Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft
File:                     NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft (raw, json)
Hash identifier:          +kjVcFpSEuF4ZiIcRc/X7hgA2BdFx2pu+hM8o8Zfp1Y=
Subject key identifier:   9A:B2:F2:B5:2E:6E:76:32:C3:C2:75:BE:6B:53:89:7F:F5:86:C8:C3
Authority key identifier: 34:9E:59:7C:71:78:81:04:B0:64:9F:07:3A:BA:72:F6:5F:28:4B:9A
Certificate issuer:       /CN=A91D4E53/serialNumber=349E597C71788104B0649F073ABA72F65F284B9A
Certificate serial:       07CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft
Manifest number:          07C3
Signing time:             Tue 28 Jul 2026 21:51:15 +0000
Manifest this update:     Tue 28 Jul 2026 21:51:15 +0000
Manifest next update:     Tue 04 Aug 2026 21:51:15 +0000
Files and hashes:         1: NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.crl (hash: wPcO/r4u8fZ1M4PZo9dQ9XlChydzdE2yhVbBcZUJHzg=)
                          2: 349EFE924E6511EBBFE35D1AC4F9AE02.roa (hash: yDS8KPUeg2RwXUxl4NXgC/Qcz1X1ZUUtcQIrqZqysjs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.crl
                          rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:51:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1998 (0x7ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4E53, serialNumber=349E597C71788104B0649F073ABA72F65F284B9A
        Validity
            Not Before: Jul 28 21:51:15 2026 GMT
            Not After : Aug  4 21:51:15 2026 GMT
        Subject: CN=6a692453-a646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cd:7c:dd:db:7b:eb:70:8f:b3:43:2b:25:5b:
                    cc:c0:a9:01:1b:59:21:dd:e6:67:26:9f:3f:17:ed:
                    ee:7e:48:2e:a7:8e:cc:7d:43:be:1d:0c:d0:d2:89:
                    ab:be:39:be:78:ed:97:7d:aa:70:12:b7:d3:96:7c:
                    f2:a4:97:b2:ef:b2:8e:79:64:10:bf:6e:a6:1c:74:
                    62:68:b3:15:95:b9:51:01:79:83:82:dc:f2:6d:68:
                    88:7d:c7:49:e3:ec:21:91:12:fe:3b:33:1b:44:01:
                    cf:a2:10:ef:88:5b:44:1d:8a:fb:30:59:ee:aa:ba:
                    3f:a0:50:ee:89:6b:80:e0:f2:6b:2c:cc:53:51:90:
                    50:13:57:60:4f:7c:54:6f:15:14:a8:62:95:aa:a9:
                    23:9f:e3:a8:a8:6c:6e:45:42:8a:fb:6e:34:2e:08:
                    53:ff:f7:f3:c6:91:11:90:5c:5d:95:ff:e5:7b:b9:
                    d4:ec:37:0a:1f:8a:a1:17:0e:70:de:b9:a4:80:18:
                    7f:b9:64:01:84:42:bd:ff:92:e2:f7:56:e2:ca:9e:
                    ff:92:fe:7a:92:26:86:d1:d2:d6:3d:90:60:f9:86:
                    8f:7d:68:9c:ab:ec:95:f8:f9:f1:15:f6:1e:62:76:
                    0b:a2:dd:db:f7:9f:d9:31:05:d7:b9:80:5b:ff:a5:
                    e1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B2:F2:B5:2E:6E:76:32:C3:C2:75:BE:6B:53:89:7F:F5:86:C8:C3
            X509v3 Authority Key Identifier:
                keyid:34:9E:59:7C:71:78:81:04:B0:64:9F:07:3A:BA:72:F6:5F:28:4B:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:c4:6a:5a:78:83:2d:c6:f4:b5:38:cf:5f:31:d9:fd:7d:90:
         96:a5:02:e9:bc:d9:90:0e:eb:42:f1:6d:f7:16:b6:ee:4a:52:
         fc:d4:8a:66:90:ec:e2:8f:90:60:35:bc:bf:80:f2:7d:26:dd:
         54:86:1e:4b:83:b1:68:4c:ca:2b:a9:97:23:66:e8:6d:0e:7d:
         42:f7:cd:75:19:01:80:75:31:4a:5a:47:73:5a:cb:3b:b3:ba:
         fd:33:bb:38:0d:49:0a:7e:33:06:2d:60:d5:25:90:f1:58:40:
         96:48:03:12:bd:29:81:5b:ef:5b:3d:28:45:66:1d:55:97:5e:
         4e:bd:a3:4c:c8:a5:fb:f8:0e:9a:b0:3d:05:53:2f:08:06:f9:
         71:dd:37:9c:8f:93:60:9e:6a:da:e0:36:16:b9:6d:3b:db:0b:
         af:fb:a9:1c:69:e1:23:de:02:df:3d:92:6d:8f:dc:01:ef:a1:
         65:71:aa:c9:94:12:de:4c:b2:78:07:f1:dd:58:5b:73:94:00:
         47:6d:56:1f:b4:a0:7e:40:ff:9a:67:4d:12:e2:fe:88:7b:f3:
         7c:4f:49:86:1d:3b:4c:e3:49:c4:30:6a:3c:09:58:46:f7:1b:
         11:94:6b:b9:1b:a0:b3:72:55:33:8a:52:06:96:10:3c:9a:58:
         1c:a0:ba:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDRFNTMxMTAvBgNVBAUTKDM0OUU1OTdDNzE3ODgxMDRCMDY0OUYwNzNBQkE3MkY2
NUYyODRCOUEwHhcNMjYwNzI4MjE1MTE1WhcNMjYwODA0MjE1MTE1WjAYMRYwFAYD
VQQDEw02YTY5MjQ1My1hNjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqs183dt763CPs0MrJVvMwKkBG1kh3eZnJp8/F+3ufkgup47MfUO+HQzQ0omr
vjm+eO2XfapwErfTlnzypJey77KOeWQQv26mHHRiaLMVlblRAXmDgtzybWiIfcdJ
4+whkRL+OzMbRAHPohDviFtEHYr7MFnuqro/oFDuiWuA4PJrLMxTUZBQE1dgT3xU
bxUUqGKVqqkjn+OoqGxuRUKK+240LghT//fzxpERkFxdlf/le7nU7DcKH4qhFw5w
3rmkgBh/uWQBhEK9/5Li91biyp7/kv56kiaG0dLWPZBg+YaPfWicq+yV+PnxFfYe
YnYLot3b95/ZMQXXuYBb/6XhewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJqy8rUu
bnYyw8J1vmtTiX/1hsjDMB8GA1UdIwQYMBaAFDSeWXxxeIEEsGSfBzq6cvZfKEua
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEU1My9BNEE1MTlFQTRF
NjIxMUVCQThBQ0FDNUFDNEY5QUUwMi9OSjVaZkhGNGdRU3daSjhIT3JweTlsOG9T
NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05KNVpmSEY0Z1FTd1pKOEhPcnB5OWw4b1M1by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NEU1My9BNEE1MTlFQTRFNjIxMUVCQThBQ0FDNUFDNEY5QUUwMi9OSjVaZkhGNGdR
U3daSjhIT3JweTlsOG9TNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANsRqWniDLcb0tTjPXzHZ/X2QlqUC6bzZkA7rQvFt9xa27kpS/NSKZpDs4o+Q
YDW8v4DyfSbdVIYeS4OxaEzKK6mXI2bobQ59QvfNdRkBgHUxSlpHc1rLO7O6/TO7
OA1JCn4zBi1g1SWQ8VhAlkgDEr0pgVvvWz0oRWYdVZdeTr2jTMil+/gOmrA9BVMv
CAb5cd03nI+TYJ5q2uA2FrltO9sLr/upHGnhI94C3z2SbY/cAe+hZXGqyZQS3kyy
eAfx3Vhbc5QAR21WH7SgfkD/mmdNEuL+iHvzfE9Jhh07TONJxDBqPAlYRvcbEZRr
uRugs3JVM4pSBpYQPJpYHKC63w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:41:10 2026 by rpki-client