Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft
File:                     su3iAzROnKc1AcVRQvmugWCeiYc.mft (raw, json)
Hash identifier:          WMkqwbhbTW+tO8ANaSTpsE2AirwDX5+qwh+KGxpCbPU=
Subject key identifier:   59:CE:51:A1:F9:90:60:9F:EC:8B:2C:0E:DA:62:2B:9B:5B:B2:5A:3B
Authority key identifier: B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87
Certificate issuer:       /CN=A91E46A5/serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987
Certificate serial:       0D53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft
Manifest number:          0D43
Signing time:             Tue 28 Jul 2026 18:13:52 +0000
Manifest this update:     Tue 28 Jul 2026 18:13:52 +0000
Manifest next update:     Tue 04 Aug 2026 18:13:52 +0000
Files and hashes:         1: su3iAzROnKc1AcVRQvmugWCeiYc.crl (hash: Q4tbBU7/vjwfhQqJzseEOCnl0v4i9qq6NtpudsMviLo=)
                          2: CE094B08006B11EAA2719060C4F9AE02.roa (hash: 1V529Ks3PXwTRKi34Eodwq3M4BDwCRU11im6mkDfUoc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl
                          rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:13:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3411 (0xd53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E46A5, serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987
        Validity
            Not Before: Jul 28 18:13:52 2026 GMT
            Not After : Aug  4 18:13:52 2026 GMT
        Subject: CN=6a68f160-ff2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:29:d5:03:cc:ca:f6:60:3a:01:a8:59:7b:65:
                    02:5a:5d:e5:19:6a:bf:9c:7a:e1:c1:ea:f8:32:8e:
                    03:2f:e4:e9:e4:cf:61:b2:a4:a7:6e:2f:ce:dd:c9:
                    82:41:7f:2e:73:81:7f:da:d2:88:95:63:32:3c:51:
                    3b:05:94:86:c9:5e:77:c4:41:26:a2:b7:d6:37:e6:
                    14:23:09:66:ea:af:72:9c:0f:66:4f:a1:65:7d:f6:
                    42:95:e6:2a:74:5b:78:d9:04:9c:a7:35:0b:d0:6f:
                    80:9c:43:19:5f:cf:83:3a:91:76:fd:8f:ee:42:23:
                    aa:e0:80:86:71:00:f3:00:54:81:aa:3c:1c:d7:76:
                    87:c0:be:2f:e7:2d:bc:d9:84:82:af:d3:f1:24:d4:
                    93:80:1e:cb:49:4d:bb:a2:b1:fd:c5:2b:e3:c9:6f:
                    1a:d5:20:5c:f8:fa:6e:6b:35:c2:07:1c:b5:01:45:
                    2e:72:1b:21:57:2f:7a:fa:5a:f8:5a:6c:23:ae:3f:
                    5d:44:78:d7:fb:0c:1a:b6:90:76:19:2e:c3:e5:be:
                    7e:69:3a:c7:e5:38:b3:15:a6:77:f9:37:96:69:01:
                    22:6b:a7:82:48:64:ac:cc:57:f0:5d:82:76:80:9a:
                    5d:b1:8c:95:85:0a:58:29:0f:77:40:e5:df:c7:6f:
                    4a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CE:51:A1:F9:90:60:9F:EC:8B:2C:0E:DA:62:2B:9B:5B:B2:5A:3B
            X509v3 Authority Key Identifier:
                keyid:B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:03:9d:42:80:7b:de:42:71:e5:55:d9:31:26:0d:bb:99:f8:
         b3:c2:bf:db:8e:4c:5b:83:9e:1c:e8:68:e4:f3:0e:56:bb:80:
         2f:f9:db:31:48:28:36:1d:71:ca:ce:9e:d9:be:6d:64:c4:15:
         42:e9:d6:dd:a7:e4:fc:d1:10:20:f3:c1:8b:b1:f7:c6:48:b5:
         7c:66:d8:de:5a:8d:fb:55:2c:d8:6a:97:90:35:d3:3c:60:2d:
         67:e3:5b:06:63:80:2e:67:d9:2c:7d:d7:9b:0f:0e:aa:59:d0:
         4e:d8:96:57:d5:13:c5:7e:17:5c:23:5d:ed:11:87:bf:47:fb:
         c2:59:ca:67:66:a4:b1:cd:0b:28:3b:56:17:ce:9e:90:ec:5c:
         4a:51:88:91:10:a6:fd:e8:96:a2:4c:e8:14:19:29:b3:b0:54:
         a0:92:3f:59:6a:5a:ef:1c:93:3a:c9:e2:4b:92:3f:3f:8d:4a:
         aa:5c:5e:dc:48:ba:c1:77:3f:14:be:2c:24:f9:1d:23:09:08:
         6f:58:76:35:97:0e:25:3e:7f:7d:0e:8f:b8:90:2f:7c:9f:ab:
         2a:69:ea:2e:6e:31:95:7b:3a:be:7d:da:69:9f:d4:da:54:2d:
         a0:49:c5:25:fb:06:55:fb:78:28:ad:ff:f3:6d:b9:7b:a7:f9:
         9b:76:de:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTQ2QTUxMTAvBgNVBAUTKEIyRURFMjAzMzQ0RTlDQTczNTAxQzU1MTQyRjlBRTgx
NjA5RTg5ODcwHhcNMjYwNzI4MTgxMzUyWhcNMjYwODA0MTgxMzUyWjAYMRYwFAYD
VQQDEw02YTY4ZjE2MC1mZjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsCnVA8zK9mA6AahZe2UCWl3lGWq/nHrhwer4Mo4DL+Tp5M9hsqSnbi/O3cmC
QX8uc4F/2tKIlWMyPFE7BZSGyV53xEEmorfWN+YUIwlm6q9ynA9mT6FlffZCleYq
dFt42QScpzUL0G+AnEMZX8+DOpF2/Y/uQiOq4ICGcQDzAFSBqjwc13aHwL4v5y28
2YSCr9PxJNSTgB7LSU27orH9xSvjyW8a1SBc+PpuazXCBxy1AUUuchshVy96+lr4
Wmwjrj9dRHjX+wwatpB2GS7D5b5+aTrH5TizFaZ3+TeWaQEia6eCSGSszFfwXYJ2
gJpdsYyVhQpYKQ93QOXfx29KpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFnOUaH5
kGCf7IssDtpiK5tbslo7MB8GA1UdIwQYMBaAFLLt4gM0TpynNQHFUUL5roFgnomH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZBNS8wMjMxQzE1NDAw
NkIxMUVBOTdDMUJENUZDNEY5QUUwMi9zdTNpQXpST25LYzFBY1ZSUXZtdWdXQ2Vp
WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3N1M2lBelJPbktjMUFjVlJRdm11Z1dDZWlZYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NDZBNS8wMjMxQzE1NDAwNkIxMUVBOTdDMUJENUZDNEY5QUUwMi9zdTNpQXpST25L
YzFBY1ZSUXZtdWdXQ2VpWWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAgOdQoB73kJx5VXZMSYNu5n4s8K/245MW4OeHOho5PMOVruAL/nbMUgoNh1x
ys6e2b5tZMQVQunW3afk/NEQIPPBi7H3xki1fGbY3lqN+1Us2GqXkDXTPGAtZ+Nb
BmOALmfZLH3Xmw8OqlnQTtiWV9UTxX4XXCNd7RGHv0f7wlnKZ2aksc0LKDtWF86e
kOxcSlGIkRCm/eiWokzoFBkps7BUoJI/WWpa7xyTOsniS5I/P41Kqlxe3Ei6wXc/
FL4sJPkdIwkIb1h2NZcOJT5/fQ6PuJAvfJ+rKmnqLm4xlXs6vn3aaZ/U2lQtoEnF
JfsGVft4KK3/8225e6f5m3bemg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:45:48 2026 by rpki-client