Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft
File:                     R4tJDpOd3d8hrKx4y5MZinuBRIU.mft (raw, json)
Hash identifier:          zNgxm/61oMu3OO19K1YkuT9mnFKCuvYopHFVKUEpv70=
Subject key identifier:   A8:DD:21:09:96:EA:19:39:67:8D:21:A6:EF:BF:69:70:1C:9F:1A:3C
Authority key identifier: 47:8B:49:0E:93:9D:DD:DF:21:AC:AC:78:CB:93:19:8A:7B:81:44:85
Certificate issuer:       /CN=A91427E2/serialNumber=478B490E939DDDDF21ACAC78CB93198A7B814485
Certificate serial:       014D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft
Manifest number:          0145
Signing time:             Fri 17 Jul 2026 06:27:59 +0000
Manifest this update:     Fri 17 Jul 2026 06:27:58 +0000
Manifest next update:     Fri 24 Jul 2026 06:27:58 +0000
Files and hashes:         1: R4tJDpOd3d8hrKx4y5MZinuBRIU.crl (hash: PYXem2kPbY+Zjr4PWiLnyKaOXdoGrzk+GYGriz1kyJ0=)
                          2: 534DAEB2935111EF98AA8C86C4F9AE02.roa (hash: 5eXsqyDi4zXv3lkd2PQOUbJIFyY5qvfFcyW7Q/IiG9Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.crl
                          rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 06:27:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91427E2, serialNumber=478B490E939DDDDF21ACAC78CB93198A7B814485
        Validity
            Not Before: Jul 17 06:27:58 2026 GMT
            Not After : Jul 24 06:27:58 2026 GMT
        Subject: CN=6a59cb6e-8d98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:69:c1:23:d2:06:96:e9:85:84:c6:46:89:af:
                    df:4a:b6:c2:e5:54:45:e6:8c:d2:be:48:e8:2c:e3:
                    f8:75:e5:05:92:be:25:a4:34:e5:7a:a1:d1:76:b9:
                    36:6b:a3:56:c4:1c:01:2e:cf:4d:bb:4a:f2:d0:67:
                    35:3d:67:20:4b:ed:27:aa:17:81:56:39:94:1a:3e:
                    1e:61:4e:f8:ed:1b:b0:2b:26:d2:07:02:c8:ff:87:
                    2c:5b:f7:3f:c4:ca:3c:79:92:e4:ac:a9:dc:5d:4d:
                    e2:b3:a8:80:a7:5b:6f:db:c8:59:f8:9f:2e:ab:c1:
                    f8:a4:1c:53:c8:02:cc:44:e5:f9:c1:2e:75:77:98:
                    4f:91:e3:c1:d2:0b:7f:64:39:86:7c:e2:dc:57:b9:
                    71:a0:55:55:bc:a5:1b:56:63:17:63:2a:9c:44:f5:
                    e5:cb:92:5c:87:a1:a0:a5:8b:da:98:67:51:f4:cf:
                    2a:a0:8c:cf:c0:0e:40:10:61:73:55:52:d6:22:23:
                    e1:0d:da:98:08:83:cc:4f:d7:fc:fd:64:fa:d4:45:
                    b0:a8:2d:05:31:c3:84:e5:b1:18:fe:08:69:ab:9d:
                    8d:f4:98:fa:91:de:af:e6:24:0d:4d:1c:cf:d0:48:
                    7c:52:5d:72:32:53:59:55:44:c9:76:44:ce:85:90:
                    1b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DD:21:09:96:EA:19:39:67:8D:21:A6:EF:BF:69:70:1C:9F:1A:3C
            X509v3 Authority Key Identifier:
                keyid:47:8B:49:0E:93:9D:DD:DF:21:AC:AC:78:CB:93:19:8A:7B:81:44:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b2:5f:56:02:d2:e5:d3:f7:20:25:c6:8e:80:67:1a:c2:30:
         19:b2:e6:24:cd:2f:81:10:74:18:b0:a4:a5:c9:86:28:ea:98:
         7f:46:37:1e:8b:c6:93:b0:ef:f3:df:07:e3:56:26:25:0a:a5:
         5b:1d:40:80:21:a1:73:01:25:de:ac:f6:36:80:1d:56:3e:b4:
         13:e4:83:d7:e7:da:9d:b0:9d:13:f0:af:3c:22:2a:b9:4b:7d:
         cd:04:41:d2:64:7e:4c:71:ec:9b:09:4a:66:ed:12:4d:d0:89:
         e3:9f:89:ec:51:9e:01:28:29:83:a6:e8:63:0a:94:30:f4:81:
         d8:9a:71:fe:b7:a3:77:2f:47:ee:7b:4f:c9:1c:bb:95:40:e1:
         18:dd:7e:c1:c5:49:6f:24:a1:bb:78:a2:76:c1:33:6a:f3:fb:
         e9:f5:17:e5:18:59:21:cf:3b:23:4f:2f:39:5d:d6:59:fb:4c:
         f2:17:ed:9f:06:c8:57:1b:40:55:59:72:30:57:7b:ac:74:8f:
         f2:f1:95:5f:d9:7a:32:b6:f3:bd:f0:82:05:cc:4e:db:68:18:
         6f:95:2c:5f:60:2d:0a:66:3e:54:22:fb:a4:cd:8f:1c:73:88:
         b5:ea:5c:c4:a3:06:56:bd:4d:d2:56:26:9a:19:f3:11:aa:b4:
         60:f8:cb:4e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI3RTIxMTAvBgNVBAUTKDQ3OEI0OTBFOTM5REREREYyMUFDQUM3OENCOTMxOThB
N0I4MTQ0ODUwHhcNMjYwNzE3MDYyNzU4WhcNMjYwNzI0MDYyNzU4WjAYMRYwFAYD
VQQDEw02YTU5Y2I2ZS04ZDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuGnBI9IGlumFhMZGia/fSrbC5VRF5ozSvkjoLOP4deUFkr4lpDTleqHRdrk2
a6NWxBwBLs9Nu0ry0Gc1PWcgS+0nqheBVjmUGj4eYU747RuwKybSBwLI/4csW/c/
xMo8eZLkrKncXU3is6iAp1tv28hZ+J8uq8H4pBxTyALMROX5wS51d5hPkePB0gt/
ZDmGfOLcV7lxoFVVvKUbVmMXYyqcRPXly5Jch6GgpYvamGdR9M8qoIzPwA5AEGFz
VVLWIiPhDdqYCIPMT9f8/WT61EWwqC0FMcOE5bEY/ghpq52N9Jj6kd6v5iQNTRzP
0Eh8Ul1yMlNZVUTJdkTOhZAb6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKjdIQmW
6hk5Z40hpu+/aXAcnxo8MB8GA1UdIwQYMBaAFEeLSQ6Tnd3fIayseMuTGYp7gUSF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjdFMi83ODNERkJDNDkz
NTAxMUVGQkFDRTAwNENDNEY5QUUwMi9SNHRKRHBPZDNkOGhyS3g0eTVNWmludUJS
SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1I0dEpEcE9kM2Q4aHJLeDR5NU1aaW51QlJJVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjdFMi83ODNERkJDNDkzNTAxMUVGQkFDRTAwNENDNEY5QUUwMi9SNHRKRHBPZDNk
OGhyS3g0eTVNWmludUJSSVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXrJfVgLS5dP3ICXGjoBnGsIwGbLmJM0vgRB0GLCkpcmGKOqYf0Y3HovGk7Dv
898H41YmJQqlWx1AgCGhcwEl3qz2NoAdVj60E+SD1+fanbCdE/CvPCIquUt9zQRB
0mR+THHsmwlKZu0STdCJ45+J7FGeASgpg6boYwqUMPSB2Jpx/rejdy9H7ntPyRy7
lUDhGN1+wcVJbyShu3iidsEzavP76fUX5RhZIc87I08vOV3WWftM8hftnwbIVxtA
VVlyMFd7rHSP8vGVX9l6MrbzvfCCBcxO22gYb5UsX2AtCmY+VCL7pM2PHHOItepc
xKMGVr1N0lYmmhnzEaq0YPjLTg==
-----END CERTIFICATE-----
Generated at Sat Jul 18 07:15:46 2026 by rpki-client