Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft
File:                     f_x8VcpIXDdqYe_sDlN3ZToEw70.mft (raw, json)
Hash identifier:          A+QY52jTCGDZPz4Cfm0UMKwoXjtyeRhQwgmcQNVw7bc=
Subject key identifier:   95:19:6E:65:B5:F8:54:A2:D5:B0:83:3D:B4:8B:E3:E5:40:09:87:8A
Authority key identifier: 7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD
Certificate issuer:       /CN=A91ABD25/serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD
Certificate serial:       02DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft
Manifest number:          02CE
Signing time:             Mon 27 Jul 2026 02:34:07 +0000
Manifest this update:     Mon 27 Jul 2026 02:34:06 +0000
Manifest next update:     Mon 03 Aug 2026 02:34:06 +0000
Files and hashes:         1: f_x8VcpIXDdqYe_sDlN3ZToEw70.crl (hash: RbHD/jCT/8ZHqVGCta9Fqu5TayWuBsqQxaYZpHRbHaQ=)
                          2: E7FC6A1A4EAE11EDBF0D8256C4F9AE02.roa (hash: 10T57IR+PMdmV6j2kmrAkG4ca6NjWj+tRvDyWCCrDmA=)
                          3: 9535628E5C0D11EDA7191A0AC4F9AE02.roa (hash: UoPSD/sB882BUptuBl7wMhpHSR5jbx5b49dtZHebnaw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl
                          rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:34:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 735 (0x2df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ABD25, serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD
        Validity
            Not Before: Jul 27 02:34:06 2026 GMT
            Not After : Aug  3 02:34:06 2026 GMT
        Subject: CN=6a66c39f-db67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ef:22:c4:65:af:3d:00:ed:06:e9:8a:79:30:
                    5c:11:4a:a6:0d:58:bc:46:eb:63:31:c9:9d:4e:a7:
                    a5:1b:6e:dc:ba:13:b6:da:eb:3b:a7:0a:c8:2d:4b:
                    f8:d0:7c:ad:a6:aa:43:b0:62:0c:d6:8b:62:cd:98:
                    d7:20:12:30:5e:10:93:80:47:13:72:e2:75:ce:48:
                    0c:f5:79:67:58:84:56:7f:ba:40:13:12:b3:9a:41:
                    03:af:5d:bd:ac:0d:52:6c:ef:5a:11:08:a0:0a:f9:
                    f9:1b:83:3f:37:1a:28:18:1c:68:33:88:a6:99:07:
                    92:c3:21:af:99:6a:33:e0:02:11:06:0e:a0:a1:15:
                    ef:31:a0:5c:92:b6:53:26:96:47:40:8a:d4:76:26:
                    73:a0:8d:a4:f2:c9:37:7e:1b:53:dc:84:27:9e:65:
                    82:a4:31:b6:f1:d1:9f:92:05:b1:56:28:67:b8:0c:
                    b8:28:a8:e0:1e:87:a0:7d:41:46:38:d9:5e:90:c2:
                    c6:cf:35:3e:c6:d8:4e:d5:33:2b:18:39:32:80:34:
                    d6:3a:b3:ac:a6:8f:3e:31:fc:ad:7a:10:02:9f:c2:
                    c0:9e:4e:5d:8c:d8:1b:ea:5f:ae:be:5b:b1:3a:f4:
                    7a:79:9a:02:a8:f4:ed:4b:5d:53:17:4e:ba:e7:91:
                    dc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:19:6E:65:B5:F8:54:A2:D5:B0:83:3D:B4:8B:E3:E5:40:09:87:8A
            X509v3 Authority Key Identifier:
                keyid:7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:9d:17:c6:e9:f5:71:c9:02:3f:4e:d0:75:12:42:e3:fc:d2:
         e9:9b:f0:07:2d:e5:0f:83:55:3d:51:3e:d7:d0:8e:ef:82:62:
         64:f0:a5:13:89:1c:e6:7b:52:0f:c3:06:ee:02:67:82:c6:01:
         4c:ca:7a:53:0e:2f:4b:25:e8:22:e4:64:6b:d4:81:d7:76:99:
         12:6a:fe:9c:ff:89:4f:11:4f:2d:73:20:21:2d:c4:0b:e0:0d:
         6c:40:dd:e7:46:dd:2f:25:d5:2b:87:e9:b5:c0:d1:de:41:b4:
         ed:3d:b5:07:bd:13:1e:bb:9f:81:95:e3:8f:8d:c8:ac:d6:80:
         ce:b9:d5:76:05:7e:44:40:e7:33:0b:88:d2:e8:08:36:08:65:
         a5:84:97:1c:73:df:e8:d7:dc:1e:17:c2:de:b8:db:5b:71:42:
         fc:02:01:c2:99:2d:b4:7f:29:35:9e:b3:77:90:2a:23:86:9d:
         b9:1a:94:d1:9c:10:56:11:aa:f0:34:2e:07:9b:6c:84:db:fe:
         06:62:90:46:7d:31:6b:32:87:fd:02:42:03:50:c2:3e:3e:ef:
         d1:1f:ed:ca:67:40:ae:14:d4:d3:11:3e:a4:b3:88:af:07:7c:
         db:9f:b5:3a:50:0b:dd:1b:cc:4d:fb:4d:d6:80:a1:b1:be:2c:
         3a:0e:55:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUJEMjUxMTAvBgNVBAUTKDdGRkM3QzU1Q0E0ODVDMzc2QTYxRUZFQzBFNTM3NzY1
M0EwNEMzQkQwHhcNMjYwNzI3MDIzNDA2WhcNMjYwODAzMDIzNDA2WjAYMRYwFAYD
VQQDEw02YTY2YzM5Zi1kYjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3+8ixGWvPQDtBumKeTBcEUqmDVi8RutjMcmdTqelG27cuhO22us7pwrILUv4
0HytpqpDsGIM1otizZjXIBIwXhCTgEcTcuJ1zkgM9XlnWIRWf7pAExKzmkEDr129
rA1SbO9aEQigCvn5G4M/NxooGBxoM4immQeSwyGvmWoz4AIRBg6goRXvMaBckrZT
JpZHQIrUdiZzoI2k8sk3fhtT3IQnnmWCpDG28dGfkgWxVihnuAy4KKjgHoegfUFG
ONlekMLGzzU+xthO1TMrGDkygDTWOrOspo8+MfytehACn8LAnk5djNgb6l+uvlux
OvR6eZoCqPTtS11TF06655Hc5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJUZbmW1
+FSi1bCDPbSL4+VACYeKMB8GA1UdIwQYMBaAFH/8fFXKSFw3amHv7A5Td2U6BMO9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkQyNS81MjdERDI1QTRF
QUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhEZHFZZV9zRGxOM1pUb0V3
NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZfeDhWY3BJWERkcVllX3NEbE4zWlRvRXc3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QkQyNS81MjdERDI1QTRFQUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhE
ZHFZZV9zRGxOM1pUb0V3NzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEJ0Xxun1cckCP07QdRJC4/zS6ZvwBy3lD4NVPVE+19CO74JiZPClE4kc5ntS
D8MG7gJngsYBTMp6Uw4vSyXoIuRka9SB13aZEmr+nP+JTxFPLXMgIS3EC+ANbEDd
50bdLyXVK4fptcDR3kG07T21B70THrufgZXjj43IrNaAzrnVdgV+REDnMwuI0ugI
NghlpYSXHHPf6NfcHhfC3rjbW3FC/AIBwpkttH8pNZ6zd5AqI4aduRqU0ZwQVhGq
8DQuB5tshNv+BmKQRn0xazKH/QJCA1DCPj7v0R/tymdArhTU0xE+pLOIrwd825+1
OlAL3RvMTftN1oChsb4sOg5V7A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:18:29 2026 by rpki-client