk0OTE3WjAYMRYwFAYD
VQQDEw02YTY2NjRiZC1hMzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAufuzuKs1DRg5nWfp5lZS1xlBHBQyQLxt9RgqVO/kXL6aeuEiBAcFcus2pQX8
sqdFBk62tqnOpPIezq1jXvO9QIRVWWacgeOmRTmyQt2YUFN4weAnBrmzCN/F1K20
+Og1FD4tCKE+QaGs3ePOZ2z/ctYowaozYPOZl7RYGzgfthEdwiE9/jqR14Qx8w/A
XE1g4KY7muKM5B4Td1BzafbnuzsiRFOA5iqKk0ZOagS/bGmMckQnfGHsM/0f/Zke
1KTryb7PfRsw6xHNKBsK3NwC7zs/QVlkABMhmFxtnVhHnMVWFYBPvsKsKjKfihxo
YGUc+ZOpFUCHqglo5YJ0hm0HOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI+NE6FA
PXFsBN5r0cB2oYOY4/2xMB8GA1UdIwQYMBaAFGlAj2scoCgWaDzOTAjgBJMlGUSy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjZGQy9BQjFGNEVDQTcy
OUExMUVBQUJCRjkxNDFDNEY5QUUwMi9hVUNQYXh5Z0tCWm9QTTVNQ09BRWt5VVpS
TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FVQ1BheHlnS0Jab1BNNU1DT0FFa3lVWlJMSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjZGQy9BQjFGNEVDQTcyOUExMUVBQUJCRjkxNDFDNEY5QUUwMi9hVUNQYXh5Z0tC
Wm9QTTVNQ09BRWt5VVpSTEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFatVoiBRSA9HuFrvDw20jM4X4oK0ujQJR6vbAvd3G8k7e7q305VcHD0MESKQ
zst2OHu4gJ+/UsIPMdc7mu7NdZ/HvUJaM+P8R+kM8pcpqYjs3vlhNl/CnnkYeMGb
jb0+93+dyc+gT8dyGnjFsYGCOv/YaERvPqZD4GxrDBr1KMQH7v/3kl/eihFHZMdI
IrAA9npxuOG2M4wZLcSy7AF68Cf9bl5Gf3Baqe/iTw0HDZtFL4QNE/xdKF9pgkPC
V7t0RLR2/Kbj3Mg7BCcTzLDc4kQ1vSp6PMqHhrpJnQUJ4imP+/8mbHR3+4s2d1kQ
s2iDt3kEW9d2NZ1nQGccOKfGvA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:07:06 2026 by rpki-client