Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
File:                     Cv4rIK3mucMLixgR0V8dDVdN494.mft (raw, json)
Hash identifier:          bMieXjCmXbxsQkk7FPOJp7N0tSaR3C0SFBRA57nA+zM=
Subject key identifier:   AB:52:C8:5D:7F:C3:30:2E:83:49:72:65:F9:CA:83:03:6B:65:04:E9
Authority key identifier: 0A:FE:2B:20:AD:E6:B9:C3:0B:8B:18:11:D1:5F:1D:0D:57:4D:E3:DE
Certificate issuer:       /CN=A91EC98B/serialNumber=0AFE2B20ADE6B9C30B8B1811D15F1D0D574DE3DE
Certificate serial:       5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
Manifest number:          5C
Signing time:             Mon 27 Jul 2026 10:30:10 +0000
Manifest this update:     Mon 27 Jul 2026 10:30:10 +0000
Manifest next update:     Mon 03 Aug 2026 10:30:10 +0000
Files and hashes:         1: Cv4rIK3mucMLixgR0V8dDVdN494.crl (hash: kEcT7PkLFHjbspcDETZ1M4elJha7ECLmC4PNrxiJ8CM=)
                          2: 32A5FD8C036611F1A426A4772D3D8C67.roa (hash: 74mwc9LQpW/L2dkBvxUUTHTqTkYyfx6a6uTfz8A4a5I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.crl
                          rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC98B, serialNumber=0AFE2B20ADE6B9C30B8B1811D15F1D0D574DE3DE
        Validity
            Not Before: Jul 27 10:30:10 2026 GMT
            Not After : Aug  3 10:30:10 2026 GMT
        Subject: CN=6a673332-2934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4e:72:ec:96:c4:ec:53:d5:db:9c:71:8d:e4:
                    20:1a:42:aa:64:90:5b:75:03:eb:45:ee:18:c9:e7:
                    68:b4:36:1a:cf:fc:5f:3e:5d:88:43:3d:cf:29:e7:
                    8e:40:f7:b5:8a:d7:a8:9b:fc:2e:b6:b8:10:8c:f9:
                    c4:77:eb:71:c5:d6:85:b0:d2:34:cd:d6:96:e2:26:
                    79:42:7e:9d:d2:78:76:4c:5a:3d:1c:83:6a:9b:92:
                    42:6c:61:6f:0c:32:fe:29:d4:20:88:ee:42:d6:00:
                    a0:ed:bd:4f:3d:c2:ce:b3:f2:65:ac:f7:19:7b:81:
                    f4:95:bb:47:8b:d4:bd:75:99:c1:3a:f4:ed:98:b5:
                    18:20:36:0d:4d:ed:76:78:d3:bb:39:56:8e:ad:8b:
                    54:c7:ac:16:20:d5:fd:b2:23:14:83:cf:d5:23:e5:
                    8a:b4:95:b2:5c:a9:96:f6:c7:4b:2f:6f:f7:63:2a:
                    43:82:55:b8:59:99:8d:e0:bb:1d:bd:8a:ae:87:fd:
                    45:dd:90:0c:82:24:0f:4c:cf:f1:1f:97:53:3c:af:
                    43:2b:5d:42:a0:40:b7:4a:00:bb:24:eb:4b:12:1b:
                    bd:8a:7f:a1:22:03:64:15:7a:10:39:eb:0e:27:37:
                    c1:50:6a:e4:e4:2d:81:bd:f4:9f:29:49:fe:dd:4c:
                    d8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:52:C8:5D:7F:C3:30:2E:83:49:72:65:F9:CA:83:03:6B:65:04:E9
            X509v3 Authority Key Identifier:
                keyid:0A:FE:2B:20:AD:E6:B9:C3:0B:8B:18:11:D1:5F:1D:0D:57:4D:E3:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:b6:af:83:32:b9:3b:02:d5:79:f4:06:da:b2:74:59:f3:1b:
         fe:46:f1:58:01:90:52:75:87:ba:f7:96:a2:99:88:5d:b0:19:
         a6:a7:66:1f:38:eb:f2:79:b8:26:23:3c:f2:07:7a:c7:a8:af:
         d0:38:8c:9e:79:d2:77:e3:f4:9e:61:9f:4f:85:36:1e:5b:7d:
         18:69:f1:6a:ad:4e:6d:bb:d4:42:d3:a7:eb:d0:3a:ce:85:e3:
         df:e0:3b:ce:fa:4b:dc:5b:f9:99:1d:21:07:7b:6f:c5:b3:af:
         29:02:6b:9e:0f:e6:5e:2e:e1:89:67:4c:59:ee:1b:f0:7a:8a:
         ed:cd:6e:1d:62:3c:6d:80:de:ca:14:14:03:9a:a1:27:47:b3:
         02:e0:cf:40:65:47:ac:57:b2:19:b0:51:02:37:aa:67:d1:e8:
         9f:b1:f8:08:8f:7d:d4:51:f8:db:0b:95:44:e3:ea:3c:67:20:
         d1:2b:ca:53:c9:37:ab:36:58:a5:3d:b7:a8:31:1c:35:98:0c:
         4c:0f:62:fe:bb:47:65:69:2b:cc:dc:3a:5c:ec:19:69:be:aa:
         3a:09:34:00:8a:97:17:9b:1c:43:83:d0:ad:84:c6:7c:f3:1e:
         da:1c:1c:d8:ae:bd:24:ea:30:ec:da:0d:5c:54:88:ae:d0:fc:
         a1:13:28:02
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
Qzk4QjExMC8GA1UEBRMoMEFGRTJCMjBBREU2QjlDMzBCOEIxODExRDE1RjFEMEQ1
NzRERTNERTAeFw0yNjA3MjcxMDMwMTBaFw0yNjA4MDMxMDMwMTBaMBgxFjAUBgNV
BAMTDTZhNjczMzMyLTI5MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDETnLslsTsU9XbnHGN5CAaQqpkkFt1A+tF7hjJ52i0NhrP/F8+XYhDPc8p545A
97WK16ib/C62uBCM+cR363HF1oWw0jTN1pbiJnlCfp3SeHZMWj0cg2qbkkJsYW8M
Mv4p1CCI7kLWAKDtvU89ws6z8mWs9xl7gfSVu0eL1L11mcE69O2YtRggNg1N7XZ4
07s5Vo6ti1THrBYg1f2yIxSDz9Uj5Yq0lbJcqZb2x0svb/djKkOCVbhZmY3gux29
iq6H/UXdkAyCJA9Mz/Efl1M8r0MrXUKgQLdKALsk60sSG72Kf6EiA2QVehA56w4n
N8FQauTkLYG99J8pSf7dTNjZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUq1LIXX/D
MC6DSXJl+cqDA2tlBOkwHwYDVR0jBBgwFoAUCv4rIK3mucMLixgR0V8dDVdN494w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDOThCLzc0MTA3Q0VFMDM2
NTExRjFCOTg1NzhENDJDM0Q4QzY3L0N2NHJJSzNtdWNNTGl4Z1IwVjhkRFZkTjQ5
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQ3Y0cklLM211Y01MaXhnUjBWOGREVmRONDk0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD
OThCLzc0MTA3Q0VFMDM2NTExRjFCOTg1NzhENDJDM0Q4QzY3L0N2NHJJSzNtdWNN
TGl4Z1IwVjhkRFZkTjQ5NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQArtq+DMrk7AtV59AbasnRZ8xv+RvFYAZBSdYe695aimYhdsBmmp2YfOOvyebgm
IzzyB3rHqK/QOIyeedJ34/SeYZ9PhTYeW30YafFqrU5tu9RC06fr0DrOhePf4DvO
+kvcW/mZHSEHe2/Fs68pAmueD+ZeLuGJZ0xZ7hvweortzW4dYjxtgN7KFBQDmqEn
R7MC4M9AZUesV7IZsFECN6pn0eifsfgIj33UUfjbC5VE4+o8ZyDRK8pTyTerNlil
PbeoMRw1mAxMD2L+u0dlaSvM3Dpc7Blpvqo6CTQAipcXmxxDg9CthMZ88x7aHBzY
rr0k6jDs2g1cVIiu0PyhEygC
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:42:41 2026 by rpki-client