Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft
File:                     o9wYjy1VW0FacV8lkDahpg_8uNk.mft (raw, json)
Hash identifier:          JyyXS1dOlY/jQ5SoLa9hVjO5N51d+KSEgioSjRkff5E=
Subject key identifier:   92:34:52:96:56:3B:C5:F5:F1:03:34:D7:BA:7B:1A:C5:25:A8:B8:44
Authority key identifier: A3:DC:18:8F:2D:55:5B:41:5A:71:5F:25:90:36:A1:A6:0F:FC:B8:D9
Certificate issuer:       /CN=A91C8F68/serialNumber=A3DC188F2D555B415A715F259036A1A60FFCB8D9
Certificate serial:       02E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9wYjy1VW0FacV8lkDahpg_8uNk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft
Manifest number:          02E0
Signing time:             Mon 27 Jul 2026 02:26:42 +0000
Manifest this update:     Mon 27 Jul 2026 02:26:41 +0000
Manifest next update:     Mon 03 Aug 2026 02:26:41 +0000
Files and hashes:         1: o9wYjy1VW0FacV8lkDahpg_8uNk.crl (hash: FsAIRfpCvq37/rE27PrLwz3kFVGNZVm9it24q1sUS/c=)
                          2: 2A766EA23A3411EDA1B7D863C4F9AE02.roa (hash: 4HjNDDfKFJrgWK5K6rpjz8dvflAC5Isd+SEG9GMgXhw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.crl
                          rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9wYjy1VW0FacV8lkDahpg_8uNk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 743 (0x2e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8F68, serialNumber=A3DC188F2D555B415A715F259036A1A60FFCB8D9
        Validity
            Not Before: Jul 27 02:26:41 2026 GMT
            Not After : Aug  3 02:26:41 2026 GMT
        Subject: CN=6a66c1e1-aca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f2:d9:8b:e5:6e:52:d6:3f:14:81:18:4f:60:
                    7d:c4:a9:e5:df:1c:7d:d0:36:48:4c:8c:8a:cd:a5:
                    d1:4d:98:18:7d:96:58:ff:63:c3:44:bb:bf:8a:92:
                    63:a1:37:fd:ee:f9:65:ca:99:c0:42:98:ff:e8:b7:
                    e4:2a:1b:4b:f3:72:3c:16:97:56:89:8a:52:ed:00:
                    98:40:45:67:5e:68:51:6e:68:ba:81:6f:56:d7:4b:
                    02:f4:fc:3b:d7:80:f3:7c:43:29:04:97:38:1f:c1:
                    c0:19:9a:38:3a:0f:49:a2:22:e0:85:2b:76:06:4b:
                    a7:50:ea:ba:b0:ad:9b:db:ee:e2:d1:a0:06:e8:6e:
                    79:c7:4b:c7:aa:8c:b1:e8:a6:e5:58:26:c4:21:e3:
                    6a:29:d3:e1:e6:94:e7:8f:ba:b2:0b:c8:10:78:31:
                    cb:47:e1:f5:9e:d7:9e:fc:b5:48:d4:ce:69:a5:ee:
                    01:ed:e1:b4:3f:09:78:9c:4c:64:e5:12:e6:07:95:
                    63:43:53:9b:2b:bb:fb:77:2d:57:5d:86:5b:0e:6a:
                    79:23:38:ad:cc:ec:f9:ea:5d:33:d5:99:be:45:a4:
                    e0:74:ad:87:79:72:e3:93:9e:a0:2d:96:a0:ed:da:
                    44:61:72:55:ac:43:83:d9:b5:31:a6:aa:38:37:1f:
                    fc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:34:52:96:56:3B:C5:F5:F1:03:34:D7:BA:7B:1A:C5:25:A8:B8:44
            X509v3 Authority Key Identifier:
                keyid:A3:DC:18:8F:2D:55:5B:41:5A:71:5F:25:90:36:A1:A6:0F:FC:B8:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9wYjy1VW0FacV8lkDahpg_8uNk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:25:a8:5f:1f:5c:38:20:d3:e6:71:c5:6d:bf:5b:e7:dd:0e:
         8f:16:ad:0f:4e:46:fe:a2:ac:a0:ab:76:b3:e1:55:84:5a:b1:
         68:8d:49:e1:03:6e:ae:03:7e:c1:04:bd:ef:ef:4b:d1:1a:0e:
         be:cf:88:42:ef:de:54:64:dc:5e:f6:f1:0e:78:2a:d0:10:4e:
         0a:ac:84:4c:54:a6:8d:28:69:fd:44:2b:0d:d2:6b:ef:07:f0:
         f4:c9:de:e1:31:04:8a:42:ef:41:e0:92:e5:a4:13:3d:80:c6:
         d7:21:48:b8:9c:79:8d:c1:07:31:d7:3b:36:16:5b:99:0c:89:
         80:69:ce:0c:df:0d:7b:f6:58:26:3f:f6:c9:be:93:dc:32:6b:
         42:27:24:31:bd:01:81:a7:13:8b:62:87:50:4f:0a:ff:20:50:
         36:49:be:81:b4:74:b0:36:3e:f3:00:3f:e8:d8:d8:cb:4d:2f:
         4f:2d:2a:68:2f:f2:a6:45:c3:51:2b:04:0c:0e:59:79:d2:b6:
         fc:7a:5a:0a:11:ef:ce:70:1a:31:fc:15:50:f2:7c:bc:9e:2d:
         fe:08:a9:25:87:52:61:07:fe:6c:f5:ae:66:b2:17:19:04:af:
         d0:3d:50:a9:22:bf:39:90:7b:fe:95:01:e7:57:8d:d1:55:f3:
         43:93:a9:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzhGNjgxMTAvBgNVBAUTKEEzREMxODhGMkQ1NTVCNDE1QTcxNUYyNTkwMzZBMUE2
MEZGQ0I4RDkwHhcNMjYwNzI3MDIyNjQxWhcNMjYwODAzMDIyNjQxWjAYMRYwFAYD
VQQDEw02YTY2YzFlMS1hY2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5vLZi+VuUtY/FIEYT2B9xKnl3xx90DZITIyKzaXRTZgYfZZY/2PDRLu/ipJj
oTf97vllypnAQpj/6LfkKhtL83I8FpdWiYpS7QCYQEVnXmhRbmi6gW9W10sC9Pw7
14DzfEMpBJc4H8HAGZo4Og9JoiLghSt2BkunUOq6sK2b2+7i0aAG6G55x0vHqoyx
6KblWCbEIeNqKdPh5pTnj7qyC8gQeDHLR+H1ntee/LVI1M5ppe4B7eG0Pwl4nExk
5RLmB5VjQ1ObK7v7dy1XXYZbDmp5IzitzOz56l0z1Zm+RaTgdK2HeXLjk56gLZag
7dpEYXJVrEOD2bUxpqo4Nx/8KwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJI0UpZW
O8X18QM017p7GsUlqLhEMB8GA1UdIwQYMBaAFKPcGI8tVVtBWnFfJZA2oaYP/LjZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEY2OC82QjYwQkZCQTNB
MzExMUVEQTEwQ0E3NjFDNEY5QUUwMi9vOXdZankxVlcwRmFjVjhsa0RhaHBnXzh1
TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL285d1lqeTFWVzBGYWNWOGxrRGFocGdfOHVOay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OEY2OC82QjYwQkZCQTNBMzExMUVEQTEwQ0E3NjFDNEY5QUUwMi9vOXdZankxVlcw
RmFjVjhsa0RhaHBnXzh1TmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALSWoXx9cOCDT5nHFbb9b590OjxatD05G/qKsoKt2s+FVhFqxaI1J4QNurgN+
wQS97+9L0RoOvs+IQu/eVGTcXvbxDngq0BBOCqyETFSmjShp/UQrDdJr7wfw9Mne
4TEEikLvQeCS5aQTPYDG1yFIuJx5jcEHMdc7NhZbmQyJgGnODN8Ne/ZYJj/2yb6T
3DJrQickMb0BgacTi2KHUE8K/yBQNkm+gbR0sDY+8wA/6NjYy00vTy0qaC/ypkXD
USsEDA5ZedK2/HpaChHvznAaMfwVUPJ8vJ4t/gipJYdSYQf+bPWuZrIXGQSv0D1Q
qSK/OZB7/pUB51eN0VXzQ5Opqw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:08 2026 by rpki-client