Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
File:                     tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json)
Hash identifier:          JMV5sNWQdHrR5zAZmBJYCqnfYazXbP1qSgiwiezjgeU=
Subject key identifier:   11:42:ED:89:EC:7C:CA:87:A2:28:AC:EB:6F:CC:49:6E:A6:18:B9:31
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Certificate issuer:       /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial:       0DA3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
Manifest number:          0CC9
Signing time:             Tue 28 Jul 2026 19:05:19 +0000
Manifest this update:     Tue 28 Jul 2026 19:05:19 +0000
Manifest next update:     Tue 04 Aug 2026 19:05:19 +0000
Files and hashes:         1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: cDR+id8OTkm5jFH59ix8vdq6sgKjRFeXRDfbu32xCcs=)
                          2: E3903588DA3311F082FD85DA8AD3641D.roa (hash: MfOj3lbGuO/G5TuCaMkDAViR5jscnY+4WI5jIiqpGsA=)
                          3: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (hash: rx1Mf7ylLJlz5TrZQMaxu72qnNGJnnaZIoeFSJobN+E=)
                          4: 50C74740608511F1B54688666E47A888.roa (hash: IQGnQ5zQbYNcFjoaC/X8FlYzSh99L1UkIksPVrl/4Lc=)
                          5: 5164F13EDBD811F0A0A88CE756641951.roa (hash: S+wwMGadgYhMS5OREKeaPh6PDBaoFk4/7hdgf2PBnsw=)
                          6: F3B9AEC4740A11F09DAF2A29C4F9AE02.roa (hash: X5kHDpuuQNfIGRpaueB+R7zUfzuivixJGb6q6/nzsAU=)
                          7: E58488D0BB7A11F09DC5801DC4F9AE02.roa (hash: lZKpR1VVIPheOf685hGoxyJuXh0TJ+bcZ5UNcYowwXY=)
                          8: F894F5B0E09411F0B3B2B389426F56BC.roa (hash: g2GkrwqDM8g4EPcoRU14VtmMWrRkEc3nm/o6l5+kRws=)
                          9: 8BEC7D66E54911F091014A6A756F56BC.roa (hash: gHvNsWly8Kw30Typ48MzQXoDCYERYi0RW34Z6gmffVg=)
                          10: 76BF01E88EF511F0BA815369C4F9AE02.roa (hash: rfIVMs6AUfnF9P9/mHach4AIencfTT3AboN2vIjJlGQ=)
                          11: 8B5ED70E821611F0B778F47DC4F9AE02.roa (hash: aEhA9+ssD2dfx+1WtFOaw2FrI9zywwb1i6+vFoIN8fo=)
                          12: 43DCAEE0BBE811F092C97714C4F9AE02.roa (hash: s+8+Ay/MDWEzNmYQjEi8P9yXENJTqx4r4dR7RY92skY=)
                          13: 234D0D6C500611F08771CE55C4F9AE02.roa (hash: tLlrYfQgXxnaToikebv9ZSOJv+09BIPvjOuMTXnI+m0=)
                          14: 622E19EEDA1811F0A393A6F584D3641D.roa (hash: RcYolDaRAN1Hi//EmOTv5sFW3I9hLGGajXq2gFlI3o8=)
                          15: 1D231FDEBDD511F0BAEEED5AC4F9AE02.roa (hash: bq9TzRhG0YcuxnkwLOhAfWs5GL/Qvk3+Q63cN6+9Ro4=)
                          16: 6ACD5ACC227711F1A91DCF18A4833773.roa (hash: TJMnHoqNrDu0s7s8nY8tdFhEqoWxtnw6hx5yIb/HoEo=)
                          17: C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa (hash: A4zYqw73DHHyadBQLcyhIlD6IDAEqxDy3foGsjv4EZ8=)
                          18: 1DB49770BDD511F0BF83ED5AC4F9AE02.roa (hash: 6JLMteJnja7+tiZnKdI5bf0UkqKb/Uh5AX2ANHa//84=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:05:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3491 (0xda3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
        Validity
            Not Before: Jul 28 19:05:19 2026 GMT
            Not After : Aug  4 19:05:19 2026 GMT
        Subject: CN=6a68fd6f-5b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:40:a3:e4:3f:50:f2:4f:6c:61:73:30:97:fa:
                    d8:cd:aa:46:cc:f7:cb:dd:42:de:71:dc:e1:e3:11:
                    fe:d3:96:36:7b:05:4c:f8:e9:39:58:01:4d:cb:d6:
                    05:0f:d1:75:85:5c:e5:a2:c4:dc:ab:6e:e5:35:bb:
                    63:41:69:c4:f8:d6:1b:b0:7f:c0:16:41:05:38:6b:
                    a2:9a:24:f0:61:03:d3:3c:a7:0b:7f:75:28:cd:da:
                    4c:f6:32:f5:b6:9c:a4:44:a0:cd:46:c8:b1:f1:2a:
                    08:42:55:48:ef:3d:35:58:32:a3:ae:ee:52:92:af:
                    34:c0:77:11:6f:57:cc:2d:38:e2:62:03:e3:43:59:
                    42:9a:d0:a0:e8:a3:e4:f8:ba:47:d4:1d:e2:0a:4f:
                    ab:c5:c7:e2:1a:58:67:09:39:a2:74:8a:71:82:ea:
                    03:24:8a:99:5b:d8:eb:a6:4b:98:02:39:83:14:1c:
                    ab:f2:bc:8b:68:41:17:4d:f7:75:d9:64:f4:93:2b:
                    bd:cf:ee:26:20:c5:8d:bf:34:3c:4f:51:e5:7f:f5:
                    a0:6c:69:77:98:e1:f5:ca:b1:3f:f5:ea:ec:e1:db:
                    de:bd:e3:cc:8e:92:8f:7b:aa:0b:0e:44:48:59:18:
                    05:18:e7:85:da:d7:e8:30:6e:ea:b2:c9:32:10:69:
                    0b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:42:ED:89:EC:7C:CA:87:A2:28:AC:EB:6F:CC:49:6E:A6:18:B9:31
            X509v3 Authority Key Identifier:
                keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:48:23:d3:fe:2d:fb:79:ed:09:dd:fa:c9:72:27:82:d6:d7:
         7b:b2:a8:33:ec:0b:75:78:9d:c0:1b:48:20:3e:77:8c:05:18:
         da:90:f3:51:07:77:e5:9a:43:b0:8e:98:8f:c8:c3:23:7b:46:
         65:a1:9e:52:18:01:93:a8:93:4c:77:32:20:25:9e:d0:87:25:
         ca:75:c3:ce:10:be:49:85:ab:49:60:e4:d3:b1:2b:f7:97:19:
         b9:56:a3:4b:6d:66:de:18:98:d0:31:05:70:a3:45:48:8a:18:
         f1:27:eb:a1:7f:bb:0e:6b:ea:c9:85:db:34:71:10:cb:7a:0b:
         21:ac:12:0e:68:e7:8e:14:14:cb:63:88:c1:2a:d3:e9:52:76:
         3b:4b:58:fa:03:13:12:bb:e5:d5:d4:b8:20:5d:93:ee:80:8d:
         8d:c0:cd:13:5a:1e:0f:a3:24:d6:da:6f:1b:93:c0:f2:ab:6c:
         81:e8:4c:dd:1e:7e:8d:ba:b0:56:3a:83:d5:b4:56:34:80:3e:
         e5:da:e7:6b:33:df:f8:c6:43:84:6b:f8:a3:3b:a1:dc:b3:d8:
         b3:6e:c8:5a:71:1f:c5:1e:a2:ab:21:7f:15:90:b5:5b:c8:37:
         5d:e7:f2:bc:7e:72:99:cd:0b:c7:2d:88:75:8d:24:a1:0b:8e:
         21:63:4e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:45:01 2026 by rpki-client