Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft
File:                     MGcPYbflDgsLiOclHeh4TAPJ5GI.mft (raw, json)
Hash identifier:          hVROHn8H8JNJy9UIEJAG49nVImnL2+A3wHAUZG/sRAQ=
Subject key identifier:   25:3A:0A:AA:73:66:B1:54:6C:C6:B0:FC:C8:6A:55:32:06:94:A7:6B
Authority key identifier: 30:67:0F:61:B7:E5:0E:0B:0B:88:E7:25:1D:E8:78:4C:03:C9:E4:62
Certificate issuer:       /CN=A91CE6EC/serialNumber=30670F61B7E50E0B0B88E7251DE8784C03C9E462
Certificate serial:       019E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft
Manifest number:          0198
Signing time:             Tue 28 Jul 2026 15:48:10 +0000
Manifest this update:     Tue 28 Jul 2026 15:48:09 +0000
Manifest next update:     Tue 04 Aug 2026 15:48:09 +0000
Files and hashes:         1: MGcPYbflDgsLiOclHeh4TAPJ5GI.crl (hash: HPp8f0C73hVleIrmlNvJlR/1p/dBV9Zgz6rv7WN9Bag=)
                          2: 038610FC2D1E11EFA25C6D16C4F9AE02.roa (hash: CoBKPTaGKggKkbkoCo2Dk6F6z5lZTZfgxUsgOyih/d4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.crl
                          rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE6EC, serialNumber=30670F61B7E50E0B0B88E7251DE8784C03C9E462
        Validity
            Not Before: Jul 28 15:48:09 2026 GMT
            Not After : Aug  4 15:48:09 2026 GMT
        Subject: CN=6a68cf39-583d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7d:0d:e9:3a:ab:45:18:0a:a7:3b:0a:b7:ab:
                    46:de:78:49:19:b2:a0:bd:58:db:35:e3:56:62:66:
                    05:3b:f7:ff:5e:1f:8c:49:7e:e6:a6:37:09:1b:db:
                    f8:2a:a2:e5:53:9f:fc:be:76:dc:8a:ee:b7:0f:45:
                    df:1a:8f:46:4c:93:ab:fb:47:a9:3b:d5:6e:11:70:
                    9c:49:93:6e:38:36:ed:d5:82:47:6f:34:25:0e:5b:
                    3c:05:2b:dd:6b:52:de:1c:c6:f9:4a:9b:e7:86:e0:
                    c0:4a:8e:6c:ed:6c:ac:e1:4a:1a:b1:6e:3b:42:92:
                    21:70:41:e7:ad:7e:0f:80:40:a8:6e:62:e9:38:ce:
                    b4:7c:4b:4f:8c:b2:ad:26:ef:20:56:dc:3b:26:d2:
                    37:8b:dc:b6:dc:9c:75:8b:70:ee:e7:3d:97:29:72:
                    f8:16:10:b9:f2:c5:45:82:05:fa:bb:e4:2b:cc:cb:
                    e1:b2:d9:04:2e:3e:7f:e8:08:6c:38:4d:99:5f:17:
                    6e:6f:af:4c:07:d7:12:33:b6:c2:5e:1a:12:36:e3:
                    d0:b0:d8:4f:93:03:0f:25:bb:2b:ea:b6:72:df:1a:
                    6c:27:33:58:6d:c6:1b:70:8b:50:a7:3c:15:3b:64:
                    2f:a0:aa:2f:12:e9:9d:9e:e3:08:e7:d0:d7:21:7e:
                    55:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:3A:0A:AA:73:66:B1:54:6C:C6:B0:FC:C8:6A:55:32:06:94:A7:6B
            X509v3 Authority Key Identifier:
                keyid:30:67:0F:61:B7:E5:0E:0B:0B:88:E7:25:1D:E8:78:4C:03:C9:E4:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:d8:56:f2:a6:f3:55:89:b8:64:c4:c0:1e:67:26:5a:27:84:
         1b:1b:29:54:b6:76:91:5d:7c:fd:ae:07:fa:e2:4d:1b:74:3b:
         ae:32:05:01:3a:5e:8a:60:32:e1:94:a8:7a:1e:80:90:2a:b2:
         da:d8:85:1d:9a:7a:9a:02:2b:0e:af:70:ce:98:bf:2f:a0:0d:
         3b:a3:09:09:de:fc:9e:ca:7e:8b:fa:69:11:93:29:a2:dc:05:
         4a:4d:ad:2f:fa:af:b4:e6:68:4b:70:a2:e0:b9:a8:62:a8:c5:
         98:ac:64:b9:39:14:dc:dd:57:8f:29:e3:eb:c6:f3:ea:f2:99:
         d0:38:81:9c:e6:a3:92:3e:a6:dd:2c:b3:fd:35:dd:14:26:4e:
         ad:11:c7:46:ae:09:1b:99:11:cc:94:eb:b0:b5:6f:a3:7e:8e:
         98:b5:1b:80:28:96:24:e7:d0:8e:4e:2b:15:81:a7:1f:04:76:
         5c:e3:d6:a6:f2:ae:ec:6b:61:e0:42:ab:5d:99:91:4f:4b:f4:
         b8:d3:e9:e1:c0:24:0e:ba:0e:a0:30:98:f0:73:12:c0:8b:c1:
         20:8f:75:ec:12:a7:91:88:e4:db:58:50:9c:b4:83:42:d6:62:
         b5:0a:fa:e3:b0:32:da:59:1b:98:a7:eb:2a:cc:22:da:77:c7:
         8d:a1:72:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U2RUMxMTAvBgNVBAUTKDMwNjcwRjYxQjdFNTBFMEIwQjg4RTcyNTFERTg3ODRD
MDNDOUU0NjIwHhcNMjYwNzI4MTU0ODA5WhcNMjYwODA0MTU0ODA5WjAYMRYwFAYD
VQQDEw02YTY4Y2YzOS01ODNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4X0N6TqrRRgKpzsKt6tG3nhJGbKgvVjbNeNWYmYFO/f/Xh+MSX7mpjcJG9v4
KqLlU5/8vnbciu63D0XfGo9GTJOr+0epO9VuEXCcSZNuODbt1YJHbzQlDls8BSvd
a1LeHMb5SpvnhuDASo5s7Wys4UoasW47QpIhcEHnrX4PgECobmLpOM60fEtPjLKt
Ju8gVtw7JtI3i9y23Jx1i3Du5z2XKXL4FhC58sVFggX6u+QrzMvhstkELj5/6Ahs
OE2ZXxdub69MB9cSM7bCXhoSNuPQsNhPkwMPJbsr6rZy3xpsJzNYbcYbcItQpzwV
O2QvoKovEumdnuMI59DXIX5VKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCU6Cqpz
ZrFUbMaw/MhqVTIGlKdrMB8GA1UdIwQYMBaAFDBnD2G35Q4LC4jnJR3oeEwDyeRi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTZFQy8wODJBODlGMDJB
MjkxMUVGODg5NUYxMUNDNEY5QUUwMi9NR2NQWWJmbERnc0xpT2NsSGVoNFRBUEo1
R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL01HY1BZYmZsRGdzTGlPY2xIZWg0VEFQSjVHSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTZFQy8wODJBODlGMDJBMjkxMUVGODg5NUYxMUNDNEY5QUUwMi9NR2NQWWJmbERn
c0xpT2NsSGVoNFRBUEo1R0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANNhW8qbzVYm4ZMTAHmcmWieEGxspVLZ2kV18/a4H+uJNG3Q7rjIFATpeimAy
4ZSoeh6AkCqy2tiFHZp6mgIrDq9wzpi/L6ANO6MJCd78nsp+i/ppEZMpotwFSk2t
L/qvtOZoS3Ci4LmoYqjFmKxkuTkU3N1Xjynj68bz6vKZ0DiBnOajkj6m3Syz/TXd
FCZOrRHHRq4JG5kRzJTrsLVvo36OmLUbgCiWJOfQjk4rFYGnHwR2XOPWpvKu7Gth
4EKrXZmRT0v0uNPp4cAkDroOoDCY8HMSwIvBII917BKnkYjk21hQnLSDQtZitQr6
47Ay2lkbmKfrKswi2nfHjaFy7g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:41:27 2026 by rpki-client