Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
File:                     4ed5yzH_53MaM7Xrfq_GsqvbROM.mft (raw, json)
Hash identifier:          OVulwHsd1C1GZ11TrWFo+2oTKdrruxOktwJX2nJi6xc=
Subject key identifier:   1B:A0:D1:64:56:0F:B7:1E:28:1C:D5:34:8E:DB:8E:9B:2F:26:3A:E5
Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3
Certificate issuer:       /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3
Certificate serial:       0246
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
Manifest number:          0234
Signing time:             Mon 27 Jul 2026 04:10:40 +0000
Manifest this update:     Mon 27 Jul 2026 04:10:39 +0000
Manifest next update:     Mon 03 Aug 2026 04:10:39 +0000
Files and hashes:         1: 4ed5yzH_53MaM7Xrfq_GsqvbROM.crl (hash: saPTcxEUHApnz6/qJk5r7C0ij7U2VjU/JNGSdqRfKdI=)
                          2: 9F1B80CA372311EEACE5BF61C4F9AE02.roa (hash: pEZ4PzrQv6b6ndP0HpfE6ghr1BZrsxRE21MGz3Ej87E=)
                          3: 9E6C93C6372311EEACE5BF61C4F9AE02.roa (hash: oIFWU2U3FpoDzzLzWPnxsOr677OIj+OUoCa9oBm5yVg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl
                          rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 582 (0x246)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3737, serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3
        Validity
            Not Before: Jul 27 04:10:39 2026 GMT
            Not After : Aug  3 04:10:39 2026 GMT
        Subject: CN=6a66da40-d290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9b:95:14:4c:00:74:c7:61:2b:66:7f:22:06:
                    96:01:40:95:43:96:92:01:df:80:6f:9c:c8:17:55:
                    ec:e1:b4:3d:16:a9:6c:bd:6f:0b:30:ad:87:fd:c9:
                    b7:a1:e0:f7:b3:8e:4a:c6:73:80:2d:bc:dc:00:a2:
                    d4:49:d9:82:09:01:4e:23:e1:5a:cc:17:c1:f1:2c:
                    ab:35:12:df:17:48:7c:77:b6:af:ad:d7:3f:52:97:
                    e2:34:94:7b:1e:41:ef:92:4a:07:9b:bc:06:01:80:
                    93:98:16:00:1d:58:29:c3:d8:19:11:8e:74:d9:75:
                    27:5f:a5:19:9d:39:1c:0c:7b:c1:27:d6:ff:70:5d:
                    11:07:73:87:26:5a:72:c4:29:cf:4c:66:a2:fc:b0:
                    f2:87:a5:2c:50:dd:5e:15:70:5e:b6:89:ae:0d:9f:
                    49:07:e0:7c:24:4c:9e:c0:56:0a:ad:e3:ef:18:43:
                    da:a6:8b:1c:fc:97:2e:0b:e8:2b:3a:3d:dd:e5:16:
                    09:66:65:6c:37:b9:33:a6:05:69:6a:12:c1:11:98:
                    fa:8a:70:65:ff:19:81:be:a0:31:1d:93:e9:03:af:
                    1f:24:af:da:ec:18:c8:58:30:2e:94:41:93:aa:59:
                    3c:7f:8f:95:65:af:80:c5:86:a7:ac:43:3a:f5:34:
                    6a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A0:D1:64:56:0F:B7:1E:28:1C:D5:34:8E:DB:8E:9B:2F:26:3A:E5
            X509v3 Authority Key Identifier:
                keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:12:64:5f:59:ec:de:67:14:7d:91:a1:ac:68:8e:93:87:77:
         e3:05:5a:9b:5e:90:50:11:ec:0a:ca:83:d9:14:c7:29:3e:ed:
         23:22:11:c6:b5:91:fb:d7:32:c3:2c:6a:b7:cb:9c:84:34:ec:
         d5:ad:20:de:2c:0c:95:a0:94:ec:a2:43:f4:e2:72:b7:b8:9a:
         88:f7:75:b0:3a:7c:b3:df:7f:2e:dd:de:f7:5f:29:7e:85:e9:
         0c:93:bb:22:44:c2:48:52:1d:f8:bc:1b:68:af:01:41:90:bf:
         f9:ce:99:ea:1b:5a:63:09:b1:27:cb:a0:0c:63:51:a4:e2:5b:
         cc:25:c6:78:5e:3e:b8:76:dd:e0:fa:6a:a6:f0:e8:a4:9e:ef:
         fb:cb:e7:cb:be:6f:73:6d:b2:d9:76:2b:ea:a7:3e:f7:9b:7b:
         aa:84:0c:52:8d:2f:13:2f:80:22:8e:8e:ca:fb:d0:52:97:c1:
         cf:d8:3b:b4:21:c8:83:e0:f5:d7:65:03:d8:c0:a4:5a:5f:cd:
         0e:7c:69:43:4c:6b:d2:7c:c2:56:85:50:38:bb:5f:93:9f:86:
         fd:bb:f3:a1:bc:af:c5:b8:c9:64:68:44:16:63:52:0e:bc:36:
         51:b5:07:dc:97:9c:18:3b:36:dc:31:37:15:31:66:5e:57:db:
         f6:3f:7c:71
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDM3MzcxMTAvBgNVBAUTKEUxRTc3OUNCMzFGRkU3NzMxQTMzQjVFQjdFQUZDNkIy
QUJEQjQ0RTMwHhcNMjYwNzI3MDQxMDM5WhcNMjYwODAzMDQxMDM5WjAYMRYwFAYD
VQQDEw02YTY2ZGE0MC1kMjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr5uVFEwAdMdhK2Z/IgaWAUCVQ5aSAd+Ab5zIF1Xs4bQ9FqlsvW8LMK2H/cm3
oeD3s45KxnOALbzcAKLUSdmCCQFOI+FazBfB8SyrNRLfF0h8d7avrdc/UpfiNJR7
HkHvkkoHm7wGAYCTmBYAHVgpw9gZEY502XUnX6UZnTkcDHvBJ9b/cF0RB3OHJlpy
xCnPTGai/LDyh6UsUN1eFXBetomuDZ9JB+B8JEyewFYKrePvGEPaposc/JcuC+gr
Oj3d5RYJZmVsN7kzpgVpahLBEZj6inBl/xmBvqAxHZPpA68fJK/a7BjIWDAulEGT
qlk8f4+VZa+AxYanrEM69TRqAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBug0WRW
D7ceKBzVNI7bjpsvJjrlMB8GA1UdIwQYMBaAFOHnecsx/+dzGjO1636vxrKr20Tj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzczNy84Mjk0MzYzRTMz
NTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUzTWFNN1hyZnFfR3NxdmJS
T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRlZDV5ekhfNTNNYU03WHJmcV9Hc3F2YlJPTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MzczNy84Mjk0MzYzRTMzNTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUz
TWFNN1hyZnFfR3NxdmJST00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPRJkX1ns3mcUfZGhrGiOk4d34wVam16QUBHsCsqD2RTHKT7tIyIRxrWR+9cy
wyxqt8uchDTs1a0g3iwMlaCU7KJD9OJyt7iaiPd1sDp8s99/Lt3e918pfoXpDJO7
IkTCSFId+LwbaK8BQZC/+c6Z6htaYwmxJ8ugDGNRpOJbzCXGeF4+uHbd4PpqpvDo
pJ7v+8vny75vc22y2XYr6qc+95t7qoQMUo0vEy+AIo6OyvvQUpfBz9g7tCHIg+D1
12UD2MCkWl/NDnxpQ0xr0nzCVoVQOLtfk5+G/bvzobyvxbjJZGhEFmNSDrw2UbUH
3JecGDs23DE3FTFmXlfb9j98cQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:54:21 2026 by rpki-client