Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft
File:                     0nYmctKXWA5IQijBceWokHMMF28.mft (raw, json)
Hash identifier:          2TTOcdwIh1uxX5l0nESSeMDAmNV+gKqAHrZ8oOYqvMQ=
Subject key identifier:   10:7B:5A:1E:3D:92:F7:EE:51:BF:9E:2B:E3:65:32:79:60:04:9D:32
Authority key identifier: D2:76:26:72:D2:97:58:0E:48:42:28:C1:71:E5:A8:90:73:0C:17:6F
Certificate issuer:       /CN=A91724A6/serialNumber=D2762672D297580E484228C171E5A890730C176F
Certificate serial:       0282
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0nYmctKXWA5IQijBceWokHMMF28.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft
Manifest number:          027B
Signing time:             Mon 27 Jul 2026 03:21:50 +0000
Manifest this update:     Mon 27 Jul 2026 03:21:50 +0000
Manifest next update:     Mon 03 Aug 2026 03:21:50 +0000
Files and hashes:         1: 0nYmctKXWA5IQijBceWokHMMF28.crl (hash: afJsfI/JtjNwE8DMaIvNi8fmXh9MbDyIyqMiK4hxsmM=)
                          2: 950A55CCC3C711ED8419AA64C4F9AE02.roa (hash: rlJpxeuz4XfDgn5OftJBgDHyUQdmKKYiwzNQtX6KD/A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.crl
                          rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0nYmctKXWA5IQijBceWokHMMF28.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 642 (0x282)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91724A6, serialNumber=D2762672D297580E484228C171E5A890730C176F
        Validity
            Not Before: Jul 27 03:21:50 2026 GMT
            Not After : Aug  3 03:21:50 2026 GMT
        Subject: CN=6a66cece-8489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:06:51:c1:13:77:a7:37:ba:07:1f:e6:ed:66:
                    ac:4f:45:13:10:3e:fd:ec:28:13:4d:10:06:18:87:
                    af:d9:1f:73:dd:66:2b:ed:4f:4f:c3:86:65:04:1c:
                    80:6d:14:bb:d6:49:13:a1:ac:d6:34:42:d2:61:20:
                    98:67:8c:47:5f:27:6b:2c:51:57:94:40:ec:4b:4d:
                    fb:eb:dd:01:2a:22:60:5a:68:5b:b0:d8:cd:3c:42:
                    6a:04:86:8c:e5:2e:13:be:09:ee:4a:fc:be:8f:f6:
                    22:dc:bf:f0:a4:eb:71:30:74:4d:d8:c5:92:6f:74:
                    22:f2:17:6c:ef:ee:02:f1:3d:69:8a:ec:78:b3:33:
                    dd:0a:7c:55:0f:6f:47:ae:df:0e:a5:e5:c6:63:a2:
                    56:0d:8f:e3:e9:ff:96:cf:dd:68:24:58:51:4f:c9:
                    71:37:7d:dc:06:6d:75:62:21:ce:0b:cc:e0:6a:55:
                    50:4e:5c:9c:c4:b7:d7:4a:56:13:80:37:b0:23:a6:
                    e5:98:e2:b5:81:15:54:f7:81:ab:7d:78:b5:4f:18:
                    63:78:66:72:36:97:80:0d:c8:b0:6a:66:d5:14:3e:
                    e5:0d:0f:2f:07:1b:55:a6:17:52:a0:1c:a3:44:36:
                    67:34:d3:b1:8c:8d:de:7b:2a:51:d9:79:e6:7d:d5:
                    47:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7B:5A:1E:3D:92:F7:EE:51:BF:9E:2B:E3:65:32:79:60:04:9D:32
            X509v3 Authority Key Identifier:
                keyid:D2:76:26:72:D2:97:58:0E:48:42:28:C1:71:E5:A8:90:73:0C:17:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0nYmctKXWA5IQijBceWokHMMF28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:dc:cb:63:00:9a:b6:d3:45:b5:0c:bd:b1:23:d9:7a:8c:98:
         04:ab:4d:f2:a3:09:69:b1:e0:7b:b6:5b:6f:b2:54:f2:e0:0d:
         a9:97:d5:39:fa:5a:76:c9:db:63:85:f6:aa:e1:ca:80:91:b2:
         24:94:94:83:4f:d3:ed:d1:ad:b8:92:a2:37:5b:0a:03:98:56:
         b0:26:96:34:8e:22:f0:ba:24:2d:c4:7c:ce:b9:10:d2:84:7f:
         42:ef:42:23:b2:13:d4:16:9d:e2:7b:2e:76:33:15:60:1b:4d:
         aa:0c:88:8c:9f:b5:31:5d:e8:fa:0d:ca:d4:c4:3d:ae:2a:58:
         55:ba:17:38:01:de:b9:75:e5:08:c4:a7:b0:47:d7:3b:02:a9:
         48:b5:ca:74:1a:b4:65:e2:da:e8:af:63:3f:ee:99:33:5e:66:
         e6:28:73:88:bc:bd:fc:32:53:d7:41:9a:cd:02:05:d6:96:f1:
         56:45:db:6a:62:60:4e:e2:88:1d:42:0f:74:70:31:a0:8c:41:
         c8:e7:5c:e5:d7:aa:3c:4c:77:9a:84:6e:43:60:3a:50:40:8c:
         c9:4a:92:6f:42:01:d3:82:f3:19:1f:08:30:cb:30:4d:ad:f5:
         57:76:96:72:8c:a7:b1:5a:d2:a2:1f:24:78:46:5e:c4:f1:26:
         da:25:01:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzI0QTYxMTAvBgNVBAUTKEQyNzYyNjcyRDI5NzU4MEU0ODQyMjhDMTcxRTVBODkw
NzMwQzE3NkYwHhcNMjYwNzI3MDMyMTUwWhcNMjYwODAzMDMyMTUwWjAYMRYwFAYD
VQQDEw02YTY2Y2VjZS04NDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5QZRwRN3pze6Bx/m7WasT0UTED797CgTTRAGGIev2R9z3WYr7U9Pw4ZlBByA
bRS71kkToazWNELSYSCYZ4xHXydrLFFXlEDsS037690BKiJgWmhbsNjNPEJqBIaM
5S4TvgnuSvy+j/Yi3L/wpOtxMHRN2MWSb3Qi8hds7+4C8T1piux4szPdCnxVD29H
rt8OpeXGY6JWDY/j6f+Wz91oJFhRT8lxN33cBm11YiHOC8zgalVQTlycxLfXSlYT
gDewI6blmOK1gRVU94GrfXi1TxhjeGZyNpeADciwambVFD7lDQ8vBxtVphdSoByj
RDZnNNOxjI3eeypR2XnmfdVHNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBB7Wh49
kvfuUb+eK+NlMnlgBJ0yMB8GA1UdIwQYMBaAFNJ2JnLSl1gOSEIowXHlqJBzDBdv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjRBNi8xOEU1RDQ4NEMz
QzMxMUVEQUE1QUNCNDdDNEY5QUUwMi8wblltY3RLWFdBNUlRaWpCY2VXb2tITU1G
MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBuWW1jdEtYV0E1SVFpakJjZVdva0hNTUYyOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MjRBNi8xOEU1RDQ4NEMzQzMxMUVEQUE1QUNCNDdDNEY5QUUwMi8wblltY3RLWFdB
NUlRaWpCY2VXb2tITU1GMjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYtzLYwCattNFtQy9sSPZeoyYBKtN8qMJabHge7Zbb7JU8uANqZfVOfpadsnb
Y4X2quHKgJGyJJSUg0/T7dGtuJKiN1sKA5hWsCaWNI4i8LokLcR8zrkQ0oR/Qu9C
I7IT1Bad4nsudjMVYBtNqgyIjJ+1MV3o+g3K1MQ9ripYVboXOAHeuXXlCMSnsEfX
OwKpSLXKdBq0ZeLa6K9jP+6ZM15m5ihziLy9/DJT10GazQIF1pbxVkXbamJgTuKI
HUIPdHAxoIxByOdc5deqPEx3moRuQ2A6UECMyUqSb0IB04LzGR8IMMswTa31V3aW
coynsVrSoh8keEZexPEm2iUB4Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:02:10 2026 by rpki-client