Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EB9/934FAB92751711F188B09F1E72A30FBC/jaLVp38m0NbVR89fVM32RoXD0wI.mft
File:                     jaLVp38m0NbVR89fVM32RoXD0wI.mft (raw, json)
Hash identifier:          auhHkMxJ0Y6Vj4VLdCsVVkHpcKGyeOFZyv76+Qwi1EQ=
Subject key identifier:   62:8C:D6:F7:B7:56:8C:D8:FD:9B:EF:C1:24:39:B9:4F:9A:BE:E9:13
Authority key identifier: 8D:A2:D5:A7:7F:26:D0:D6:D5:47:CF:5F:54:CD:F6:46:85:C3:D3:02
Certificate issuer:       /CN=A91E5EB9/serialNumber=8DA2D5A77F26D0D6D547CF5F54CDF64685C3D302
Certificate serial:       12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jaLVp38m0NbVR89fVM32RoXD0wI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5EB9/934FAB92751711F188B09F1E72A30FBC/jaLVp38m0NbVR89fVM32RoXD0wI.mft
Manifest number:          10
Signing time:             Mon 27 Jul 2026 11:29:56 +0000
Manifest this update:     Mon 27 Jul 2026 11:29:55 +0000
Manifest next update:     Mon 03 Aug 2026 11:29:55 +0000
Files and hashes:         1: jaLVp38m0NbVR89fVM32RoXD0wI.crl (hash: QM9nKKlEshFtGyd7wRUP/u6bufdh80pYqPqWyw6srdU=)
                          2: 459D907A7A5411F1853CBD4D89A30FBC.roa (hash: I9kJtF1h7oYctnKqxd8kTl2aBwt4XGPxXvRCQBmjedQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5EB9/934FAB92751711F188B09F1E72A30FBC/jaLVp38m0NbVR89fVM32RoXD0wI.crl
                          rsync://rpki.apnic.net/member_repository/A91E5EB9/934FAB92751711F188B09F1E72A30FBC/jaLVp38m0NbVR89fVM32RoXD0wI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jaLVp38m0NbVR89fVM32RoXD0wI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5EB9, serialNumber=8DA2D5A77F26D0D6D547CF5F54CDF64685C3D302
        Validity
            Not Before: Jul 27 11:29:55 2026 GMT
            Not After : Aug  3 11:29:55 2026 GMT
        Subject: CN=6a674133-308e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a9:a2:dd:a4:80:4b:89:65:03:26:95:55:ad:
                    e8:80:69:d1:95:4c:80:9f:1b:32:4a:1c:7a:31:4f:
                    58:f9:3e:8c:e9:49:5f:47:6e:18:bd:86:a0:76:0e:
                    95:87:3e:02:b7:bc:28:04:f5:ff:a0:35:1c:f8:7f:
                    46:45:8a:c9:09:6b:3e:dd:c7:eb:a9:6e:27:a3:22:
                    c5:de:ab:19:1f:c6:65:35:b3:18:2b:1b:71:34:34:
                    f2:9b:a9:f0:23:c2:8a:b1:40:95:5d:b1:f5:6d:b4:
                    ad:f5:35:ed:39:7f:21:7b:24:f7:0c:21:f3:86:3a:
                    e3:ce:d9:bd:8c:b3:b8:7d:74:51:38:2a:ea:83:fd:
                    44:6d:a4:dd:ca:bf:85:79:12:57:b1:8f:68:0a:f8:
                    34:3e:ba:eb:48:a3:fe:37:2c:df:da:06:17:43:9d:
                    b6:46:f1:8a:43:d9:0a:e2:64:52:72:a3:2c:b7:3d:
                    5c:78:7c:75:85:fe:39:0f:a0:61:a3:b7:f6:28:c1:
                    c3:6d:a3:a5:61:3c:21:56:52:b3:c4:fb:e4:3c:80:
                    ad:a9:5f:1b:f7:b5:68:d6:b1:39:ce:9c:b2:68:8b:
                    0a:5a:bc:d3:f8:fc:ec:97:46:01:1e:7b:c7:3c:9b:
                    27:c0:d0:17:98:fd:d6:c6:91:5f:e7:b2:6d:14:97:
                    e9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8C:D6:F7:B7:56:8C:D8:FD:9B:EF:C1:24:39:B9:4F:9A:BE:E9:13
            X509v3 Authority Key Identifier:
                keyid:8D:A2:D5:A7:7F:26:D0:D6:D5:47:CF:5F:54:CD:F6:46:85:C3:D3:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5EB9/934FAB92751711F188B09F1E72A30FBC/jaLVp38m0NbVR89fVM32RoXD0wI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jaLVp38m0NbVR89fVM32RoXD0wI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EB9/934FAB92751711F188B09F1E72A30FBC/jaLVp38m0NbVR89fVM32RoXD0wI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:b0:aa:d1:ea:ab:96:dd:d1:43:9e:79:cb:4b:e6:b7:78:15:
         90:43:fe:ea:9a:98:81:4e:d0:93:14:91:10:6c:d0:2b:01:0e:
         b2:be:aa:cf:3b:2d:85:f1:da:e0:d6:d2:64:1a:8c:f6:cc:fe:
         89:1e:00:87:c4:d2:13:29:a8:fc:81:28:45:07:05:71:bd:9c:
         4d:75:52:81:b5:f3:df:93:5b:28:b3:90:4b:75:54:b3:34:d8:
         09:86:cd:65:e8:fb:4c:64:fb:f7:5c:e1:ba:cd:ed:55:c2:bd:
         4f:6c:c2:8c:12:8a:ab:6a:5e:03:c2:1c:cf:fb:6f:c3:9c:30:
         17:64:55:ee:64:73:ec:cd:75:34:1e:1a:4f:4f:c6:1d:74:2a:
         1e:18:3f:10:4d:34:3d:0f:72:b6:7f:8e:60:42:1f:42:9d:05:
         cf:99:8b:2e:15:30:4b:61:1f:63:a9:d5:14:c1:e4:3d:3f:ae:
         50:2f:b8:f3:58:f4:dd:3c:88:16:ca:19:cd:78:d6:40:df:0e:
         fa:21:92:fa:aa:5b:aa:95:b5:fa:6b:f6:d4:dd:bb:73:1a:67:
         6c:c9:06:83:3d:54:f6:4b:46:b4:90:c9:07:6b:6c:47:61:93:
         b8:63:cd:60:4d:78:d5:38:89:29:be:bb:ec:d9:27:83:b4:ef:
         43:1c:79:3c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
NUVCOTExMC8GA1UEBRMoOERBMkQ1QTc3RjI2RDBENkQ1NDdDRjVGNTRDREY2NDY4
NUMzRDMwMjAeFw0yNjA3MjcxMTI5NTVaFw0yNjA4MDMxMTI5NTVaMBgxFjAUBgNV
BAMTDTZhNjc0MTMzLTMwOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0qaLdpIBLiWUDJpVVreiAadGVTICfGzJKHHoxT1j5PozpSV9Hbhi9hqB2DpWH
PgK3vCgE9f+gNRz4f0ZFiskJaz7dx+upbiejIsXeqxkfxmU1sxgrG3E0NPKbqfAj
woqxQJVdsfVttK31Ne05fyF7JPcMIfOGOuPO2b2Ms7h9dFE4KuqD/URtpN3Kv4V5
Elexj2gK+DQ+uutIo/43LN/aBhdDnbZG8YpD2QriZFJyoyy3PVx4fHWF/jkPoGGj
t/YowcNto6VhPCFWUrPE++Q8gK2pXxv3tWjWsTnOnLJoiwpavNP4/OyXRgEee8c8
myfA0BeY/dbGkV/nsm0Ul+mdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYozW97dW
jNj9m+/BJDm5T5q+6RMwHwYDVR0jBBgwFoAUjaLVp38m0NbVR89fVM32RoXD0wIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1RUI5LzkzNEZBQjkyNzUx
NzExRjE4OEIwOUYxRTcyQTMwRkJDL2phTFZwMzhtME5iVlI4OWZWTTMyUm9YRDB3
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvamFMVnAzOG0wTmJWUjg5ZlZNMzJSb1hEMHdJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1
RUI5LzkzNEZBQjkyNzUxNzExRjE4OEIwOUYxRTcyQTMwRkJDL2phTFZwMzhtME5i
VlI4OWZWTTMyUm9YRDB3SS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBQsKrR6quW3dFDnnnLS+a3eBWQQ/7qmpiBTtCTFJEQbNArAQ6yvqrPOy2F8drg
1tJkGoz2zP6JHgCHxNITKaj8gShFBwVxvZxNdVKBtfPfk1sos5BLdVSzNNgJhs1l
6PtMZPv3XOG6ze1Vwr1PbMKMEoqral4DwhzP+2/DnDAXZFXuZHPszXU0HhpPT8Yd
dCoeGD8QTTQ9D3K2f45gQh9CnQXPmYsuFTBLYR9jqdUUweQ9P65QL7jzWPTdPIgW
yhnNeNZA3w76IZL6qluqlbX6a/bU3btzGmdsyQaDPVT2S0a0kMkHa2xHYZO4Y81g
TXjVOIkpvrvs2SeDtO9DHHk8
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:41:07 2026 by rpki-client