Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft
File:                     83GJVwUMS84UpOw46qzunHQkTE8.mft (raw, json)
Hash identifier:          +8o2C0rNTz/8VA+4i8uadrYqCTY5+tOX6LH1fYf/GB0=
Subject key identifier:   CA:45:44:B9:8C:FF:69:F3:5A:A7:45:B2:FB:65:31:E8:E1:7E:FC:AF
Authority key identifier: F3:71:89:57:05:0C:4B:CE:14:A4:EC:38:EA:AC:EE:9C:74:24:4C:4F
Certificate issuer:       /CN=A91426E8/serialNumber=F3718957050C4BCE14A4EC38EAACEE9C74244C4F
Certificate serial:       E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft
Manifest number:          DE
Signing time:             Mon 27 Jul 2026 08:45:43 +0000
Manifest this update:     Mon 27 Jul 2026 08:45:42 +0000
Manifest next update:     Mon 03 Aug 2026 08:45:42 +0000
Files and hashes:         1: 83GJVwUMS84UpOw46qzunHQkTE8.crl (hash: OsSkbJReazdcLtcGzz3+8YLKB6iVZLUspnAIzaGGoSk=)
                          2: B240CFC23F8A11F0B3F03A67C4F9AE02.roa (hash: jNxDHr6BPCWYOsHZin0NsVI+cf+zItqnlC9EufbwEok=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.crl
                          rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:45:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91426E8, serialNumber=F3718957050C4BCE14A4EC38EAACEE9C74244C4F
        Validity
            Not Before: Jul 27 08:45:42 2026 GMT
            Not After : Aug  3 08:45:42 2026 GMT
        Subject: CN=6a671ab6-f7fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ad:a4:7a:4b:b2:62:59:d5:36:e3:c4:b9:a0:
                    e6:30:d6:5c:77:18:e1:64:36:cb:66:27:a0:62:a6:
                    19:ca:d0:2a:76:3f:fc:6e:9d:6e:9d:48:aa:00:db:
                    9f:c9:ff:0d:cb:d3:a9:5c:50:5d:63:7c:8d:5c:c8:
                    5a:f9:40:96:a2:64:dc:3a:de:6e:83:b4:52:c7:96:
                    2c:18:1b:3f:49:21:da:7f:d4:ae:72:e8:1f:26:55:
                    03:a2:11:20:a9:93:cf:2f:74:eb:30:54:f4:ba:61:
                    99:0e:de:8a:25:d6:f6:13:6b:7d:ec:48:a6:a9:55:
                    61:c5:73:4c:67:36:5f:09:0c:a3:d9:07:d7:3f:e2:
                    81:86:bc:5e:9f:53:9e:68:f1:ca:5b:d9:25:c0:15:
                    b0:f9:e9:0d:19:bb:14:1d:93:a4:ed:bc:9d:36:70:
                    2e:d3:1c:ce:38:40:7a:bf:18:31:aa:99:51:83:c5:
                    b1:9c:19:a7:e9:70:39:9c:54:aa:2b:05:3d:f4:53:
                    2f:a0:91:22:a0:69:7c:74:df:9b:bc:1b:df:d9:fd:
                    00:4c:28:11:6b:70:17:45:69:13:62:27:6d:6d:d5:
                    f2:69:02:65:f9:a9:2c:b6:8e:c8:e9:ba:f7:f8:56:
                    88:53:0c:bd:a4:bd:68:04:26:ff:31:5d:78:2a:80:
                    cf:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:45:44:B9:8C:FF:69:F3:5A:A7:45:B2:FB:65:31:E8:E1:7E:FC:AF
            X509v3 Authority Key Identifier:
                keyid:F3:71:89:57:05:0C:4B:CE:14:A4:EC:38:EA:AC:EE:9C:74:24:4C:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:33:dc:df:27:18:52:e5:0c:d1:9c:da:9d:c1:69:7d:49:25:
         f6:f0:d0:98:36:90:b1:62:4b:78:1d:ca:f9:78:ab:95:13:c9:
         8d:86:f8:01:34:ff:1b:1c:af:ff:9c:d2:15:06:cf:a0:71:7f:
         da:57:dc:75:08:f8:c2:7a:e2:28:0e:f3:b0:a3:8a:1c:9c:bf:
         1d:85:ee:0a:75:41:81:9d:ef:f9:00:92:c8:aa:dc:c2:56:5e:
         e2:93:ec:5a:b4:f1:3c:9d:4e:a0:c7:f5:3c:80:98:2a:d6:44:
         3c:cd:47:90:f3:9c:0b:07:61:11:7f:68:f3:02:ee:19:4e:ad:
         fc:b5:52:b5:05:b8:62:7d:2e:12:ac:f8:94:b0:2f:33:a9:a6:
         92:ca:5c:4e:e1:ec:28:ea:8b:1b:8a:0b:67:2b:96:85:02:da:
         ca:44:b5:d0:41:c2:4a:a5:71:b2:14:ec:50:56:3f:28:2c:ec:
         82:21:2e:cd:df:30:42:78:0d:da:c2:96:65:2d:55:21:45:06:
         b8:84:c9:ab:99:a6:df:8a:a1:f6:e5:6c:aa:1f:23:ef:09:ab:
         1d:93:0e:c6:e9:50:e1:6d:22:c1:49:00:80:45:cd:6b:9a:6c:
         ad:6a:c4:35:26:fa:f5:c7:02:4c:56:92:c7:3a:cc:25:6c:bf:
         a4:e4:88:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI2RTgxMTAvBgNVBAUTKEYzNzE4OTU3MDUwQzRCQ0UxNEE0RUMzOEVBQUNFRTlD
NzQyNDRDNEYwHhcNMjYwNzI3MDg0NTQyWhcNMjYwODAzMDg0NTQyWjAYMRYwFAYD
VQQDEw02YTY3MWFiNi1mN2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1a2kekuyYlnVNuPEuaDmMNZcdxjhZDbLZiegYqYZytAqdj/8bp1unUiqANuf
yf8Ny9OpXFBdY3yNXMha+UCWomTcOt5ug7RSx5YsGBs/SSHaf9SucugfJlUDohEg
qZPPL3TrMFT0umGZDt6KJdb2E2t97EimqVVhxXNMZzZfCQyj2QfXP+KBhrxen1Oe
aPHKW9klwBWw+ekNGbsUHZOk7bydNnAu0xzOOEB6vxgxqplRg8WxnBmn6XA5nFSq
KwU99FMvoJEioGl8dN+bvBvf2f0ATCgRa3AXRWkTYidtbdXyaQJl+aksto7I6br3
+FaIUwy9pL1oBCb/MV14KoDPuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMpFRLmM
/2nzWqdFsvtlMejhfvyvMB8GA1UdIwQYMBaAFPNxiVcFDEvOFKTsOOqs7px0JExP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjZFOC84RDVBQTE3QTNG
NzUxMUYwOTYyMzJBMTFDNEY5QUUwMi84M0dKVndVTVM4NFVwT3c0NnF6dW5IUWtU
RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzgzR0pWd1VNUzg0VXBPdzQ2cXp1bkhRa1RFOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjZFOC84RDVBQTE3QTNGNzUxMUYwOTYyMzJBMTFDNEY5QUUwMi84M0dKVndVTVM4
NFVwT3c0NnF6dW5IUWtURTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALjPc3ycYUuUM0ZzancFpfUkl9vDQmDaQsWJLeB3K+XirlRPJjYb4ATT/Gxyv
/5zSFQbPoHF/2lfcdQj4wnriKA7zsKOKHJy/HYXuCnVBgZ3v+QCSyKrcwlZe4pPs
WrTxPJ1OoMf1PICYKtZEPM1HkPOcCwdhEX9o8wLuGU6t/LVStQW4Yn0uEqz4lLAv
M6mmkspcTuHsKOqLG4oLZyuWhQLaykS10EHCSqVxshTsUFY/KCzsgiEuzd8wQngN
2sKWZS1VIUUGuITJq5mm34qh9uVsqh8j7wmrHZMOxulQ4W0iwUkAgEXNa5psrWrE
NSb69ccCTFaSxzrMJWy/pOSIJA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:17:52 2026 by rpki-client