Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
File:                     C5I347CGtYw82c5v1JrCYffVJaM.mft (raw, json)
Hash identifier:          eznXD+bTX9cBoJsdcKNmT79hZkCP2cXoGvLJayaLi8A=
Subject key identifier:   31:FA:D6:EF:6C:26:32:F6:17:C2:1C:1C:94:1D:D7:22:A0:F6:0E:81
Authority key identifier: 0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3
Certificate issuer:       /CN=A91F08FA/serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
Certificate serial:       0129
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
Manifest number:          0119
Signing time:             Mon 27 Jul 2026 07:58:58 +0000
Manifest this update:     Mon 27 Jul 2026 07:58:58 +0000
Manifest next update:     Mon 03 Aug 2026 07:58:58 +0000
Files and hashes:         1: C5I347CGtYw82c5v1JrCYffVJaM.crl (hash: gMvCBs43byNqsQiCYWZs6ZD9l0AXr7CgHcVFT3OppMw=)
                          2: 24E20F9E6B7011F0ACA1BB56C4F9AE02.roa (hash: RLjdUAVnjKgzwqmaXAIPV1P+6YSNLAkKqfL9Zn2hSIQ=)
                          3: B4F27262FA2911EFA783CE2DC4F9AE02.roa (hash: uufA5ZmNxri3hkizmrTV+/5I7T9shm+y03oLPhZQF5k=)
                          4: 9C9C1046F7CD11EF9245601CC4F9AE02.roa (hash: DZs/ioNjiGTQdREG+zE+daNHAc/dwChZtpeTTorEq9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl
                          rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:58:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F08FA, serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
        Validity
            Not Before: Jul 27 07:58:58 2026 GMT
            Not After : Aug  3 07:58:58 2026 GMT
        Subject: CN=6a670fc2-dda6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:77:07:c6:49:78:7e:45:ee:a6:46:10:ff:32:
                    c6:c9:e3:fb:4b:96:33:fa:1c:03:4b:dc:87:9c:53:
                    89:d5:90:bf:59:8f:4b:33:b7:c0:0a:ba:5e:79:a3:
                    a5:74:b4:7c:25:63:58:40:46:3e:8d:52:44:f8:fd:
                    d1:48:28:fe:cf:1e:e1:1d:87:71:a3:1a:01:ad:ba:
                    d1:f2:72:fe:2d:87:7f:96:b8:76:a3:ad:ed:28:ee:
                    c8:76:93:2b:bd:0e:3a:55:75:48:38:92:a2:a3:5b:
                    07:28:3c:da:12:17:aa:2c:55:f5:0a:6d:49:d2:b2:
                    d8:59:29:d9:e8:3d:ee:14:0d:7d:df:06:0d:a5:73:
                    3c:a5:ee:38:0c:83:0d:e2:76:16:29:fd:6e:f9:ed:
                    97:cd:aa:bf:34:36:07:56:c8:02:bc:a6:4d:b4:27:
                    b3:65:8c:cf:f6:dd:3a:75:72:b6:73:a7:16:40:6c:
                    93:5c:56:9e:f3:ac:5e:07:d5:f9:36:f2:db:5a:27:
                    2e:0b:a3:c4:15:46:ce:52:f4:a9:df:32:1c:b7:51:
                    e3:e4:05:70:25:b8:c8:58:46:b4:5e:1e:f3:23:a5:
                    a7:99:83:8e:8a:40:c4:ef:b0:60:35:17:5d:08:18:
                    80:8c:dc:84:dd:73:27:73:04:9d:ab:b8:9a:c8:52:
                    1e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FA:D6:EF:6C:26:32:F6:17:C2:1C:1C:94:1D:D7:22:A0:F6:0E:81
            X509v3 Authority Key Identifier:
                keyid:0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:38:97:5a:87:f7:3a:e2:e8:fc:e1:69:7b:05:b7:c8:20:b7:
         e6:f3:d4:17:79:e7:b8:a4:69:19:ef:cc:59:f7:05:db:d1:d4:
         88:f3:30:fa:d4:94:0b:37:5c:d3:22:f3:1e:dc:0a:26:ca:13:
         6f:82:54:7d:b2:88:75:0f:da:40:0b:3f:d5:77:43:29:d1:89:
         73:c5:fc:5b:84:61:3f:84:1e:d0:54:b5:8b:b6:32:6f:b4:01:
         4c:f2:59:1f:a0:bf:1c:86:eb:81:ac:03:02:3a:47:f0:d6:b3:
         c0:a7:47:3d:f4:73:0d:54:b5:cb:1c:74:7e:a8:47:88:52:62:
         af:bd:ae:07:56:2f:3c:25:e6:bf:40:7d:ef:ca:d7:57:5d:4f:
         a1:65:f4:02:dc:cc:51:76:f7:81:c9:92:26:29:76:6a:28:90:
         aa:96:3e:71:29:2f:da:3d:89:6f:23:cd:87:ef:6e:1d:13:fe:
         bd:54:bf:8d:c8:af:e9:84:ee:1b:40:06:dc:45:92:df:d3:1d:
         cd:1d:6a:37:ef:69:0d:36:bc:83:b6:90:2c:6a:3b:4f:cb:65:
         b9:9b:f2:a8:61:ac:8a:24:f5:16:14:fd:71:05:d1:d1:98:7f:
         08:f1:aa:97:1d:05:f5:e3:c6:3c:0a:a4:86:90:09:43:1f:65:
         c6:78:87:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjA4RkExMTAvBgNVBAUTKDBCOTIzN0UzQjA4NkI1OEMzQ0Q5Q0U2RkQ0OUFDMjYx
RjdENTI1QTMwHhcNMjYwNzI3MDc1ODU4WhcNMjYwODAzMDc1ODU4WjAYMRYwFAYD
VQQDEw02YTY3MGZjMi1kZGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1HcHxkl4fkXupkYQ/zLGyeP7S5Yz+hwDS9yHnFOJ1ZC/WY9LM7fACrpeeaOl
dLR8JWNYQEY+jVJE+P3RSCj+zx7hHYdxoxoBrbrR8nL+LYd/lrh2o63tKO7IdpMr
vQ46VXVIOJKio1sHKDzaEheqLFX1Cm1J0rLYWSnZ6D3uFA193wYNpXM8pe44DIMN
4nYWKf1u+e2Xzaq/NDYHVsgCvKZNtCezZYzP9t06dXK2c6cWQGyTXFae86xeB9X5
NvLbWicuC6PEFUbOUvSp3zIct1Hj5AVwJbjIWEa0Xh7zI6WnmYOOikDE77BgNRdd
CBiAjNyE3XMncwSdq7iayFIemwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDH61u9s
JjL2F8IcHJQd1yKg9g6BMB8GA1UdIwQYMBaAFAuSN+OwhrWMPNnOb9SawmH31SWj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDhGQS9EMzdGNjI1Q0U3
M0QxMUVGOEEwNDYyMTdDNEY5QUUwMi9DNUkzNDdDR3RZdzgyYzV2MUpyQ1lmZlZK
YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0M1STM0N0NHdFl3ODJjNXYxSnJDWWZmVkphTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MDhGQS9EMzdGNjI1Q0U3M0QxMUVGOEEwNDYyMTdDNEY5QUUwMi9DNUkzNDdDR3RZ
dzgyYzV2MUpyQ1lmZlZKYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEDiXWof3OuLo/OFpewW3yCC35vPUF3nnuKRpGe/MWfcF29HUiPMw+tSUCzdc
0yLzHtwKJsoTb4JUfbKIdQ/aQAs/1XdDKdGJc8X8W4RhP4Qe0FS1i7Yyb7QBTPJZ
H6C/HIbrgawDAjpH8NazwKdHPfRzDVS1yxx0fqhHiFJir72uB1YvPCXmv0B978rX
V11PoWX0AtzMUXb3gcmSJil2aiiQqpY+cSkv2j2JbyPNh+9uHRP+vVS/jciv6YTu
G0AG3EWS39MdzR1qN+9pDTa8g7aQLGo7T8tluZvyqGGsiiT1FhT9cQXR0Zh/CPGq
lx0F9ePGPAqkhpAJQx9lxniHfg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:45 2026 by rpki-client