Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
File:                     Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft (raw, json)
Hash identifier:          Y3g5k2Oao+JBd+n733BGj8tugm7tQ3rAQEsLs0wMYDQ=
Subject key identifier:   D9:A4:09:98:AE:18:1B:3E:9E:46:5C:BF:09:87:AF:D4:DD:1A:92:E9
Authority key identifier: 52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B
Certificate issuer:       /CN=A91F9C95/serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B
Certificate serial:       0C93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
Manifest number:          0C8A
Signing time:             Tue 28 Jul 2026 18:49:06 +0000
Manifest this update:     Tue 28 Jul 2026 18:49:06 +0000
Manifest next update:     Tue 04 Aug 2026 18:49:06 +0000
Files and hashes:         1: Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl (hash: KqsGq7jWq4xLo5S9iRHTbgIcC48mTfX36i6kWkltNds=)
                          2: C7F8C83C217311EA93A29F82C4F9AE02.roa (hash: zVKPBOvgf5ZBPV/BL1nd0Q/b/L3Ds0nzM2EgbZq2Spo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl
                          rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3219 (0xc93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9C95, serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B
        Validity
            Not Before: Jul 28 18:49:06 2026 GMT
            Not After : Aug  4 18:49:06 2026 GMT
        Subject: CN=6a68f9a2-7ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:13:37:fb:1e:89:d9:43:50:b3:cc:55:42:39:
                    d5:58:df:9d:e1:63:9d:bc:e5:84:da:46:80:41:e2:
                    c9:26:18:65:95:10:c8:05:fd:82:11:81:95:d8:8e:
                    53:8d:f9:16:69:3e:78:21:9d:f2:1a:26:51:c1:44:
                    45:46:19:29:34:4d:35:ce:bd:15:dd:ad:fc:68:a5:
                    bd:63:58:3f:8d:9c:8f:e0:d8:d0:20:17:5f:e1:12:
                    6c:fb:ea:e8:ff:dc:65:7c:b7:57:2d:e4:24:52:30:
                    b0:9a:46:58:e3:17:0d:5f:72:f3:8b:a9:f6:d3:e0:
                    82:b3:f3:c0:93:34:64:cf:89:29:df:2b:cb:1b:2e:
                    26:d3:39:e2:27:d8:85:79:a2:af:11:f9:39:72:b1:
                    1e:88:a7:9b:a5:05:55:d0:fa:85:43:71:b8:ab:91:
                    33:8a:e5:93:26:13:50:65:52:3d:35:0e:a0:bd:3c:
                    aa:20:8c:d7:44:fa:e3:d9:d9:7b:9e:22:39:15:25:
                    67:f4:2d:c5:27:ee:68:66:c5:b3:00:f3:c1:ca:44:
                    53:48:53:68:cb:7f:9b:f8:6a:c8:1e:70:13:43:86:
                    1d:f7:9c:09:7b:0f:08:80:53:14:5c:86:55:14:57:
                    8e:d3:5d:8b:49:3e:53:87:b4:88:2a:58:de:e3:68:
                    4b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A4:09:98:AE:18:1B:3E:9E:46:5C:BF:09:87:AF:D4:DD:1A:92:E9
            X509v3 Authority Key Identifier:
                keyid:52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:0f:a0:ee:f1:f3:53:97:c7:84:03:c0:2a:20:30:8b:d4:4d:
         07:2b:f0:03:b0:eb:1b:4b:37:c3:30:6f:97:40:90:aa:3c:25:
         4e:bc:fa:c2:06:04:7b:d9:ce:be:64:02:a7:fe:a0:3d:7a:b7:
         bd:94:23:02:35:57:82:1d:0d:91:18:24:1c:fc:cd:eb:01:8b:
         74:67:2a:0f:90:ca:2e:fb:f4:ad:46:d1:b1:ea:3e:76:b7:7f:
         fb:cb:f4:0e:da:4c:d1:5d:5a:cf:62:78:e0:6d:38:22:e7:a5:
         1d:04:ec:da:43:e3:ce:83:80:11:70:7e:6e:48:0a:bd:dc:14:
         3f:6a:0a:b9:49:76:15:2c:c2:79:97:09:04:09:e0:2b:7c:64:
         90:20:4f:8c:24:0f:fb:fb:ad:c5:98:9f:af:fa:45:22:62:ab:
         f0:e1:2e:e7:ea:b8:31:23:a1:38:d6:05:4f:f0:54:64:5a:9c:
         d3:5f:9f:1f:aa:d1:d5:98:e7:bf:b2:99:31:1e:99:69:40:01:
         82:74:bb:a8:7a:5a:e8:07:03:95:ab:6c:55:cb:5a:7e:a9:53:
         39:af:53:ab:a7:63:65:fc:b4:92:f9:1f:cb:ca:31:e4:b0:72:
         cc:91:f3:99:23:99:55:10:fc:2b:71:12:b7:cc:21:04:51:52:
         5a:da:52:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjlDOTUxMTAvBgNVBAUTKDUyQkY2RjYyRUJDQTI2QjFEQzQyN0ZCRUFGRTcyMEZC
QjA5N0MyMUIwHhcNMjYwNzI4MTg0OTA2WhcNMjYwODA0MTg0OTA2WjAYMRYwFAYD
VQQDEw02YTY4ZjlhMi03ZWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnxM3+x6J2UNQs8xVQjnVWN+d4WOdvOWE2kaAQeLJJhhllRDIBf2CEYGV2I5T
jfkWaT54IZ3yGiZRwURFRhkpNE01zr0V3a38aKW9Y1g/jZyP4NjQIBdf4RJs++ro
/9xlfLdXLeQkUjCwmkZY4xcNX3Lzi6n20+CCs/PAkzRkz4kp3yvLGy4m0zniJ9iF
eaKvEfk5crEeiKebpQVV0PqFQ3G4q5EziuWTJhNQZVI9NQ6gvTyqIIzXRPrj2dl7
niI5FSVn9C3FJ+5oZsWzAPPBykRTSFNoy3+b+GrIHnATQ4Yd95wJew8IgFMUXIZV
FFeO012LST5Th7SIKlje42hLqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNmkCZiu
GBs+nkZcvwmHr9TdGpLpMB8GA1UdIwQYMBaAFFK/b2Lryiax3EJ/vq/nIPuwl8Ib
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUM5NS9CQTNFQzg2RTIx
NzIxMUVBOEI3RUY4ODBDNEY5QUUwMi9Vcjl2WXV2S0pySGNRbi0tci1jZy03Q1h3
aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VyOXZZdXZLSnJIY1FuLS1yLWNnLTdDWHdocy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OUM5NS9CQTNFQzg2RTIxNzIxMUVBOEI3RUY4ODBDNEY5QUUwMi9Vcjl2WXV2S0py
SGNRbi0tci1jZy03Q1h3aHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASA+g7vHzU5fHhAPAKiAwi9RNByvwA7DrG0s3wzBvl0CQqjwlTrz6wgYEe9nO
vmQCp/6gPXq3vZQjAjVXgh0NkRgkHPzN6wGLdGcqD5DKLvv0rUbRseo+drd/+8v0
DtpM0V1az2J44G04IuelHQTs2kPjzoOAEXB+bkgKvdwUP2oKuUl2FSzCeZcJBAng
K3xkkCBPjCQP+/utxZifr/pFImKr8OEu5+q4MSOhONYFT/BUZFqc01+fH6rR1Zjn
v7KZMR6ZaUABgnS7qHpa6AcDlatsVctafqlTOa9Tq6djZfy0kvkfy8ox5LByzJHz
mSOZVRD8K3ESt8whBFFSWtpSIA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:45:49 2026 by rpki-client