Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft
File:                     BXtTd0A4JnigePW_KExyZ5S50TQ.mft (raw, json)
Hash identifier:          jLcXgk7QSvnG7bV/6yxGLg4GCDXMOVmv42y5sVFMdIk=
Subject key identifier:   69:3F:A2:0D:06:F8:15:38:AD:2C:D6:A5:0A:4A:2E:75:67:A9:25:94
Authority key identifier: 05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34
Certificate issuer:       /CN=A91992FA/serialNumber=057B537740382678A078F5BF284C726794B9D134
Certificate serial:       0122
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft
Manifest number:          011C
Signing time:             Wed 19 Aug 2026 06:33:09 +0000
Manifest this update:     Wed 19 Aug 2026 06:33:09 +0000
Manifest next update:     Wed 26 Aug 2026 06:33:09 +0000
Files and hashes:         1: BXtTd0A4JnigePW_KExyZ5S50TQ.crl (hash: oXyIvkxCrdrA9Uo0pHVsYkJDX/k4kUZcY7MqsnQcz4c=)
                          2: CF5EEDA6894411F0BE628977C4F9AE02.roa (hash: AS33QEsrO+w5pzGcSkE9nvQ2nEiXdY1kLZjsdA1rM78=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl
                          rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 06:33:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91992FA, serialNumber=057B537740382678A078F5BF284C726794B9D134
        Validity
            Not Before: Aug 19 06:33:09 2026 GMT
            Not After : Aug 26 06:33:09 2026 GMT
        Subject: CN=6a854e25-1f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4c:37:77:57:f1:a1:80:a8:e6:00:6d:da:01:
                    a7:f7:9f:ab:6d:f8:cf:dc:a4:99:11:b9:9d:4e:7f:
                    cb:0e:7b:a2:cf:ac:58:a3:e6:6d:f0:57:3d:ca:ad:
                    83:a2:e3:94:8f:d3:13:b6:77:de:23:5f:5a:73:55:
                    c0:35:6f:f7:b5:e2:d5:d7:5f:07:71:d7:0d:7c:17:
                    ca:1e:dd:5a:08:8e:69:e5:a7:f5:31:1b:a8:50:3e:
                    03:39:4a:5a:b2:40:80:8d:96:a7:3b:9c:a2:e2:53:
                    00:52:7a:d3:7f:45:44:77:ca:0d:64:25:a0:b5:41:
                    f1:5e:fa:49:e6:e9:2b:b8:60:48:f6:b0:79:89:34:
                    3b:28:31:01:bb:f7:71:a4:3f:7d:f2:fc:ec:9b:ba:
                    3f:56:e6:a3:c4:a0:c5:bd:5e:ac:6b:69:9e:4d:9f:
                    aa:3d:7d:4d:78:68:40:9b:08:d7:14:75:e4:d1:7c:
                    aa:69:c9:7f:47:55:93:ec:f1:85:06:c3:fa:ac:39:
                    67:45:c9:e8:e8:19:96:70:83:6d:e9:77:eb:27:3a:
                    3f:bf:b7:bf:3d:38:b8:75:03:62:58:e2:17:20:6c:
                    fd:55:b8:f1:1d:21:e3:fd:6e:5f:45:5e:41:d4:3b:
                    32:b3:22:9d:72:b9:c1:10:e0:0e:58:33:40:a3:86:
                    52:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3F:A2:0D:06:F8:15:38:AD:2C:D6:A5:0A:4A:2E:75:67:A9:25:94
            X509v3 Authority Key Identifier:
                keyid:05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:a1:fc:de:6f:9f:ee:96:5c:f2:26:b0:d0:7a:1a:cf:8d:12:
         09:f0:38:80:16:be:53:3a:ba:cd:50:a4:df:30:f4:a1:53:b4:
         c1:2d:cb:c5:15:68:82:c3:ac:1b:fe:72:87:fc:15:65:ab:02:
         1f:af:98:13:e3:e3:54:56:82:e3:f4:3e:24:e0:9e:1c:73:b9:
         0c:ee:77:65:fe:b8:c6:c9:c0:ab:71:00:ed:21:ad:c7:c5:f1:
         76:58:5c:99:e4:b9:83:c7:a4:9e:bf:e3:5b:69:bb:4c:07:77:
         4e:cb:e0:7d:fa:07:9f:e3:b4:d3:11:eb:1e:9c:3c:a9:93:0c:
         3e:ed:f2:60:b8:37:59:b0:4a:dd:94:f2:d4:df:f9:30:55:71:
         c8:39:d8:04:09:56:05:88:07:67:15:2e:80:39:ef:0e:26:90:
         7a:24:0e:ee:4e:56:3d:99:b6:15:b9:55:91:2e:57:3b:ca:e5:
         22:ed:67:fd:de:98:e5:94:4f:b1:94:1f:88:c8:c3:13:bf:95:
         b5:be:ec:d9:d8:a8:8c:ff:66:1f:86:40:01:c5:fa:2d:0f:d8:
         56:7d:7f:b7:d4:0e:2c:2f:dd:0c:97:7e:6d:27:c2:2c:97:6c:
         89:92:cf:09:a3:79:85:6e:a1:ad:5f:bc:24:88:f7:18:70:ea:
         f2:ad:cf:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTkyRkExMTAvBgNVBAUTKDA1N0I1Mzc3NDAzODI2NzhBMDc4RjVCRjI4NEM3MjY3
OTRCOUQxMzQwHhcNMjYwODE5MDYzMzA5WhcNMjYwODI2MDYzMzA5WjAYMRYwFAYD
VQQDEw02YTg1NGUyNS0xZjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw0w3d1fxoYCo5gBt2gGn95+rbfjP3KSZEbmdTn/LDnuiz6xYo+Zt8Fc9yq2D
ouOUj9MTtnfeI19ac1XANW/3teLV118HcdcNfBfKHt1aCI5p5af1MRuoUD4DOUpa
skCAjZanO5yi4lMAUnrTf0VEd8oNZCWgtUHxXvpJ5ukruGBI9rB5iTQ7KDEBu/dx
pD998vzsm7o/VuajxKDFvV6sa2meTZ+qPX1NeGhAmwjXFHXk0Xyqacl/R1WT7PGF
BsP6rDlnRcno6BmWcINt6XfrJzo/v7e/PTi4dQNiWOIXIGz9VbjxHSHj/W5fRV5B
1DsysyKdcrnBEOAOWDNAo4ZSXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGk/og0G
+BU4rSzWpQpKLnVnqSWUMB8GA1UdIwQYMBaAFAV7U3dAOCZ4oHj1vyhMcmeUudE0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTJGQS9GQTQ2RTBEMkVF
MDMxMUVGOUMyQjhBNDlDNEY5QUUwMi9CWHRUZDBBNEpuaWdlUFdfS0V4eVo1UzUw
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JYdFRkMEE0Sm5pZ2VQV19LRXh5WjVTNTBUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTJGQS9GQTQ2RTBEMkVFMDMxMUVGOUMyQjhBNDlDNEY5QUUwMi9CWHRUZDBBNEpu
aWdlUFdfS0V4eVo1UzUwVFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZqH83m+f7pZc8iaw0Hoaz40SCfA4gBa+Uzq6zVCk3zD0oVO0wS3LxRVogsOs
G/5yh/wVZasCH6+YE+PjVFaC4/Q+JOCeHHO5DO53Zf64xsnAq3EA7SGtx8Xxdlhc
meS5g8eknr/jW2m7TAd3TsvgffoHn+O00xHrHpw8qZMMPu3yYLg3WbBK3ZTy1N/5
MFVxyDnYBAlWBYgHZxUugDnvDiaQeiQO7k5WPZm2FblVkS5XO8rlIu1n/d6Y5ZRP
sZQfiMjDE7+Vtb7s2diojP9mH4ZAAcX6LQ/YVn1/t9QOLC/dDJd+bSfCLJdsiZLP
CaN5hW6hrV+8JIj3GHDq8q3PnQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:39 2026 by rpki-client