Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.mft
File:                     bZSAzzKE0AK1kfXiHbESCX_OcLE.mft (raw, json)
Hash identifier:          iOJwgZvt1lPqjVta7DkJNH7rQTsnIoh0ktyxDD12p/0=
Subject key identifier:   00:18:20:38:7B:99:94:4A:1E:24:3F:39:D9:F7:66:33:D9:20:54:9F
Authority key identifier: 6D:94:80:CF:32:84:D0:02:B5:91:F5:E2:1D:B1:12:09:7F:CE:70:B1
Certificate issuer:       /CN=A91EB564/serialNumber=6D9480CF3284D002B591F5E21DB112097FCE70B1
Certificate serial:       0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZSAzzKE0AK1kfXiHbESCX_OcLE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.mft
Manifest number:          0C
Signing time:             Mon 27 Jul 2026 11:32:37 +0000
Manifest this update:     Mon 27 Jul 2026 11:32:36 +0000
Manifest next update:     Mon 03 Aug 2026 11:32:36 +0000
Files and hashes:         1: bZSAzzKE0AK1kfXiHbESCX_OcLE.crl (hash: vljcE5pv7j/Tct5SGGWMMy8owQ/asMuabKLBrsB125Y=)
                          2: 9035F5F07A4A11F1B8163F0086A30FBC.roa (hash: VI2u04S0VNmMAD0r4a1hC7wJPi7mvZdC/n4RJ1VCcT4=)
                          3: kk8aRD5asQ84XiRhDQ4hreQ8Hkc.asa (hash: 7xNDhFxLgQU7zKgX3ZN4lOKOG19lMfG1qRvfW2vvAxU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.crl
                          rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZSAzzKE0AK1kfXiHbESCX_OcLE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB564, serialNumber=6D9480CF3284D002B591F5E21DB112097FCE70B1
        Validity
            Not Before: Jul 27 11:32:36 2026 GMT
            Not After : Aug  3 11:32:36 2026 GMT
        Subject: CN=6a6741d5-cbf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e3:90:3f:d8:f8:66:0b:05:25:ff:71:03:63:
                    ff:3c:76:9a:2f:c3:72:0b:e7:c0:43:bb:81:82:35:
                    2a:1a:11:fa:e3:ed:e4:b3:32:45:ca:31:7c:53:fc:
                    ec:2c:22:40:f7:1a:32:64:6f:e4:09:a0:a7:61:2b:
                    bd:66:e6:0e:e3:c0:26:37:d6:f9:45:11:87:41:92:
                    21:46:bc:90:8f:7c:36:ba:66:d9:3f:aa:3c:2c:b2:
                    4d:46:2c:52:86:b3:f8:d8:dd:2c:4e:a9:35:43:dc:
                    e9:0b:20:ab:11:25:e2:4e:e6:4f:ae:ba:f8:83:be:
                    36:48:8b:d2:96:57:98:6c:8e:5a:76:bc:f0:91:67:
                    fb:e2:d6:f1:3d:98:05:be:4a:49:f2:43:20:f6:64:
                    7c:a6:b1:0b:20:a8:b2:3e:36:6f:ac:78:aa:8a:bf:
                    c3:db:ee:5a:16:5c:a1:01:65:d7:a4:e4:21:52:ee:
                    69:ae:4b:b0:24:79:21:69:c5:61:e6:9f:e1:a0:ce:
                    01:8d:83:24:49:bc:e2:98:46:14:06:f3:5e:dd:91:
                    9f:fe:77:da:d8:de:5c:ac:a9:40:27:68:a2:66:b9:
                    74:c0:ed:76:53:7b:44:8b:4e:c5:fb:3a:c4:00:01:
                    f1:b0:8e:72:09:ad:5f:59:94:9a:7f:03:5a:4d:4d:
                    65:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:18:20:38:7B:99:94:4A:1E:24:3F:39:D9:F7:66:33:D9:20:54:9F
            X509v3 Authority Key Identifier:
                keyid:6D:94:80:CF:32:84:D0:02:B5:91:F5:E2:1D:B1:12:09:7F:CE:70:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZSAzzKE0AK1kfXiHbESCX_OcLE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:87:9c:3c:2a:d1:2b:08:1d:ad:43:39:a7:7c:70:72:87:83:
         70:06:7c:fc:54:85:28:9d:17:0e:70:1a:82:b2:37:cd:08:52:
         42:34:7d:5d:4f:2f:06:7c:94:a0:df:d5:97:f6:d2:ad:b1:62:
         29:43:98:ca:8b:d8:c2:30:cf:5a:55:e2:b8:7c:3d:8e:d7:ae:
         73:b3:04:51:bb:d2:a7:78:16:9d:7a:76:e0:25:4d:a4:ae:18:
         b9:8f:cf:b2:63:07:4c:34:d5:ee:1b:ab:2c:95:d7:2c:2b:f3:
         32:e7:f5:af:4a:f4:3d:e2:73:85:02:49:90:94:fc:73:13:fa:
         8d:52:3f:c4:ae:4b:36:1d:3f:29:75:61:ad:17:0e:5b:a6:a8:
         d9:46:5b:ac:14:24:69:bd:3a:c8:e0:ec:0d:f8:8f:a8:ca:13:
         53:8e:83:7b:4a:32:ed:70:8c:d6:09:e7:e9:b9:ff:4a:b0:ce:
         13:9c:13:61:90:66:af:04:fc:1b:bf:7e:0f:5d:53:26:60:d2:
         22:4f:b7:70:27:e8:52:32:b9:02:65:89:ad:19:f4:d2:84:51:
         ca:54:3e:5c:60:43:a2:7d:2e:62:bb:31:83:ab:c0:fa:04:5d:
         88:85:a6:07:5c:e6:e2:27:cb:8e:68:f5:a7:e4:3a:d9:28:ac:
         ec:ab:ed:7f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
QjU2NDExMC8GA1UEBRMoNkQ5NDgwQ0YzMjg0RDAwMkI1OTFGNUUyMURCMTEyMDk3
RkNFNzBCMTAeFw0yNjA3MjcxMTMyMzZaFw0yNjA4MDMxMTMyMzZaMBgxFjAUBgNV
BAMTDTZhNjc0MWQ1LWNiZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDM45A/2PhmCwUl/3EDY/88dpovw3IL58BDu4GCNSoaEfrj7eSzMkXKMXxT/Ows
IkD3GjJkb+QJoKdhK71m5g7jwCY31vlFEYdBkiFGvJCPfDa6Ztk/qjwssk1GLFKG
s/jY3SxOqTVD3OkLIKsRJeJO5k+uuviDvjZIi9KWV5hsjlp2vPCRZ/vi1vE9mAW+
SknyQyD2ZHymsQsgqLI+Nm+seKqKv8Pb7loWXKEBZdek5CFS7mmuS7AkeSFpxWHm
n+GgzgGNgyRJvOKYRhQG817dkZ/+d9rY3lysqUAnaKJmuXTA7XZTe0SLTsX7OsQA
AfGwjnIJrV9ZlJp/A1pNTWVRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUABggOHuZ
lEoeJD852fdmM9kgVJ8wHwYDVR0jBBgwFoAUbZSAzzKE0AK1kfXiHbESCX/OcLEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCNTY0L0E4NzVEMDBBN0E0
OTExRjE5N0ZCMzI2ODg1QTMwRkJDL2JaU0F6ektFMEFLMWtmWGlIYkVTQ1hfT2NM
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYlpTQXp6S0UwQUsxa2ZYaUhiRVNDWF9PY0xFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC
NTY0L0E4NzVEMDBBN0E0OTExRjE5N0ZCMzI2ODg1QTMwRkJDL2JaU0F6ektFMEFL
MWtmWGlIYkVTQ1hfT2NMRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBoh5w8KtErCB2tQzmnfHByh4NwBnz8VIUonRcOcBqCsjfNCFJCNH1dTy8GfJSg
39WX9tKtsWIpQ5jKi9jCMM9aVeK4fD2O165zswRRu9KneBadenbgJU2krhi5j8+y
YwdMNNXuG6ssldcsK/My5/WvSvQ94nOFAkmQlPxzE/qNUj/Erks2HT8pdWGtFw5b
pqjZRlusFCRpvTrI4OwN+I+oyhNTjoN7SjLtcIzWCefpuf9KsM4TnBNhkGavBPwb
v34PXVMmYNIiT7dwJ+hSMrkCZYmtGfTShFHKVD5cYEOifS5iuzGDq8D6BF2IhaYH
XObiJ8uOaPWn5DrZKKzsq+1/
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:53:52 2026 by rpki-client