Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft
File:                     _7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft (raw, json)
Hash identifier:          QmsC4sD09BlNaqsgRgbgd3e8vsL70oOJAyPszyGAIhE=
Subject key identifier:   66:76:3B:3C:0D:7E:48:43:E1:B4:F6:FE:40:24:91:3B:40:B3:48:9D
Authority key identifier: FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF
Certificate issuer:       /CN=A91168FD/serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF
Certificate serial:       2248
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft
Manifest number:          223D
Signing time:             Tue 28 Jul 2026 15:57:52 +0000
Manifest this update:     Tue 28 Jul 2026 15:57:51 +0000
Manifest next update:     Tue 04 Aug 2026 15:57:51 +0000
Files and hashes:         1: _7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl (hash: /46ozKxgFEd8ISPzN3QytqAc+ABNb/pq+5rkgf2j8sE=)
                          2: D07411B6661211ECBCD61A65C4F9AE02.roa (hash: rHC43FVwk8ATnBb6I6PL5ONQ1jxQI6Zs5uXakToizww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl
                          rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:57:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8776 (0x2248)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91168FD, serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF
        Validity
            Not Before: Jul 28 15:57:51 2026 GMT
            Not After : Aug  4 15:57:51 2026 GMT
        Subject: CN=6a68d180-8d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9e:4b:c6:91:92:cd:eb:f7:b9:f3:25:10:52:
                    97:cb:74:4b:d9:4d:00:32:81:46:90:d9:46:98:8a:
                    0d:f1:e9:2b:cc:ad:f5:2a:02:08:a6:ec:e6:6c:cd:
                    27:89:06:10:e8:c7:f9:64:4a:f3:50:b6:28:83:2b:
                    0c:30:3d:6a:43:ab:5f:90:58:cc:50:98:d0:fe:32:
                    77:d8:60:b7:c5:ce:79:ae:1b:d9:a6:df:4a:9c:63:
                    62:0e:8d:68:1f:31:b1:80:67:dd:24:eb:91:11:66:
                    a4:8a:e7:1c:3b:54:20:84:35:ee:e5:c5:ac:a3:01:
                    8e:fd:da:40:6a:47:2c:df:26:32:7f:c8:10:b3:b6:
                    08:86:53:c0:6d:ac:03:61:24:06:f9:5c:fc:f2:c3:
                    68:f9:8e:66:4c:8f:e6:f6:3c:71:50:47:36:25:da:
                    64:5a:da:a6:6b:7b:f6:74:03:23:0f:6a:2b:d7:1e:
                    5e:ed:da:96:fe:03:31:cb:14:e1:43:2b:0f:e0:1a:
                    3e:05:af:c2:4e:e7:85:d2:25:3c:10:3a:a3:e0:8b:
                    c2:d3:cc:05:c8:d4:13:1f:ed:98:25:f7:ed:10:14:
                    dd:ad:20:79:ba:0e:43:5f:79:17:42:e4:17:0e:7f:
                    ca:e6:d8:0b:07:f8:42:7f:ec:31:da:5c:50:02:04:
                    f8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:76:3B:3C:0D:7E:48:43:E1:B4:F6:FE:40:24:91:3B:40:B3:48:9D
            X509v3 Authority Key Identifier:
                keyid:FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:7e:22:c5:b1:95:e1:ec:28:30:cc:ec:25:ef:9f:0a:39:c4:
         2d:a9:24:ef:87:74:16:34:ba:b9:a3:f8:29:81:41:9f:c3:d8:
         6b:1b:b5:34:0e:1b:b6:d1:37:79:99:8b:5f:e4:0e:8a:e2:95:
         d8:87:e7:9e:30:85:3e:e1:06:69:d1:64:a3:0b:af:ae:3a:5c:
         01:15:4d:2e:7b:37:6d:f5:68:04:0b:84:28:ce:dd:53:0d:c7:
         2c:28:8d:b7:86:78:38:f0:08:c1:0e:be:e1:9a:e6:27:1c:a8:
         78:3d:e5:29:db:d5:59:42:cb:2b:61:50:9e:8e:5a:9b:36:33:
         1a:e6:02:d2:a2:e4:15:2a:ea:69:00:37:0c:3e:a7:75:70:d4:
         4f:ff:a4:78:24:c6:f0:5a:d7:c7:f3:f7:17:09:e2:70:be:19:
         85:8e:77:c2:cb:43:41:1f:e5:5f:c0:3b:a6:bc:34:e5:40:e2:
         ad:5d:3f:99:b1:13:f8:75:e2:ec:19:2e:58:f9:b9:60:04:2c:
         f0:03:dd:0a:35:e2:68:6b:3e:f1:7a:36:44:eb:5b:98:29:7b:
         15:26:77:f2:25:51:28:99:3f:f8:6e:cb:8c:0a:cf:f5:d1:80:
         d5:04:3d:4a:30:25:ab:65:9c:86:2b:40:ac:02:2f:d5:fd:3e:
         bc:d5:c0:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICIkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY4RkQxMTAvBgNVBAUTKEZGQkMyRDQxQ0REOTVGRkNGOEE3N0U1MjkxOUUyRTZE
MUJBRjAyREYwHhcNMjYwNzI4MTU1NzUxWhcNMjYwODA0MTU1NzUxWjAYMRYwFAYD
VQQDEw02YTY4ZDE4MC04ZDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4J5LxpGSzev3ufMlEFKXy3RL2U0AMoFGkNlGmIoN8ekrzK31KgIIpuzmbM0n
iQYQ6Mf5ZErzULYogysMMD1qQ6tfkFjMUJjQ/jJ32GC3xc55rhvZpt9KnGNiDo1o
HzGxgGfdJOuREWakiuccO1QghDXu5cWsowGO/dpAakcs3yYyf8gQs7YIhlPAbawD
YSQG+Vz88sNo+Y5mTI/m9jxxUEc2JdpkWtqma3v2dAMjD2or1x5e7dqW/gMxyxTh
QysP4Bo+Ba/CTueF0iU8EDqj4IvC08wFyNQTH+2YJfftEBTdrSB5ug5DX3kXQuQX
Dn/K5tgLB/hCf+wx2lxQAgT4fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGZ2OzwN
fkhD4bT2/kAkkTtAs0idMB8GA1UdIwQYMBaAFP+8LUHN2V/8+Kd+UpGeLm0brwLf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhGRC85QTc5OTY0NEUx
MTExMUU1QUIwMTc3MjdDNEY5QUUwMi9fN3d0UWMzWlhfejRwMzVTa1o0dWJSdXZB
dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL183d3RRYzNaWF96NHAzNVNrWjR1YlJ1dkF0OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjhGRC85QTc5OTY0NEUxMTExMUU1QUIwMTc3MjdDNEY5QUUwMi9fN3d0UWMzWlhf
ejRwMzVTa1o0dWJSdXZBdDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALn4ixbGV4ewoMMzsJe+fCjnELakk74d0FjS6uaP4KYFBn8PYaxu1NA4bttE3
eZmLX+QOiuKV2IfnnjCFPuEGadFkowuvrjpcARVNLns3bfVoBAuEKM7dUw3HLCiN
t4Z4OPAIwQ6+4ZrmJxyoeD3lKdvVWULLK2FQno5amzYzGuYC0qLkFSrqaQA3DD6n
dXDUT/+keCTG8FrXx/P3FwnicL4ZhY53wstDQR/lX8A7prw05UDirV0/mbET+HXi
7BkuWPm5YAQs8APdCjXiaGs+8Xo2ROtbmCl7FSZ38iVRKJk/+G7LjArP9dGA1QQ9
SjAlq2WchitArAIv1f0+vNXABA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:06:51 2026 by rpki-client