Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft
File:                     fXiohwseVXPWM8mnsAQKLuQF2VE.mft (raw, json)
Hash identifier:          AUWsXyBkAnaFNrN476WVUAQavtkHll+NTSTrzpGBp7c=
Subject key identifier:   2E:C7:AF:87:B6:18:64:08:DC:92:A2:7C:3A:3D:6C:FB:4F:27:EA:73
Authority key identifier: 7D:78:A8:87:0B:1E:55:73:D6:33:C9:A7:B0:04:0A:2E:E4:05:D9:51
Certificate issuer:       /CN=A91C162D/serialNumber=7D78A8870B1E5573D633C9A7B0040A2EE405D951
Certificate serial:       0856
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXiohwseVXPWM8mnsAQKLuQF2VE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft
Manifest number:          0844
Signing time:             Tue 28 Jul 2026 21:25:44 +0000
Manifest this update:     Tue 28 Jul 2026 21:25:44 +0000
Manifest next update:     Tue 04 Aug 2026 21:25:44 +0000
Files and hashes:         1: fXiohwseVXPWM8mnsAQKLuQF2VE.crl (hash: KHBhb49aDUrPiy3C/Bxt6FnH3frMQ0oNRvNNvudGz1E=)
                          2: 460D934A1C1611EB8BD35065C4F9AE02.roa (hash: ztH/rPflIbsMb75wLSR1J5uWjOy6EQTAIN54Eb15iU8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.crl
                          rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXiohwseVXPWM8mnsAQKLuQF2VE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2134 (0x856)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C162D, serialNumber=7D78A8870B1E5573D633C9A7B0040A2EE405D951
        Validity
            Not Before: Jul 28 21:25:44 2026 GMT
            Not After : Aug  4 21:25:44 2026 GMT
        Subject: CN=6a691e58-7c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:dd:13:af:89:67:9f:f5:ab:29:af:45:3a:05:
                    d0:f7:69:b5:db:51:df:1c:15:ae:32:7e:52:51:6c:
                    ae:e1:bd:aa:6e:f8:2b:83:2a:c8:0d:5e:2a:c8:d5:
                    af:95:19:94:c3:7d:58:85:71:20:30:c2:57:79:ee:
                    19:9f:aa:c8:1b:bb:a9:83:e4:e6:19:df:71:5b:1a:
                    86:aa:60:60:30:69:ed:49:39:4d:a6:90:55:46:0d:
                    ba:ff:50:42:20:c3:cb:2f:31:90:e4:70:56:99:5e:
                    56:e5:90:51:37:fc:54:54:52:d7:bb:41:a3:61:e9:
                    fe:86:72:9b:d9:ef:ef:a1:02:d6:38:6b:ab:d0:1f:
                    c4:7e:41:01:39:eb:2e:a2:fd:f5:b6:fb:87:0e:91:
                    99:b7:a2:bf:25:8d:24:a4:bd:ed:05:79:27:81:97:
                    55:d3:3b:70:a8:01:5f:3d:7b:80:e3:70:63:ea:0d:
                    e9:25:d0:c6:02:c7:60:ee:c7:64:7f:0b:04:7d:8d:
                    f2:de:db:53:68:ce:75:5b:70:0a:9b:cd:de:96:49:
                    0c:f3:9b:ee:17:04:b5:1a:50:91:4e:6d:33:1b:bd:
                    8c:56:e8:7c:3b:2c:e8:8f:bc:5d:69:4f:36:6d:05:
                    6e:26:04:a0:ed:3a:bd:23:cb:f1:23:88:75:4b:e8:
                    1f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C7:AF:87:B6:18:64:08:DC:92:A2:7C:3A:3D:6C:FB:4F:27:EA:73
            X509v3 Authority Key Identifier:
                keyid:7D:78:A8:87:0B:1E:55:73:D6:33:C9:A7:B0:04:0A:2E:E4:05:D9:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXiohwseVXPWM8mnsAQKLuQF2VE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:1f:90:c2:b2:42:e1:b3:96:ed:e5:c6:c5:2c:24:94:da:bf:
         bb:5a:bb:89:ad:12:57:74:26:b0:31:4a:e8:9f:2c:52:9a:24:
         ea:d6:e2:3d:58:fd:87:16:fe:f6:6d:0c:75:79:35:1c:ff:35:
         e8:7f:18:45:a8:13:7e:79:19:c1:4c:2a:13:80:51:71:d0:4e:
         f9:23:68:7c:f4:48:39:c8:6c:5c:5f:93:e9:13:d0:09:8e:7c:
         ec:bf:90:b8:67:21:9e:9d:a3:de:80:37:cb:51:ae:05:b6:8e:
         e2:05:7b:ff:39:50:9f:4a:a8:55:c3:bf:82:cd:91:30:90:7b:
         b0:24:58:c2:bf:ec:3b:ed:0d:a7:59:a5:d7:85:10:fa:f3:bb:
         48:41:c7:9b:03:8b:95:7f:ab:bb:76:84:4d:99:ab:56:92:21:
         44:44:d9:57:a7:f9:4c:f9:d4:da:cf:36:3c:d1:39:91:91:c9:
         34:52:93:b0:92:f2:82:e5:b4:4e:0f:5d:58:eb:fe:3f:e1:42:
         65:3f:ff:ec:95:09:47:6b:de:48:55:bd:69:83:d0:bd:73:0d:
         61:af:96:c0:fb:53:4e:a1:de:ae:af:32:81:8e:51:4c:06:55:
         f7:8f:66:b9:f6:92:89:84:f3:15:e1:91:7b:ba:89:ce:41:57:
         23:fd:45:70
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzE2MkQxMTAvBgNVBAUTKDdENzhBODg3MEIxRTU1NzNENjMzQzlBN0IwMDQwQTJF
RTQwNUQ5NTEwHhcNMjYwNzI4MjEyNTQ0WhcNMjYwODA0MjEyNTQ0WjAYMRYwFAYD
VQQDEw02YTY5MWU1OC03YzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA690Tr4lnn/WrKa9FOgXQ92m121HfHBWuMn5SUWyu4b2qbvgrgyrIDV4qyNWv
lRmUw31YhXEgMMJXee4Zn6rIG7upg+TmGd9xWxqGqmBgMGntSTlNppBVRg26/1BC
IMPLLzGQ5HBWmV5W5ZBRN/xUVFLXu0GjYen+hnKb2e/voQLWOGur0B/EfkEBOesu
ov31tvuHDpGZt6K/JY0kpL3tBXkngZdV0ztwqAFfPXuA43Bj6g3pJdDGAsdg7sdk
fwsEfY3y3ttTaM51W3AKm83elkkM85vuFwS1GlCRTm0zG72MVuh8Oyzoj7xdaU82
bQVuJgSg7Tq9I8vxI4h1S+gfSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC7Hr4e2
GGQI3JKifDo9bPtPJ+pzMB8GA1UdIwQYMBaAFH14qIcLHlVz1jPJp7AECi7kBdlR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTYyRC82QTBDRkU5MDFD
MTQxMUVCODJDMDlBNjJDNEY5QUUwMi9mWGlvaHdzZVZYUFdNOG1uc0FRS0x1UUYy
VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZYaW9od3NlVlhQV004bW5zQVFLTHVRRjJWRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MTYyRC82QTBDRkU5MDFDMTQxMUVCODJDMDlBNjJDNEY5QUUwMi9mWGlvaHdzZVZY
UFdNOG1uc0FRS0x1UUYyVkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArh+QwrJC4bOW7eXGxSwklNq/u1q7ia0SV3QmsDFK6J8sUpok6tbiPVj9hxb+
9m0MdXk1HP816H8YRagTfnkZwUwqE4BRcdBO+SNofPRIOchsXF+T6RPQCY587L+Q
uGchnp2j3oA3y1GuBbaO4gV7/zlQn0qoVcO/gs2RMJB7sCRYwr/sO+0Np1ml14UQ
+vO7SEHHmwOLlX+ru3aETZmrVpIhRETZV6f5TPnU2s82PNE5kZHJNFKTsJLyguW0
Tg9dWOv+P+FCZT//7JUJR2veSFW9aYPQvXMNYa+WwPtTTqHerq8ygY5RTAZV949m
ufaSiYTzFeGRe7qJzkFXI/1FcA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:24:22 2026 by rpki-client