Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
File:                     R0Blek4vuGe_tE2_bLi8HdGywg4.mft (raw, json)
Hash identifier:          LPKAcaKN5LDVLF3ZaRJXLuw69jfvDVTvjw+TOT6n0cc=
Subject key identifier:   1D:D6:E9:41:13:24:1B:97:95:6C:C4:05:49:F6:E1:10:E5:1F:4D:AF
Authority key identifier: 47:40:65:7A:4E:2F:B8:67:BF:B4:4D:BF:6C:B8:BC:1D:D1:B2:C2:0E
Certificate issuer:       /CN=A91BA733/serialNumber=4740657A4E2FB867BFB44DBF6CB8BC1DD1B2C20E
Certificate serial:       0359
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
Manifest number:          0351
Signing time:             Mon 27 Jul 2026 02:06:00 +0000
Manifest this update:     Mon 27 Jul 2026 02:05:59 +0000
Manifest next update:     Mon 03 Aug 2026 02:05:59 +0000
Files and hashes:         1: R0Blek4vuGe_tE2_bLi8HdGywg4.crl (hash: mwm1li3Fa/tV8wqNofcZhscZt4UFV5xqcI8erNzxaUA=)
                          2: 7AD326AC663911EDA919A02AC4F9AE02.roa (hash: QgXgIU4iewVv/gvtM7nRh4tylfGnpHiAGu1ZYVRzjpY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.crl
                          rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:05:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 857 (0x359)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA733, serialNumber=4740657A4E2FB867BFB44DBF6CB8BC1DD1B2C20E
        Validity
            Not Before: Jul 27 02:05:59 2026 GMT
            Not After : Aug  3 02:05:59 2026 GMT
        Subject: CN=6a66bd07-2562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c2:01:dd:76:93:4c:e5:90:b4:3b:d7:c0:7a:
                    be:d6:8e:aa:ac:24:06:51:42:0a:f9:01:d1:fd:60:
                    70:96:bb:0b:0d:6c:ac:9b:06:4f:fb:5c:d3:cb:bc:
                    69:34:af:92:b1:3e:50:2f:a2:ba:94:23:59:3c:66:
                    02:93:c9:cb:57:05:b7:59:bb:1c:cb:5f:df:08:1e:
                    9a:db:4d:1f:cd:ba:6f:c9:b5:d5:a2:ac:dc:7c:94:
                    85:bc:74:ac:57:ad:c7:a9:3b:e3:f7:fc:32:7e:72:
                    7c:10:19:54:10:12:a9:d8:63:1f:ec:65:f0:bd:57:
                    4c:63:42:18:e7:5e:73:91:5a:55:b0:97:81:b5:9f:
                    d5:d1:3a:58:5d:6e:02:79:8b:a8:a0:51:ae:73:25:
                    a9:c0:76:d8:09:91:7f:00:fd:03:28:07:8a:68:9f:
                    bf:8b:32:0e:da:6a:ea:3b:2f:98:a8:a0:89:af:90:
                    6e:04:04:e6:2d:20:c9:53:e2:e7:36:e2:fb:79:bb:
                    5e:df:de:f8:b9:c9:d2:4d:4d:3a:ac:6d:a9:7d:39:
                    1e:97:6c:c9:b4:29:c7:75:5f:9b:98:3a:d5:05:af:
                    80:8b:99:49:2c:08:a1:c0:e6:ec:1e:79:9d:ce:b2:
                    8c:52:fa:ca:90:f7:49:9a:9f:8b:89:f0:91:dd:82:
                    d9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D6:E9:41:13:24:1B:97:95:6C:C4:05:49:F6:E1:10:E5:1F:4D:AF
            X509v3 Authority Key Identifier:
                keyid:47:40:65:7A:4E:2F:B8:67:BF:B4:4D:BF:6C:B8:BC:1D:D1:B2:C2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:91:8e:62:04:d7:af:d2:37:34:cc:3a:c8:00:12:7f:fe:ff:
         3d:6d:45:5c:3d:20:2a:48:8b:dc:23:3d:45:eb:23:d7:38:47:
         ea:bc:1a:c5:db:81:3c:7a:58:7d:40:3d:7a:63:fe:6a:a8:1d:
         53:0b:df:69:3c:36:ff:ab:0e:c4:b5:99:14:da:47:97:e7:93:
         d6:d3:18:49:3d:7f:45:8b:19:b3:67:24:11:de:24:63:06:b5:
         3c:88:22:95:fb:e7:3a:ef:97:92:a3:85:b0:7a:78:fa:17:c0:
         1f:8a:6a:7a:9f:44:c0:58:19:6c:76:9c:df:9c:85:87:44:1b:
         fb:fb:84:da:c8:3e:ed:87:8a:55:75:a7:36:b8:55:c1:2e:6b:
         8c:63:fa:9f:7f:fb:0d:43:44:56:9d:42:9a:b6:3c:28:c9:92:
         94:dd:f1:94:e8:44:ff:b7:f9:9e:8f:25:be:53:c5:e3:7a:94:
         2e:42:7a:17:49:3c:61:7e:10:a6:44:6d:2b:57:c2:76:3d:71:
         19:2d:5f:8e:e1:73:40:61:f6:b7:bc:15:dd:2f:26:40:1c:83:
         7d:ab:2a:3f:6f:6d:ff:75:8c:62:a5:b4:34:db:08:21:87:db:
         76:ed:4a:fd:9f:57:a1:6a:6c:b2:44:74:e2:cb:6a:01:85:c5:
         ca:15:b2:63
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkE3MzMxMTAvBgNVBAUTKDQ3NDA2NTdBNEUyRkI4NjdCRkI0NERCRjZDQjhCQzFE
RDFCMkMyMEUwHhcNMjYwNzI3MDIwNTU5WhcNMjYwODAzMDIwNTU5WjAYMRYwFAYD
VQQDEw02YTY2YmQwNy0yNTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAysIB3XaTTOWQtDvXwHq+1o6qrCQGUUIK+QHR/WBwlrsLDWysmwZP+1zTy7xp
NK+SsT5QL6K6lCNZPGYCk8nLVwW3Wbscy1/fCB6a200fzbpvybXVoqzcfJSFvHSs
V63HqTvj9/wyfnJ8EBlUEBKp2GMf7GXwvVdMY0IY515zkVpVsJeBtZ/V0TpYXW4C
eYuooFGucyWpwHbYCZF/AP0DKAeKaJ+/izIO2mrqOy+YqKCJr5BuBATmLSDJU+Ln
NuL7ebte3974ucnSTU06rG2pfTkel2zJtCnHdV+bmDrVBa+Ai5lJLAihwObsHnmd
zrKMUvrKkPdJmp+LifCR3YLZ1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB3W6UET
JBuXlWzEBUn24RDlH02vMB8GA1UdIwQYMBaAFEdAZXpOL7hnv7RNv2y4vB3RssIO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTczMy8zMzM4NzJBMjBE
NzQxMUVEQTg5NjA2MkZDNEY5QUUwMi9SMEJsZWs0dnVHZV90RTJfYkxpOEhkR3l3
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1IwQmxlazR2dUdlX3RFMl9iTGk4SGRHeXdnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QTczMy8zMzM4NzJBMjBENzQxMUVEQTg5NjA2MkZDNEY5QUUwMi9SMEJsZWs0dnVH
ZV90RTJfYkxpOEhkR3l3ZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJZGOYgTXr9I3NMw6yAASf/7/PW1FXD0gKkiL3CM9Resj1zhH6rwaxduBPHpY
fUA9emP+aqgdUwvfaTw2/6sOxLWZFNpHl+eT1tMYST1/RYsZs2ckEd4kYwa1PIgi
lfvnOu+XkqOFsHp4+hfAH4pqep9EwFgZbHac35yFh0Qb+/uE2sg+7YeKVXWnNrhV
wS5rjGP6n3/7DUNEVp1CmrY8KMmSlN3xlOhE/7f5no8lvlPF43qULkJ6F0k8YX4Q
pkRtK1fCdj1xGS1fjuFzQGH2t7wV3S8mQByDfasqP29t/3WMYqW0NNsIIYfbdu1K
/Z9XoWpsskR04stqAYXFyhWyYw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:44:47 2026 by rpki-client