Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
File:                     fd2N3PFW56GBobc5eyTUIJY1Pdg.mft (raw, json)
Hash identifier:          D+asLylBCPDN031+F7zqXJ79lF5l9E8p399bGfCIQus=
Subject key identifier:   97:0F:34:5F:50:21:1D:D1:46:23:FF:DA:2E:77:78:32:12:CF:DF:4E
Authority key identifier: 7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8
Certificate issuer:       /CN=A91A55EC/serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8
Certificate serial:       0534
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
Manifest number:          052A
Signing time:             Mon 27 Jul 2026 00:33:13 +0000
Manifest this update:     Mon 27 Jul 2026 00:33:13 +0000
Manifest next update:     Mon 03 Aug 2026 00:33:13 +0000
Files and hashes:         1: fd2N3PFW56GBobc5eyTUIJY1Pdg.crl (hash: RCHrh+uZ4hPx7qXE6FS8/a1btCrBS/Q4+SJoUv2YSDQ=)
                          2: 8E15FBF25CFF11ECB5477E0BC4F9AE02.roa (hash: 0Yuj8jwsHlCnMcg0SGtiJaONeRl25wMXy9ufRSKcIXM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl
                          rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:33:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1332 (0x534)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A55EC, serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8
        Validity
            Not Before: Jul 27 00:33:13 2026 GMT
            Not After : Aug  3 00:33:13 2026 GMT
        Subject: CN=6a66a749-c0d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:86:ba:10:3e:7e:8a:e8:a8:ba:42:b8:88:52:
                    79:50:f2:49:3e:32:a1:34:cd:35:e5:ab:da:7a:75:
                    ce:a9:e5:e6:36:16:8c:d0:a2:3b:5b:bd:45:b4:13:
                    bd:fa:2b:1b:ec:9f:13:7b:48:9a:89:f8:05:ba:a3:
                    31:1a:1b:fe:54:5e:b2:9d:0f:5f:9b:90:48:73:18:
                    c4:52:14:9b:ff:a8:d2:51:db:47:b0:44:96:50:aa:
                    a0:4b:4e:d4:f8:cb:40:12:86:4d:d2:e2:3a:a9:1a:
                    52:2e:89:2e:22:49:30:28:29:dd:94:46:c2:c8:ec:
                    48:b8:5d:26:ed:16:6b:0c:a9:ed:2e:97:4f:7d:dc:
                    af:3b:18:72:b1:c2:6e:6d:61:8f:4a:fb:8c:1f:9c:
                    93:2d:f5:fb:88:94:2c:84:95:b5:bc:9f:18:83:7f:
                    96:e1:aa:8b:57:24:5f:e1:93:46:71:6b:36:57:46:
                    10:9f:b3:e7:b3:93:1c:87:93:08:ba:4f:35:2c:0b:
                    b6:34:56:e5:c1:b2:cb:53:c3:73:d0:35:fc:fd:0c:
                    ca:66:46:a1:75:c3:5c:0a:b4:56:2a:f9:98:3d:e1:
                    8d:27:9d:d6:1f:8f:53:e1:c2:f7:c9:3e:1f:63:98:
                    c0:4d:6e:cb:f5:56:97:ee:a9:75:85:50:bc:66:bb:
                    9c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:0F:34:5F:50:21:1D:D1:46:23:FF:DA:2E:77:78:32:12:CF:DF:4E
            X509v3 Authority Key Identifier:
                keyid:7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:50:5f:9b:1d:60:a6:f7:de:9d:53:35:78:85:85:87:c1:14:
         84:af:92:34:0f:37:13:7b:1d:78:37:77:c9:e4:11:de:1f:fd:
         d6:01:b5:0e:a5:47:2b:50:3f:64:12:45:f7:8e:e5:98:8d:17:
         7b:8d:b1:8f:14:6b:1c:b5:e1:af:30:d7:16:27:eb:b5:a1:64:
         41:cd:dd:df:9f:af:b6:17:fe:15:df:7c:d0:0c:9d:8c:51:af:
         4a:c5:86:f1:6d:b9:64:8a:0c:e3:8a:52:9d:13:12:f6:b4:32:
         d0:ca:4d:3a:94:21:02:eb:42:9d:b1:5c:14:bf:90:60:d0:08:
         a7:5a:78:82:4e:8e:15:b8:61:ee:78:1f:1b:4b:9e:31:ac:4a:
         e0:c1:65:4e:c3:29:d9:2a:62:ec:09:c3:03:0a:74:da:6a:7f:
         b3:56:94:25:8e:63:8f:7f:da:f7:8e:3f:1f:b8:f7:bc:f7:31:
         d0:8f:c8:43:9a:1b:26:ff:5b:ee:d8:85:dd:c1:39:9d:24:83:
         29:f3:4d:50:c8:64:73:4f:1f:b3:e0:9e:15:f9:7a:01:3e:e0:
         97:12:da:e4:b1:b7:22:99:6a:3d:8b:73:93:cb:ef:cf:5a:49:
         59:9d:f3:b8:ed:48:a2:3d:e8:45:05:fe:6c:61:d3:68:38:3a:
         13:00:d7:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU1RUMxMTAvBgNVBAUTKDdEREQ4RERDRjE1NkU3QTE4MUExQjczOTdCMjRENDIw
OTYzNTNERDgwHhcNMjYwNzI3MDAzMzEzWhcNMjYwODAzMDAzMzEzWjAYMRYwFAYD
VQQDEw02YTY2YTc0OS1jMGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA24a6ED5+iuioukK4iFJ5UPJJPjKhNM015avaenXOqeXmNhaM0KI7W71FtBO9
+isb7J8Te0iaifgFuqMxGhv+VF6ynQ9fm5BIcxjEUhSb/6jSUdtHsESWUKqgS07U
+MtAEoZN0uI6qRpSLokuIkkwKCndlEbCyOxIuF0m7RZrDKntLpdPfdyvOxhyscJu
bWGPSvuMH5yTLfX7iJQshJW1vJ8Yg3+W4aqLVyRf4ZNGcWs2V0YQn7Pns5Mch5MI
uk81LAu2NFblwbLLU8Nz0DX8/QzKZkahdcNcCrRWKvmYPeGNJ53WH49T4cL3yT4f
Y5jATW7L9VaX7ql1hVC8ZrucAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJcPNF9Q
IR3RRiP/2i53eDISz99OMB8GA1UdIwQYMBaAFH3djdzxVuehgaG3OXsk1CCWNT3Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVFQy9ERjY1REU5MjU3
ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2R0JvYmM1ZXlUVUlKWTFQ
ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZkMk4zUEZXNTZHQm9iYzVleVRVSUpZMVBkZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NTVFQy9ERjY1REU5MjU3ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2
R0JvYmM1ZXlUVUlKWTFQZGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGVBfmx1gpvfenVM1eIWFh8EUhK+SNA83E3sdeDd3yeQR3h/91gG1DqVHK1A/
ZBJF947lmI0Xe42xjxRrHLXhrzDXFifrtaFkQc3d35+vthf+Fd980AydjFGvSsWG
8W25ZIoM44pSnRMS9rQy0MpNOpQhAutCnbFcFL+QYNAIp1p4gk6OFbhh7ngfG0ue
MaxK4MFlTsMp2Spi7AnDAwp02mp/s1aUJY5jj3/a944/H7j3vPcx0I/IQ5obJv9b
7tiF3cE5nSSDKfNNUMhkc08fs+CeFfl6AT7glxLa5LG3IplqPYtzk8vvz1pJWZ3z
uO1Ioj3oRQX+bGHTaDg6EwDXmw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:49:53 2026 by rpki-client