Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
File:                     nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft (raw, json)
Hash identifier:          R9sPNGh37Aq0Izz8VU/YBHwEmDjsa3HkY/14HAT48hU=
Subject key identifier:   B3:0B:1B:00:47:3F:64:88:0C:8D:9F:46:AE:27:CC:AB:2B:AC:81:60
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Certificate issuer:       /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial:       05EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
Manifest number:          05BD
Signing time:             Mon 27 Jul 2026 00:09:54 +0000
Manifest this update:     Mon 27 Jul 2026 00:09:54 +0000
Manifest next update:     Mon 03 Aug 2026 00:09:54 +0000
Files and hashes:         1: nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl (hash: ziMFox3AxYXewsvjnbR0nPwy/Z3TiOz+ERg3Juh7MyY=)
                          2: FBBECF1A694111F08D368069C4F9AE02.roa (hash: HO1DGtNQx+OH3SloGIt02Rz1EoCoy8/3rF9m0kcImEQ=)
                          3: 9EABFF288CA011F0B1F47C12C4F9AE02.roa (hash: xb+uRHoHsQjZ3bcCgpJzZNIAPd4nFn7kpkaspAVlz/c=)
                          4: 10F4AD9C81DC11F1A817832770A30FBC.roa (hash: tcEDniWE2GiqOhyoj757p7krVg5bHwf1EmxkpQBck08=)
                          5: 9E3C65828CA011F0B1F47C12C4F9AE02.roa (hash: Q6qYKHjV9NmhmzxqH8ayk30H8rtTg6j37bugDkJvn/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
                          rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1516 (0x5ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
        Validity
            Not Before: Jul 27 00:09:54 2026 GMT
            Not After : Aug  3 00:09:54 2026 GMT
        Subject: CN=6a66a1d2-9f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:88:a4:62:f0:f4:9d:a5:b7:d6:51:1a:94:44:
                    28:0a:ed:e6:ed:b3:af:cf:1f:c2:a5:d3:28:9c:ac:
                    e6:3d:fb:6d:3f:e8:41:27:5f:44:1c:58:d4:6b:68:
                    0f:76:23:c1:05:19:d8:87:37:a4:dc:ff:55:af:19:
                    dd:07:e2:06:7c:bb:ca:b1:c7:be:be:9a:3b:59:b9:
                    6b:fe:e2:03:49:d7:5a:79:e6:56:fb:26:33:64:f3:
                    a3:dd:c2:24:03:00:a1:6b:3c:38:3a:b4:9e:78:43:
                    2c:ab:e3:5e:f0:fe:24:e0:c9:26:77:ef:ec:24:dd:
                    d6:6e:15:cf:cd:26:b9:50:53:53:ab:ed:43:a6:2b:
                    00:ba:85:d8:5c:14:51:3a:bf:f4:4b:91:e5:28:19:
                    c9:1a:c6:0e:f3:65:fd:e4:1d:0b:c0:72:de:66:dd:
                    fb:27:17:b7:14:a4:b2:d6:ae:be:ab:8c:cf:93:40:
                    a7:31:41:cf:02:be:c3:40:8f:24:53:af:10:5a:e7:
                    0b:7c:7d:1a:77:52:97:25:b5:4d:60:7f:81:e8:63:
                    27:df:9c:7a:f0:22:7a:4f:f3:bc:94:a7:5b:e4:a9:
                    00:f0:ac:e5:ad:15:e3:06:88:fc:9b:41:51:15:41:
                    1f:d7:7f:36:a6:e7:5b:ac:21:62:ab:3c:77:67:84:
                    54:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0B:1B:00:47:3F:64:88:0C:8D:9F:46:AE:27:CC:AB:2B:AC:81:60
            X509v3 Authority Key Identifier:
                keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:49:00:ed:53:e2:94:30:b9:31:46:2f:3b:49:dd:17:ab:5e:
         61:11:1f:c2:96:e6:cc:27:00:69:0f:5b:89:15:35:2f:a2:c2:
         a4:93:e3:93:b0:fc:e2:20:e8:01:51:d3:e3:e3:e9:b2:c8:ca:
         4a:62:b2:46:27:2b:a4:6b:ee:27:f3:8e:2b:c7:3b:35:e6:2a:
         dd:dc:3e:2b:f5:2f:85:dd:82:ca:7c:19:9e:dd:35:ee:e8:d6:
         f9:29:c4:22:07:34:47:52:d9:06:6b:d6:05:78:1c:f3:14:ce:
         b9:66:29:2b:89:4d:a7:04:c1:fb:d2:db:17:4e:4c:ef:1f:05:
         17:a4:7d:c1:3f:dd:a3:5e:29:97:e3:12:a1:df:be:82:fa:f4:
         e8:b0:88:a8:b3:1d:b8:b3:98:ef:61:e6:46:83:1f:41:7a:89:
         db:69:e5:f0:c2:82:14:fa:37:0b:de:78:e5:8b:32:02:1c:c7:
         35:77:af:ff:49:e9:da:11:07:1c:c5:fb:21:71:28:da:92:47:
         10:e4:7e:47:98:18:65:44:12:89:d0:6c:be:7f:fb:da:51:6b:
         fe:3c:11:67:49:16:8d:19:a3:fa:b1:ea:fb:1f:be:66:f4:25:
         e4:4b:0a:ae:80:de:db:1f:20:d9:f2:f4:a4:7f:a6:47:3b:9c:
         d2:07:6e:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg4RDQxMTAvBgNVBAUTKDlDOEFFM0RDN0IwNUIzODUzOTY3OTBDQTczMjNEM0Ew
OTA2RkVEODIwHhcNMjYwNzI3MDAwOTU0WhcNMjYwODAzMDAwOTU0WjAYMRYwFAYD
VQQDEw02YTY2YTFkMi05ZjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjYikYvD0naW31lEalEQoCu3m7bOvzx/CpdMonKzmPfttP+hBJ19EHFjUa2gP
diPBBRnYhzek3P9VrxndB+IGfLvKsce+vpo7Wblr/uIDSddaeeZW+yYzZPOj3cIk
AwChazw4OrSeeEMsq+Ne8P4k4Mkmd+/sJN3WbhXPzSa5UFNTq+1DpisAuoXYXBRR
Or/0S5HlKBnJGsYO82X95B0LwHLeZt37Jxe3FKSy1q6+q4zPk0CnMUHPAr7DQI8k
U68QWucLfH0ad1KXJbVNYH+B6GMn35x68CJ6T/O8lKdb5KkA8KzlrRXjBoj8m0FR
FUEf1382pudbrCFiqzx3Z4RU0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLMLGwBH
P2SIDI2fRq4nzKsrrIFgMB8GA1UdIwQYMBaAFJyK49x7BbOFOWeQynMj06CQb+2C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhENC8yRjU4RTQ3MjJF
NTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0VTVaNURLY3lQVG9KQnY3
WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25JcmozSHNGczRVNVo1REtjeVBUb0pCdjdZSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODhENC8yRjU4RTQ3MjJFNTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0
VTVaNURLY3lQVG9KQnY3WUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuEkA7VPilDC5MUYvO0ndF6teYREfwpbmzCcAaQ9biRU1L6LCpJPjk7D84iDo
AVHT4+PpssjKSmKyRicrpGvuJ/OOK8c7NeYq3dw+K/Uvhd2CynwZnt017ujW+SnE
Igc0R1LZBmvWBXgc8xTOuWYpK4lNpwTB+9LbF05M7x8FF6R9wT/do14pl+MSod++
gvr06LCIqLMduLOY72HmRoMfQXqJ22nl8MKCFPo3C9545YsyAhzHNXev/0np2hEH
HMX7IXEo2pJHEOR+R5gYZUQSidBsvn/72lFr/jwRZ0kWjRmj+rHq+x++ZvQl5EsK
roDe2x8g2fL0pH+mRzuc0gdu8A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:06:46 2026 by rpki-client