Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft
File:                     pOjrw6c5dZmQTabHaUiVu8npE-4.mft (raw, json)
Hash identifier:          7ebfNjYbbrB1xsZ8fSQeonsu/8gnJ4Zo12bpgX6FYDw=
Subject key identifier:   AB:10:1E:25:71:D7:22:FA:E5:46:BF:CF:FD:6B:48:4A:31:3B:54:DB
Authority key identifier: A4:E8:EB:C3:A7:39:75:99:90:4D:A6:C7:69:48:95:BB:C9:E9:13:EE
Certificate issuer:       /CN=A91DABAA/serialNumber=A4E8EBC3A7397599904DA6C7694895BBC9E913EE
Certificate serial:       7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOjrw6c5dZmQTabHaUiVu8npE-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft
Manifest number:          79
Signing time:             Mon 27 Jul 2026 10:00:11 +0000
Manifest this update:     Mon 27 Jul 2026 10:00:10 +0000
Manifest next update:     Mon 03 Aug 2026 10:00:10 +0000
Files and hashes:         1: pOjrw6c5dZmQTabHaUiVu8npE-4.crl (hash: 6p3N+tTSZ2jPxYz35n+PiAXZpfhazzjsqEnRajsgTko=)
                          2: EF7ACD02D19D11F0B7EBD972C4F9AE02.roa (hash: n7mxRLHf+OoO7/6cNs++NJsQTzj4AvvR2XuxwLHJ8V4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.crl
                          rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOjrw6c5dZmQTabHaUiVu8npE-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DABAA, serialNumber=A4E8EBC3A7397599904DA6C7694895BBC9E913EE
        Validity
            Not Before: Jul 27 10:00:10 2026 GMT
            Not After : Aug  3 10:00:10 2026 GMT
        Subject: CN=6a672c2b-0115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8c:41:d7:cb:1f:7f:bc:e5:18:47:a4:7e:a1:
                    bf:a0:ea:bd:15:a7:04:98:51:c2:45:b1:55:4d:7e:
                    c3:29:3f:a0:9c:da:cc:ea:89:d5:10:78:19:4f:5b:
                    94:5c:c3:a1:da:4c:02:5a:88:7b:59:80:f3:19:85:
                    6a:d4:b6:db:d8:5e:27:bf:b3:0f:7b:9c:e4:b3:08:
                    b9:c9:cc:7c:a2:d8:e1:69:53:96:f6:18:25:ba:fd:
                    99:d6:11:70:eb:9b:1d:1f:13:e4:c5:95:67:bd:69:
                    96:11:c4:ef:58:cb:5e:90:34:6d:f3:71:72:38:00:
                    27:ee:15:0d:15:ef:25:b0:8c:83:22:a3:5f:e6:70:
                    37:d6:40:8b:92:f7:03:a4:06:7f:d8:3f:ba:b8:99:
                    84:6d:d0:81:79:59:e8:f9:a0:d3:d0:e4:dc:c6:c6:
                    31:cd:42:09:7d:00:7d:b1:f6:49:5c:eb:fd:eb:3a:
                    6d:93:8c:f0:3f:4d:ff:61:c7:58:46:40:b5:15:e3:
                    99:98:58:20:96:36:41:c8:1f:4b:90:03:1b:b6:cc:
                    fb:6c:d0:0e:ad:62:5e:53:e5:04:fb:49:f1:38:50:
                    bb:b9:21:da:f5:0c:8c:dd:8b:85:ac:66:f1:08:e6:
                    0f:28:93:b4:37:04:e4:a8:7b:fe:3d:59:77:e7:4f:
                    a4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:10:1E:25:71:D7:22:FA:E5:46:BF:CF:FD:6B:48:4A:31:3B:54:DB
            X509v3 Authority Key Identifier:
                keyid:A4:E8:EB:C3:A7:39:75:99:90:4D:A6:C7:69:48:95:BB:C9:E9:13:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOjrw6c5dZmQTabHaUiVu8npE-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:05:9f:36:53:32:9b:87:23:34:f8:80:e6:dc:93:ec:27:0a:
         40:dd:cc:2f:ef:83:61:b8:f2:19:92:cc:22:a3:ad:0f:64:0f:
         6c:de:68:52:5a:de:c6:c9:4d:9a:d8:fa:d3:58:12:f7:7d:7a:
         6f:6a:f4:cc:92:63:ee:86:f9:cf:72:15:84:e2:ce:7a:39:6f:
         3e:97:2e:08:3b:bf:4f:50:cc:7a:44:0c:57:f0:6e:0e:5a:82:
         33:9b:59:bc:cf:97:bf:94:83:f7:43:07:19:75:60:b9:54:d7:
         00:f1:e8:2c:65:71:98:fa:c9:60:ea:68:c2:d5:9e:45:6f:fd:
         c1:56:af:23:6c:28:55:c0:cf:13:f4:c2:18:ea:83:9d:c7:45:
         4f:ce:24:74:48:36:f7:da:12:c0:a7:60:e8:7e:38:e7:c0:d6:
         4a:26:92:ae:42:22:01:40:45:82:45:74:d3:1f:fa:34:87:d0:
         7b:30:96:6e:f9:8f:eb:a2:97:5a:89:92:d3:8b:60:93:ea:0c:
         46:7a:db:00:b2:7c:80:6f:73:b1:3d:0c:1a:1b:c5:f8:ac:e4:
         e9:e0:52:27:db:84:65:55:e8:3f:6c:c7:53:4a:b0:a2:85:fd:
         e9:25:c6:4e:da:7e:db:09:61:54:5d:8f:47:42:e6:15:71:68:
         83:89:36:49
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
QUJBQTExMC8GA1UEBRMoQTRFOEVCQzNBNzM5NzU5OTkwNERBNkM3Njk0ODk1QkJD
OUU5MTNFRTAeFw0yNjA3MjcxMDAwMTBaFw0yNjA4MDMxMDAwMTBaMBgxFjAUBgNV
BAMTDTZhNjcyYzJiLTAxMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDejEHXyx9/vOUYR6R+ob+g6r0VpwSYUcJFsVVNfsMpP6Cc2szqidUQeBlPW5Rc
w6HaTAJaiHtZgPMZhWrUttvYXie/sw97nOSzCLnJzHyi2OFpU5b2GCW6/ZnWEXDr
mx0fE+TFlWe9aZYRxO9Yy16QNG3zcXI4ACfuFQ0V7yWwjIMio1/mcDfWQIuS9wOk
Bn/YP7q4mYRt0IF5Wej5oNPQ5NzGxjHNQgl9AH2x9klc6/3rOm2TjPA/Tf9hx1hG
QLUV45mYWCCWNkHIH0uQAxu2zPts0A6tYl5T5QT7SfE4ULu5Idr1DIzdi4WsZvEI
5g8ok7Q3BOSoe/49WXfnT6RlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUqxAeJXHX
IvrlRr/P/WtISjE7VNswHwYDVR0jBBgwFoAUpOjrw6c5dZmQTabHaUiVu8npE+4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBQkFBLzRDNENBREE4RDE5
RDExRjBCREM1NDE3MEM0RjlBRTAyL3BPanJ3NmM1ZFptUVRhYkhhVWlWdThucEUt
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcE9qcnc2YzVkWm1RVGFiSGFVaVZ1OG5wRS00LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB
QkFBLzRDNENBREE4RDE5RDExRjBCREM1NDE3MEM0RjlBRTAyL3BPanJ3NmM1ZFpt
UVRhYkhhVWlWdThucEUtNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDBBZ82UzKbhyM0+IDm3JPsJwpA3cwv74NhuPIZkswio60PZA9s3mhSWt7GyU2a
2PrTWBL3fXpvavTMkmPuhvnPchWE4s56OW8+ly4IO79PUMx6RAxX8G4OWoIzm1m8
z5e/lIP3QwcZdWC5VNcA8egsZXGY+slg6mjC1Z5Fb/3BVq8jbChVwM8T9MIY6oOd
x0VPziR0SDb32hLAp2DofjjnwNZKJpKuQiIBQEWCRXTTH/o0h9B7MJZu+Y/ropda
iZLTi2CT6gxGetsAsnyAb3OxPQwaG8X4rOTp4FIn24RlVeg/bMdTSrCihf3pJcZO
2n7bCWFUXY9HQuYVcWiDiTZJ
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:45:01 2026 by rpki-client