Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
File:                     n4LbyUZjEsW6LpISeTAkAJVqmCo.mft (raw, json)
Hash identifier:          0VPlKBdUYwzc6dN2EOUmczq8c8i9PI3LNslPa9Kc5rI=
Subject key identifier:   2D:57:6C:8B:C2:B6:07:A8:8B:42:38:87:12:F2:86:5A:AD:3B:E3:98
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       36E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
Manifest number:          35AD
Signing time:             Tue 28 Jul 2026 14:22:42 +0000
Manifest this update:     Tue 28 Jul 2026 14:22:41 +0000
Manifest next update:     Tue 04 Aug 2026 14:22:41 +0000
Files and hashes:         1: n4LbyUZjEsW6LpISeTAkAJVqmCo.crl (hash: 2FHR91bHmGYbTjn5dbui6XD9usMfgjQZqqZlWKIR8G0=)
                          2: 471E9C908DB811E98ACC9F7EC4F9AE02.roa (hash: ajWPfgyIE3umSCJ2gTUfFCsZjiBnhTSdlnITGNY926s=)
                          3: 441E60E88DB811E98ACC9F7EC4F9AE02.roa (hash: B27wh3fEi/hAOB71J/u7lh6WCTRhDeDyoP1VWvu0ryI=)
                          4: 4107DF748DB811E98ACC9F7EC4F9AE02.roa (hash: hz5gUzbaN7J/VQDJx9BzlgHZ7QvQPcRlAB3rDG9NM3I=)
                          5: B580AA94013D11EBBC81306AC4F9AE02.roa (hash: 9CH9K0zReFPkNUN2+CaNA2ol+J26nnIjRlVx1c5X4ZE=)
                          6: 482C95F68DB811E98ACC9F7EC4F9AE02.roa (hash: Pi9bRPgU/hz3+L0wJzzWeCFlpEZjC2aR2BJhIidT0sA=)
                          7: F7318C2CBA3E11ECA0543F6BC4F9AE02.roa (hash: u97TYLT/BQTtijKwV5M2wT1c0/v/G8Iw+MIW/+UaOhM=)
                          8: F6D9C45E7B1811EF82C90D2AC4F9AE02.roa (hash: wq81aF5SSoAZI/JyoA1vNO3zjZsKt2TkcT5Pso38nSU=)
                          9: 1BA16D001F8211EC8FC82E73C4F9AE02.roa (hash: lHidmOj5/4kQC0HWnQsBBkm8/7iR9N9wMoSuEzHus1A=)
                          10: 4AEE35608DB811E98ACC9F7EC4F9AE02.roa (hash: hRhJmPw6HJ/CFTNiB4jTfaz2NVHh3MBNmnrOJmVcsDg=)
                          11: EC8209420EB411EFAE1CF63BC4F9AE02.roa (hash: tuxt7AAVdlIorySbquWSOc2cd9Lyaw78OSqZYuKb270=)
                          12: 47A6C8E08DB811E98ACC9F7EC4F9AE02.roa (hash: tim1sMDu0bOwl1syg0MHcvHXmnELHIcAaqZu6XOIY64=)
                          13: A3601D70C2A511EBB2025B36C4F9AE02.roa (hash: bMXbbXDj5RaZ0Ee7YCwgs/7Vdo6yL1uCa/jY5e4Qep0=)
                          14: 4A71D7E08DB811E98ACC9F7EC4F9AE02.roa (hash: uu4m5WVb6SU6WZl3ObRQUMqZyoKCwCWL6M6mRfFvoL4=)
                          15: B2FF274A00EC11EDBC60AA4FC4F9AE02.roa (hash: tnQvcL+XlKj1mrWVClsnZNGw7PANVizY98r9YXkQdO4=)
                          16: 9DB6EBB4972E11E9B776A755C4F9AE02.roa (hash: 2IvnCeqQ65Zlp2C2lqFnO2zCq+IPSyQ8nLjI5fuUZPA=)
                          17: 453F8E988DB811E98ACC9F7EC4F9AE02.roa (hash: WVPtgUERZHpgB/DQwz60lkH6Uc54oBG0ERaAVC6IExA=)
                          18: 5B917C28A2E011E9A98B0235C4F9AE02.roa (hash: 0+07+O2nWAirNYVLyV1pe7GfKo/vf0ORWGc4yAP010g=)
                          19: 3ED710C68DB811E98ACC9F7EC4F9AE02.roa (hash: folYHW0Gwg29Q/Y88gdrsYlLi/YxqwtkEzwH995b74w=)
                          20: 42EBE8D08DB811E98ACC9F7EC4F9AE02.roa (hash: n/rtVmTMB1Py5Ik0TDu++khNfNTrCl3b/ICvjZej0xc=)
                          21: F3A41ADEC0E411EFA19F644CC4F9AE02.roa (hash: qtf7Df2GnJiRrGvanH5s0hEvrPF8g7/kGohVnvp97F4=)
                          22: 4D21FB36F7DB11EE92D1E11FC4F9AE02.roa (hash: p//zkhXiOBuBirrvlxHSciakC9fZnELNCSm8Uvn27ZE=)
                          23: 4EE07E481F7F11ECA7242F6CC4F9AE02.roa (hash: xXXKUBvKApT8YVzNPAtueFWn7BnVKJjI5nKq0lyvM4o=)
                          24: 4495856A8DB811E98ACC9F7EC4F9AE02.roa (hash: /+QRen7Io05J4Xucot84AqX64nbfLZG1ouY7NxOjV3s=)
                          25: 48ED106A8DB811E98ACC9F7EC4F9AE02.roa (hash: lpyjRDEla69ljuEGYEqFeb3N2SUniW4iezq7HN/byZI=)
                          26: 46800A948DB811E98ACC9F7EC4F9AE02.roa (hash: YuxiT+o6NacPiPMOQ8zhMa/ehrSyMJnmfoAK7JucAN0=)
                          27: 402418C08DB811E98ACC9F7EC4F9AE02.roa (hash: Dx8o50rE1OKe1inVw3oUo0yNA4V99kP9sCKq9GKRraw=)
                          28: 439638A88DB811E98ACC9F7EC4F9AE02.roa (hash: T1/3yr80tQn2wXUoaI6SgP3gcD+G/JWjJxOxFcBZOzQ=)
                          29: CEC68F44973211E9954F0565C4F9AE02.roa (hash: 9TSvBz+OjIAdBGbstVi1TzZ4VL3DuXLguW4IimNLnXA=)
                          30: EBD5A3CA6B8711EFB0476280C4F9AE02.roa (hash: BZKoDF/7kTMYC8p2F7sy+ku+IsTTX9iqMyQIA+SIbiY=)
                          31: 1827B7E0605411EFA8069323C4F9AE02.roa (hash: Bwyx7v9ErsR+mUyY+3+Ype9qNhlTd5XIZgvvVkhOvjQ=)
                          32: 49EECD288DB811E98ACC9F7EC4F9AE02.roa (hash: pTltMgVWE0zVNXrntrbtBqvZnO3y4UNU+dhd1NyglWY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 14:22:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14057 (0x36e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jul 28 14:22:41 2026 GMT
            Not After : Aug  4 14:22:41 2026 GMT
        Subject: CN=6a68bb32-f961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:10:49:f2:e9:b9:f9:c1:1f:86:2e:d8:d1:19:
                    b8:cc:5f:83:b1:31:f3:8a:3a:1b:97:02:77:02:4c:
                    91:7f:ce:d6:5c:20:31:1d:4d:c3:62:04:5b:5f:ec:
                    ad:5b:f0:1c:d8:1d:e7:88:02:58:39:d0:49:bb:ed:
                    bf:f6:e7:5f:de:2a:44:f7:ad:81:96:d4:c2:b3:35:
                    08:86:7e:7b:f6:c0:06:c6:b9:b2:fa:05:62:15:11:
                    44:6e:e4:71:80:6e:71:2e:8b:9e:ab:2f:f8:89:aa:
                    40:4f:2b:a7:9d:28:fd:bb:33:6d:67:9c:ee:28:ff:
                    45:7b:c1:38:4d:0e:97:08:93:1a:ce:91:3a:54:42:
                    31:f8:56:be:ff:7f:63:19:62:da:90:cc:51:93:29:
                    88:96:b0:f5:c1:33:b7:86:d6:85:d4:a8:27:f9:48:
                    98:a4:77:e9:65:34:85:e4:8b:ef:76:e6:f4:86:13:
                    53:88:a8:7b:b3:d1:b2:0e:53:e2:51:6c:87:3a:7e:
                    41:11:86:2f:e3:1a:f5:90:92:4f:b1:4e:62:5f:6a:
                    a6:35:3a:b8:da:b2:32:89:fc:5a:0a:c7:4f:50:87:
                    45:b7:92:db:7f:8e:42:04:d5:ea:4f:1f:f2:84:ec:
                    60:56:ae:e2:02:ea:58:d9:58:26:66:e1:64:f4:dc:
                    99:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:57:6C:8B:C2:B6:07:A8:8B:42:38:87:12:F2:86:5A:AD:3B:E3:98
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:c3:46:72:1e:cd:56:0c:22:aa:6f:22:0b:0c:4c:cd:37:b9:
         65:5b:3a:18:63:da:8c:91:5c:91:fe:6f:13:e5:3b:ff:93:8c:
         0b:a8:e2:49:60:91:47:ad:57:10:af:1f:c2:89:2f:3f:ae:75:
         cf:cb:c3:b6:84:59:20:07:3b:e4:df:be:81:d6:32:49:b3:23:
         f9:c6:05:0a:8d:8d:9d:e3:62:1c:50:04:da:3d:20:13:5b:26:
         17:1d:32:b4:49:fc:85:4c:a3:da:ca:40:bc:b7:fc:32:f7:93:
         41:4d:79:6b:39:49:6d:16:4d:c6:1d:d8:cb:99:6d:0a:3d:7c:
         1b:3c:63:89:8b:26:93:5a:0a:8c:c9:90:9f:9f:1f:04:69:54:
         00:7c:21:de:a7:9f:56:04:2d:49:17:04:28:7b:63:b9:61:2c:
         87:b6:bb:29:42:d5:03:1b:29:d4:36:7e:a8:bf:da:54:1f:3d:
         fa:b5:63:49:45:f5:4e:c5:10:f5:cb:db:c4:38:03:94:2d:bd:
         89:9e:21:de:5c:8a:5d:e5:1f:ca:10:7a:04:7b:6f:dc:c4:3c:
         50:f4:60:34:cb:c2:d6:75:7a:ec:26:da:48:dc:08:68:99:b9:
         04:19:b6:0b:1a:26:69:6a:a5:79:9c:9c:77:e1:2e:28:58:cb:
         23:0e:76:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:11 2026 by rpki-client