Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
File:                     sumTicSsA0jYrsh1t0aJ0E5wyDo.mft (raw, json)
Hash identifier:          vmEeeeaSY5Oqk+oeQpfKRaY+AMs2wSHX2aGfcLC8EaY=
Subject key identifier:   84:7A:37:B4:EB:1F:0D:4B:16:B9:08:26:36:07:C7:94:D4:E9:2B:0F
Authority key identifier: B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A
Certificate issuer:       /CN=A91E77A1/serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A
Certificate serial:       0862
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
Manifest number:          0857
Signing time:             Sun 26 Jul 2026 21:35:17 +0000
Manifest this update:     Sun 26 Jul 2026 21:35:17 +0000
Manifest next update:     Sun 02 Aug 2026 21:35:17 +0000
Files and hashes:         1: sumTicSsA0jYrsh1t0aJ0E5wyDo.crl (hash: cGJSoylYmkyPbdo/q2tmuvir0GBxeu8M6EN5fm2Loc8=)
                          2: 4F7AD592169311EB89C20F1DC4F9AE02.roa (hash: e9AEUyF7msNGCvAxuLzz0+16D6wbXZUIragDh/ub5SY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl
                          rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 21:35:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2146 (0x862)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E77A1, serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A
        Validity
            Not Before: Jul 26 21:35:17 2026 GMT
            Not After : Aug  2 21:35:17 2026 GMT
        Subject: CN=6a667d95-cf30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4b:6b:56:b6:e3:ac:a7:bf:1a:d0:28:92:4a:
                    ee:a4:f8:be:d6:ed:1e:5c:a4:f7:72:92:b1:1f:b0:
                    66:eb:a3:dd:71:ae:09:c8:d7:ca:d8:cd:c9:92:dd:
                    80:2b:ee:9c:48:8b:55:c0:67:3c:fc:88:24:f4:a7:
                    ba:78:9b:26:2c:88:5a:78:a5:c6:eb:96:b8:7b:2a:
                    72:17:e8:a1:3b:a2:7a:25:7f:74:bf:14:04:d0:bb:
                    8c:e4:12:a8:12:56:c1:b5:0c:ca:a2:3d:81:e3:0a:
                    21:e3:03:00:6b:1f:1a:29:97:2d:76:51:be:49:99:
                    17:e9:ba:f4:95:b0:d5:8e:d7:bd:0c:80:89:60:60:
                    ee:dc:d5:b2:de:09:e7:3a:1a:91:d4:e6:7d:c9:9a:
                    15:af:7a:2e:8b:87:2e:8b:40:ed:8a:d1:f3:c6:d6:
                    d7:bb:78:75:ca:11:1a:9f:70:6d:e4:7a:92:fa:c7:
                    08:d7:c6:ad:22:fa:e5:e1:fa:03:b2:4e:bb:70:ce:
                    ca:0f:25:ca:23:c7:8f:2b:9f:61:d6:1a:6b:1e:82:
                    09:54:f5:d0:c4:5b:eb:c8:8e:1a:4e:c2:06:b1:29:
                    24:f0:c2:36:b4:c9:dd:c5:13:41:0e:c7:cc:30:f6:
                    a6:c3:ae:53:a8:9f:85:59:ec:fa:36:5d:34:5c:ce:
                    d2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7A:37:B4:EB:1F:0D:4B:16:B9:08:26:36:07:C7:94:D4:E9:2B:0F
            X509v3 Authority Key Identifier:
                keyid:B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:11:5a:62:ba:ff:f2:80:71:c3:f0:9b:cc:68:33:a8:5a:c1:
         e5:52:35:18:f7:17:e1:76:4c:ca:e7:a2:61:31:e5:b2:cd:81:
         80:37:01:14:a5:bd:a6:ed:75:3c:88:4f:1b:87:3c:11:1d:b4:
         5b:0f:94:59:fa:1c:4e:61:05:63:8e:d4:5f:5d:31:51:83:a1:
         75:27:f0:5c:4e:ec:c7:7b:f4:d0:d3:90:38:fe:3c:d4:46:c0:
         a7:41:d5:07:31:84:f3:15:99:79:85:00:31:71:03:7f:60:1a:
         be:44:25:f1:06:be:95:82:71:d9:58:44:f9:b7:3e:44:7c:09:
         be:0c:4c:ae:7a:c9:a8:ad:e6:df:65:a4:9a:86:86:69:85:75:
         fc:e1:de:da:9b:4a:f7:57:e5:49:03:4c:1b:4e:5d:9b:4e:44:
         fe:6c:45:10:70:e5:31:f0:07:5f:a4:54:c0:59:1a:3b:e5:a0:
         ff:23:fa:a3:85:71:2d:ba:34:bf:61:25:61:91:60:21:55:38:
         b5:8a:0a:9f:42:d0:30:fa:31:a6:44:06:34:32:4b:04:26:06:
         86:4e:26:03:2d:a2:37:3e:c2:14:02:3b:77:d3:a5:92:54:a6:
         b5:78:7d:62:16:22:c0:95:80:83:a9:ae:1d:96:79:5f:b1:7f:
         bb:81:a9:eb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTc3QTExMTAvBgNVBAUTKEIyRTk5Mzg5QzRBQzAzNDhEOEFFQzg3NUI3NDY4OUQw
NEU3MEM4M0EwHhcNMjYwNzI2MjEzNTE3WhcNMjYwODAyMjEzNTE3WjAYMRYwFAYD
VQQDEw02YTY2N2Q5NS1jZjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyktrVrbjrKe/GtAokkrupPi+1u0eXKT3cpKxH7Bm66Pdca4JyNfK2M3Jkt2A
K+6cSItVwGc8/Igk9Ke6eJsmLIhaeKXG65a4eypyF+ihO6J6JX90vxQE0LuM5BKo
ElbBtQzKoj2B4woh4wMAax8aKZctdlG+SZkX6br0lbDVjte9DICJYGDu3NWy3gnn
OhqR1OZ9yZoVr3oui4cui0DtitHzxtbXu3h1yhEan3Bt5HqS+scI18atIvrl4foD
sk67cM7KDyXKI8ePK59h1hprHoIJVPXQxFvryI4aTsIGsSkk8MI2tMndxRNBDsfM
MPamw65TqJ+FWez6Nl00XM7SDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIR6N7Tr
Hw1LFrkIJjYHx5TU6SsPMB8GA1UdIwQYMBaAFLLpk4nErANI2K7IdbdGidBOcMg6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzdBMS9CNUMyN0E4QzE2
OTExMUVCQUFCMzA0MUJDNEY5QUUwMi9zdW1UaWNTc0Ewallyc2gxdDBhSjBFNXd5
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3N1bVRpY1NzQTBqWXJzaDF0MGFKMEU1d3lEby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NzdBMS9CNUMyN0E4QzE2OTExMUVCQUFCMzA0MUJDNEY5QUUwMi9zdW1UaWNTc0Ew
allyc2gxdDBhSjBFNXd5RG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApxFaYrr/8oBxw/CbzGgzqFrB5VI1GPcX4XZMyueiYTHlss2BgDcBFKW9pu11
PIhPG4c8ER20Ww+UWfocTmEFY47UX10xUYOhdSfwXE7sx3v00NOQOP481EbAp0HV
BzGE8xWZeYUAMXEDf2AavkQl8Qa+lYJx2VhE+bc+RHwJvgxMrnrJqK3m32WkmoaG
aYV1/OHe2ptK91flSQNMG05dm05E/mxFEHDlMfAHX6RUwFkaO+Wg/yP6o4VxLbo0
v2ElYZFgIVU4tYoKn0LQMPoxpkQGNDJLBCYGhk4mAy2iNz7CFAI7d9OlklSmtXh9
YhYiwJWAg6muHZZ5X7F/u4Gp6w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:51:44 2026 by rpki-client