Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft
File:                     4NxstwnusRvCB181LrbtToGK5wU.mft (raw, json)
Hash identifier:          2eK2Zbq/cBk3k7pogT691TTuLVkwGGHWZrcvl7q4ZUo=
Subject key identifier:   3E:E9:9F:F4:67:57:AF:6F:50:D5:E2:B8:21:31:5B:A8:F0:93:1F:D6
Authority key identifier: E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05
Certificate issuer:       /CN=A91B87FC/serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705
Certificate serial:       0150
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft
Manifest number:          0150
Signing time:             Mon 27 Jul 2026 07:04:17 +0000
Manifest this update:     Mon 27 Jul 2026 07:04:16 +0000
Manifest next update:     Mon 03 Aug 2026 07:04:16 +0000
Files and hashes:         1: 4NxstwnusRvCB181LrbtToGK5wU.crl (hash: a8A4USGKOkTxtQbSzFXiHZRdv/xyvUmGMi7axRrLeEg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl
                          rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B87FC, serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705
        Validity
            Not Before: Jul 27 07:04:16 2026 GMT
            Not After : Aug  3 07:04:16 2026 GMT
        Subject: CN=6a6702f1-802f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:11:4c:c0:61:d0:78:c5:a9:f7:d8:fb:aa:74:
                    0f:64:87:ba:77:d7:a1:6a:8a:31:b2:7a:4a:14:6b:
                    bd:46:37:6a:8b:b8:85:af:72:b5:9c:f5:49:51:9b:
                    b6:ec:97:51:24:3c:a3:98:db:5c:f0:91:21:fa:1c:
                    f7:f9:a4:c5:2c:f9:a3:1d:70:b7:3b:56:b0:1d:aa:
                    58:53:3e:a5:08:e7:40:47:e8:d4:e6:06:11:34:87:
                    3c:83:25:21:c6:e9:97:86:01:f2:04:d6:c3:4f:d6:
                    91:ac:de:a1:38:29:ba:bf:0c:ae:a6:ac:f4:07:3b:
                    58:cf:39:40:b6:fe:e8:cb:20:3e:0e:d6:a7:b3:61:
                    5a:70:7e:27:7e:06:da:d6:c8:22:18:66:30:9e:53:
                    45:38:4d:1c:b1:84:06:48:23:f2:74:7e:88:44:28:
                    61:03:ea:a2:b1:ae:3b:76:ca:7c:d4:32:ae:03:15:
                    41:a3:9f:3b:4b:d7:db:b6:03:28:fd:18:e3:0e:7b:
                    0c:14:69:d3:b6:31:3c:d7:ab:f5:d7:75:94:05:6a:
                    e9:c7:44:74:be:a2:98:77:fe:53:45:5e:8f:df:87:
                    b1:db:b9:7d:9d:0f:77:77:6c:72:41:53:4b:c6:14:
                    e7:ee:2c:dc:ca:eb:98:5b:c1:b7:32:9e:fb:8d:e2:
                    06:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E9:9F:F4:67:57:AF:6F:50:D5:E2:B8:21:31:5B:A8:F0:93:1F:D6
            X509v3 Authority Key Identifier:
                keyid:E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b9:76:bf:01:2c:8a:28:9c:dd:23:4d:f2:1c:d5:12:de:09:
         f9:de:4b:b8:0b:5b:be:12:c5:1f:17:56:54:a2:7e:67:bb:0e:
         ab:38:13:1d:cf:25:fb:a1:29:5c:dd:0f:a4:eb:80:5f:41:ff:
         3b:e3:c9:8a:d0:f5:74:f2:b1:27:21:f0:b3:5a:a2:70:15:ce:
         cc:4a:a1:3c:96:4d:b8:3f:9f:0f:10:60:7a:af:8c:93:cb:ae:
         3c:38:a6:cf:00:3b:8e:37:e7:a9:01:b3:dd:8e:d2:0d:03:d6:
         cd:1b:c6:fe:13:fa:05:04:88:ab:54:1a:60:a3:71:12:7b:28:
         ed:97:0f:4f:f7:84:63:fa:5f:43:d2:cf:cd:a3:90:ae:a5:c6:
         48:71:01:8c:a4:54:80:ee:54:fe:da:44:20:78:ff:95:ff:4e:
         c8:43:81:c4:53:fa:33:a9:04:b7:07:dc:8f:6c:2e:ab:b4:5b:
         d7:9c:35:45:52:2e:38:5b:96:15:57:46:07:4c:25:cc:06:67:
         2f:dc:02:23:73:52:94:d2:f7:ca:c9:95:32:0f:6d:5a:72:e9:
         22:b6:55:cb:89:5e:8e:5f:4c:b1:be:03:f2:ea:86:54:b3:b3:
         5a:a5:c6:de:82:c3:84:73:e7:98:80:bf:28:a7:23:c4:77:a1:
         f0:a8:d8:6f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjg3RkMxMTAvBgNVBAUTKEUwREM2Q0I3MDlFRUIxMUJDMjA3NUYzNTJFQjZFRDRF
ODE4QUU3MDUwHhcNMjYwNzI3MDcwNDE2WhcNMjYwODAzMDcwNDE2WjAYMRYwFAYD
VQQDEw02YTY3MDJmMS04MDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuRFMwGHQeMWp99j7qnQPZIe6d9ehaooxsnpKFGu9Rjdqi7iFr3K1nPVJUZu2
7JdRJDyjmNtc8JEh+hz3+aTFLPmjHXC3O1awHapYUz6lCOdAR+jU5gYRNIc8gyUh
xumXhgHyBNbDT9aRrN6hOCm6vwyupqz0BztYzzlAtv7oyyA+Dtans2FacH4nfgba
1sgiGGYwnlNFOE0csYQGSCPydH6IRChhA+qisa47dsp81DKuAxVBo587S9fbtgMo
/RjjDnsMFGnTtjE816v113WUBWrpx0R0vqKYd/5TRV6P34ex27l9nQ93d2xyQVNL
xhTn7izcyuuYW8G3Mp77jeIGVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD7pn/Rn
V69vUNXiuCExW6jwkx/WMB8GA1UdIwQYMBaAFODcbLcJ7rEbwgdfNS627U6BiucF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODdGQy80MkE5QkI1NDg2
RTExMUVGOEY3NzNGODJDNEY5QUUwMi80TnhzdHdudXNSdkNCMTgxTHJidFRvR0s1
d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzROeHN0d251c1J2Q0IxODFMcmJ0VG9HSzV3VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
ODdGQy80MkE5QkI1NDg2RTExMUVGOEY3NzNGODJDNEY5QUUwMi80TnhzdHdudXNS
dkNCMTgxTHJidFRvR0s1d1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAI7l2vwEsiiic3SNN8hzVEt4J+d5LuAtbvhLFHxdWVKJ+Z7sOqzgTHc8l+6Ep
XN0PpOuAX0H/O+PJitD1dPKxJyHws1qicBXOzEqhPJZNuD+fDxBgeq+Mk8uuPDim
zwA7jjfnqQGz3Y7SDQPWzRvG/hP6BQSIq1QaYKNxEnso7ZcPT/eEY/pfQ9LPzaOQ
rqXGSHEBjKRUgO5U/tpEIHj/lf9OyEOBxFP6M6kEtwfcj2wuq7Rb15w1RVIuOFuW
FVdGB0wlzAZnL9wCI3NSlNL3ysmVMg9tWnLpIrZVy4lejl9Msb4D8uqGVLOzWqXG
3oLDhHPnmIC/KKcjxHeh8KjYbw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:23:55 2026 by rpki-client