Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
File:                     2wVNT_SDuJTYCF4P43hs4um1MGI.mft (raw, json)
Hash identifier:          Odp3lRLIsuRAOYXyeGbbR4C0GdicZqRg6ATnM7r5Hvo=
Subject key identifier:   E9:83:37:B0:B0:9D:B4:6B:C1:69:85:71:36:B3:CD:C0:6B:F1:13:2C
Authority key identifier: DB:05:4D:4F:F4:83:B8:94:D8:08:5E:0F:E3:78:6C:E2:E9:B5:30:62
Certificate issuer:       /CN=A91758DF/serialNumber=DB054D4FF483B894D8085E0FE3786CE2E9B53062
Certificate serial:       3F
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
Manifest number:          3D
Signing time:             Tue 28 Jul 2026 20:43:43 +0000
Manifest this update:     Tue 28 Jul 2026 20:43:42 +0000
Manifest next update:     Tue 04 Aug 2026 20:43:42 +0000
Files and hashes:         1: 2wVNT_SDuJTYCF4P43hs4um1MGI.crl (hash: 7NkFp0ogQ7SMa9JkV8vxtr8fza4JhY7js8uy2VQzekg=)
                          2: 031A6E544E9311F19004C0C7A2EE528E.roa (hash: w/4wlpVVsUwM2QVkvZtJ7suuuKCdp4EEZYeS6K8GgLc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.crl
                          rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91758DF, serialNumber=DB054D4FF483B894D8085E0FE3786CE2E9B53062
        Validity
            Not Before: Jul 28 20:43:42 2026 GMT
            Not After : Aug  4 20:43:42 2026 GMT
        Subject: CN=6a69147f-e00b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c6:d4:ea:e4:5a:f6:40:72:61:0b:31:4c:92:
                    62:96:b4:9f:b5:a2:cf:a9:51:b0:c6:83:18:1a:09:
                    d2:88:fa:48:69:8f:a9:14:78:a2:7e:e6:f4:cd:f1:
                    b3:03:ee:c0:3f:3d:6c:e6:03:13:09:36:23:ee:8d:
                    f7:f2:75:61:fa:8b:3a:c4:53:f7:14:4a:c4:6c:e9:
                    c7:76:dd:56:2c:04:47:ad:33:ee:74:ff:cc:9e:ef:
                    2e:e4:ae:e2:11:09:ff:f8:35:4a:c0:9a:68:d6:2d:
                    39:34:4c:9a:37:44:fc:9e:7c:bb:29:46:43:6c:d1:
                    d9:bb:fc:e6:22:3d:07:c4:b2:2c:5e:9a:b6:b2:e5:
                    ba:34:35:15:15:0d:c6:a3:92:f4:57:a0:74:d1:b1:
                    81:0f:e4:c7:ed:bf:69:6b:31:5f:66:52:14:76:1f:
                    68:b6:d3:a0:0b:d8:15:71:1c:07:e4:c0:41:0d:9b:
                    d6:5e:05:c5:46:1d:55:e8:ac:6f:73:50:6d:d4:86:
                    6f:e7:b3:5b:dd:10:1e:fa:cd:2b:84:4f:5b:e8:b8:
                    d4:d0:d3:04:cf:1c:7c:bc:51:8c:eb:ca:25:38:73:
                    18:21:1d:e4:63:e2:a1:52:4d:19:d4:79:96:b9:53:
                    6f:05:58:b0:31:77:92:a9:c6:cb:82:26:72:a4:d2:
                    7d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:83:37:B0:B0:9D:B4:6B:C1:69:85:71:36:B3:CD:C0:6B:F1:13:2C
            X509v3 Authority Key Identifier:
                keyid:DB:05:4D:4F:F4:83:B8:94:D8:08:5E:0F:E3:78:6C:E2:E9:B5:30:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:06:0e:c2:12:66:17:71:da:6d:2d:ca:b7:1a:da:ea:3a:8d:
         cc:8f:b1:5f:3f:f4:31:ea:6d:fc:b6:ea:26:12:2d:02:af:15:
         9d:2d:20:5d:a7:01:60:6d:70:48:7e:6c:3d:6f:44:3c:76:38:
         f8:0c:1d:c3:5c:ce:ba:a3:b4:58:7d:22:fd:cd:22:96:d8:49:
         b7:4e:aa:ac:a7:15:cc:2f:6f:b7:fb:3c:3d:c7:b1:2b:7c:c9:
         7d:0c:6a:eb:68:c8:6d:24:3b:ff:57:a4:24:f8:00:be:d1:a9:
         da:71:28:4c:c5:b0:9f:79:69:43:0d:18:54:f7:36:3a:a9:7b:
         5b:8f:d1:b4:b6:07:98:39:ba:5a:7c:a5:5d:5a:2a:0c:bd:7e:
         ff:e2:74:b7:5b:fe:a8:e0:53:a1:54:33:e6:12:0d:78:67:17:
         f4:f9:85:a7:68:bf:c7:6c:9e:7c:d1:6d:e9:c4:a4:08:21:f0:
         d2:26:40:eb:f9:ba:2f:ce:7c:62:bf:a3:78:3a:ce:ba:5c:ef:
         3f:9a:32:f3:c6:1c:36:5c:18:f1:fe:56:cb:25:c7:eb:ac:5e:
         83:70:89:e4:cf:06:be:24:86:31:12:1d:99:70:6d:f9:d2:55:
         b2:9f:c7:ea:23:c5:87:0c:ee:a6:36:14:d4:2e:bb:8e:89:53:
         dc:96:df:c3
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
NThERjExMC8GA1UEBRMoREIwNTRENEZGNDgzQjg5NEQ4MDg1RTBGRTM3ODZDRTJF
OUI1MzA2MjAeFw0yNjA3MjgyMDQzNDJaFw0yNjA4MDQyMDQzNDJaMBgxFjAUBgNV
BAMTDTZhNjkxNDdmLWUwMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDRxtTq5Fr2QHJhCzFMkmKWtJ+1os+pUbDGgxgaCdKI+khpj6kUeKJ+5vTN8bMD
7sA/PWzmAxMJNiPujffydWH6izrEU/cUSsRs6cd23VYsBEetM+50/8ye7y7kruIR
Cf/4NUrAmmjWLTk0TJo3RPyefLspRkNs0dm7/OYiPQfEsixemray5bo0NRUVDcaj
kvRXoHTRsYEP5Mftv2lrMV9mUhR2H2i206AL2BVxHAfkwEENm9ZeBcVGHVXorG9z
UG3Uhm/ns1vdEB76zSuET1vouNTQ0wTPHHy8UYzryiU4cxghHeRj4qFSTRnUeZa5
U28FWLAxd5KpxsuCJnKk0n0ZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6YM3sLCd
tGvBaYVxNrPNwGvxEywwHwYDVR0jBBgwFoAU2wVNT/SDuJTYCF4P43hs4um1MGIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1OERGLzBDNEJBODIwMzUx
QzExRjFBQjI4NkNBNzdDRUU1MjhFLzJ3Vk5UX1NEdUpUWUNGNFA0M2hzNHVtMU1H
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG
RDFGRjIvMndWTlRfU0R1SlRZQ0Y0UDQzaHM0dW0xTUdJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1
OERGLzBDNEJBODIwMzUxQzExRjFBQjI4NkNBNzdDRUU1MjhFLzJ3Vk5UX1NEdUpU
WUNGNFA0M2hzNHVtMU1HSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB0Bg7CEmYXcdptLcq3GtrqOo3Mj7FfP/Qx6m38tuomEi0CrxWdLSBdpwFgbXBI
fmw9b0Q8djj4DB3DXM66o7RYfSL9zSKW2Em3TqqspxXML2+3+zw9x7ErfMl9DGrr
aMhtJDv/V6Qk+AC+0anacShMxbCfeWlDDRhU9zY6qXtbj9G0tgeYObpafKVdWioM
vX7/4nS3W/6o4FOhVDPmEg14Zxf0+YWnaL/HbJ580W3pxKQIIfDSJkDr+bovznxi
v6N4Os66XO8/mjLzxhw2XBjx/lbLJcfrrF6DcInkzwa+JIYxEh2ZcG350lWyn8fq
I8WHDO6mNhTULruOiVPclt/D
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:08:23 2026 by rpki-client