Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
File:                     B2lXYTNYblq0-b9NpSttXKFtnNU.mft (raw, json)
Hash identifier:          pk0A7EUhFPA4YUCkvChJk/N1ISfvhvBFWXkb/Pl09os=
Subject key identifier:   60:73:24:4D:43:44:13:23:4A:E2:CF:A8:E1:ED:21:0E:AF:1A:1F:6C
Authority key identifier: 07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5
Certificate issuer:       /CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
Certificate serial:       0CC0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
Manifest number:          0C91
Signing time:             Tue 18 Aug 2026 18:54:40 +0000
Manifest this update:     Tue 18 Aug 2026 18:54:40 +0000
Manifest next update:     Tue 25 Aug 2026 18:54:40 +0000
Files and hashes:         1: B2lXYTNYblq0-b9NpSttXKFtnNU.crl (hash: yd5UT1J49/cEczwoWvKU3R6C8hpt3vd5E1lXCNLxruU=)
                          2: 4B6A736E0A9111EEB13EAF44C4F9AE02.roa (hash: s0qB2iNNIUGZAV7Qs3yGnrF3Wpc6qo9NyC9+Hue+JMc=)
                          3: 4DC77C600A9111EEB13EAF44C4F9AE02.roa (hash: 2kqZ2ax/As32o8RRs0PQNYd+3fd0DLwwDpGPzi6gp20=)
                          4: DAFD055806F811EC9558C827C4F9AE02.roa (hash: SIPUDEhwO81LNv9dhcibvLJQkdYFv/PIhTjKFY7R3oc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl
                          rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:54:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3264 (0xcc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911057B, serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
        Validity
            Not Before: Aug 18 18:54:40 2026 GMT
            Not After : Aug 25 18:54:40 2026 GMT
        Subject: CN=6a84aa70-e866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:65:36:a3:50:32:9f:a4:1a:57:30:f7:c0:e1:
                    ff:06:e7:25:09:76:cf:76:09:ab:a5:c2:1f:a3:7d:
                    ec:64:8e:ee:35:e3:28:e8:d0:b0:09:b9:c7:52:ff:
                    4c:e2:05:c6:c6:4e:02:1e:93:91:5c:b2:41:ba:ae:
                    fc:88:8a:7c:7f:f6:96:76:5a:fb:ea:19:c4:60:c0:
                    74:69:20:f0:ad:76:97:e8:ed:90:6e:fd:4a:35:a2:
                    96:ba:e6:70:39:90:46:f9:26:f5:aa:6a:39:56:57:
                    e7:ce:67:a6:42:c3:25:b5:66:32:33:b7:fb:4b:21:
                    4e:75:74:e0:d4:bd:4d:f8:6e:b6:08:6a:75:e9:23:
                    c8:be:f1:e3:da:9c:2d:43:7a:04:c6:9e:78:90:44:
                    c3:25:df:11:d7:f2:36:9b:9a:f6:7b:0a:b2:95:3d:
                    4a:26:76:84:e7:1c:ef:1b:08:e8:64:92:d2:91:69:
                    81:27:24:57:9b:21:ae:98:41:38:4c:46:1d:d4:c0:
                    35:71:f2:ee:ee:44:72:5c:57:1a:e5:74:b8:94:c1:
                    32:6a:8d:83:c9:f9:bd:7d:48:6b:bf:98:6b:a7:c1:
                    ae:75:86:3c:7b:f6:5a:70:2c:04:a5:ed:d3:20:8a:
                    ef:e0:8d:45:6b:47:9a:75:c8:70:89:e7:01:03:3a:
                    be:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:73:24:4D:43:44:13:23:4A:E2:CF:A8:E1:ED:21:0E:AF:1A:1F:6C
            X509v3 Authority Key Identifier:
                keyid:07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:18:1a:64:62:df:e7:78:21:87:63:72:59:a5:ac:57:55:6c:
         3d:36:2d:59:a6:43:3f:9e:c7:29:b8:c4:e0:02:cc:fc:66:d8:
         ad:91:13:6b:c8:3a:62:9a:69:83:d5:d5:e5:2c:93:73:31:9b:
         d3:15:73:3d:68:dc:7a:49:be:81:b0:ce:ac:46:d2:69:6e:8a:
         7c:5d:aa:2e:96:2d:7e:9d:6f:c9:6f:58:f0:eb:54:58:de:4c:
         5c:28:3b:a9:b8:cd:5c:76:4c:a3:65:4f:f6:52:39:f2:50:ab:
         02:1d:8d:2d:f0:9f:cb:1f:24:d6:ad:5c:31:dc:b3:8b:88:8f:
         8b:0e:1e:63:b1:8c:b5:24:e6:2a:98:8c:f5:c2:81:fa:42:09:
         d9:c1:63:9f:e6:ab:6f:c2:d3:bd:c1:a7:00:86:f8:13:32:01:
         38:5d:d6:72:a8:a3:2f:31:b8:55:e2:7b:71:37:cc:2a:f8:e0:
         a2:97:dc:68:74:d1:3f:95:8a:37:cd:64:cc:63:ca:64:2b:fb:
         19:84:8d:cf:2b:b7:91:63:51:76:22:cd:1f:50:5e:50:bf:0f:
         4c:ae:71:cc:26:2d:2a:10:a4:a9:03:a1:2f:46:5a:31:aa:c0:
         87:55:2c:d2:fe:da:84:1e:57:2e:e9:88:75:cd:98:09:a7:2f:
         51:fa:af:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA1N0IxMTAvBgNVBAUTKDA3Njk1NzYxMzM1ODZFNUFCNEY5QkY0REE1MkI2RDVD
QTE2RDlDRDUwHhcNMjYwODE4MTg1NDQwWhcNMjYwODI1MTg1NDQwWjAYMRYwFAYD
VQQDEw02YTg0YWE3MC1lODY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy2U2o1Ayn6QaVzD3wOH/BuclCXbPdgmrpcIfo33sZI7uNeMo6NCwCbnHUv9M
4gXGxk4CHpORXLJBuq78iIp8f/aWdlr76hnEYMB0aSDwrXaX6O2Qbv1KNaKWuuZw
OZBG+Sb1qmo5VlfnzmemQsMltWYyM7f7SyFOdXTg1L1N+G62CGp16SPIvvHj2pwt
Q3oExp54kETDJd8R1/I2m5r2ewqylT1KJnaE5xzvGwjoZJLSkWmBJyRXmyGumEE4
TEYd1MA1cfLu7kRyXFca5XS4lMEyao2Dyfm9fUhrv5hrp8GudYY8e/ZacCwEpe3T
IIrv4I1Fa0eadchwiecBAzq+lQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGBzJE1D
RBMjSuLPqOHtIQ6vGh9sMB8GA1UdIwQYMBaAFAdpV2EzWG5atPm/TaUrbVyhbZzV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDU3Qi9BOTE3RTc1NDI2
MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJscTAtYjlOcFN0dFhLRnRu
TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0IybFhZVE5ZYmxxMC1iOU5wU3R0WEtGdG5OVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDU3Qi9BOTE3RTc1NDI2MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJs
cTAtYjlOcFN0dFhLRnRuTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADBgaZGLf53ghh2NyWaWsV1VsPTYtWaZDP57HKbjE4ALM/GbYrZETa8g6Yppp
g9XV5SyTczGb0xVzPWjcekm+gbDOrEbSaW6KfF2qLpYtfp1vyW9Y8OtUWN5MXCg7
qbjNXHZMo2VP9lI58lCrAh2NLfCfyx8k1q1cMdyzi4iPiw4eY7GMtSTmKpiM9cKB
+kIJ2cFjn+arb8LTvcGnAIb4EzIBOF3WcqijLzG4VeJ7cTfMKvjgopfcaHTRP5WK
N81kzGPKZCv7GYSNzyu3kWNRdiLNH1BeUL8PTK5xzCYtKhCkqQOhL0ZaMarAh1Us
0v7ahB5XLumIdc2YCacvUfqviw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:40 2026 by rpki-client