Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
File:                     fvLsMxvWVD0y25gMUGJsBAfKiYI.mft (raw, json)
Hash identifier:          ECn3MzNySTLHKEa7WjE9qwG8hxpkBP6blt8YscnE5Dw=
Subject key identifier:   A6:5D:B9:0A:37:5F:EA:BA:82:BD:38:88:6B:00:64:F1:57:BC:1B:88
Authority key identifier: 7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82
Certificate issuer:       /CN=A91D5E23/serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982
Certificate serial:       09B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
Manifest number:          09AE
Signing time:             Mon 20 Jul 2026 20:23:15 +0000
Manifest this update:     Mon 20 Jul 2026 20:23:15 +0000
Manifest next update:     Mon 27 Jul 2026 20:23:15 +0000
Files and hashes:         1: fvLsMxvWVD0y25gMUGJsBAfKiYI.crl (hash: ooMo13UM1a6pArwH2GjfZ4+yk2v7lEasrtAGQR3Frqc=)
                          2: 70C35E88B07511EA8C0EC372C4F9AE02.roa (hash: nEw1J5nI/jYM2/PDdrlSv5FQkDbuSGPVtzOk8gJbumo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl
                          rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 20:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2487 (0x9b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5E23, serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982
        Validity
            Not Before: Jul 20 20:23:15 2026 GMT
            Not After : Jul 27 20:23:15 2026 GMT
        Subject: CN=6a5e83b3-879b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:82:2b:c4:d2:86:70:80:dc:58:b4:fd:1b:0b:
                    2c:8d:3e:31:48:07:e7:2e:18:63:e4:57:f8:66:b6:
                    e8:7f:bf:6e:ef:60:3e:e3:56:c7:70:3c:a8:6a:19:
                    7f:2d:71:a7:b7:0f:68:32:ca:68:75:93:94:5f:8e:
                    ad:ca:3f:67:92:8f:83:3e:44:fe:3e:c1:bc:94:c2:
                    b0:c5:0e:7f:61:2d:e6:12:0a:71:72:b3:e2:d8:00:
                    52:00:08:14:bb:3c:a2:51:70:25:19:09:e8:5c:91:
                    cc:04:8d:ca:e9:f0:f4:f0:e9:08:1a:1f:a2:29:ad:
                    4c:a7:10:a9:b0:46:42:8a:cb:04:b4:57:48:d4:16:
                    d5:68:a1:1f:f7:62:ae:d9:cf:b6:47:00:74:5b:34:
                    c1:9e:2f:f8:55:11:e1:c9:ab:60:99:f0:77:fc:68:
                    1a:53:5e:bf:b4:d9:f7:a0:42:1b:53:d6:a0:86:1a:
                    f1:8f:92:44:05:e0:54:33:35:f8:7b:0d:d0:9a:25:
                    95:9e:96:dc:5b:37:9b:e4:85:22:bb:92:c0:0f:12:
                    52:15:88:b1:29:f4:0d:1d:04:62:dd:ef:29:fd:1c:
                    43:ac:64:45:e7:9d:f2:8d:27:6e:c9:62:84:2b:9e:
                    76:cf:6c:0c:d8:89:63:02:d4:e5:cf:f3:ab:85:99:
                    64:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5D:B9:0A:37:5F:EA:BA:82:BD:38:88:6B:00:64:F1:57:BC:1B:88
            X509v3 Authority Key Identifier:
                keyid:7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:2a:ce:d9:b2:be:ee:b0:6e:da:d8:df:f2:e7:4c:0e:c4:34:
         a5:b4:53:f9:10:3a:86:fb:f7:05:5f:67:a8:0d:a7:ee:5d:12:
         98:d7:67:50:e5:03:01:48:8d:35:20:b9:ba:a0:96:b1:48:fd:
         9c:28:83:cb:1a:9a:0e:14:7c:f4:5a:ec:c5:bb:f0:20:46:7c:
         d1:a9:91:29:a6:d4:8a:0b:ac:61:85:9c:e9:88:e3:5c:de:7a:
         9b:c5:b2:5b:7e:c7:13:c1:a6:c0:ef:a9:9f:5d:7b:c4:7d:57:
         7a:ed:08:4b:76:7e:ba:9f:63:68:ed:c4:8c:94:b7:c6:4d:42:
         69:f8:e0:9a:06:43:0c:11:f3:83:ea:66:80:96:b9:44:19:16:
         5b:42:30:23:d7:d2:bd:5e:d7:64:7c:43:0c:c2:c9:26:2e:99:
         68:51:d6:8b:bc:45:9c:a1:94:42:5b:1b:9d:7b:e9:30:a5:e6:
         e5:4c:b6:28:a7:a6:5b:51:3b:2c:29:45:23:a9:b5:2a:ef:ba:
         56:77:5a:f3:92:05:eb:73:79:66:62:71:fd:f5:88:02:93:2e:
         e3:ea:f6:3a:b7:ca:00:10:a7:df:57:ff:8f:e5:e7:0c:97:a6:
         3e:0e:80:2e:05:94:53:ad:90:26:72:7a:43:b0:6d:a7:17:96:
         27:1f:a7:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDVFMjMxMTAvBgNVBAUTKDdFRjJFQzMzMUJENjU0M0QzMkRCOTgwQzUwNjI2QzA0
MDdDQTg5ODIwHhcNMjYwNzIwMjAyMzE1WhcNMjYwNzI3MjAyMzE1WjAYMRYwFAYD
VQQDEw02YTVlODNiMy04NzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo4IrxNKGcIDcWLT9GwssjT4xSAfnLhhj5Ff4Zrbof79u72A+41bHcDyoahl/
LXGntw9oMspodZOUX46tyj9nko+DPkT+PsG8lMKwxQ5/YS3mEgpxcrPi2ABSAAgU
uzyiUXAlGQnoXJHMBI3K6fD08OkIGh+iKa1MpxCpsEZCissEtFdI1BbVaKEf92Ku
2c+2RwB0WzTBni/4VRHhyatgmfB3/GgaU16/tNn3oEIbU9aghhrxj5JEBeBUMzX4
ew3QmiWVnpbcWzeb5IUiu5LADxJSFYixKfQNHQRi3e8p/RxDrGRF553yjSduyWKE
K552z2wM2IljAtTlz/OrhZlk9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKZduQo3
X+q6gr04iGsAZPFXvBuIMB8GA1UdIwQYMBaAFH7y7DMb1lQ9MtuYDFBibAQHyomC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUUyMy84NjJBODNDQUIw
NzMxMUVBOTBFQzk5NkVDNEY5QUUwMi9mdkxzTXh2V1ZEMHkyNWdNVUdKc0JBZktp
WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z2THNNeHZXVkQweTI1Z01VR0pzQkFmS2lZSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NUUyMy84NjJBODNDQUIwNzMxMUVBOTBFQzk5NkVDNEY5QUUwMi9mdkxzTXh2V1ZE
MHkyNWdNVUdKc0JBZktpWUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZyrO2bK+7rBu2tjf8udMDsQ0pbRT+RA6hvv3BV9nqA2n7l0SmNdnUOUDAUiN
NSC5uqCWsUj9nCiDyxqaDhR89FrsxbvwIEZ80amRKabUigusYYWc6YjjXN56m8Wy
W37HE8GmwO+pn117xH1Xeu0IS3Z+up9jaO3EjJS3xk1CafjgmgZDDBHzg+pmgJa5
RBkWW0IwI9fSvV7XZHxDDMLJJi6ZaFHWi7xFnKGUQlsbnXvpMKXm5Uy2KKemW1E7
LClFI6m1Ku+6Vnda85IF63N5ZmJx/fWIApMu4+r2OrfKABCn31f/j+XnDJemPg6A
LgWUU62QJnJ6Q7BtpxeWJx+nXQ==
-----END CERTIFICATE-----
Generated at Wed Jul 22 02:39:14 2026 by rpki-client