Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft
File:                     kTOGkN66V4znOCGKniIIVNG1J18.mft (raw, json)
Hash identifier:          pFkMi8RxoJ+UrR4fwzqTXSuAMvsLKQ2NGJazyC4Mr0U=
Subject key identifier:   F4:3D:6E:69:D0:6B:DF:CF:9F:7D:6F:57:7B:E1:F5:A5:C9:9F:91:4F
Authority key identifier: 91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F
Certificate issuer:       /CN=A91F605B/serialNumber=91338690DEBA578CE738218A9E220854D1B5275F
Certificate serial:       0545
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft
Manifest number:          0523
Signing time:             Wed 29 Jul 2026 00:23:03 +0000
Manifest this update:     Wed 29 Jul 2026 00:23:03 +0000
Manifest next update:     Wed 05 Aug 2026 00:23:03 +0000
Files and hashes:         1: kTOGkN66V4znOCGKniIIVNG1J18.crl (hash: uxrZnH3DNEF1/kv7sJ3GM/gLfmF8QGH8lGFlwqnXdWc=)
                          2: CF78AD96127811F183C0012F353D8C67.roa (hash: yTs4slfJUp8xAoMRVrm1EmE1KgWXBTMHYKJoI1jT1pE=)
                          3: 693FD0A8127911F18FB8754C353D8C67.roa (hash: 2vsh9mlCd8KP8ShN9kNL1OPBZD5VxMSn/p2bSQnyh44=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl
                          rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 00:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1349 (0x545)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F605B, serialNumber=91338690DEBA578CE738218A9E220854D1B5275F
        Validity
            Not Before: Jul 29 00:23:03 2026 GMT
            Not After : Aug  5 00:23:03 2026 GMT
        Subject: CN=6a6947e7-fa19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:75:bb:b6:a0:9e:9f:84:b1:12:7b:2c:6e:69:
                    e4:05:64:f0:e1:44:a3:f1:98:bd:e8:63:1f:c5:78:
                    e3:20:7a:af:c4:ed:7f:a7:e7:a5:98:80:54:3b:ff:
                    9b:06:80:5b:fd:00:3d:8f:4f:ff:1a:71:af:e4:aa:
                    d3:27:47:e3:57:a5:2d:05:5c:da:19:2a:e2:3d:37:
                    3e:f6:45:29:a0:72:a5:99:54:78:d5:55:a9:80:e5:
                    6d:4a:23:7c:4f:8d:72:0d:00:6b:46:cf:ff:7f:78:
                    bf:34:f7:d3:6d:c8:50:50:5a:87:c9:2a:7b:29:6a:
                    ff:1b:40:1c:47:07:d5:fa:7a:b6:01:ad:81:1e:c0:
                    f9:95:ea:de:1d:d7:a5:59:65:4a:94:53:a0:57:82:
                    85:62:c8:6c:90:38:f1:81:52:6a:fd:04:34:fd:72:
                    c5:b0:42:b5:e1:b7:51:67:ad:f1:22:45:ab:fb:38:
                    3a:df:e2:7e:03:86:63:a8:dc:56:e6:bd:6b:be:a7:
                    37:fa:8c:db:3c:17:a1:13:28:14:98:a1:ed:3d:a7:
                    d9:84:b1:e6:ea:42:36:55:73:cd:29:cf:da:0f:6c:
                    37:c0:73:32:95:16:e0:d2:1c:07:ee:07:53:15:b4:
                    cc:81:dc:83:ab:d2:d3:57:a6:2d:d4:38:65:f9:1f:
                    14:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:3D:6E:69:D0:6B:DF:CF:9F:7D:6F:57:7B:E1:F5:A5:C9:9F:91:4F
            X509v3 Authority Key Identifier:
                keyid:91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:2e:09:82:f4:ac:f2:97:42:54:1c:6e:19:d8:73:5b:4d:1b:
         04:f0:4d:8b:a2:59:c5:92:d0:8b:5e:fd:b7:69:f7:1f:4e:bc:
         4d:01:6d:ae:0a:19:c8:23:82:a4:d8:2c:5f:a4:9d:98:22:a4:
         fa:c9:9c:aa:5b:c5:bc:9e:1a:7c:b9:73:a8:44:c2:09:d0:b8:
         f6:3d:a3:05:ee:31:b0:ce:9d:eb:91:0c:71:1f:0a:41:bf:a4:
         20:a4:98:c6:97:e8:b5:9f:b7:d1:df:3f:78:6c:ef:aa:a6:1f:
         b3:ed:0c:c7:64:85:5d:62:d3:93:35:36:98:48:b2:81:f3:6d:
         7d:82:8b:e3:89:5a:d6:d9:35:70:f2:13:e3:46:b6:a1:67:1a:
         c0:f3:26:56:5d:cb:03:0d:37:79:7f:a5:d1:32:d1:05:fb:07:
         7e:f5:aa:4c:09:be:30:b8:d5:7a:ea:de:bf:9c:ab:c6:6c:a2:
         e3:bd:cd:59:08:b2:6e:d6:0e:9c:78:48:d0:25:3c:c8:5f:97:
         af:5b:31:b5:56:9e:17:c7:6c:c9:07:a3:65:37:e1:0f:79:25:
         0f:b4:70:0b:dd:5f:71:6a:5b:c1:44:7d:58:d0:48:7a:c6:8c:
         5f:70:ab:fc:31:79:ab:66:93:65:9a:31:09:53:cc:83:2f:a1:
         f7:79:97:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjYwNUIxMTAvBgNVBAUTKDkxMzM4NjkwREVCQTU3OENFNzM4MjE4QTlFMjIwODU0
RDFCNTI3NUYwHhcNMjYwNzI5MDAyMzAzWhcNMjYwODA1MDAyMzAzWjAYMRYwFAYD
VQQDEw02YTY5NDdlNy1mYTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA03W7tqCen4SxEnssbmnkBWTw4USj8Zi96GMfxXjjIHqvxO1/p+elmIBUO/+b
BoBb/QA9j0//GnGv5KrTJ0fjV6UtBVzaGSriPTc+9kUpoHKlmVR41VWpgOVtSiN8
T41yDQBrRs//f3i/NPfTbchQUFqHySp7KWr/G0AcRwfV+nq2Aa2BHsD5lereHdel
WWVKlFOgV4KFYshskDjxgVJq/QQ0/XLFsEK14bdRZ63xIkWr+zg63+J+A4ZjqNxW
5r1rvqc3+ozbPBehEygUmKHtPafZhLHm6kI2VXPNKc/aD2w3wHMylRbg0hwH7gdT
FbTMgdyDq9LTV6Yt1Dhl+R8U/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPQ9bmnQ
a9/Pn31vV3vh9aXJn5FPMB8GA1UdIwQYMBaAFJEzhpDeuleM5zghip4iCFTRtSdf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjA1Qi85ODE3RDI3MjY0
Q0MxMUVDOTZENEE1NThDNEY5QUUwMi9rVE9Ha042NlY0em5PQ0dLbmlJSVZORzFK
MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tUT0drTjY2VjR6bk9DR0tuaUlJVk5HMUoxOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NjA1Qi85ODE3RDI3MjY0Q0MxMUVDOTZENEE1NThDNEY5QUUwMi9rVE9Ha042NlY0
em5PQ0dLbmlJSVZORzFKMTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA4y4JgvSs8pdCVBxuGdhzW00bBPBNi6JZxZLQi179t2n3H068TQFtrgoZyCOC
pNgsX6SdmCKk+smcqlvFvJ4afLlzqETCCdC49j2jBe4xsM6d65EMcR8KQb+kIKSY
xpfotZ+30d8/eGzvqqYfs+0Mx2SFXWLTkzU2mEiygfNtfYKL44la1tk1cPIT40a2
oWcawPMmVl3LAw03eX+l0TLRBfsHfvWqTAm+MLjVeurev5yrxmyi473NWQiybtYO
nHhI0CU8yF+Xr1sxtVaeF8dsyQejZTfhD3klD7RwC91fcWpbwUR9WNBIesaMX3Cr
/DF5q2aTZZoxCVPMgy+h93mX8A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:30:02 2026 by rpki-client