Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
File:                     LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft (raw, json)
Hash identifier:          YDtiHVOKD9LyMciO8C1fRDriSOdtUl2ntIk7n4sLjag=
Subject key identifier:   10:2C:2F:25:4D:47:54:4B:DD:94:D5:8D:FC:17:45:DA:12:E0:22:CA
Authority key identifier: 2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F
Certificate issuer:       /CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
Certificate serial:       0C77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
Manifest number:          0C48
Signing time:             Sun 26 Jul 2026 19:08:00 +0000
Manifest this update:     Sun 26 Jul 2026 19:07:59 +0000
Manifest next update:     Sun 02 Aug 2026 19:07:59 +0000
Files and hashes:         1: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl (hash: ynweVQ6tGBy8uey1l9YyYX4DjRjzBDBskx3+e4TOgCQ=)
                          2: 933DE524C2B811EEAA1FD486C4F9AE02.roa (hash: MY+T8lD7ELcNmfXtDFy1DozxA/ZjKMCtGQcsDkI7xHM=)
                          3: D7D5B86859E811ED85614349C4F9AE02.roa (hash: TWRBYTEu2YvhIheWJBNIRcOrfed1qkUI5EpJZHqUja8=)
                          4: F8088528E65D11EDB5112931C4F9AE02.roa (hash: jPSPyzxZ2jIKGy878SzguBP9UIeeLmvl0IzeDBo7IuY=)
                          5: D9173AE459E811ED85614349C4F9AE02.roa (hash: SuPmWKkBjA+MG2np2cJm+aHvROfST1rUMzPE+o3Kdeg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl
                          rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 19:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3191 (0xc77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8405, serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
        Validity
            Not Before: Jul 26 19:07:59 2026 GMT
            Not After : Aug  2 19:07:59 2026 GMT
        Subject: CN=6a665b10-b030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:14:11:5f:0f:6c:0d:a2:55:b8:62:29:a8:9b:
                    37:09:e8:93:61:ce:a1:4c:7a:e3:0b:26:db:04:d8:
                    87:50:13:ac:12:10:5c:04:f3:d5:56:e0:8c:dd:83:
                    7b:73:02:ce:78:71:0c:20:d4:e8:48:2f:07:79:a9:
                    bb:b8:6b:91:72:72:50:df:e3:30:95:1b:03:5e:21:
                    ee:b2:c1:70:b4:7b:bc:aa:86:a4:67:3a:01:19:97:
                    46:0a:ca:b8:9c:fa:c7:dc:fe:35:20:d8:d1:a7:9d:
                    79:14:b1:19:ad:3a:7d:74:0a:bf:0a:fe:42:98:32:
                    ec:78:6d:0c:5d:0e:fc:28:6a:e8:f6:49:a8:78:dc:
                    3b:7c:8b:b6:a2:2f:6d:e0:f2:e0:6a:c3:8c:f8:bf:
                    94:55:ac:30:9a:7e:22:6f:cb:93:9e:f2:57:43:1d:
                    25:3d:a7:a4:67:b2:1c:a9:9a:a3:7c:93:21:af:62:
                    87:a0:d7:ef:c7:10:79:05:d7:ac:ac:c8:3d:cd:f8:
                    83:eb:a9:56:e6:1f:95:cc:e2:3d:d9:50:12:4b:5e:
                    ba:10:85:0d:39:c7:d9:54:54:ec:76:ca:7f:3d:20:
                    0a:7a:73:f8:86:b0:67:1e:7f:42:9b:e5:60:e2:65:
                    0f:e3:89:59:a0:30:b5:18:df:9b:12:b9:ed:3c:9e:
                    9f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2C:2F:25:4D:47:54:4B:DD:94:D5:8D:FC:17:45:DA:12:E0:22:CA
            X509v3 Authority Key Identifier:
                keyid:2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:da:cc:60:11:e0:e9:a3:69:b8:81:2b:39:18:b8:09:d8:3e:
         7a:f6:c5:d5:5e:af:69:5c:d3:1b:c5:ff:67:6e:e2:42:04:2c:
         bc:db:f2:65:eb:91:a6:87:68:0f:81:87:ad:99:8c:16:0e:58:
         a9:3c:2e:8b:85:88:28:98:b1:83:d7:b0:a5:87:83:2d:93:53:
         2e:0f:5b:fe:08:13:b6:80:c7:36:ac:3b:ce:96:53:19:ac:d0:
         2b:ec:b8:21:bf:36:13:39:6e:40:54:be:8d:db:22:18:9c:2e:
         0a:8b:d5:36:32:ce:6e:5c:0a:17:ca:45:3a:af:33:e3:23:55:
         4b:e9:b1:b7:d7:74:fb:82:b2:b4:e3:78:f1:a3:1f:5b:9f:bf:
         92:ef:46:ac:71:ac:4f:78:4f:bb:ed:07:b3:37:10:fa:7d:f6:
         a7:1f:d3:11:36:f3:7f:d6:74:88:2e:38:be:8f:cb:30:a7:ae:
         33:93:f6:cd:58:84:de:fa:c6:e6:87:a6:c5:90:1e:1b:90:68:
         71:35:27:72:af:a0:e7:31:b1:b1:48:9f:d8:de:f3:f6:d4:c7:
         f3:43:3e:ec:0a:a9:be:33:38:41:70:cf:17:aa:37:bb:21:5c:
         d3:17:e8:bd:49:96:c2:c9:ff:0a:fa:da:52:a7:2f:55:63:bf:
         2e:29:20:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTg0MDUxMTAvBgNVBAUTKDJEOUVEM0QyNkU2MzVGN0NGRkU0QkJGNTIwODcxNTBC
N0E0MjE4OEYwHhcNMjYwNzI2MTkwNzU5WhcNMjYwODAyMTkwNzU5WjAYMRYwFAYD
VQQDEw02YTY2NWIxMC1iMDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnhQRXw9sDaJVuGIpqJs3CeiTYc6hTHrjCybbBNiHUBOsEhBcBPPVVuCM3YN7
cwLOeHEMINToSC8Heam7uGuRcnJQ3+MwlRsDXiHussFwtHu8qoakZzoBGZdGCsq4
nPrH3P41INjRp515FLEZrTp9dAq/Cv5CmDLseG0MXQ78KGro9kmoeNw7fIu2oi9t
4PLgasOM+L+UVawwmn4ib8uTnvJXQx0lPaekZ7IcqZqjfJMhr2KHoNfvxxB5Bdes
rMg9zfiD66lW5h+VzOI92VASS166EIUNOcfZVFTsdsp/PSAKenP4hrBnHn9Cm+Vg
4mUP44lZoDC1GN+bErntPJ6f6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBAsLyVN
R1RL3ZTVjfwXRdoS4CLKMB8GA1UdIwQYMBaAFC2e09JuY198/+S79SCHFQt6QhiP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQwNS9GOUMxOTY5NjMy
MTIxMUVBOTM2MzNBNTlDNEY5QUUwMi9MWjdUMG01algzel81THYxSUljVkMzcENH
STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xaN1QwbTVqWDN6XzVMdjFJSWNWQzNwQ0dJOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODQwNS9GOUMxOTY5NjMyMTIxMUVBOTM2MzNBNTlDNEY5QUUwMi9MWjdUMG01algz
el81THYxSUljVkMzcENHSTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAp9rMYBHg6aNpuIErORi4Cdg+evbF1V6vaVzTG8X/Z27iQgQsvNvyZeuRpodo
D4GHrZmMFg5YqTwui4WIKJixg9ewpYeDLZNTLg9b/ggTtoDHNqw7zpZTGazQK+y4
Ib82EzluQFS+jdsiGJwuCovVNjLOblwKF8pFOq8z4yNVS+mxt9d0+4KytON48aMf
W5+/ku9GrHGsT3hPu+0HszcQ+n32px/TETbzf9Z0iC44vo/LMKeuM5P2zViE3vrG
5oemxZAeG5BocTUncq+g5zGxsUif2N7z9tTH80M+7AqpvjM4QXDPF6o3uyFc0xfo
vUmWwsn/CvraUqcvVWO/Likgjw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 22:41:45 2026 by rpki-client