Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft
File:                     ALcq1TM86q4aWFyCgInERVmZY_I.mft (raw, json)
Hash identifier:          z8MpH7tjVsRNbqnP3kSWC0qZgkqJgwXu97pBGCk4d8c=
Subject key identifier:   EA:F0:F9:F0:BB:FF:22:99:AD:8D:3B:7B:0C:28:3D:2B:F7:6E:DF:4A
Authority key identifier: 00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2
Certificate issuer:       /CN=A91380F7/serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2
Certificate serial:       0140
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft
Manifest number:          013A
Signing time:             Fri 17 Jul 2026 06:38:58 +0000
Manifest this update:     Fri 17 Jul 2026 06:38:57 +0000
Manifest next update:     Fri 24 Jul 2026 06:38:57 +0000
Files and hashes:         1: ALcq1TM86q4aWFyCgInERVmZY_I.crl (hash: p6vZroyuuKEaCtJjADhAkckfZj8xOqGuP3VsIwBWuMs=)
                          2: 5D117282A7F911EF8E7B1773C4F9AE02.roa (hash: ANjzdpRTnZYnb2IgP9uL0uuWKgG+fxMLmh0yV+GGQqk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl
                          rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 06:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91380F7, serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2
        Validity
            Not Before: Jul 17 06:38:57 2026 GMT
            Not After : Jul 24 06:38:57 2026 GMT
        Subject: CN=6a59ce02-6cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6f:32:50:66:f7:76:08:e2:c4:de:51:ae:61:
                    b2:11:12:fd:23:4c:82:2f:14:a1:3a:42:25:11:99:
                    16:17:83:59:5c:a8:e6:12:29:18:93:58:70:e4:d5:
                    be:90:6c:ac:85:a8:0e:fb:6d:e6:70:61:23:92:ac:
                    a6:f1:a4:68:8a:2d:a6:c0:6a:1a:1e:dd:dd:79:79:
                    97:4a:74:0f:37:a3:08:4c:24:d1:7f:11:14:a6:76:
                    84:07:7f:ab:27:bb:3c:45:bb:dd:d5:15:95:d5:6b:
                    dd:74:86:2e:6b:3e:ba:14:4f:47:a9:47:e4:d8:e4:
                    62:de:5a:3c:e8:80:b4:b6:f8:70:63:f1:c1:78:14:
                    f8:98:8a:fa:e8:71:6c:52:25:57:fc:a8:11:f0:a1:
                    c6:2b:7d:33:24:1d:40:dc:2d:57:16:ea:d8:74:7a:
                    11:87:bb:56:70:36:9d:65:df:02:0c:84:a9:13:96:
                    ca:a8:37:dd:e9:60:f2:8b:65:2a:8c:bf:98:2d:47:
                    81:be:f6:ed:28:0f:1e:a4:39:4a:d0:32:51:87:92:
                    c4:cb:c1:1b:f8:29:0a:c7:11:29:e1:9e:5c:7e:9a:
                    f8:f1:b3:1d:05:bf:63:b2:cc:31:c8:67:04:25:89:
                    13:91:e8:61:1f:f7:fe:c8:bb:b7:b6:f9:82:ff:27:
                    8b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F0:F9:F0:BB:FF:22:99:AD:8D:3B:7B:0C:28:3D:2B:F7:6E:DF:4A
            X509v3 Authority Key Identifier:
                keyid:00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:38:90:ab:d9:fa:b9:8d:75:7e:a6:6e:95:38:7d:bd:82:ca:
         98:64:cc:9d:a3:54:b2:0c:65:fb:b7:95:db:d2:56:f6:0a:b5:
         00:e4:53:af:17:20:c0:be:0b:09:0e:57:4e:58:72:10:11:6a:
         ba:9e:7e:dd:55:85:8d:b8:46:65:ec:4e:86:e6:64:4d:3b:8f:
         61:70:55:9c:79:75:33:c5:fc:5f:39:c2:63:5b:11:db:78:18:
         49:c3:4e:4f:e5:1a:a2:09:e1:f7:a0:8e:c2:aa:c7:72:ac:d5:
         cc:02:22:71:aa:bf:01:09:9c:b7:b3:45:14:05:6e:86:b5:60:
         a0:06:32:ac:d4:b3:ff:c4:46:44:c5:ee:a3:ed:3f:00:e4:99:
         02:43:d6:96:a3:36:51:c6:d6:cb:ba:22:85:4e:1f:21:b4:a2:
         67:7a:cd:3b:c4:4b:e6:fe:9c:df:55:d0:50:3e:7e:df:51:ae:
         68:81:23:46:fd:24:db:b7:06:c3:c5:2e:bd:b9:c2:2a:75:80:
         30:6a:1c:74:be:8f:7b:e1:89:33:6f:6b:82:46:67:f2:f6:9f:
         0d:8b:df:fc:ab:f4:88:d8:53:39:db:88:17:dc:2e:8e:f1:bf:
         d7:ce:5c:b7:7e:b1:00:d0:a4:d4:74:97:79:49:e4:30:e5:14:
         89:08:d5:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzgwRjcxMTAvBgNVBAUTKDAwQjcyQUQ1MzMzQ0VBQUUxQTU4NUM4MjgwODlDNDQ1
NTk5OTYzRjIwHhcNMjYwNzE3MDYzODU3WhcNMjYwNzI0MDYzODU3WjAYMRYwFAYD
VQQDEw02YTU5Y2UwMi02Y2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7G8yUGb3dgjixN5RrmGyERL9I0yCLxShOkIlEZkWF4NZXKjmEikYk1hw5NW+
kGyshagO+23mcGEjkqym8aRoii2mwGoaHt3deXmXSnQPN6MITCTRfxEUpnaEB3+r
J7s8Rbvd1RWV1WvddIYuaz66FE9HqUfk2ORi3lo86IC0tvhwY/HBeBT4mIr66HFs
UiVX/KgR8KHGK30zJB1A3C1XFurYdHoRh7tWcDadZd8CDISpE5bKqDfd6WDyi2Uq
jL+YLUeBvvbtKA8epDlK0DJRh5LEy8Eb+CkKxxEp4Z5cfpr48bMdBb9jsswxyGcE
JYkTkehhH/f+yLu3tvmC/yeLwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOrw+fC7
/yKZrY07ewwoPSv3bt9KMB8GA1UdIwQYMBaAFAC3KtUzPOquGlhcgoCJxEVZmWPy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODBGNy85Rjc2OEFGQUE3
RjgxMUVGQkI0NEYzNzFDNEY5QUUwMi9BTGNxMVRNODZxNGFXRnlDZ0luRVJWbVpZ
X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0FMY3ExVE04NnE0YVdGeUNnSW5FUlZtWllfSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODBGNy85Rjc2OEFGQUE3RjgxMUVGQkI0NEYzNzFDNEY5QUUwMi9BTGNxMVRNODZx
NGFXRnlDZ0luRVJWbVpZX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkjiQq9n6uY11fqZulTh9vYLKmGTMnaNUsgxl+7eV29JW9gq1AORTrxcgwL4L
CQ5XTlhyEBFqup5+3VWFjbhGZexOhuZkTTuPYXBVnHl1M8X8XznCY1sR23gYScNO
T+Uaognh96COwqrHcqzVzAIicaq/AQmct7NFFAVuhrVgoAYyrNSz/8RGRMXuo+0/
AOSZAkPWlqM2UcbWy7oihU4fIbSiZ3rNO8RL5v6c31XQUD5+31GuaIEjRv0k27cG
w8UuvbnCKnWAMGocdL6Pe+GJM29rgkZn8vafDYvf/Kv0iNhTOduIF9wujvG/185c
t36xANCk1HSXeUnkMOUUiQjV5Q==
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:14 2026 by rpki-client