Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
File:                     r2ctqMXR1sgNUGF4yefLdE9uOOY.mft (raw, json)
Hash identifier:          LiBQ8xztuRYVfznrH/WWdIez67bMVUTI5KW/GnQdUsw=
Subject key identifier:   B0:1F:E2:E8:3A:D8:E1:7C:73:4B:B7:47:8A:6C:E6:7C:2D:44:D7:D2
Authority key identifier: AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6
Certificate issuer:       /CN=A91A6F2D/serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6
Certificate serial:       0144
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
Manifest number:          013F
Signing time:             Tue 28 Jul 2026 22:59:08 +0000
Manifest this update:     Tue 28 Jul 2026 22:59:07 +0000
Manifest next update:     Tue 04 Aug 2026 22:59:07 +0000
Files and hashes:         1: r2ctqMXR1sgNUGF4yefLdE9uOOY.crl (hash: hjc62KgwBQWusBbzsSPweJYFWNR09CCnjr6OX9A2Pdg=)
                          2: FBE0AB56AC6511EFAEAA8A3CC4F9AE02.roa (hash: +IqdnY0bu/tedBPSD8j29fV45Yb1kBQrsRNgm4wsYso=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl
                          rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 22:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6F2D, serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6
        Validity
            Not Before: Jul 28 22:59:07 2026 GMT
            Not After : Aug  4 22:59:07 2026 GMT
        Subject: CN=6a69343c-c7ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a3:45:41:01:2b:82:c7:fc:00:04:cb:33:f7:
                    92:86:36:b3:fc:85:04:54:63:14:0e:25:8d:d7:40:
                    6d:80:f3:de:05:02:3c:08:df:15:fe:d2:d9:e5:98:
                    3d:8e:8c:f6:31:03:ea:62:dc:aa:a0:0e:49:cb:04:
                    eb:9f:78:65:4a:d2:79:76:fd:f4:71:67:66:2f:08:
                    da:fd:3d:a0:4e:bd:66:e5:55:f3:0c:e4:2f:d0:06:
                    93:92:b2:ff:42:95:63:9b:da:d3:08:fa:40:38:3b:
                    cf:54:bd:25:19:35:de:8c:75:08:01:74:b0:32:8a:
                    ba:7f:d5:a2:50:43:ac:a5:45:83:a6:3b:8d:c2:8f:
                    51:08:3c:d9:06:8f:8a:52:ac:6f:61:97:34:10:68:
                    a5:04:19:a5:a2:ad:c2:2a:17:b3:40:14:9a:c1:1b:
                    f1:80:6d:07:16:15:14:f2:42:4a:aa:78:88:e6:25:
                    65:0e:36:5c:bb:44:8b:51:fd:0e:ec:ef:aa:58:2a:
                    a7:5b:58:ad:f9:9d:c3:5e:f0:17:d0:fa:16:3b:79:
                    71:59:2a:54:6a:60:3a:ed:82:24:fe:c1:99:88:f3:
                    d6:54:1a:74:82:72:16:f6:ad:f5:bf:dd:e6:4c:69:
                    9e:f2:75:0e:c2:90:6b:9e:fa:39:22:d9:e9:92:a6:
                    81:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1F:E2:E8:3A:D8:E1:7C:73:4B:B7:47:8A:6C:E6:7C:2D:44:D7:D2
            X509v3 Authority Key Identifier:
                keyid:AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:f1:2e:00:ed:cb:6a:f4:73:74:8f:25:a4:a4:e3:af:a7:c7:
         7a:4b:ae:ac:d1:80:dd:03:86:4e:c3:b6:a6:5c:55:af:5f:2d:
         67:02:5c:f7:c9:2b:b1:17:48:b9:b2:f1:b4:2c:0f:59:03:72:
         aa:6c:08:0d:1e:25:81:1e:f8:4c:5e:15:df:ae:d8:27:ae:1f:
         0d:be:93:63:e8:13:af:40:b0:1e:39:df:e1:9b:21:0d:1e:e4:
         0f:9a:cf:28:a5:54:5a:f6:c8:00:22:91:59:dc:72:dc:44:c2:
         b9:8a:eb:6c:e8:a4:2c:4a:5b:37:fb:dc:0b:b9:2a:e3:3d:a7:
         82:1c:61:f0:46:a4:84:b4:ea:a6:a9:97:a4:60:31:75:51:08:
         68:78:31:9a:45:f4:3c:75:8b:eb:d0:bf:ab:4e:2a:89:b8:48:
         cd:5c:27:84:13:68:0f:a0:82:67:88:c0:59:98:ce:85:33:5c:
         dc:01:c5:c2:50:79:ed:04:0c:bf:17:99:a3:f7:6e:df:24:87:
         d0:e2:cc:0a:0d:fb:77:7b:46:02:57:d6:a7:d9:9a:9f:f2:d6:
         5c:e0:e8:6e:0c:50:d7:aa:5e:a5:d5:15:ba:3e:9e:05:53:1d:
         f4:c3:f2:3e:ad:00:c3:6a:9e:be:c9:e4:4a:e6:d0:6d:4c:49:
         e8:7a:59:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTZGMkQxMTAvBgNVBAUTKEFGNjcyREE4QzVEMUQ2QzgwRDUwNjE3OEM5RTdDQjc0
NEY2RTM4RTYwHhcNMjYwNzI4MjI1OTA3WhcNMjYwODA0MjI1OTA3WjAYMRYwFAYD
VQQDEw02YTY5MzQzYy1jN2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5aNFQQErgsf8AATLM/eShjaz/IUEVGMUDiWN10BtgPPeBQI8CN8V/tLZ5Zg9
joz2MQPqYtyqoA5JywTrn3hlStJ5dv30cWdmLwja/T2gTr1m5VXzDOQv0AaTkrL/
QpVjm9rTCPpAODvPVL0lGTXejHUIAXSwMoq6f9WiUEOspUWDpjuNwo9RCDzZBo+K
UqxvYZc0EGilBBmloq3CKhezQBSawRvxgG0HFhUU8kJKqniI5iVlDjZcu0SLUf0O
7O+qWCqnW1it+Z3DXvAX0PoWO3lxWSpUamA67YIk/sGZiPPWVBp0gnIW9q31v93m
TGme8nUOwpBrnvo5ItnpkqaB4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLAf4ug6
2OF8c0u3R4ps5nwtRNfSMB8GA1UdIwQYMBaAFK9nLajF0dbIDVBheMnny3RPbjjm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkYyRC82RjgyMTE3OEFC
ODgxMUVGODBDNzVBNzRDNEY5QUUwMi9yMmN0cU1YUjFzZ05VR0Y0eWVmTGRFOXVP
T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3IyY3RxTVhSMXNnTlVHRjR5ZWZMZEU5dU9PWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NkYyRC82RjgyMTE3OEFCODgxMUVGODBDNzVBNzRDNEY5QUUwMi9yMmN0cU1YUjFz
Z05VR0Y0eWVmTGRFOXVPT1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsPEuAO3LavRzdI8lpKTjr6fHekuurNGA3QOGTsO2plxVr18tZwJc98krsRdI
ubLxtCwPWQNyqmwIDR4lgR74TF4V367YJ64fDb6TY+gTr0CwHjnf4ZshDR7kD5rP
KKVUWvbIACKRWdxy3ETCuYrrbOikLEpbN/vcC7kq4z2nghxh8EakhLTqpqmXpGAx
dVEIaHgxmkX0PHWL69C/q04qibhIzVwnhBNoD6CCZ4jAWZjOhTNc3AHFwlB57QQM
vxeZo/du3ySH0OLMCg37d3tGAlfWp9man/LWXODobgxQ16pepdUVuj6eBVMd9MPy
Pq0Aw2qevsnkSubQbUxJ6HpZ5w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:43:22 2026 by rpki-client