Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
File:                     57QbPSVuxr0M5xIbNw3kdBuDXmE.mft (raw, json)
Hash identifier:          A+BQiwZoIexqluvDk4/JwvJT8bElm8QCccodoK6oKIc=
Subject key identifier:   25:8E:E2:13:34:AF:CA:32:BC:B6:40:ED:D1:37:E4:A5:09:1D:A9:22
Authority key identifier: E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61
Certificate issuer:       /CN=A91C6A39/serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61
Certificate serial:       0EE2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
Manifest number:          0ECD
Signing time:             Tue 28 Jul 2026 17:48:41 +0000
Manifest this update:     Tue 28 Jul 2026 17:48:41 +0000
Manifest next update:     Tue 04 Aug 2026 17:48:41 +0000
Files and hashes:         1: 57QbPSVuxr0M5xIbNw3kdBuDXmE.crl (hash: HdvAqBmJfBdrJDVGUOpZ+3tQmy5w6TzWLmkLX9FOxC4=)
                          2: 032B593EB1C511E9A4B3CE25C4F9AE02.roa (hash: 00zBsBKgY45h9leLMrh5bnhoj9xQVpyWuZdsxJiXRmQ=)
                          3: 0F56E156828C11EDA6BCA176C4F9AE02.roa (hash: euR0nP+kaFd6kQu0agN5nMyxfPmJbVXruQJYUEGKZTU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl
                          rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:32:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3810 (0xee2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6A39, serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61
        Validity
            Not Before: Jul 28 17:48:41 2026 GMT
            Not After : Aug  4 17:48:41 2026 GMT
        Subject: CN=6a68eb79-e8c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a9:50:7a:de:2e:d3:77:70:e5:1e:47:d2:e3:
                    0b:66:7a:3d:45:94:e9:0c:b7:d5:b2:8a:5b:5c:b5:
                    1d:ae:ed:95:08:d1:1b:17:22:6f:06:39:eb:32:8d:
                    c8:cf:57:22:63:d6:e5:ff:0f:9a:ab:60:71:91:c0:
                    98:7b:e5:f6:05:e9:48:66:6e:91:bb:60:d0:a0:c4:
                    b2:8c:09:28:dd:7c:26:6e:f5:1f:f7:bf:62:e3:ce:
                    9a:73:5f:02:e3:e6:b0:4f:c1:45:f7:68:a7:b5:4f:
                    f8:98:63:1a:27:8f:8e:8f:f9:1c:f8:eb:57:3a:65:
                    b5:66:c0:1d:13:8b:ca:8c:e4:df:f4:97:c8:82:0e:
                    f0:de:e7:a9:cf:ee:6b:c5:7f:e6:f3:96:5d:d7:02:
                    28:49:c1:47:09:7e:ea:93:42:cb:4c:47:ed:69:f4:
                    27:ec:1e:10:2f:be:64:7c:04:1c:22:13:27:44:0a:
                    1a:77:12:7b:cf:1b:18:15:96:90:ab:47:f8:00:07:
                    a3:c0:18:aa:09:bf:53:e1:8e:f2:f2:1c:a7:ee:39:
                    b8:09:db:33:e0:07:b2:67:86:12:b9:c7:dd:71:62:
                    ed:b3:e4:c4:06:7b:5a:c6:e7:27:02:40:a4:5b:87:
                    30:04:39:b8:8d:75:51:1e:ac:57:b5:85:34:73:1b:
                    7d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:8E:E2:13:34:AF:CA:32:BC:B6:40:ED:D1:37:E4:A5:09:1D:A9:22
            X509v3 Authority Key Identifier:
                keyid:E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:1e:90:1e:b3:e6:0f:26:f6:f9:98:0b:cb:32:b6:3f:05:77:
         1f:3e:9a:b6:bb:bf:8f:13:58:f6:b8:b8:f6:5a:5f:eb:34:65:
         00:6c:38:96:a6:67:89:1c:84:2c:24:05:6a:2f:e5:ae:94:8f:
         5b:48:c5:2a:1e:63:24:70:c3:bb:71:ff:10:6c:4f:1d:f4:82:
         75:35:79:38:a5:8c:74:ad:5f:f0:7b:48:4a:ed:cc:fb:58:18:
         32:a5:ad:16:90:ee:9c:30:cf:8b:e0:57:f6:53:47:f6:e1:88:
         e3:be:e6:d7:21:19:c3:e5:fa:4e:94:e4:4a:71:46:56:6e:4f:
         9f:35:5c:d6:77:fe:ed:34:29:fb:c3:63:56:f2:3a:65:e9:01:
         1a:dd:f1:86:54:ae:ab:3f:e7:65:89:fe:e5:20:07:88:6b:59:
         ed:ca:a1:71:b5:1b:42:88:b5:96:4e:e0:4d:ee:54:6a:36:0e:
         92:14:b8:4e:86:5d:65:97:cc:fa:46:f5:98:5b:f3:47:89:df:
         bc:68:c8:4b:ca:a5:21:71:7c:3e:f2:86:7e:93:81:6c:96:cf:
         9a:7d:47:26:dd:0f:3d:85:df:96:03:33:23:f6:4a:31:56:ba:
         65:a6:b8:4f:bd:c0:f5:58:45:56:5f:fd:39:14:e0:7f:1e:fe:
         8e:43:43:ca
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzZBMzkxMTAvBgNVBAUTKEU3QjQxQjNEMjU2RUM2QkQwQ0U3MTIxQjM3MERFNDc0
MUI4MzVFNjEwHhcNMjYwNzI4MTc0ODQxWhcNMjYwODA0MTc0ODQxWjAYMRYwFAYD
VQQDEw02YTY4ZWI3OS1lOGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoKlQet4u03dw5R5H0uMLZno9RZTpDLfVsopbXLUdru2VCNEbFyJvBjnrMo3I
z1ciY9bl/w+aq2BxkcCYe+X2BelIZm6Ru2DQoMSyjAko3XwmbvUf979i486ac18C
4+awT8FF92intU/4mGMaJ4+Oj/kc+OtXOmW1ZsAdE4vKjOTf9JfIgg7w3uepz+5r
xX/m85Zd1wIoScFHCX7qk0LLTEftafQn7B4QL75kfAQcIhMnRAoadxJ7zxsYFZaQ
q0f4AAejwBiqCb9T4Y7y8hyn7jm4Cdsz4AeyZ4YSucfdcWLts+TEBntaxucnAkCk
W4cwBDm4jXVRHqxXtYU0cxt9QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCWO4hM0
r8oyvLZA7dE35KUJHakiMB8GA1UdIwQYMBaAFOe0Gz0lbsa9DOcSGzcN5HQbg15h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkEzOS83MzBGMDBCMkIx
QzQxMUU5QkVDQjE4MjVDNEY5QUUwMi81N1FiUFNWdXhyME01eEliTncza2RCdURY
bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzU3UWJQU1Z1eHIwTTV4SWJOdzNrZEJ1RFhtRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NkEzOS83MzBGMDBCMkIxQzQxMUU5QkVDQjE4MjVDNEY5QUUwMi81N1FiUFNWdXhy
ME01eEliTncza2RCdURYbUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJR6QHrPmDyb2+ZgLyzK2PwV3Hz6atru/jxNY9ri49lpf6zRlAGw4lqZniRyE
LCQFai/lrpSPW0jFKh5jJHDDu3H/EGxPHfSCdTV5OKWMdK1f8HtISu3M+1gYMqWt
FpDunDDPi+BX9lNH9uGI477m1yEZw+X6TpTkSnFGVm5PnzVc1nf+7TQp+8NjVvI6
ZekBGt3xhlSuqz/nZYn+5SAHiGtZ7cqhcbUbQoi1lk7gTe5UajYOkhS4ToZdZZfM
+kb1mFvzR4nfvGjIS8qlIXF8PvKGfpOBbJbPmn1HJt0PPYXflgMzI/ZKMVa6Zaa4
T73A9VhFVl/9ORTgfx7+jkNDyg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:00 2026 by rpki-client