Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft
File:                     4mhztF-I0fXYg8F-TM9wokUWIUI.mft (raw, json)
Hash identifier:          lH2t6BQLTICmdTydtJMWHRg4SvxJens2+TPvyR91Va8=
Subject key identifier:   1A:B8:79:67:6D:61:4C:65:0E:6D:65:C1:19:99:8E:70:1C:F0:DF:B4
Authority key identifier: E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42
Certificate issuer:       /CN=A91F4C6B/serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142
Certificate serial:       09B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft
Manifest number:          099F
Signing time:             Tue 28 Jul 2026 20:20:49 +0000
Manifest this update:     Tue 28 Jul 2026 20:20:48 +0000
Manifest next update:     Tue 04 Aug 2026 20:20:48 +0000
Files and hashes:         1: 4mhztF-I0fXYg8F-TM9wokUWIUI.crl (hash: 0xTPDhb3wVP42KlqL7c2e2Szp0P9GCayGS0vExqLsKA=)
                          2: 7A54F40C4F8911F18D85090792833773.roa (hash: iEFSKuawoMKJgN/7K/NIxyh+jdfFdnwDeUD4zCSp6Wk=)
                          3: E146B994B51F11EA9146DD58C4F9AE02.roa (hash: KShq5BmuPEepsEU7x+JbRfGgfm8cmEzXAADusI8In3Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl
                          rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2481 (0x9b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4C6B, serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142
        Validity
            Not Before: Jul 28 20:20:48 2026 GMT
            Not After : Aug  4 20:20:48 2026 GMT
        Subject: CN=6a690f21-474f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ff:e7:5d:af:8b:f9:14:a0:c8:7c:e2:38:7c:
                    c7:14:5f:63:3d:0b:54:8a:20:5c:93:b2:ed:75:34:
                    66:f3:22:7a:a4:20:9a:56:5f:ab:45:35:49:56:2a:
                    43:20:01:50:1b:de:df:15:ae:91:46:0c:e0:fa:ea:
                    32:e1:94:46:26:0c:24:81:46:13:d2:67:b0:db:14:
                    b1:b5:62:e0:55:03:9e:5a:f8:f7:d3:ac:c9:10:a2:
                    06:f2:d5:38:1d:c5:bc:3e:db:43:56:75:ee:b9:d6:
                    24:5a:aa:63:a8:f1:da:71:31:b1:40:63:9f:6d:17:
                    f0:af:2a:f2:14:f9:3c:1b:a5:09:7c:58:37:74:41:
                    27:8d:b8:b5:20:b9:35:fa:11:5c:3d:f3:df:d3:32:
                    74:55:8d:02:f9:9e:79:d7:d2:c6:ad:09:38:bc:48:
                    df:07:28:c5:13:7d:38:04:7a:0f:15:7b:b3:77:84:
                    5c:5a:7a:3a:d9:c2:b1:75:87:13:c7:35:9d:52:9f:
                    57:cb:93:20:43:ab:34:e3:33:3a:ff:b4:60:76:21:
                    87:a2:89:1e:a6:ac:6e:3f:64:e1:46:ab:22:eb:0c:
                    e8:94:c2:f6:0f:eb:16:cb:2b:cf:f4:9b:ae:2e:8d:
                    ec:80:4d:aa:34:57:c6:d5:51:e0:54:f0:08:91:85:
                    1d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B8:79:67:6D:61:4C:65:0E:6D:65:C1:19:99:8E:70:1C:F0:DF:B4
            X509v3 Authority Key Identifier:
                keyid:E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:85:28:51:35:45:07:96:4f:46:cb:dc:13:bf:c8:52:6d:c1:
         e1:ce:1b:24:d8:86:76:d3:4d:4f:24:43:33:4c:f3:a9:7c:0c:
         43:e6:2a:8a:4b:b6:d8:cf:c6:50:3e:19:78:89:37:98:0f:cb:
         ea:a2:5c:13:d5:90:c8:f4:67:42:08:d5:cc:15:6a:f4:7f:55:
         db:b0:33:b3:a0:00:4a:f8:cd:42:9d:01:8e:66:be:d8:03:26:
         56:7b:69:86:a6:f7:ca:2f:60:36:7a:aa:91:8d:99:f7:86:38:
         5d:60:b4:4f:96:94:c4:4f:a0:b5:87:81:eb:50:a7:58:7c:8a:
         9f:19:9e:72:2f:ed:2c:5d:e4:35:bb:fd:ef:ec:50:89:7c:59:
         01:8c:b2:ab:37:03:d6:56:77:b4:06:7b:b2:34:18:58:83:bb:
         0e:ba:2c:e2:a9:e0:c1:ff:84:3b:f8:89:09:b1:d1:0a:75:36:
         dc:ff:77:6c:f2:4a:f5:7e:12:9d:25:39:80:05:e4:73:17:7d:
         4e:15:b5:4f:77:49:59:51:ff:67:7f:cf:62:f8:f2:23:49:0b:
         b9:6d:9c:10:9d:4c:ef:90:e1:1e:a8:c9:40:61:1b:87:a0:9d:
         f3:00:16:88:84:5c:ea:e3:78:36:a0:39:17:bb:2b:7c:34:85:
         ac:60:0b:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjRDNkIxMTAvBgNVBAUTKEUyNjg3M0I0NUY4OEQxRjVEODgzQzE3RTRDQ0Y3MEEy
NDUxNjIxNDIwHhcNMjYwNzI4MjAyMDQ4WhcNMjYwODA0MjAyMDQ4WjAYMRYwFAYD
VQQDEw02YTY5MGYyMS00NzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2//nXa+L+RSgyHziOHzHFF9jPQtUiiBck7LtdTRm8yJ6pCCaVl+rRTVJVipD
IAFQG97fFa6RRgzg+uoy4ZRGJgwkgUYT0mew2xSxtWLgVQOeWvj306zJEKIG8tU4
HcW8PttDVnXuudYkWqpjqPHacTGxQGOfbRfwryryFPk8G6UJfFg3dEEnjbi1ILk1
+hFcPfPf0zJ0VY0C+Z5519LGrQk4vEjfByjFE304BHoPFXuzd4RcWno62cKxdYcT
xzWdUp9Xy5MgQ6s04zM6/7RgdiGHookepqxuP2ThRqsi6wzolML2D+sWyyvP9Juu
Lo3sgE2qNFfG1VHgVPAIkYUd7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBq4eWdt
YUxlDm1lwRmZjnAc8N+0MB8GA1UdIwQYMBaAFOJoc7RfiNH12IPBfkzPcKJFFiFC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEM2Qi8yNzhBQTNFNEI1
MUYxMUVBOUZFOEJENThDNEY5QUUwMi80bWh6dEYtSTBmWFlnOEYtVE05d29rVVdJ
VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRtaHp0Ri1JMGZYWWc4Ri1UTTl3b2tVV0lVSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NEM2Qi8yNzhBQTNFNEI1MUYxMUVBOUZFOEJENThDNEY5QUUwMi80bWh6dEYtSTBm
WFlnOEYtVE05d29rVVdJVUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgoUoUTVFB5ZPRsvcE7/IUm3B4c4bJNiGdtNNTyRDM0zzqXwMQ+Yqiku22M/G
UD4ZeIk3mA/L6qJcE9WQyPRnQgjVzBVq9H9V27Azs6AASvjNQp0Bjma+2AMmVntp
hqb3yi9gNnqqkY2Z94Y4XWC0T5aUxE+gtYeB61CnWHyKnxmeci/tLF3kNbv97+xQ
iXxZAYyyqzcD1lZ3tAZ7sjQYWIO7Dros4qngwf+EO/iJCbHRCnU23P93bPJK9X4S
nSU5gAXkcxd9ThW1T3dJWVH/Z3/PYvjyI0kLuW2cEJ1M75DhHqjJQGEbh6Cd8wAW
iIRc6uN4NqA5F7srfDSFrGAL4Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:35 2026 by rpki-client