Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft
File:                     CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft (raw, json)
Hash identifier:          nDP4o9iBEd05pOXAazh12pLSf3Upl1gbcJlPFfQ5h2U=
Subject key identifier:   FF:5E:8F:E2:1E:62:A4:E2:5A:A4:0E:AC:AD:AC:9A:F9:71:FE:BF:43
Authority key identifier: 0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD
Certificate issuer:       /CN=A91777B9/serialNumber=0A088A19BBDB61DED1916C860AB2B8BEE186EDCD
Certificate serial:       015A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft
Manifest number:          015A
Signing time:             Mon 27 Jul 2026 06:54:47 +0000
Manifest this update:     Mon 27 Jul 2026 06:54:46 +0000
Manifest next update:     Mon 03 Aug 2026 06:54:46 +0000
Files and hashes:         1: CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl (hash: LoOfg0r/cRn/Gfa+APPL4ZLAYupDlw7KzyRxCQOJyEI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl
                          rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:54:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91777B9, serialNumber=0A088A19BBDB61DED1916C860AB2B8BEE186EDCD
        Validity
            Not Before: Jul 27 06:54:46 2026 GMT
            Not After : Aug  3 06:54:46 2026 GMT
        Subject: CN=6a6700b7-a1c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:be:37:e6:d7:bb:06:75:ab:d3:9d:b1:38:3b:
                    b7:40:58:fc:e1:9c:8f:c0:ac:5c:4d:27:3a:14:56:
                    0a:1a:2e:36:e3:23:de:9a:c5:b6:93:1c:1e:1e:d3:
                    86:5e:2d:02:9d:d6:c5:d6:06:bf:60:89:f2:dd:a6:
                    cb:dd:bd:8c:6c:00:c2:96:f0:2f:19:6a:bc:dc:cb:
                    97:1e:c0:25:c2:86:00:ee:8f:3c:5f:ac:26:9b:eb:
                    7a:f2:5b:13:67:ed:bc:4c:31:56:c1:ce:9f:ef:d2:
                    19:f4:42:56:23:c1:c3:33:09:88:f7:7d:8c:0d:c8:
                    9d:1f:64:db:84:18:5c:c8:28:86:7a:f0:f0:94:18:
                    17:ce:ee:b4:65:cd:3d:e9:98:2d:95:c8:f2:08:ca:
                    0b:fc:1b:e9:a3:ee:93:81:ef:9b:9f:26:59:84:47:
                    36:5c:b4:a2:d0:95:56:50:9d:b0:d1:13:4e:88:a4:
                    da:23:b7:04:de:58:98:ea:5f:7b:84:4a:7f:e2:63:
                    af:2d:c6:b8:40:fd:e1:3b:90:b9:3b:cc:43:0f:85:
                    bb:86:58:cd:d2:0e:63:6f:92:7f:09:46:b8:0e:22:
                    bb:e2:28:78:6d:71:b9:d6:87:c4:bb:e6:85:93:cd:
                    c5:0d:c5:f2:22:0d:df:b4:75:bd:6b:d4:3d:c1:49:
                    1e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5E:8F:E2:1E:62:A4:E2:5A:A4:0E:AC:AD:AC:9A:F9:71:FE:BF:43
            X509v3 Authority Key Identifier:
                keyid:0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ed:e8:87:a5:64:59:4c:7f:cd:1a:de:47:66:ad:a8:62:f9:
         fc:32:d1:cb:92:5e:3d:b2:9c:69:0f:3b:b0:50:91:ef:ac:a6:
         f4:ac:07:47:a2:dc:ae:f2:71:99:d7:0d:49:1e:cb:ae:22:14:
         24:e6:22:61:5a:c8:b3:d3:d0:d0:86:d6:d4:88:31:d5:9a:75:
         62:b9:69:e6:1f:79:3e:9b:99:0d:04:9e:ac:3f:6f:d5:16:8a:
         12:5d:80:9b:12:05:65:7c:09:dd:bf:da:d1:28:34:27:8c:64:
         27:56:28:22:9f:a9:79:e4:8d:2b:b2:86:0b:d7:b5:43:8c:d6:
         70:51:83:ea:0b:63:be:f3:27:bb:5e:e0:8f:3e:a3:83:f0:e0:
         65:2d:b9:d0:a8:14:f9:f7:ae:dc:93:7b:ff:08:ba:3e:7e:b2:
         c3:4d:2b:7d:3d:e7:b0:3a:c3:bd:73:c1:85:c2:87:9e:36:66:
         ab:9a:a0:cd:38:fe:a1:d7:ca:91:c2:53:55:bc:15:82:6c:f8:
         f3:f5:c5:dd:bd:4d:21:b5:f6:5a:23:1e:1f:2b:8f:eb:ef:b3:
         a5:16:bb:19:ee:7e:c9:e0:14:3d:35:e1:2e:5b:14:7a:81:13:
         6c:22:35:f5:33:47:92:26:d8:e7:57:b8:21:59:c4:78:85:3d:
         76:df:bd:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzc3QjkxMTAvBgNVBAUTKDBBMDg4QTE5QkJEQjYxREVEMTkxNkM4NjBBQjJCOEJF
RTE4NkVEQ0QwHhcNMjYwNzI3MDY1NDQ2WhcNMjYwODAzMDY1NDQ2WjAYMRYwFAYD
VQQDEw02YTY3MDBiNy1hMWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAub435te7BnWr052xODu3QFj84ZyPwKxcTSc6FFYKGi424yPemsW2kxweHtOG
Xi0CndbF1ga/YIny3abL3b2MbADClvAvGWq83MuXHsAlwoYA7o88X6wmm+t68lsT
Z+28TDFWwc6f79IZ9EJWI8HDMwmI932MDcidH2TbhBhcyCiGevDwlBgXzu60Zc09
6ZgtlcjyCMoL/Bvpo+6Tge+bnyZZhEc2XLSi0JVWUJ2w0RNOiKTaI7cE3liY6l97
hEp/4mOvLca4QP3hO5C5O8xDD4W7hljN0g5jb5J/CUa4DiK74ih4bXG51ofEu+aF
k83FDcXyIg3ftHW9a9Q9wUkeQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP9ej+Ie
YqTiWqQOrK2smvlx/r9DMB8GA1UdIwQYMBaAFAoIihm722He0ZFshgqyuL7hhu3N
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzdCOS9EQjUxN0IwODc1
QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9DZ2lLR2J2YllkN1JrV3lHQ3JLNHZ1R0c3
YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NnaUtHYnZiWWQ3UmtXeUdDcks0dnVHRzdjMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NzdCOS9EQjUxN0IwODc1QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9DZ2lLR2J2Yllk
N1JrV3lHQ3JLNHZ1R0c3YzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF+3oh6VkWUx/zRreR2atqGL5/DLRy5JePbKcaQ87sFCR76ym9KwHR6LcrvJx
mdcNSR7LriIUJOYiYVrIs9PQ0IbW1Igx1Zp1Yrlp5h95PpuZDQSerD9v1RaKEl2A
mxIFZXwJ3b/a0Sg0J4xkJ1YoIp+peeSNK7KGC9e1Q4zWcFGD6gtjvvMnu17gjz6j
g/DgZS250KgU+feu3JN7/wi6Pn6yw00rfT3nsDrDvXPBhcKHnjZmq5qgzTj+odfK
kcJTVbwVgmz48/XF3b1NIbX2WiMeHyuP6++zpRa7Ge5+yeAUPTXhLlsUeoETbCI1
9TNHkibY51e4IVnEeIU9dt+9gw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:37:29 2026 by rpki-client