Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft
File:                     eFfRGlHcrpwuCIahDOBvVfW4QwA.mft (raw, json)
Hash identifier:          ha5TLPczUdJUY1QuS5vJmKt3FD8RnlvJHQVTm5gVgFo=
Subject key identifier:   BA:91:03:78:9C:E3:51:4B:49:9D:CB:2B:6D:86:91:3F:87:40:9A:5F
Authority key identifier: 78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00
Certificate issuer:       /CN=A91A5D8A/serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300
Certificate serial:       069A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft
Manifest number:          0689
Signing time:             Sun 26 Jul 2026 23:21:47 +0000
Manifest this update:     Sun 26 Jul 2026 23:21:47 +0000
Manifest next update:     Sun 02 Aug 2026 23:21:47 +0000
Files and hashes:         1: eFfRGlHcrpwuCIahDOBvVfW4QwA.crl (hash: gAuD6seCTKhGd6MOmYPeBvKboasZyMLSkFlvtMeXZbI=)
                          2: 324C60ACDD2211F0BB0B52AC636F56BC.roa (hash: DeEQGurqm7eSpSsYzXwNaAtssPLf2RiuTFIL21AIcCE=)
                          3: 18981398329B11EDB9F09862C4F9AE02.roa (hash: BIoQ+elASRB2TiBp78lt2ETWeyKSdC3Iplvz/Xmhi9o=)
                          4: 8183B0FACAF111EBA40AF15BC4F9AE02.roa (hash: Zg+eHPdVNDM4QI8KEgw81Og4McuXzxsHfkNcln3oKOk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl
                          rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1690 (0x69a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5D8A, serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300
        Validity
            Not Before: Jul 26 23:21:47 2026 GMT
            Not After : Aug  2 23:21:47 2026 GMT
        Subject: CN=6a66968b-17a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2a:00:c6:e7:c8:ce:78:35:58:13:57:b9:52:
                    7d:70:31:f3:d6:ed:f4:f8:83:8d:38:e9:95:fd:ba:
                    ce:fc:11:6d:ed:93:af:fa:ec:e7:d9:69:43:24:d6:
                    89:33:38:21:d9:6b:13:46:78:eb:fd:57:67:99:cd:
                    68:2b:b4:3a:24:a3:47:58:41:4a:d5:c9:de:c1:61:
                    be:db:7b:2b:da:48:6d:02:ed:9a:51:32:b4:11:b8:
                    14:dd:a0:4c:d3:b0:f6:a1:07:ef:b1:ad:9c:ec:7f:
                    a1:1f:60:36:db:28:97:db:50:34:c1:ba:30:70:19:
                    43:2e:33:7e:1a:a5:4e:d1:b2:14:63:6d:75:51:38:
                    2b:47:09:ef:b8:23:ce:3f:16:a1:73:01:04:48:e5:
                    1e:26:1f:ff:a3:c5:89:45:62:92:85:01:a7:1d:71:
                    84:cf:0c:d6:f7:93:45:52:47:30:36:2d:1e:5d:26:
                    8e:db:d3:5a:61:49:7b:9b:5d:75:b0:47:a4:1d:1c:
                    a4:6a:9b:29:64:1a:26:91:c1:25:e8:23:39:ef:2f:
                    8f:da:4a:f8:7c:f1:ea:2a:43:b2:b5:b1:ce:be:c1:
                    d4:97:65:aa:cf:a3:2b:a6:3d:86:e1:f4:57:a7:18:
                    65:49:eb:e1:c7:f4:24:8c:81:e6:28:5b:83:6d:5e:
                    15:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:91:03:78:9C:E3:51:4B:49:9D:CB:2B:6D:86:91:3F:87:40:9A:5F
            X509v3 Authority Key Identifier:
                keyid:78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c2:16:3f:46:3f:e2:23:de:1e:f5:ad:a6:ec:e2:f3:9b:15:
         81:06:53:1f:df:21:66:f7:1b:40:1b:af:e7:fb:b9:fb:c5:ed:
         2e:ba:e7:6e:19:7f:ba:4d:75:9d:bf:a1:c3:4e:d3:f9:34:5c:
         10:de:3b:5f:66:5b:1c:d4:f3:ff:c0:9e:37:31:cc:fe:ff:bb:
         7d:0a:e0:bb:36:39:87:03:fb:21:e1:df:df:64:09:80:86:26:
         2d:df:d9:f4:9f:bb:a1:78:bf:7c:91:34:cd:57:1c:ae:80:cc:
         d7:4f:ac:3d:35:b9:dc:4b:e6:b6:4d:f3:cb:e4:23:90:fd:43:
         9d:97:b6:ca:f2:3c:8e:7c:4e:6b:08:06:98:ff:04:67:45:15:
         ce:79:4b:3a:ad:9e:3e:dd:05:56:91:0c:4b:99:77:fa:a7:64:
         2f:0c:9b:77:10:f8:ff:e8:9e:f7:ec:71:0f:83:b3:a8:59:14:
         50:b2:41:00:a1:5b:b4:f9:92:c6:23:b8:b6:0b:9d:66:91:32:
         8e:ad:a2:85:fe:30:99:eb:a8:9d:d0:03:9e:76:b7:63:5f:67:
         03:29:8b:82:67:24:70:4d:98:6d:d7:e3:d7:c5:81:dd:90:a4:
         fa:6a:b5:75:f5:7a:d3:51:6d:7f:e2:32:55:c5:83:92:58:19:
         36:c1:a1:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTVEOEExMTAvBgNVBAUTKDc4NTdEMTFBNTFEQ0FFOUMyRTA4ODZBMTBDRTA2RjU1
RjVCODQzMDAwHhcNMjYwNzI2MjMyMTQ3WhcNMjYwODAyMjMyMTQ3WjAYMRYwFAYD
VQQDEw02YTY2OTY4Yi0xN2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtCoAxufIzng1WBNXuVJ9cDHz1u30+IONOOmV/brO/BFt7ZOv+uzn2WlDJNaJ
Mzgh2WsTRnjr/Vdnmc1oK7Q6JKNHWEFK1cnewWG+23sr2khtAu2aUTK0EbgU3aBM
07D2oQfvsa2c7H+hH2A22yiX21A0wbowcBlDLjN+GqVO0bIUY211UTgrRwnvuCPO
PxahcwEESOUeJh//o8WJRWKShQGnHXGEzwzW95NFUkcwNi0eXSaO29NaYUl7m111
sEekHRykapspZBomkcEl6CM57y+P2kr4fPHqKkOytbHOvsHUl2Wqz6Mrpj2G4fRX
pxhlSevhx/QkjIHmKFuDbV4V2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLqRA3ic
41FLSZ3LK22GkT+HQJpfMB8GA1UdIwQYMBaAFHhX0RpR3K6cLgiGoQzgb1X1uEMA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUQ4QS9CQTJGMUI5QUNB
RUUxMUVCQTJGQkQwNTZDNEY5QUUwMi9lRmZSR2xIY3Jwd3VDSWFoRE9CdlZmVzRR
d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VGZlJHbEhjcnB3dUNJYWhET0J2VmZXNFF3QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NUQ4QS9CQTJGMUI5QUNBRUUxMUVCQTJGQkQwNTZDNEY5QUUwMi9lRmZSR2xIY3Jw
d3VDSWFoRE9CdlZmVzRRd0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATcIWP0Y/4iPeHvWtpuzi85sVgQZTH98hZvcbQBuv5/u5+8XtLrrnbhl/uk11
nb+hw07T+TRcEN47X2ZbHNTz/8CeNzHM/v+7fQrguzY5hwP7IeHf32QJgIYmLd/Z
9J+7oXi/fJE0zVccroDM10+sPTW53Evmtk3zy+QjkP1DnZe2yvI8jnxOawgGmP8E
Z0UVznlLOq2ePt0FVpEMS5l3+qdkLwybdxD4/+ie9+xxD4OzqFkUULJBAKFbtPmS
xiO4tgudZpEyjq2ihf4wmeuondADnna3Y19nAymLgmckcE2Ybdfj18WB3ZCk+mq1
dfV601Ftf+IyVcWDklgZNsGhVg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:17:22 2026 by rpki-client