Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
File:                     _Ern2eP0GafSBKVMedHz76mn1sg.mft (raw, json)
Hash identifier:          gsxCUCJu54XiXVyUINVbU/L+WSbarJlrcReYpVUPXDM=
Subject key identifier:   EF:AF:B0:45:11:68:19:55:84:7C:74:03:20:12:07:7D:88:70:57:F1
Authority key identifier: FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8
Certificate issuer:       /CN=A91262F0/serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8
Certificate serial:       0298
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
Manifest number:          028E
Signing time:             Mon 27 Jul 2026 03:08:30 +0000
Manifest this update:     Mon 27 Jul 2026 03:08:30 +0000
Manifest next update:     Mon 03 Aug 2026 03:08:30 +0000
Files and hashes:         1: _Ern2eP0GafSBKVMedHz76mn1sg.crl (hash: kwqjqZHpRo4cy3v7bOuooCS9wDiVlDwMWugNbvezBFE=)
                          2: 8E412748A33311EDA2CB2420C4F9AE02.roa (hash: 8ooMgmV7Ud+S1xspsx7qZBXNFAFm0OtpaMWTTHwLKP0=)
                          3: 05BD1998108D11F197077311333D8C67.roa (hash: ZxF538zON35iTObIR2PUbabLdiG79qM6J447o9x0f0c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl
                          rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 664 (0x298)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262F0, serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8
        Validity
            Not Before: Jul 27 03:08:30 2026 GMT
            Not After : Aug  3 03:08:30 2026 GMT
        Subject: CN=6a66cbae-59a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3a:00:d6:0a:bc:c7:3b:f7:71:a9:c3:c1:f5:
                    9f:23:a2:11:7c:58:1a:5d:d9:84:6a:16:ff:ed:e1:
                    ef:95:b1:34:42:fb:51:d9:24:ca:b2:8a:d1:cb:2b:
                    51:68:00:50:fe:75:d8:84:1e:13:25:7b:58:9c:b5:
                    d8:b6:03:c6:41:86:8b:4d:e1:1c:50:88:d9:d6:14:
                    15:f8:45:29:53:63:79:e1:eb:66:dd:9a:08:88:13:
                    56:4c:0a:44:39:55:f6:41:df:fd:13:26:90:8f:e5:
                    78:cb:34:9d:0d:ef:ca:b4:da:46:24:07:76:2d:42:
                    bb:80:10:67:60:3c:bb:54:2c:34:19:52:d8:75:b0:
                    a8:49:4a:69:d5:44:de:0f:e6:50:1d:35:fb:b2:60:
                    7f:9f:2b:5f:0f:bf:bd:21:f8:16:f9:aa:3e:32:df:
                    a0:78:cd:3a:03:17:3a:ea:b7:24:70:72:d6:3a:b8:
                    4b:a0:c6:51:5b:27:64:80:40:85:03:dd:8d:00:83:
                    2f:56:5f:5e:c5:3d:96:3d:86:99:38:3e:69:2b:6b:
                    6e:80:3e:75:6f:e4:a5:03:c4:8d:be:33:6c:43:96:
                    83:8c:6c:b8:1c:f6:7e:33:5a:d5:16:a5:6a:5c:bb:
                    c9:21:fd:62:53:44:f8:01:4e:dd:40:93:3d:28:f1:
                    8f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AF:B0:45:11:68:19:55:84:7C:74:03:20:12:07:7D:88:70:57:F1
            X509v3 Authority Key Identifier:
                keyid:FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:72:fe:18:27:c2:57:50:44:f1:78:b4:45:67:d9:87:3c:e1:
         44:20:13:a8:fd:fe:25:31:b5:c5:0b:35:98:16:07:48:e4:14:
         4f:77:b1:4e:a9:78:05:b8:20:2c:39:5d:b5:6e:48:86:1c:29:
         e5:37:9a:20:aa:7c:a1:11:a0:ec:a5:02:28:7b:7c:c2:d9:2b:
         d7:b4:0a:35:fa:79:66:13:64:63:0b:f3:8a:7d:c8:aa:94:df:
         29:b1:9a:e3:11:ad:33:68:f7:89:5b:9e:4e:60:e7:2b:47:52:
         23:a1:69:0a:09:64:44:a9:0f:2f:6d:d5:d8:85:1f:18:34:bb:
         17:d7:86:e7:b4:66:55:c8:b9:47:88:f1:aa:f9:e4:05:f8:0b:
         d8:d5:a1:d7:d1:2f:79:20:08:c4:9d:4c:25:78:2c:82:48:35:
         5b:dd:14:b0:a7:b6:35:d7:6e:05:45:1f:7c:51:92:af:10:b9:
         8b:a1:f3:cd:b8:9b:9c:19:9d:26:9e:1c:bf:05:49:cd:71:a4:
         99:f2:f1:ca:ae:22:82:70:bb:30:27:8a:88:df:49:a5:48:40:
         d5:d3:eb:17:2a:be:61:3f:80:46:a1:50:70:62:f3:82:4d:62:
         8b:fa:9e:b3:bd:88:e6:1d:30:75:42:fa:f2:64:c7:02:d2:57:
         86:eb:c1:bb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyRjAxMTAvBgNVBAUTKEZDNEFFN0Q5RTNGNDE5QTdEMjA0QTU0Qzc5RDFGM0VG
QTlBN0Q2QzgwHhcNMjYwNzI3MDMwODMwWhcNMjYwODAzMDMwODMwWjAYMRYwFAYD
VQQDEw02YTY2Y2JhZS01OWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxjoA1gq8xzv3canDwfWfI6IRfFgaXdmEahb/7eHvlbE0QvtR2STKsorRyytR
aABQ/nXYhB4TJXtYnLXYtgPGQYaLTeEcUIjZ1hQV+EUpU2N54etm3ZoIiBNWTApE
OVX2Qd/9EyaQj+V4yzSdDe/KtNpGJAd2LUK7gBBnYDy7VCw0GVLYdbCoSUpp1UTe
D+ZQHTX7smB/nytfD7+9IfgW+ao+Mt+geM06Axc66rckcHLWOrhLoMZRWydkgECF
A92NAIMvVl9exT2WPYaZOD5pK2tugD51b+SlA8SNvjNsQ5aDjGy4HPZ+M1rVFqVq
XLvJIf1iU0T4AU7dQJM9KPGPVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO+vsEUR
aBlVhHx0AyASB32IcFfxMB8GA1UdIwQYMBaAFPxK59nj9Bmn0gSlTHnR8++pp9bI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJGMC8zM0FEMEE2MkEz
MEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdhZlNCS1ZNZWRIejc2bW4x
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19Fcm4yZVAwR2FmU0JLVk1lZEh6NzZtbjFzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NjJGMC8zM0FEMEE2MkEzMEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdh
ZlNCS1ZNZWRIejc2bW4xc2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAr3L+GCfCV1BE8Xi0RWfZhzzhRCATqP3+JTG1xQs1mBYHSOQUT3exTql4Bbgg
LDldtW5Ihhwp5TeaIKp8oRGg7KUCKHt8wtkr17QKNfp5ZhNkYwvzin3IqpTfKbGa
4xGtM2j3iVueTmDnK0dSI6FpCglkRKkPL23V2IUfGDS7F9eG57RmVci5R4jxqvnk
BfgL2NWh19EveSAIxJ1MJXgsgkg1W90UsKe2NdduBUUffFGSrxC5i6HzzbibnBmd
Jp4cvwVJzXGkmfLxyq4ignC7MCeKiN9JpUhA1dPrFyq+YT+ARqFQcGLzgk1ii/qe
s72I5h0wdUL68mTHAtJXhuvBuw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 23:34:24 2026 by rpki-client