Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft
File:                     CUoNzYAqBb91c_96buCnqXIFUNE.mft (raw, json)
Hash identifier:          sAdWiUEq8UhQu+jXESOB0i4Q8+k4Cilc5W0wN4/sOZw=
Subject key identifier:   DF:FE:6E:26:EE:C6:EF:0F:56:7C:F5:78:62:37:AC:2A:09:13:FE:A3
Authority key identifier: 09:4A:0D:CD:80:2A:05:BF:75:73:FF:7A:6E:E0:A7:A9:72:05:50:D1
Certificate issuer:       /CN=A91EC93F/serialNumber=094A0DCD802A05BF7573FF7A6EE0A7A9720550D1
Certificate serial:       026A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft
Manifest number:          0265
Signing time:             Mon 27 Jul 2026 03:35:08 +0000
Manifest this update:     Mon 27 Jul 2026 03:35:07 +0000
Manifest next update:     Mon 03 Aug 2026 03:35:07 +0000
Files and hashes:         1: CUoNzYAqBb91c_96buCnqXIFUNE.crl (hash: ABw2/uwL6ai2buWam/iGIxIowm4jwlqPYpdxLoMwcm0=)
                          2: 5BA557A6DEB011EDB7B0C04EC4F9AE02.roa (hash: 8cUM0au80MU9Tjqjfps+vVqGEEJxxFt3AWIioxEjBfg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.crl
                          rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 618 (0x26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC93F, serialNumber=094A0DCD802A05BF7573FF7A6EE0A7A9720550D1
        Validity
            Not Before: Jul 27 03:35:07 2026 GMT
            Not After : Aug  3 03:35:07 2026 GMT
        Subject: CN=6a66d1ec-63b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:26:53:32:0b:60:3e:9a:b9:0c:1d:81:ca:35:
                    b7:be:80:4c:94:d1:06:92:40:c2:0c:4d:3e:dc:90:
                    2e:e0:50:82:eb:67:4d:bf:3e:9e:c4:64:74:b8:05:
                    c5:ec:18:78:67:70:b0:4c:59:d5:a4:29:45:73:0c:
                    2c:23:0c:33:85:d1:ad:1f:2a:61:77:9d:18:c8:9e:
                    6c:2a:fe:9f:18:37:f2:81:36:4d:84:84:35:69:db:
                    ea:ec:a6:2c:6b:b4:63:8c:96:22:c9:ac:2c:dd:45:
                    bf:49:6f:74:48:88:87:c5:54:75:62:20:95:95:12:
                    58:66:14:29:9f:b5:90:7f:99:cc:f7:52:2b:45:18:
                    e1:a1:1a:52:7b:a5:e9:d5:7f:7d:8b:2a:24:42:17:
                    91:70:3d:f8:eb:d8:9d:e1:47:ce:cc:d0:15:e1:00:
                    94:18:ad:48:e9:7a:43:af:cb:1e:05:77:f2:11:f4:
                    b0:f9:c2:c8:bc:e6:1b:65:ff:75:d4:ee:c2:d9:44:
                    05:68:9d:45:ba:60:4c:68:c2:7d:6b:4c:11:09:a7:
                    d4:f5:fa:66:85:eb:00:b6:67:ff:65:e4:80:c2:69:
                    96:4e:89:89:67:b9:d3:68:35:e7:1e:d7:d0:f8:21:
                    de:f9:ef:e0:ce:a9:77:ac:28:c9:4f:61:be:17:c6:
                    f8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FE:6E:26:EE:C6:EF:0F:56:7C:F5:78:62:37:AC:2A:09:13:FE:A3
            X509v3 Authority Key Identifier:
                keyid:09:4A:0D:CD:80:2A:05:BF:75:73:FF:7A:6E:E0:A7:A9:72:05:50:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:dc:43:c7:e3:56:e9:d7:05:8e:22:04:52:5b:cf:56:31:a7:
         8f:90:ab:f3:ba:b3:f2:67:3f:ed:d5:bd:2f:8c:40:ab:32:ce:
         0c:c3:63:2b:5c:0e:56:14:91:b3:a5:07:a9:aa:31:79:78:60:
         c2:f6:93:34:87:4d:97:0a:f4:23:04:2d:ec:07:15:45:9f:b2:
         f7:43:f1:59:a2:40:39:1b:3b:03:dc:dc:cf:a4:48:c0:41:bc:
         4a:5b:37:62:a6:27:96:c1:5e:c3:60:78:c5:8e:e3:f7:f9:ae:
         41:27:bc:5d:27:b7:a1:70:88:9d:b1:d1:96:b7:c0:7f:6d:71:
         c9:01:ea:f7:9d:ab:92:0c:77:80:7a:0e:02:79:e2:6e:91:f6:
         50:59:e3:19:e5:8a:44:bb:ba:67:45:82:0d:4e:8e:cf:81:ec:
         bf:81:fb:47:d1:91:7b:40:eb:3d:a1:b7:fa:60:76:12:27:ad:
         15:cf:b1:6c:50:a7:bd:fd:2d:29:eb:c7:aa:bb:81:b7:2d:06:
         51:8d:52:a1:58:29:bf:4e:4c:cf:1b:c9:31:66:ad:35:2e:5c:
         11:d9:d8:0a:6e:24:1b:83:3b:f5:f2:49:cd:aa:d9:af:f1:dc:
         d7:a9:09:6a:a0:99:12:a6:65:d1:f8:4d:2f:cf:3a:68:64:18:
         80:69:ae:b3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUM5M0YxMTAvBgNVBAUTKDA5NEEwRENEODAyQTA1QkY3NTczRkY3QTZFRTBBN0E5
NzIwNTUwRDEwHhcNMjYwNzI3MDMzNTA3WhcNMjYwODAzMDMzNTA3WjAYMRYwFAYD
VQQDEw02YTY2ZDFlYy02M2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxCZTMgtgPpq5DB2ByjW3voBMlNEGkkDCDE0+3JAu4FCC62dNvz6exGR0uAXF
7Bh4Z3CwTFnVpClFcwwsIwwzhdGtHyphd50YyJ5sKv6fGDfygTZNhIQ1advq7KYs
a7RjjJYiyaws3UW/SW90SIiHxVR1YiCVlRJYZhQpn7WQf5nM91IrRRjhoRpSe6Xp
1X99iyokQheRcD3469id4UfOzNAV4QCUGK1I6XpDr8seBXfyEfSw+cLIvOYbZf91
1O7C2UQFaJ1FumBMaMJ9a0wRCafU9fpmhesAtmf/ZeSAwmmWTomJZ7nTaDXnHtfQ
+CHe+e/gzql3rCjJT2G+F8b4KQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN/+bibu
xu8PVnz1eGI3rCoJE/6jMB8GA1UdIwQYMBaAFAlKDc2AKgW/dXP/em7gp6lyBVDR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzkzRi82MEE4Rjg4Q0RF
QUQxMUVEOEE2REYxNERDNEY5QUUwMi9DVW9OellBcUJiOTFjXzk2YnVDbnFYSUZV
TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NVb056WUFxQmI5MWNfOTZidUNucVhJRlVORS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QzkzRi82MEE4Rjg4Q0RFQUQxMUVEOEE2REYxNERDNEY5QUUwMi9DVW9OellBcUJi
OTFjXzk2YnVDbnFYSUZVTkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFNxDx+NW6dcFjiIEUlvPVjGnj5Cr87qz8mc/7dW9L4xAqzLODMNjK1wOVhSR
s6UHqaoxeXhgwvaTNIdNlwr0IwQt7AcVRZ+y90PxWaJAORs7A9zcz6RIwEG8Sls3
YqYnlsFew2B4xY7j9/muQSe8XSe3oXCInbHRlrfAf21xyQHq952rkgx3gHoOAnni
bpH2UFnjGeWKRLu6Z0WCDU6Oz4Hsv4H7R9GRe0DrPaG3+mB2EietFc+xbFCnvf0t
KevHqruBty0GUY1SoVgpv05MzxvJMWatNS5cEdnYCm4kG4M79fJJzarZr/Hc16kJ
aqCZEqZl0fhNL886aGQYgGmusw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:24:50 2026 by rpki-client