Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
File:                     2QhMrcO-yMIAxalrcu2v1KAOrug.mft (raw, json)
Hash identifier:          bAu8YyqHZTWSAelQktj1zRKCJFFomjKVENjOht1tS2M=
Subject key identifier:   B9:88:5D:73:89:39:51:6E:A0:AC:56:79:0A:E6:D0:00:0C:2A:6D:C5
Authority key identifier: D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8
Certificate issuer:       /CN=A91719F1/serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8
Certificate serial:       0329
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
Manifest number:          0320
Signing time:             Mon 27 Jul 2026 02:16:07 +0000
Manifest this update:     Mon 27 Jul 2026 02:16:07 +0000
Manifest next update:     Mon 03 Aug 2026 02:16:07 +0000
Files and hashes:         1: 2QhMrcO-yMIAxalrcu2v1KAOrug.crl (hash: gRAR9uCwx7QmU5TLbyK3wCMaj6QesX3B1StSijsL1Fg=)
                          2: 00724F9621F111ED93774B6EC4F9AE02.roa (hash: h9XZber2EyFddUowRYB4R36YQps0wInKux9nbzLj6gU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl
                          rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:16:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 809 (0x329)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91719F1, serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8
        Validity
            Not Before: Jul 27 02:16:07 2026 GMT
            Not After : Aug  3 02:16:07 2026 GMT
        Subject: CN=6a66bf67-ab1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f5:31:62:f7:08:f9:d6:1d:55:3c:be:f3:b3:
                    43:43:e3:bb:82:d7:0f:82:63:f7:fd:8d:ba:80:dc:
                    d9:7a:0f:d8:c9:5e:bf:9d:df:fc:37:76:93:9d:be:
                    80:ea:26:27:1f:5f:12:aa:83:bb:b8:8d:88:ed:79:
                    07:14:c0:fd:7d:72:39:92:cb:0b:d1:0c:d1:ae:4d:
                    37:d1:ce:43:ca:99:a2:0b:10:b3:39:f8:86:15:e6:
                    01:4a:62:fd:f7:7f:f5:20:e6:d7:4b:05:b8:82:dc:
                    f4:68:f9:df:64:ca:82:f6:d0:de:c4:43:b5:52:6f:
                    9a:cd:31:19:32:1d:65:01:2a:ef:bd:ec:29:00:ba:
                    01:c4:8b:ec:ce:d6:d8:f0:c1:df:c7:f6:97:73:01:
                    96:3c:58:ef:c7:fc:de:d5:64:32:84:1d:09:f7:f3:
                    02:e4:9f:0d:bf:f5:49:3d:86:dc:ef:2c:73:cd:13:
                    a8:56:28:c9:f8:60:2c:92:ed:9b:44:78:d1:e0:0f:
                    5a:a3:aa:56:bc:bb:6c:34:30:4d:22:0e:da:97:87:
                    e6:e3:b0:d6:29:1a:a3:80:86:43:be:75:a9:68:91:
                    bc:80:9d:0f:0c:a5:b0:82:f5:8e:5b:fe:53:3c:9a:
                    85:23:44:98:6d:3f:56:b4:9c:a3:eb:52:07:b3:7f:
                    d8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:88:5D:73:89:39:51:6E:A0:AC:56:79:0A:E6:D0:00:0C:2A:6D:C5
            X509v3 Authority Key Identifier:
                keyid:D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:46:1e:e7:2c:1b:0e:fb:d8:95:f6:7f:64:a5:81:f2:4a:6b:
         aa:11:87:8c:b4:f3:11:a3:b9:03:ca:d9:50:f8:d6:22:9d:18:
         2f:ed:03:9f:3c:73:aa:d2:5d:2c:47:24:95:e8:9a:2e:26:3a:
         fb:7b:09:0d:ff:8a:92:83:86:f4:11:0b:3b:ba:20:60:81:ab:
         de:90:5a:d5:5b:8e:e4:9d:e1:cc:96:00:62:31:e6:61:3f:5f:
         11:f8:ce:ca:4d:ca:d1:e4:b9:d1:3a:a4:81:fa:77:81:f2:b7:
         38:e1:58:cf:4b:6c:25:4d:ad:83:76:73:21:21:55:f5:c0:ab:
         0e:9f:fa:76:8b:9d:bb:7a:cf:36:53:e0:5f:e3:51:6b:50:ff:
         0e:0f:4f:a7:8d:80:f9:9b:9e:2d:94:4a:fc:d1:98:8d:7f:09:
         e7:12:ad:c8:1c:70:3a:cf:3f:92:dd:f3:de:6e:9c:a2:89:9a:
         73:c0:09:4a:51:fc:8e:ba:34:6c:08:25:c9:15:40:34:d9:da:
         1e:2a:fe:16:e8:f6:c4:5b:f8:5f:6a:62:99:4f:b6:7f:9d:8f:
         8a:b0:5e:1a:63:36:16:25:df:17:04:b0:c0:21:5f:05:2c:e9:
         38:12:19:b7:86:b0:97:a6:b8:35:f1:ec:11:c7:63:99:54:bb:
         3f:76:0f:b0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE5RjExMTAvBgNVBAUTKEQ5MDg0Q0FEQzNCRUM4QzIwMEM1QTk2QjcyRURBRkQ0
QTAwRUFFRTgwHhcNMjYwNzI3MDIxNjA3WhcNMjYwODAzMDIxNjA3WjAYMRYwFAYD
VQQDEw02YTY2YmY2Ny1hYjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo/UxYvcI+dYdVTy+87NDQ+O7gtcPgmP3/Y26gNzZeg/YyV6/nd/8N3aTnb6A
6iYnH18SqoO7uI2I7XkHFMD9fXI5kssL0QzRrk030c5DypmiCxCzOfiGFeYBSmL9
93/1IObXSwW4gtz0aPnfZMqC9tDexEO1Um+azTEZMh1lASrvvewpALoBxIvsztbY
8MHfx/aXcwGWPFjvx/ze1WQyhB0J9/MC5J8Nv/VJPYbc7yxzzROoVijJ+GAsku2b
RHjR4A9ao6pWvLtsNDBNIg7al4fm47DWKRqjgIZDvnWpaJG8gJ0PDKWwgvWOW/5T
PJqFI0SYbT9WtJyj61IHs3/YvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLmIXXOJ
OVFuoKxWeQrm0AAMKm3FMB8GA1UdIwQYMBaAFNkITK3DvsjCAMWpa3Ltr9SgDq7o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTlGMS82OTVGOTNGRTIx
RUUxMUVEQjRDOEJENkNDNEY5QUUwMi8yUWhNcmNPLXlNSUF4YWxyY3UydjFLQU9y
dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJRaE1yY08teU1JQXhhbHJjdTJ2MUtBT3J1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTlGMS82OTVGOTNGRTIxRUUxMUVEQjRDOEJENkNDNEY5QUUwMi8yUWhNcmNPLXlN
SUF4YWxyY3UydjFLQU9ydWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFkYe5ywbDvvYlfZ/ZKWB8kprqhGHjLTzEaO5A8rZUPjWIp0YL+0DnzxzqtJd
LEckleiaLiY6+3sJDf+KkoOG9BELO7ogYIGr3pBa1VuO5J3hzJYAYjHmYT9fEfjO
yk3K0eS50Tqkgfp3gfK3OOFYz0tsJU2tg3ZzISFV9cCrDp/6doudu3rPNlPgX+NR
a1D/Dg9Pp42A+ZueLZRK/NGYjX8J5xKtyBxwOs8/kt3z3m6coomac8AJSlH8jro0
bAglyRVANNnaHir+Fuj2xFv4X2pimU+2f52PirBeGmM2FiXfFwSwwCFfBSzpOBIZ
t4awl6a4NfHsEcdjmVS7P3YPsA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:14:12 2026 by rpki-client