Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft
File:                     Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft (raw, json)
Hash identifier:          q/jEEHSl11PbWmOwKGnP1fH2xnfh/6Wn+BeD/CJyG3s=
Subject key identifier:   EE:BB:04:85:95:C8:B9:B2:BD:68:3B:2A:76:2D:3C:24:70:92:0D:8D
Authority key identifier: 03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34
Certificate issuer:       /CN=A91805BF/serialNumber=031E29F26E783281B768E8910853144DF1EE5534
Certificate serial:       0861
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft
Manifest number:          0856
Signing time:             Thu 16 Jul 2026 21:15:34 +0000
Manifest this update:     Thu 16 Jul 2026 21:15:33 +0000
Manifest next update:     Thu 23 Jul 2026 21:15:33 +0000
Files and hashes:         1: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl (hash: mTOvp5cstO0LHIgKqr/KuDQswmdddVdG9cqvdtb+XeA=)
                          2: 67F4BD64519811F092842D60C4F9AE02.roa (hash: Lp3bNyJgfkc/SQZCgAth54GJ5kkoQOOIRUFq6Ssbpu4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl
                          rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 21:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2145 (0x861)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91805BF, serialNumber=031E29F26E783281B768E8910853144DF1EE5534
        Validity
            Not Before: Jul 16 21:15:33 2026 GMT
            Not After : Jul 23 21:15:33 2026 GMT
        Subject: CN=6a5949f5-df7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:92:b3:6e:5e:66:02:aa:4c:a3:7b:b8:fb:16:
                    09:ad:b7:4a:2c:5e:08:36:e8:1e:9a:b6:4d:d0:7f:
                    ed:01:d8:73:c5:8b:1c:7a:a4:d9:6a:fe:ec:66:b1:
                    a2:79:5b:f9:a4:d5:64:46:0b:69:a2:df:23:a9:54:
                    81:44:7f:bc:5b:88:2f:5f:e6:57:8c:7f:08:c4:f0:
                    f8:11:df:6b:00:49:b7:93:a0:86:12:95:35:35:48:
                    5c:e7:01:c9:eb:8a:67:63:56:9b:b8:5b:d4:10:3c:
                    84:f4:72:c8:ab:57:a1:6b:6e:c1:0c:f5:5e:11:e9:
                    05:db:17:95:ff:4c:44:6b:08:95:b9:60:d7:c1:d3:
                    41:ae:0c:0b:10:87:f6:22:76:e9:92:9e:5d:b9:b4:
                    51:86:fe:39:9b:3a:27:2e:3b:1b:6b:8b:1a:43:ff:
                    19:39:84:83:59:0f:3d:28:48:21:76:66:c3:4c:90:
                    dd:9b:ec:75:e5:7f:13:46:b5:16:e1:c8:d0:d3:bd:
                    14:66:d0:12:9d:42:c7:45:e5:32:d1:7a:8c:65:2c:
                    b7:c0:e7:e1:47:db:ab:48:93:a1:b2:2b:3b:ff:94:
                    05:9e:71:a0:7a:e9:ef:45:f2:ff:a2:2e:58:4a:f9:
                    ae:6c:8b:63:a7:91:71:0e:42:79:64:e9:42:27:ca:
                    d4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BB:04:85:95:C8:B9:B2:BD:68:3B:2A:76:2D:3C:24:70:92:0D:8D
            X509v3 Authority Key Identifier:
                keyid:03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:6a:39:36:4f:8c:7b:19:10:84:af:c3:a5:45:7a:c2:c5:23:
         ee:bc:cc:b1:5f:4e:be:73:66:71:d4:60:fd:de:37:a8:a1:f3:
         97:cc:d8:71:23:32:29:65:b8:d9:4c:eb:58:5f:3c:07:7b:4b:
         cc:f5:6a:6a:de:54:85:81:8a:a8:35:46:5f:0b:50:e4:dd:13:
         8e:0e:1a:9d:0b:d1:97:60:69:8b:44:a3:3a:08:f9:07:38:a3:
         91:a9:69:be:28:1a:ff:d8:a0:ca:5f:3d:53:e0:70:05:d5:fd:
         d1:ee:6d:c4:02:44:b4:37:61:c2:69:b0:60:18:41:ab:7c:c1:
         e8:61:61:32:e9:0f:5e:f1:55:ee:8d:42:4d:5d:10:21:38:47:
         b1:86:db:b2:e2:48:d8:c1:f7:60:ab:4d:4c:80:96:a5:0d:43:
         ad:97:d4:eb:81:30:d3:5d:5b:9c:a9:a6:e0:4b:13:6f:0b:c8:
         d8:c7:9e:b1:43:20:43:b3:5d:f0:38:a6:a7:9c:97:4a:f7:40:
         86:76:45:31:6a:31:a1:52:54:9c:57:22:86:71:3f:67:b9:08:
         b4:f9:54:dd:88:37:b2:ae:21:71:d6:e9:e1:85:f2:a4:13:4c:
         9d:1b:10:b5:d7:db:78:35:42:cf:e5:0b:cb:f9:ec:25:34:1a:
         d5:ea:96:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA1QkYxMTAvBgNVBAUTKDAzMUUyOUYyNkU3ODMyODFCNzY4RTg5MTA4NTMxNDRE
RjFFRTU1MzQwHhcNMjYwNzE2MjExNTMzWhcNMjYwNzIzMjExNTMzWjAYMRYwFAYD
VQQDEw02YTU5NDlmNS1kZjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn5Kzbl5mAqpMo3u4+xYJrbdKLF4INugemrZN0H/tAdhzxYsceqTZav7sZrGi
eVv5pNVkRgtpot8jqVSBRH+8W4gvX+ZXjH8IxPD4Ed9rAEm3k6CGEpU1NUhc5wHJ
64pnY1abuFvUEDyE9HLIq1eha27BDPVeEekF2xeV/0xEawiVuWDXwdNBrgwLEIf2
Inbpkp5dubRRhv45mzonLjsba4saQ/8ZOYSDWQ89KEghdmbDTJDdm+x15X8TRrUW
4cjQ070UZtASnULHReUy0XqMZSy3wOfhR9urSJOhsis7/5QFnnGgeunvRfL/oi5Y
SvmubItjp5FxDkJ5ZOlCJ8rUUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO67BIWV
yLmyvWg7KnYtPCRwkg2NMB8GA1UdIwQYMBaAFAMeKfJueDKBt2jokQhTFE3x7lU0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDVCRi9GMTMzQkRBQzEz
RjIxMUVCOUJFRkNENTFDNEY5QUUwMi9BeDRwOG01NE1vRzNhT2lSQ0ZNVVRmSHVW
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0F4NHA4bTU0TW9HM2FPaVJDRk1VVGZIdVZUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDVCRi9GMTMzQkRBQzEzRjIxMUVCOUJFRkNENTFDNEY5QUUwMi9BeDRwOG01NE1v
RzNhT2lSQ0ZNVVRmSHVWVFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVmo5Nk+MexkQhK/DpUV6wsUj7rzMsV9OvnNmcdRg/d43qKHzl8zYcSMyKWW4
2UzrWF88B3tLzPVqat5UhYGKqDVGXwtQ5N0Tjg4anQvRl2Bpi0SjOgj5Bzijkalp
viga/9igyl89U+BwBdX90e5txAJEtDdhwmmwYBhBq3zB6GFhMukPXvFV7o1CTV0Q
IThHsYbbsuJI2MH3YKtNTICWpQ1DrZfU64Ew011bnKmm4EsTbwvI2MeesUMgQ7Nd
8Dimp5yXSvdAhnZFMWoxoVJUnFcihnE/Z7kItPlU3Yg3sq4hcdbp4YXypBNMnRsQ
tdfbeDVCz+ULy/nsJTQa1eqW7A==
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:15:22 2026 by rpki-client