Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
File:                     -luvRrfLLI40Y4OqgMs5ayuBxkw.mft (raw, json)
Hash identifier:          zBzNO2I8Db4A+cEKD9gXaVy2OZdafCjEX1scXBIgwTM=
Subject key identifier:   36:CC:A0:61:F5:E5:AF:17:92:5A:15:7E:AE:60:30:1A:12:CB:E5:58
Authority key identifier: FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C
Certificate issuer:       /CN=A91A29D7/serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C
Certificate serial:       9F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
Manifest number:          97
Signing time:             Mon 27 Jul 2026 09:36:49 +0000
Manifest this update:     Mon 27 Jul 2026 09:36:48 +0000
Manifest next update:     Mon 03 Aug 2026 09:36:48 +0000
Files and hashes:         1: -luvRrfLLI40Y4OqgMs5ayuBxkw.crl (hash: 0vNdsbglbrdwrJmsXj/Muk9H1Lrp9bLrzYZiVdO5xXk=)
                          2: 753E1B20B1B311F0BD0C0785C4F9AE02.roa (hash: ED82Gz6lXOAzlBWFeylwQ9Gjq7iIkbcvN+6T0EoH08c=)
                          3: 4AAED6B23C1211F19A15FB09B6833773.roa (hash: zaCJCnJ8P+IQJ9n9t86hTBhempUXa3QuJJB9ZKjuD4o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl
                          rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:36:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A29D7, serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C
        Validity
            Not Before: Jul 27 09:36:48 2026 GMT
            Not After : Aug  3 09:36:48 2026 GMT
        Subject: CN=6a6726b1-0f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:97:0b:f6:0c:0e:8b:16:67:7c:a6:fd:21:a1:
                    33:70:71:f6:2a:37:ee:40:93:ec:c4:53:06:ab:24:
                    f1:00:ef:18:c8:56:aa:90:1e:13:1f:17:5d:56:b0:
                    a0:18:4c:8e:b1:24:96:de:e4:d6:49:cc:7e:59:fa:
                    04:24:9a:69:36:b2:0c:a5:9a:1d:4e:93:5b:60:1a:
                    8e:b4:07:9c:4b:1c:d0:7e:75:fc:c4:bd:eb:70:b0:
                    c6:3a:85:41:6d:71:b9:70:75:25:fe:c4:88:59:c5:
                    52:e6:56:5c:6e:48:a0:ad:dd:c0:d8:8a:24:bb:11:
                    f3:73:a1:51:73:03:e6:b1:f9:ab:b3:45:e8:3c:4f:
                    6a:84:c2:3e:93:09:26:57:01:04:c3:72:c2:73:09:
                    43:d5:a0:ed:a8:c5:e2:43:9c:60:0a:1d:02:cf:6d:
                    67:52:3d:9c:a5:2b:7d:c5:d3:17:d3:b6:ec:88:aa:
                    6c:6b:98:c0:66:68:08:d0:65:f4:2b:71:a0:fc:25:
                    06:be:9d:e8:ff:c6:f1:28:73:35:d7:e7:6e:80:5d:
                    d6:a1:4f:ba:c3:6a:ac:cd:46:57:4c:51:f4:18:32:
                    39:de:3b:10:7a:23:0e:2a:61:17:a3:b8:16:be:3d:
                    53:f3:de:33:42:74:4a:d0:47:a0:d1:8c:97:74:74:
                    3d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CC:A0:61:F5:E5:AF:17:92:5A:15:7E:AE:60:30:1A:12:CB:E5:58
            X509v3 Authority Key Identifier:
                keyid:FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:4c:f6:88:01:84:5c:4f:d6:d8:62:9d:4d:ad:6e:e9:b5:de:
         e0:fe:d9:8d:98:b6:2c:86:70:8b:56:97:fc:a6:43:98:16:93:
         1f:69:39:79:e6:08:60:02:b2:82:9f:41:4b:fd:45:d0:4d:f1:
         b8:29:63:e1:49:69:93:41:2c:f1:7f:2f:89:15:80:28:b9:88:
         ac:e7:00:18:75:fe:71:81:f7:85:82:84:fe:17:5f:74:eb:55:
         d0:2e:d3:c9:d2:1a:71:0a:74:24:d4:4c:e9:86:f0:2b:ba:93:
         cb:48:c1:40:4b:32:51:51:95:cf:48:26:b1:75:42:21:74:b9:
         85:59:52:05:d7:f3:e2:09:1b:bf:75:90:70:6b:63:3c:40:a4:
         eb:ea:9a:27:44:85:05:0e:d3:45:cb:60:b1:18:76:fb:16:ec:
         5d:92:4d:9e:65:63:63:10:6b:bd:2d:b6:c8:93:ca:95:23:7d:
         2d:c5:92:ff:4a:ed:6a:1b:b8:5a:49:98:24:30:e7:a1:05:71:
         c7:09:ba:3e:29:93:78:d2:ed:82:31:ad:1c:86:e5:c7:d3:d7:
         dc:92:a1:be:4b:4a:b5:e5:0a:8a:23:75:09:1c:c2:32:70:0a:
         ce:73:03:02:dd:0b:ab:40:9b:2a:ff:fc:f1:86:3f:8a:c7:bb:
         04:95:a3:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTI5RDcxMTAvBgNVBAUTKEZBNUJBRjQ2QjdDQjJDOEUzNDYzODNBQTgwQ0IzOTZC
MkI4MUM2NEMwHhcNMjYwNzI3MDkzNjQ4WhcNMjYwODAzMDkzNjQ4WjAYMRYwFAYD
VQQDEw02YTY3MjZiMS0wZjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl5cL9gwOixZnfKb9IaEzcHH2KjfuQJPsxFMGqyTxAO8YyFaqkB4THxddVrCg
GEyOsSSW3uTWScx+WfoEJJppNrIMpZodTpNbYBqOtAecSxzQfnX8xL3rcLDGOoVB
bXG5cHUl/sSIWcVS5lZcbkigrd3A2IokuxHzc6FRcwPmsfmrs0XoPE9qhMI+kwkm
VwEEw3LCcwlD1aDtqMXiQ5xgCh0Cz21nUj2cpSt9xdMX07bsiKpsa5jAZmgI0GX0
K3Gg/CUGvp3o/8bxKHM11+dugF3WoU+6w2qszUZXTFH0GDI53jsQeiMOKmEXo7gW
vj1T894zQnRK0Eeg0YyXdHQ9HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDbMoGH1
5a8XkloVfq5gMBoSy+VYMB8GA1UdIwQYMBaAFPpbr0a3yyyONGODqoDLOWsrgcZM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjlENy9GMjNDNERGMkFE
NzMxMUYwQUY2NTAyNTRDNEY5QUUwMi8tbHV2UnJmTExJNDBZNE9xZ01zNWF5dUJ4
a3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLy1sdXZScmZMTEk0MFk0T3FnTXM1YXl1Qnhrdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MjlENy9GMjNDNERGMkFENzMxMUYwQUY2NTAyNTRDNEY5QUUwMi8tbHV2UnJmTExJ
NDBZNE9xZ01zNWF5dUJ4a3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVEz2iAGEXE/W2GKdTa1u6bXe4P7ZjZi2LIZwi1aX/KZDmBaTH2k5eeYIYAKy
gp9BS/1F0E3xuClj4Ulpk0Es8X8viRWAKLmIrOcAGHX+cYH3hYKE/hdfdOtV0C7T
ydIacQp0JNRM6YbwK7qTy0jBQEsyUVGVz0gmsXVCIXS5hVlSBdfz4gkbv3WQcGtj
PECk6+qaJ0SFBQ7TRctgsRh2+xbsXZJNnmVjYxBrvS22yJPKlSN9LcWS/0rtahu4
WkmYJDDnoQVxxwm6PimTeNLtgjGtHIblx9PX3JKhvktKteUKiiN1CRzCMnAKznMD
At0Lq0CbKv/88YY/ise7BJWj+g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:52:34 2026 by rpki-client