Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
File:                     votHM7Guikc2t-kTJzPWVAkePSs.mft (raw, json)
Hash identifier:          T/YMqp4eQ/2m83nm87cNL27k0HZzfpwMkwtzOTbnfKU=
Subject key identifier:   B5:98:15:3E:F1:80:A0:71:DD:81:E4:A9:A4:F1:20:B7:A4:81:CD:F4
Authority key identifier: BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B
Certificate issuer:       /CN=A91B23D9/serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B
Certificate serial:       0130
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
Manifest number:          0128
Signing time:             Mon 27 Jul 2026 07:41:20 +0000
Manifest this update:     Mon 27 Jul 2026 07:41:20 +0000
Manifest next update:     Mon 03 Aug 2026 07:41:20 +0000
Files and hashes:         1: votHM7Guikc2t-kTJzPWVAkePSs.crl (hash: roN9NCiRTCEYBIhCcc3sIZk2meC4BT3Q13FplpUoZUA=)
                          2: A3815188C9D211EFB961F44DC4F9AE02.roa (hash: DHIuEGlAe2mG5wZOhiV1lUw2gUeKuaIT7YiSDLTxpgQ=)
                          3: 63817B3AC9D211EFBC6F934DC4F9AE02.roa (hash: m0i0X9j0yXnsKKSGdxoju3T5IQpZd4Oir8j6ny4qit8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl
                          rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304 (0x130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B23D9, serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B
        Validity
            Not Before: Jul 27 07:41:20 2026 GMT
            Not After : Aug  3 07:41:20 2026 GMT
        Subject: CN=6a670ba0-6203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:70:cd:bd:05:42:50:9e:e8:e5:4f:26:c9:48:
                    31:2e:23:d3:ec:1b:d2:24:09:5f:15:8b:47:1f:28:
                    5b:0f:1e:63:c9:06:ea:b5:44:c5:42:50:73:e6:2b:
                    7f:d9:d8:7c:7f:44:0f:e7:e3:62:f7:0b:6e:22:16:
                    80:1f:ac:26:a8:db:92:03:89:88:9c:c4:57:99:f1:
                    0d:21:38:f6:4a:25:83:a0:80:46:04:c5:5d:6c:a1:
                    25:a5:3c:79:64:82:2c:16:b9:29:1d:0e:b2:c2:ca:
                    04:3a:b2:4f:91:3c:ed:0b:f7:a2:fa:07:f7:43:52:
                    23:e2:bd:8a:5b:5f:f7:63:5f:ad:a5:87:b4:df:81:
                    af:17:4f:f5:80:7e:20:83:bf:3d:f4:7b:d3:13:e9:
                    94:70:05:e0:8b:a4:f5:4a:ac:bb:5a:50:a9:03:ee:
                    81:0d:ef:e1:72:2f:0b:17:c0:d6:df:66:5f:75:13:
                    6d:26:57:59:e5:f0:4c:42:ed:7a:9b:20:c0:f3:3f:
                    51:6e:4d:ac:4a:a2:34:5e:09:6c:64:07:6a:04:f5:
                    fb:65:6a:a0:f7:c1:36:c2:85:33:75:12:d6:4c:cf:
                    ce:1e:e8:36:cb:a8:46:1e:bc:8c:d7:2f:a8:9b:4c:
                    9c:56:7a:28:54:6b:43:2c:ad:7d:e6:1e:9c:f6:7d:
                    2a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:98:15:3E:F1:80:A0:71:DD:81:E4:A9:A4:F1:20:B7:A4:81:CD:F4
            X509v3 Authority Key Identifier:
                keyid:BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:2a:0b:49:39:1f:5d:8c:77:81:b7:e4:ec:a5:de:a6:03:ce:
         a7:ce:11:a9:cc:89:07:00:b0:cb:a2:54:b2:75:a3:a9:45:7b:
         7b:c1:a4:d3:c7:aa:d5:48:97:ec:a5:85:1a:77:9e:54:83:f8:
         22:82:12:fc:e8:67:44:4c:40:36:e4:cb:22:20:f5:15:1c:38:
         73:35:2f:82:bc:60:59:02:98:57:bd:cb:aa:68:13:96:46:94:
         5b:92:fe:28:83:83:18:83:27:bc:1d:38:d2:ad:79:6a:5b:13:
         a0:52:cf:c3:3f:dc:3a:e7:d6:37:4f:24:77:9c:ee:2a:58:f6:
         55:cd:03:bc:5c:4f:0b:fc:c3:38:28:54:b1:06:73:63:8e:6a:
         f6:68:0c:91:d9:81:24:c6:6c:19:1b:7e:1c:1e:49:e1:d9:fb:
         44:01:03:ce:ed:b8:e2:7c:da:4f:65:65:51:db:0a:af:4e:ea:
         8f:fa:b7:70:b4:d7:e8:80:5b:e0:d6:1e:28:4e:ba:a4:60:33:
         df:45:da:32:f0:e3:3d:62:aa:41:64:c7:c2:a3:cf:69:16:48:
         2a:67:91:9a:83:a9:0a:d1:13:5a:32:44:22:7f:a9:8c:49:4d:
         b0:cf:e2:e8:36:e8:59:30:94:cc:03:38:8b:8e:83:18:70:57:
         2d:90:68:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjIzRDkxMTAvBgNVBAUTKEJFOEI0NzMzQjFBRThBNDczNkI3RTkxMzI3MzNENjU0
MDkxRTNEMkIwHhcNMjYwNzI3MDc0MTIwWhcNMjYwODAzMDc0MTIwWjAYMRYwFAYD
VQQDEw02YTY3MGJhMC02MjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzXDNvQVCUJ7o5U8myUgxLiPT7BvSJAlfFYtHHyhbDx5jyQbqtUTFQlBz5it/
2dh8f0QP5+Ni9wtuIhaAH6wmqNuSA4mInMRXmfENITj2SiWDoIBGBMVdbKElpTx5
ZIIsFrkpHQ6ywsoEOrJPkTztC/ei+gf3Q1Ij4r2KW1/3Y1+tpYe034GvF0/1gH4g
g7899HvTE+mUcAXgi6T1Sqy7WlCpA+6BDe/hci8LF8DW32ZfdRNtJldZ5fBMQu16
myDA8z9Rbk2sSqI0XglsZAdqBPX7ZWqg98E2woUzdRLWTM/OHug2y6hGHryM1y+o
m0ycVnooVGtDLK195h6c9n0qTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLWYFT7x
gKBx3YHkqaTxILekgc30MB8GA1UdIwQYMBaAFL6LRzOxropHNrfpEycz1lQJHj0r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjNEOS83QjhCRDZDQ0M5
RDExMUVGOTc1QkRDNEJDNEY5QUUwMi92b3RITTdHdWlrYzJ0LWtUSnpQV1ZBa2VQ
U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZvdEhNN0d1aWtjMnQta1RKelBXVkFrZVBTcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MjNEOS83QjhCRDZDQ0M5RDExMUVGOTc1QkRDNEJDNEY5QUUwMi92b3RITTdHdWlr
YzJ0LWtUSnpQV1ZBa2VQU3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACCoLSTkfXYx3gbfk7KXepgPOp84RqcyJBwCwy6JUsnWjqUV7e8Gk08eq1UiX
7KWFGneeVIP4IoIS/OhnRExANuTLIiD1FRw4czUvgrxgWQKYV73LqmgTlkaUW5L+
KIODGIMnvB040q15alsToFLPwz/cOufWN08kd5zuKlj2Vc0DvFxPC/zDOChUsQZz
Y45q9mgMkdmBJMZsGRt+HB5J4dn7RAEDzu244nzaT2VlUdsKr07qj/q3cLTX6IBb
4NYeKE66pGAz30XaMvDjPWKqQWTHwqPPaRZIKmeRmoOpCtETWjJEIn+pjElNsM/i
6DboWTCUzAM4i46DGHBXLZBo7g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:59:59 2026 by rpki-client