Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
File:                     rea1d9VLWrCQBc5hO7E2SGUuams.mft (raw, json)
Hash identifier:          s6EHwG5QdT3/DSnQxjNlie13+wOEmUdcyCQo07cuwvY=
Subject key identifier:   85:21:37:F1:4D:CC:DD:99:C1:F4:4E:C6:E0:18:D4:6C:F8:0A:F7:1A
Authority key identifier: AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B
Certificate issuer:       /CN=A91F4553/serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B
Certificate serial:       0638
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
Manifest number:          0631
Signing time:             Tue 28 Jul 2026 23:21:32 +0000
Manifest this update:     Tue 28 Jul 2026 23:21:32 +0000
Manifest next update:     Tue 04 Aug 2026 23:21:32 +0000
Files and hashes:         1: rea1d9VLWrCQBc5hO7E2SGUuams.crl (hash: hLLcQpPp0AATHw/+2bNoJXcCNhnKtFnK31LO+oTPqwA=)
                          2: A1491F7CEB7811EB9134133BC4F9AE02.roa (hash: 2LEeC0ds34ZlqZh+4UqIEhPYTAfwPzvZKKs/N3w5rAs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl
                          rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 23:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1592 (0x638)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4553, serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B
        Validity
            Not Before: Jul 28 23:21:32 2026 GMT
            Not After : Aug  4 23:21:32 2026 GMT
        Subject: CN=6a69397c-7a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:13:ee:78:78:96:6b:69:46:ff:80:33:6d:cc:
                    d4:57:10:4f:32:03:39:1b:56:f0:b3:56:bf:92:e5:
                    ff:97:78:d5:8c:95:19:85:74:73:31:d9:f0:ab:f7:
                    77:14:5f:a1:1a:9f:c8:c5:74:0e:a6:a1:63:f1:53:
                    54:38:bb:d5:62:c0:b7:22:4c:7e:9e:b0:6e:84:53:
                    1a:19:79:a7:8d:b9:e4:a6:0a:aa:79:f4:e8:0b:46:
                    10:35:1c:96:e9:4e:ea:92:d9:16:ff:db:2e:4d:1c:
                    e7:b4:2c:15:d6:6c:04:44:5b:06:4d:a2:d2:7c:e4:
                    68:58:99:e0:e4:bb:d4:98:96:aa:6e:a3:8b:72:d3:
                    83:7f:51:17:ff:ba:87:8f:a1:ef:ad:5d:fa:56:b0:
                    81:5a:b6:74:8f:3a:3b:d0:70:9b:76:f0:a0:20:62:
                    c3:22:20:57:8f:51:64:96:9e:a7:d2:84:96:89:40:
                    a2:82:f1:86:2f:b8:54:c0:c8:f2:04:ee:c9:11:6b:
                    09:c5:f9:4f:de:2b:dd:b1:a2:cb:ba:84:e3:39:d1:
                    60:1c:65:56:09:3c:f2:47:64:0a:60:e7:4f:17:8d:
                    63:35:de:22:25:8e:04:21:41:31:7f:0a:b9:ab:74:
                    a6:91:53:2a:93:54:fe:32:87:8c:29:58:df:fa:9f:
                    07:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:21:37:F1:4D:CC:DD:99:C1:F4:4E:C6:E0:18:D4:6C:F8:0A:F7:1A
            X509v3 Authority Key Identifier:
                keyid:AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:cd:f4:81:2f:12:94:77:b2:2e:5c:c7:00:fa:df:00:11:10:
         91:f4:f4:3d:9e:83:b2:10:8e:a0:a2:a9:cd:29:02:ca:be:a0:
         dd:f7:0d:90:e6:bc:bf:7b:70:3a:6b:1a:14:67:38:14:5e:cd:
         21:04:02:ab:2e:64:86:5a:da:62:bf:57:79:79:67:b1:24:db:
         9e:2b:61:08:93:7e:90:67:46:7c:ea:89:8f:cd:05:c6:40:c5:
         47:f5:2e:40:a1:03:c5:92:47:7a:ac:d0:ec:4a:c7:ab:ba:a8:
         1a:54:8b:9f:b6:6d:d8:41:56:68:89:77:20:93:3a:b6:24:28:
         eb:60:b2:83:7f:26:3f:71:c6:85:5b:f8:a6:3f:38:bc:e1:50:
         b3:68:2a:85:7a:75:35:3d:cc:5b:58:39:b8:f7:60:cf:a8:d5:
         c9:3b:40:93:87:6c:e2:26:60:33:56:e0:b4:a5:30:b5:10:1a:
         af:98:1d:1d:37:73:75:3a:11:30:f0:90:19:92:f7:32:b4:44:
         c6:b1:cf:44:ce:f1:8d:96:57:da:5d:6a:10:cb:4f:9c:32:64:
         9e:99:63:55:f7:8b:5c:27:a5:e4:d7:81:d3:34:6b:fa:18:9a:
         db:51:1a:d8:56:8b:ac:c1:7c:b7:72:46:bd:1b:09:26:aa:97:
         61:e9:88:5b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQ1NTMxMTAvBgNVBAUTKEFERTZCNTc3RDU0QjVBQjA5MDA1Q0U2MTNCQjEzNjQ4
NjUyRTZBNkIwHhcNMjYwNzI4MjMyMTMyWhcNMjYwODA0MjMyMTMyWjAYMRYwFAYD
VQQDEw02YTY5Mzk3Yy03YTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhBPueHiWa2lG/4AzbczUVxBPMgM5G1bws1a/kuX/l3jVjJUZhXRzMdnwq/d3
FF+hGp/IxXQOpqFj8VNUOLvVYsC3Ikx+nrBuhFMaGXmnjbnkpgqqefToC0YQNRyW
6U7qktkW/9suTRzntCwV1mwERFsGTaLSfORoWJng5LvUmJaqbqOLctODf1EX/7qH
j6HvrV36VrCBWrZ0jzo70HCbdvCgIGLDIiBXj1Fklp6n0oSWiUCigvGGL7hUwMjy
BO7JEWsJxflP3ivdsaLLuoTjOdFgHGVWCTzyR2QKYOdPF41jNd4iJY4EIUExfwq5
q3SmkVMqk1T+MoeMKVjf+p8HSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIUhN/FN
zN2ZwfROxuAY1Gz4CvcaMB8GA1UdIwQYMBaAFK3mtXfVS1qwkAXOYTuxNkhlLmpr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDU1My80RDIzQkIwRUVC
NzQxMUVCQUZCNDc2MzFDNEY5QUUwMi9yZWExZDlWTFdyQ1FCYzVoTzdFMlNHVXVh
bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JlYTFkOVZMV3JDUUJjNWhPN0UyU0dVdWFtcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NDU1My80RDIzQkIwRUVCNzQxMUVCQUZCNDc2MzFDNEY5QUUwMi9yZWExZDlWTFdy
Q1FCYzVoTzdFMlNHVXVhbXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXM30gS8SlHeyLlzHAPrfABEQkfT0PZ6DshCOoKKpzSkCyr6g3fcNkOa8v3tw
OmsaFGc4FF7NIQQCqy5khlraYr9XeXlnsSTbnithCJN+kGdGfOqJj80FxkDFR/Uu
QKEDxZJHeqzQ7ErHq7qoGlSLn7Zt2EFWaIl3IJM6tiQo62Cyg38mP3HGhVv4pj84
vOFQs2gqhXp1NT3MW1g5uPdgz6jVyTtAk4ds4iZgM1bgtKUwtRAar5gdHTdzdToR
MPCQGZL3MrRExrHPRM7xjZZX2l1qEMtPnDJknpljVfeLXCel5NeB0zRr+hia21Ea
2FaLrMF8t3JGvRsJJqqXYemIWw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:42:42 2026 by rpki-client