Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft
File:                     iXCkAMzM8BCTPDMMN2Ch7F204K0.mft (raw, json)
Hash identifier:          5aZtqXoZN6jsZ/HXNjLSJGiYFguwf2nCpYjvwQaZCfs=
Subject key identifier:   52:F0:F1:9A:3F:6E:96:35:B8:4E:49:8D:FD:08:46:F7:32:D5:31:94
Authority key identifier: 89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD
Certificate issuer:       /CN=A91C92DC/serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD
Certificate serial:       0621
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft
Manifest number:          0611
Signing time:             Tue 28 Jul 2026 23:27:29 +0000
Manifest this update:     Tue 28 Jul 2026 23:27:28 +0000
Manifest next update:     Tue 04 Aug 2026 23:27:28 +0000
Files and hashes:         1: iXCkAMzM8BCTPDMMN2Ch7F204K0.crl (hash: 2T2RgGYAISsbUzGR6m8y+HqCKt2Lgm8Q0IZVpxNtVFA=)
                          2: AD1469EC7A3911ECB5639D41C4F9AE02.roa (hash: 96gxdKQyCmuf4UCiLnFZLLSpfBwM2iUrQWCesjIYcd0=)
                          3: C3CE90CEF99A11EB936CCA1EC4F9AE02.roa (hash: Wnvaq8Ww3Bk3d2vemeHqavsME8uCxGuZGCjNCIrVG9I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl
                          rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 23:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1569 (0x621)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C92DC, serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD
        Validity
            Not Before: Jul 28 23:27:28 2026 GMT
            Not After : Aug  4 23:27:28 2026 GMT
        Subject: CN=6a693ae0-fce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2f:89:b7:ce:c4:4a:a5:cb:2a:39:85:9d:51:
                    c1:f2:c7:64:50:f0:9a:ae:35:f2:d6:77:d3:61:05:
                    3f:4e:3d:ac:ab:3a:49:8a:71:e0:4e:f4:e7:0e:ff:
                    77:ef:ed:59:32:bc:30:c3:6e:1f:44:af:5d:99:39:
                    16:b3:d4:d0:9f:ee:1b:77:f4:50:68:c8:43:48:7c:
                    85:8c:cd:3e:a1:bb:71:fe:0c:c7:89:30:e2:ba:ff:
                    15:c7:25:10:8e:06:2e:f1:28:2a:57:4a:39:d2:8a:
                    74:8c:31:d3:8d:b4:06:54:98:dc:76:89:49:e7:51:
                    9c:f9:75:8e:ff:7d:cf:15:78:7c:e8:96:33:42:27:
                    02:c7:49:c7:72:f9:31:74:ae:8a:42:39:c8:ba:27:
                    02:bb:85:da:ab:69:31:91:91:b4:7f:73:cb:b7:51:
                    f7:74:a3:4a:42:f3:31:41:04:a3:0c:1a:42:09:07:
                    f3:8e:d0:08:0a:0e:6c:2a:6d:80:3f:5b:77:65:ff:
                    9e:3d:59:72:24:ed:3e:2d:94:b0:b3:df:f3:20:85:
                    99:63:f6:ff:79:e3:0f:3d:be:5e:15:49:59:ea:f0:
                    e1:93:d5:d2:67:c1:19:d0:c2:27:2c:1f:b5:e8:43:
                    4c:0d:37:13:d6:98:d5:30:ba:97:f2:50:12:e4:e8:
                    43:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F0:F1:9A:3F:6E:96:35:B8:4E:49:8D:FD:08:46:F7:32:D5:31:94
            X509v3 Authority Key Identifier:
                keyid:89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:f0:35:2a:58:c3:eb:82:57:ce:33:af:a5:85:24:93:bf:d2:
         71:e3:ca:1c:a6:1c:47:dd:2f:58:dd:56:03:a2:42:58:3e:60:
         6c:b0:8f:db:60:14:57:29:32:4f:f8:30:3c:26:63:90:a6:1c:
         cc:9e:b0:9b:ac:2a:74:0f:d2:a0:e8:75:84:88:3a:07:64:73:
         e9:64:8d:e7:40:89:c5:30:00:88:a3:ff:83:ec:22:96:9d:69:
         46:c0:e2:fa:d2:ee:8c:c2:ce:36:16:70:8d:23:8c:42:ba:d9:
         58:72:f3:b7:62:e2:d2:10:28:37:72:ac:2d:37:75:c2:a4:fb:
         2c:e0:03:1f:95:30:39:bf:60:f7:30:4f:a3:b9:2d:dd:30:3d:
         f6:37:4d:b3:82:7a:93:ef:d6:ff:b8:ab:b8:89:72:17:2f:7f:
         c3:b7:d1:ec:46:e1:86:d2:95:b2:a0:61:76:80:2e:cd:bb:3e:
         33:89:5c:ae:ee:ba:20:79:36:47:dd:4a:ca:4c:f5:43:66:12:
         e1:b9:9a:43:d6:73:39:57:30:e8:4a:79:0c:85:79:91:29:04:
         79:b6:26:11:58:e1:fa:25:58:75:8e:41:fb:88:66:b9:d1:09:
         04:8b:15:06:81:57:7e:b7:19:85:35:eb:ca:fd:67:eb:c4:43:
         88:22:47:eb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzkyREMxMTAvBgNVBAUTKDg5NzBBNDAwQ0NDQ0YwMTA5MzNDMzMwQzM3NjBBMUVD
NURCNEUwQUQwHhcNMjYwNzI4MjMyNzI4WhcNMjYwODA0MjMyNzI4WjAYMRYwFAYD
VQQDEw02YTY5M2FlMC1mY2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzC+Jt87ESqXLKjmFnVHB8sdkUPCarjXy1nfTYQU/Tj2sqzpJinHgTvTnDv93
7+1ZMrwww24fRK9dmTkWs9TQn+4bd/RQaMhDSHyFjM0+obtx/gzHiTDiuv8VxyUQ
jgYu8SgqV0o50op0jDHTjbQGVJjcdolJ51Gc+XWO/33PFXh86JYzQicCx0nHcvkx
dK6KQjnIuicCu4Xaq2kxkZG0f3PLt1H3dKNKQvMxQQSjDBpCCQfzjtAICg5sKm2A
P1t3Zf+ePVlyJO0+LZSws9/zIIWZY/b/eeMPPb5eFUlZ6vDhk9XSZ8EZ0MInLB+1
6ENMDTcT1pjVMLqX8lAS5OhDuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFLw8Zo/
bpY1uE5Jjf0IRvcy1TGUMB8GA1UdIwQYMBaAFIlwpADMzPAQkzwzDDdgoexdtOCt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTJEQy9DNjA1NzhBMEY5
OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThCQ1RQRE1NTjJDaDdGMjA0
SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lYQ2tBTXpNOEJDVFBETU1OMkNoN0YyMDRLMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTJEQy9DNjA1NzhBMEY5OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThC
Q1RQRE1NTjJDaDdGMjA0SzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgvA1KljD64JXzjOvpYUkk7/ScePKHKYcR90vWN1WA6JCWD5gbLCP22AUVyky
T/gwPCZjkKYczJ6wm6wqdA/SoOh1hIg6B2Rz6WSN50CJxTAAiKP/g+wilp1pRsDi
+tLujMLONhZwjSOMQrrZWHLzt2Li0hAoN3KsLTd1wqT7LOADH5UwOb9g9zBPo7kt
3TA99jdNs4J6k+/W/7iruIlyFy9/w7fR7EbhhtKVsqBhdoAuzbs+M4lcru66IHk2
R91Kykz1Q2YS4bmaQ9ZzOVcw6Ep5DIV5kSkEebYmEVjh+iVYdY5B+4hmudEJBIsV
BoFXfrcZhTXryv1n68RDiCJH6w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:27:53 2026 by rpki-client