Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.mft
File:                     f8xPf-awzDq4ikFPiUwnT6ebK4o.mft (raw, json)
Hash identifier:          e6ni+K+zWU/V8vhombxbIMISEpT4jCdbLqAOmrvo0M8=
Subject key identifier:   DA:37:E6:2A:CB:03:0D:19:9F:E2:9B:26:EE:36:2E:A0:07:05:DA:96
Authority key identifier: 7F:CC:4F:7F:E6:B0:CC:3A:B8:8A:41:4F:89:4C:27:4F:A7:9B:2B:8A
Certificate issuer:       /CN=A91DB6F5/serialNumber=7FCC4F7FE6B0CC3AB88A414F894C274FA79B2B8A
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8xPf-awzDq4ikFPiUwnT6ebK4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.mft
Manifest number:          0B
Signing time:             Mon 27 Jul 2026 11:33:36 +0000
Manifest this update:     Mon 27 Jul 2026 11:33:35 +0000
Manifest next update:     Mon 03 Aug 2026 11:33:35 +0000
Files and hashes:         1: f8xPf-awzDq4ikFPiUwnT6ebK4o.crl (hash: XxjBg5ZYOzOCsZN14IVZip6rfca3fJWckftuJrG+yGs=)
                          2: FB8302CC7B4311F1A6C72CC794A30FBC.roa (hash: O3P+wCLcSaZeVnz8hU5Gns4U/UBq9VDtYeZsJeUmjAM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.crl
                          rsync://rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8xPf-awzDq4ikFPiUwnT6ebK4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:33:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB6F5, serialNumber=7FCC4F7FE6B0CC3AB88A414F894C274FA79B2B8A
        Validity
            Not Before: Jul 27 11:33:35 2026 GMT
            Not After : Aug  3 11:33:35 2026 GMT
        Subject: CN=6a674210-ffa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fd:50:af:bd:d0:10:f2:ad:11:5a:26:40:85:
                    a7:da:3e:2c:69:05:a8:3e:bc:8d:cb:ee:d0:5d:4a:
                    9f:fc:7b:f1:f7:7f:7c:f3:e9:b1:b0:c7:bc:63:9d:
                    8c:39:c6:f4:29:2e:6f:b7:1c:46:95:14:7c:1f:96:
                    9f:3b:d6:1e:b7:17:7b:41:ce:9f:b9:91:eb:12:ea:
                    c3:49:d2:b1:db:4c:60:7a:40:cd:11:5e:dc:20:1d:
                    2e:bc:48:24:7e:1f:ff:48:18:b3:43:41:e4:dd:f0:
                    a4:c9:e0:57:a6:c7:a2:45:c5:2b:9b:78:ae:5e:28:
                    38:4d:24:98:d6:e3:50:a5:b0:b2:87:7a:a3:3e:7a:
                    20:bf:42:65:ab:bc:e6:89:64:2a:d5:9b:03:06:66:
                    0c:49:c2:96:b9:01:f8:f7:ff:0d:eb:9c:52:c9:76:
                    85:43:9c:fb:48:b8:26:2a:e1:db:de:88:96:d4:77:
                    92:68:b8:98:50:f4:9e:b2:1e:4e:6d:6f:2b:9f:7d:
                    21:06:50:0e:5f:1c:81:7b:48:15:d5:1f:6d:1d:f5:
                    68:db:0a:26:c7:72:ee:6a:64:f4:d7:24:69:44:4c:
                    21:98:e3:70:64:1b:80:4f:e8:dc:63:07:70:a6:d9:
                    c6:b8:37:50:75:0b:01:e6:04:be:58:f4:e3:c4:67:
                    c6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:37:E6:2A:CB:03:0D:19:9F:E2:9B:26:EE:36:2E:A0:07:05:DA:96
            X509v3 Authority Key Identifier:
                keyid:7F:CC:4F:7F:E6:B0:CC:3A:B8:8A:41:4F:89:4C:27:4F:A7:9B:2B:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8xPf-awzDq4ikFPiUwnT6ebK4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:f3:7e:d9:af:68:e8:39:63:ae:7d:f2:ef:64:56:37:e9:69:
         59:29:7f:65:a2:1b:7d:71:ec:85:bc:ec:76:fb:e5:ab:a7:d3:
         5a:5d:b0:c5:1a:07:f8:6f:15:c0:fa:b2:ea:97:02:23:26:e8:
         cb:6e:8e:de:59:df:b7:58:7f:8f:3a:9c:89:f5:74:07:ff:80:
         94:af:04:b4:bd:26:b8:95:11:65:bd:2f:11:22:ae:0d:45:61:
         80:4b:97:4c:46:24:2d:a0:f4:49:4c:9c:33:ba:66:9b:20:ef:
         53:c3:58:33:65:50:65:92:87:33:9d:b3:dd:fb:da:d5:c8:29:
         a4:84:38:cc:bd:9c:79:15:ff:1b:88:8e:f7:ee:70:89:ed:ca:
         47:a1:df:2d:33:9f:74:ee:05:81:73:ba:ae:26:99:37:29:35:
         9d:34:ac:90:79:8b:cb:ac:40:72:8d:0f:d7:92:0d:53:e9:0e:
         c0:61:01:16:24:c1:e4:52:a4:b3:78:2c:57:7b:3d:e7:09:51:
         78:2f:16:98:00:57:03:9d:58:29:c1:84:af:b8:33:e2:8c:d6:
         e1:bb:00:a4:2a:29:1c:41:c1:74:b2:4c:e4:87:00:cf:8b:61:
         c6:b4:12:1d:4b:ab:d2:ff:5d:64:bb:c5:63:3d:17:13:77:d8:
         28:75:05:95
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
QjZGNTExMC8GA1UEBRMoN0ZDQzRGN0ZFNkIwQ0MzQUI4OEE0MTRGODk0QzI3NEZB
NzlCMkI4QTAeFw0yNjA3MjcxMTMzMzVaFw0yNjA4MDMxMTMzMzVaMBgxFjAUBgNV
BAMTDTZhNjc0MjEwLWZmYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCi/VCvvdAQ8q0RWiZAhafaPixpBag+vI3L7tBdSp/8e/H3f3zz6bGwx7xjnYw5
xvQpLm+3HEaVFHwflp871h63F3tBzp+5kesS6sNJ0rHbTGB6QM0RXtwgHS68SCR+
H/9IGLNDQeTd8KTJ4Femx6JFxSubeK5eKDhNJJjW41ClsLKHeqM+eiC/QmWrvOaJ
ZCrVmwMGZgxJwpa5Afj3/w3rnFLJdoVDnPtIuCYq4dveiJbUd5JouJhQ9J6yHk5t
byuffSEGUA5fHIF7SBXVH20d9WjbCibHcu5qZPTXJGlETCGY43BkG4BP6NxjB3Cm
2ca4N1B1CwHmBL5Y9OPEZ8bPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2jfmKssD
DRmf4psm7jYuoAcF2pYwHwYDVR0jBBgwFoAUf8xPf+awzDq4ikFPiUwnT6ebK4ow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCNkY1LzdCMDZFM0EyN0I0
MzExRjE4NTMzNkUzMDk0QTMwRkJDL2Y4eFBmLWF3ekRxNGlrRlBpVXduVDZlYks0
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZjh4UGYtYXd6RHE0aWtGUGlVd25UNmViSzRvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC
NkY1LzdCMDZFM0EyN0I0MzExRjE4NTMzNkUzMDk0QTMwRkJDL2Y4eFBmLWF3ekRx
NGlrRlBpVXduVDZlYks0by5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBg837Zr2joOWOuffLvZFY36WlZKX9loht9ceyFvOx2++Wrp9NaXbDFGgf4bxXA
+rLqlwIjJujLbo7eWd+3WH+POpyJ9XQH/4CUrwS0vSa4lRFlvS8RIq4NRWGAS5dM
RiQtoPRJTJwzumabIO9Tw1gzZVBlkocznbPd+9rVyCmkhDjMvZx5Ff8biI737nCJ
7cpHod8tM5907gWBc7quJpk3KTWdNKyQeYvLrEByjQ/Xkg1T6Q7AYQEWJMHkUqSz
eCxXez3nCVF4LxaYAFcDnVgpwYSvuDPijNbhuwCkKikcQcF0skzkhwDPi2HGtBId
S6vS/11ku8VjPRcTd9godQWV
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:03:40 2026 by rpki-client