Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft
File:                     SFseanLJRvLiQ6KAe3DF3V6stzA.mft (raw, json)
Hash identifier:          hP0Ts1exGoOxp2yhDIViAEZBpfclfPwFSMELa8t3paw=
Subject key identifier:   BF:83:CC:EB:F4:18:C1:6C:CA:CD:82:F1:D7:D1:0C:E2:D6:1E:C7:EB
Authority key identifier: 48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30
Certificate issuer:       /CN=A91D4413/serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730
Certificate serial:       21A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft
Manifest number:          2D39
Signing time:             Tue 28 Jul 2026 15:59:57 +0000
Manifest this update:     Tue 28 Jul 2026 15:59:57 +0000
Manifest next update:     Tue 04 Aug 2026 15:59:57 +0000
Files and hashes:         1: SFseanLJRvLiQ6KAe3DF3V6stzA.crl (hash: HWNyVOM5Fno8ww8yPwEduEnHy5Pt7sz/atEHzWoUMgA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl
                          rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8616 (0x21a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4413, serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730
        Validity
            Not Before: Jul 28 15:59:57 2026 GMT
            Not After : Aug  4 15:59:57 2026 GMT
        Subject: CN=6a68d1fd-704d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:27:b0:6a:0f:04:f7:aa:8d:8a:8a:ab:fa:c1:
                    c8:de:ef:1a:48:fd:59:c3:ea:4b:f3:f1:b3:5a:71:
                    6b:df:d1:64:87:af:7b:71:76:75:05:44:54:d1:0b:
                    56:f1:9e:17:91:36:e6:d9:93:1f:42:7e:06:a1:2d:
                    9e:51:a9:87:2b:f9:f6:73:f5:b2:eb:b7:5e:a7:a7:
                    ba:4d:12:a8:4c:08:b0:b1:df:08:19:33:a8:23:dc:
                    af:94:5f:68:dd:37:d9:ab:35:4d:81:db:af:9c:a6:
                    93:3b:67:a2:57:0d:80:78:4a:00:f9:6d:b7:84:d0:
                    eb:0b:9f:22:22:8d:43:ae:80:04:60:7a:0c:07:82:
                    92:c1:e1:4c:61:16:1e:a7:5b:0e:95:c5:b3:d7:a4:
                    e8:6a:35:b0:54:24:6f:81:15:42:cf:d6:99:a8:45:
                    c9:07:96:44:62:0d:dc:7e:27:5c:3b:63:d5:df:5c:
                    3f:6e:ab:75:ea:91:08:8b:9c:f9:0e:4f:4c:6e:b2:
                    31:9f:f1:ee:27:a3:72:20:8b:04:95:5f:f3:a6:4b:
                    64:0b:85:c0:85:02:6f:c6:85:9c:fc:76:db:25:ba:
                    8d:ca:0f:ac:cc:16:f5:36:11:69:1c:eb:ec:28:aa:
                    31:f0:7c:25:c1:69:32:ed:0b:4f:97:f0:52:3b:63:
                    c8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:83:CC:EB:F4:18:C1:6C:CA:CD:82:F1:D7:D1:0C:E2:D6:1E:C7:EB
            X509v3 Authority Key Identifier:
                keyid:48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:1a:55:ab:cb:d6:b8:69:33:e6:80:5b:6c:c5:49:23:d8:cc:
         ff:2f:2a:28:0b:0e:41:cc:68:c2:f8:f9:d1:9d:e3:ae:9d:be:
         b3:92:48:68:7d:66:9d:61:ad:91:b4:f7:70:35:01:14:db:4d:
         ee:c6:51:e4:b3:6f:fc:b6:4a:e3:5f:53:19:3e:e2:eb:fa:b1:
         fe:57:36:44:3e:0e:75:a0:6f:96:6c:b8:2e:72:8f:7b:01:ef:
         20:8c:ea:1a:53:8c:5b:4c:e0:eb:36:ab:08:04:ab:0b:91:f2:
         e0:0f:6a:a4:cd:00:6c:3c:2b:b5:26:c0:b8:a1:00:eb:af:0e:
         bf:38:9a:a9:01:44:75:b5:ef:88:69:b9:54:a2:74:b2:15:78:
         4f:9f:7d:72:a0:8c:92:2d:17:17:5d:ec:77:0b:98:8c:61:ce:
         c2:6a:d7:a6:48:b7:d2:13:d0:34:97:82:da:d8:ae:d4:4c:1d:
         d2:11:22:0a:a2:ec:ea:82:5a:c0:a7:06:8e:53:0c:0b:e1:67:
         e8:e1:81:05:b2:d7:77:c8:14:65:cd:bf:19:7f:7d:90:cf:e8:
         8d:90:6a:47:1a:e5:6c:52:40:fb:49:26:09:a2:14:e6:b0:5f:
         80:28:31:af:4f:94:db:91:57:3f:8b:4b:4a:46:b3:a4:1b:45:
         0e:63:14:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICIagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQ0MTMxMTAvBgNVBAUTKDQ4NUIxRTZBNzJDOTQ2RjJFMjQzQTI4MDdCNzBDNURE
NUVBQ0I3MzAwHhcNMjYwNzI4MTU1OTU3WhcNMjYwODA0MTU1OTU3WjAYMRYwFAYD
VQQDEw02YTY4ZDFmZC03MDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuSewag8E96qNioqr+sHI3u8aSP1Zw+pL8/GzWnFr39Fkh697cXZ1BURU0QtW
8Z4XkTbm2ZMfQn4GoS2eUamHK/n2c/Wy67dep6e6TRKoTAiwsd8IGTOoI9yvlF9o
3TfZqzVNgduvnKaTO2eiVw2AeEoA+W23hNDrC58iIo1DroAEYHoMB4KSweFMYRYe
p1sOlcWz16ToajWwVCRvgRVCz9aZqEXJB5ZEYg3cfidcO2PV31w/bqt16pEIi5z5
Dk9MbrIxn/HuJ6NyIIsElV/zpktkC4XAhQJvxoWc/HbbJbqNyg+szBb1NhFpHOvs
KKox8HwlwWky7QtPl/BSO2PIowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL+DzOv0
GMFsys2C8dfRDOLWHsfrMB8GA1UdIwQYMBaAFEhbHmpyyUby4kOigHtwxd1erLcw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDQxMy8wODE2RTc1NEZG
QjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9TRnNlYW5MSlJ2TGlRNktBZTNERjNWNnN0
ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NGc2VhbkxKUnZMaVE2S0FlM0RGM1Y2c3R6QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDQxMy8wODE2RTc1NEZGQjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9TRnNlYW5MSlJ2
TGlRNktBZTNERjNWNnN0ekEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlxpVq8vWuGkz5oBbbMVJI9jM/y8qKAsOQcxowvj50Z3jrp2+s5JIaH1mnWGt
kbT3cDUBFNtN7sZR5LNv/LZK419TGT7i6/qx/lc2RD4OdaBvlmy4LnKPewHvIIzq
GlOMW0zg6zarCASrC5Hy4A9qpM0AbDwrtSbAuKEA668OvziaqQFEdbXviGm5VKJ0
shV4T599cqCMki0XF13sdwuYjGHOwmrXpki30hPQNJeC2tiu1Ewd0hEiCqLs6oJa
wKcGjlMMC+Fn6OGBBbLXd8gUZc2/GX99kM/ojZBqRxrlbFJA+0kmCaIU5rBfgCgx
r0+U25FXP4tLSkazpBtFDmMUBw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:10:48 2026 by rpki-client