Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft
File:                     4cWfpaa8h2985KRsqq5gYE8FGGY.mft (raw, json)
Hash identifier:          rG7VufSDEbDC88C5Vllwx8GvNETySG/os8dJkQQQCPo=
Subject key identifier:   C4:0C:12:CF:2B:8F:AC:FA:C1:1A:89:AC:D0:AC:BC:2F:0E:EC:DE:1F
Authority key identifier: E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66
Certificate issuer:       /CN=A91FEDE7/serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft
Manifest number:          78
Signing time:             Mon 27 Jul 2026 10:04:38 +0000
Manifest this update:     Mon 27 Jul 2026 10:04:38 +0000
Manifest next update:     Mon 03 Aug 2026 10:04:38 +0000
Files and hashes:         1: 4cWfpaa8h2985KRsqq5gYE8FGGY.crl (hash: fq2OokvnVqU5yTkMtWQbPKLHYvVXIlyIacCpHvAEmvI=)
                          2: C48E03F21D1A11F1AE90847F103D8C67.roa (hash: vhaf/68N75siwelbtPS2Tu3DEgGqynrrUITnReXj5p4=)
                          3: 63C2AF74D99E11F0A31734B566D3641D.roa (hash: 63YdLXndxb2ZNy3UKl9Em7+7aoRcbOsCAOFA6tKDt14=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl
                          rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:04:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FEDE7, serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866
        Validity
            Not Before: Jul 27 10:04:38 2026 GMT
            Not After : Aug  3 10:04:38 2026 GMT
        Subject: CN=6a672d36-9c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4a:71:ea:8d:cc:af:28:77:04:4c:b4:97:92:
                    31:b1:8f:73:fd:63:41:40:17:27:10:d0:a5:7b:1a:
                    af:07:2a:ad:82:ca:56:fd:5c:32:a8:ad:f2:56:6f:
                    9a:99:36:6e:96:7e:d9:cd:ff:10:dd:b6:26:fe:c6:
                    73:61:83:45:40:55:2d:4e:34:a9:e5:c2:2c:3b:37:
                    71:c0:d8:09:52:8c:68:7f:1f:2c:d0:33:8f:c8:a6:
                    16:ea:6f:ba:c2:e9:4d:c4:f9:16:b3:52:6d:62:77:
                    85:15:f8:f7:d7:70:b6:32:6b:05:56:aa:c5:00:ff:
                    12:49:6a:b3:fd:67:ae:b7:40:65:ab:23:78:b0:aa:
                    94:6e:42:2d:9f:36:c3:4a:9c:11:03:3d:17:64:76:
                    55:24:de:7b:d2:18:4d:c3:0f:0f:3c:9c:29:b9:4f:
                    a1:c4:9f:86:bf:dc:a3:d0:88:a7:1e:ac:c2:6d:a2:
                    1b:39:45:05:23:62:1a:87:4e:f3:99:bf:13:bb:0c:
                    c7:3c:a4:6d:b1:2f:78:e4:ac:b5:b6:f2:5a:da:94:
                    3b:f1:50:46:0a:ad:84:9f:90:59:d8:de:2e:b8:61:
                    8c:80:f5:b5:56:b3:75:4a:96:53:e6:a2:39:0b:da:
                    b5:f0:e4:e5:1e:df:36:f6:75:c2:53:f1:99:f8:41:
                    55:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0C:12:CF:2B:8F:AC:FA:C1:1A:89:AC:D0:AC:BC:2F:0E:EC:DE:1F
            X509v3 Authority Key Identifier:
                keyid:E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:6f:b7:bf:42:5b:39:d4:d7:bd:03:90:f9:00:5a:b6:86:2d:
         43:d8:b5:af:32:1d:70:26:56:b8:2a:07:13:95:e7:b7:3e:03:
         1c:ed:fa:a8:7b:39:70:f7:35:a9:5e:d7:bf:8c:35:87:25:ac:
         92:0a:cd:58:41:79:27:b7:19:b8:ca:f3:6a:dd:cf:42:94:4d:
         07:6c:90:85:1d:e4:d5:75:01:b0:db:95:bf:10:cb:6e:7a:e6:
         52:05:5a:20:b5:4b:2d:26:39:dc:c5:8e:89:64:0c:42:fe:25:
         9e:00:38:59:45:33:91:b1:d5:cf:35:13:7e:86:e5:10:c1:74:
         0f:c3:89:83:a5:ac:a2:f6:2c:b0:86:e3:70:4b:6c:32:be:52:
         f4:3e:71:15:23:58:47:9f:01:53:be:a0:4e:4a:72:04:7a:37:
         ac:b3:4c:72:45:69:b7:b9:9e:70:56:44:67:51:67:f0:bf:b9:
         36:f9:ad:1a:3b:bd:5a:b2:89:3a:ee:96:37:ed:f2:85:b7:9b:
         14:e0:cc:1c:c6:79:ff:c4:91:81:d5:cc:3b:d9:45:6f:0f:40:
         88:aa:e3:2a:5a:43:bf:50:14:51:94:cf:00:09:2e:fa:1e:0e:
         81:19:90:8c:02:7b:87:9e:91:f9:97:16:ad:65:3e:a0:17:f1:
         c0:7d:e9:e6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
RURFNzExMC8GA1UEBRMoRTFDNTlGQTVBNkJDODc2RjdDRTRBNDZDQUFBRTYwNjA0
RjA1MTg2NjAeFw0yNjA3MjcxMDA0MzhaFw0yNjA4MDMxMDA0MzhaMBgxFjAUBgNV
BAMTDTZhNjcyZDM2LTljODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCrSnHqjcyvKHcETLSXkjGxj3P9Y0FAFycQ0KV7Gq8HKq2Cylb9XDKorfJWb5qZ
Nm6WftnN/xDdtib+xnNhg0VAVS1ONKnlwiw7N3HA2AlSjGh/HyzQM4/Iphbqb7rC
6U3E+RazUm1id4UV+PfXcLYyawVWqsUA/xJJarP9Z663QGWrI3iwqpRuQi2fNsNK
nBEDPRdkdlUk3nvSGE3DDw88nCm5T6HEn4a/3KPQiKcerMJtohs5RQUjYhqHTvOZ
vxO7DMc8pG2xL3jkrLW28lralDvxUEYKrYSfkFnY3i64YYyA9bVWs3VKllPmojkL
2rXw5OUe3zb2dcJT8Zn4QVXlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxAwSzyuP
rPrBGoms0Ky8Lw7s3h8wHwYDVR0jBBgwFoAU4cWfpaa8h2985KRsqq5gYE8FGGYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFREU3L0U3RkQzMDU4RDk5
RDExRjBCQkU3ODM5OTY2RDM2NDFELzRjV2ZwYWE4aDI5ODVLUnNxcTVnWUU4RkdH
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNGNXZnBhYThoMjk4NUtSc3FxNWdZRThGR0dZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF
REU3L0U3RkQzMDU4RDk5RDExRjBCQkU3ODM5OTY2RDM2NDFELzRjV2ZwYWE4aDI5
ODVLUnNxcTVnWUU4RkdHWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA3b7e/Qls51Ne9A5D5AFq2hi1D2LWvMh1wJla4KgcTlee3PgMc7fqoezlw9zWp
Xte/jDWHJaySCs1YQXkntxm4yvNq3c9ClE0HbJCFHeTVdQGw25W/EMtueuZSBVog
tUstJjncxY6JZAxC/iWeADhZRTORsdXPNRN+huUQwXQPw4mDpayi9iywhuNwS2wy
vlL0PnEVI1hHnwFTvqBOSnIEejess0xyRWm3uZ5wVkRnUWfwv7k2+a0aO71asok6
7pY37fKFt5sU4Mwcxnn/xJGB1cw72UVvD0CIquMqWkO/UBRRlM8ACS76Hg6BGZCM
AnuHnpH5lxatZT6gF/HAfenm
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:15:45 2026 by rpki-client