Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft
File:                     0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft (raw, json)
Hash identifier:          DVqsfGsO9wxZzWvU/D55hWvbC84zM7h/k2D9kNg+/sg=
Subject key identifier:   3F:0D:2A:18:F0:0F:B0:78:85:E8:B5:21:F5:95:54:BB:BC:2F:9C:19
Authority key identifier: D2:41:F5:71:CD:63:97:96:30:DC:1F:16:AD:48:99:D5:BE:D5:66:E5
Certificate issuer:       /CN=A91A9CD5/serialNumber=D241F571CD63979630DC1F16AD4899D5BED566E5
Certificate serial:       0153
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft
Manifest number:          014F
Signing time:             Fri 17 Jul 2026 06:14:45 +0000
Manifest this update:     Fri 17 Jul 2026 06:14:45 +0000
Manifest next update:     Fri 24 Jul 2026 06:14:45 +0000
Files and hashes:         1: 0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl (hash: HARJQ52DHsSRJIa8KKAAKavoKUkQ9sEyfGIwC30EHjI=)
                          2: D1E54D607FF211EFB2910061C4F9AE02.roa (hash: 777ytcJtKRK+U1mjB59992g0IydheNppCEpFNuVRoDQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl
                          rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 06:14:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9CD5, serialNumber=D241F571CD63979630DC1F16AD4899D5BED566E5
        Validity
            Not Before: Jul 17 06:14:45 2026 GMT
            Not After : Jul 24 06:14:45 2026 GMT
        Subject: CN=6a59c855-982b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:47:f7:f6:ac:96:b2:fd:8b:da:f6:38:21:d5:
                    8d:55:fa:0e:c9:cc:6a:d1:51:ec:64:3a:29:08:e6:
                    79:d1:c5:f7:ec:b4:c2:fa:5f:bb:60:c3:d5:34:de:
                    e7:03:25:f2:62:84:da:fe:61:ae:74:5b:ce:43:e3:
                    2e:df:a7:3e:31:7f:7e:4f:a9:c7:48:3a:28:92:12:
                    22:fe:f3:60:1d:92:b4:32:44:99:9c:39:b7:38:f9:
                    47:66:2f:08:32:d0:60:7c:49:99:f1:f0:8a:bd:2f:
                    88:cd:53:b8:28:56:47:15:0b:67:47:db:06:83:62:
                    02:00:cd:d4:c2:f2:54:5c:b9:17:be:17:9f:28:de:
                    6b:12:2d:17:ba:de:0b:96:89:e0:ff:02:40:12:b2:
                    de:e1:ad:b6:52:62:a9:bb:7f:32:28:b3:b9:9b:42:
                    ed:8a:87:d4:14:85:47:ee:4d:36:30:17:2d:b9:95:
                    83:65:06:66:21:37:df:97:c4:75:34:29:f4:6c:9e:
                    e2:2a:45:10:48:c1:ab:96:27:3b:6c:97:b3:dd:39:
                    1b:d5:91:1c:a4:96:eb:be:5c:44:3c:14:1a:ab:3b:
                    4b:6d:e6:ed:dc:13:98:02:7e:e0:67:91:d1:d6:77:
                    73:14:e3:1d:2c:42:4b:11:9e:05:c1:fb:1c:33:24:
                    9f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0D:2A:18:F0:0F:B0:78:85:E8:B5:21:F5:95:54:BB:BC:2F:9C:19
            X509v3 Authority Key Identifier:
                keyid:D2:41:F5:71:CD:63:97:96:30:DC:1F:16:AD:48:99:D5:BE:D5:66:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:96:49:33:28:ec:a0:23:98:81:c0:b0:82:0d:10:2f:68:53:
         70:d3:a4:3d:ed:31:3f:30:ad:7f:d9:a7:32:63:dd:66:82:db:
         88:eb:37:58:83:f4:97:45:4f:a5:10:c1:93:57:f0:94:b1:49:
         d2:72:05:c8:e9:8b:38:08:88:0f:78:e0:28:60:08:4f:c1:47:
         a5:ba:8e:c3:26:23:d1:e6:78:ea:3a:0f:f2:60:c5:98:8d:f6:
         9c:e7:66:32:37:5c:e4:0e:f5:6f:2b:61:b4:4d:34:28:7f:d0:
         fc:c5:0e:c9:2c:82:0b:b4:cb:d5:54:c3:61:7e:7c:a4:29:0a:
         8c:96:d6:4c:87:cf:c4:9e:bf:32:73:4d:a7:3b:d2:4a:fd:6b:
         c1:fb:e4:ea:84:f4:9b:7a:77:ef:76:2c:ac:67:a3:9b:81:b4:
         84:6a:c1:24:0e:58:49:b8:55:34:16:ad:0e:c4:14:f0:6d:a2:
         57:c1:27:0b:cd:3c:2e:95:8e:12:b1:4d:ee:e4:4b:fc:30:9a:
         e0:3e:1f:bf:39:a3:9a:2b:25:d5:b9:42:ad:98:69:7a:25:06:
         a9:12:cd:74:cc:12:28:19:bf:9d:3f:00:9e:6a:ae:79:cd:6f:
         89:b3:85:96:7f:ba:e8:bd:a2:d7:3a:41:8f:fb:67:53:1d:9e:
         f4:a1:75:f9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTlDRDUxMTAvBgNVBAUTKEQyNDFGNTcxQ0Q2Mzk3OTYzMERDMUYxNkFENDg5OUQ1
QkVENTY2RTUwHhcNMjYwNzE3MDYxNDQ1WhcNMjYwNzI0MDYxNDQ1WjAYMRYwFAYD
VQQDEw02YTU5Yzg1NS05ODJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxkf39qyWsv2L2vY4IdWNVfoOycxq0VHsZDopCOZ50cX37LTC+l+7YMPVNN7n
AyXyYoTa/mGudFvOQ+Mu36c+MX9+T6nHSDookhIi/vNgHZK0MkSZnDm3OPlHZi8I
MtBgfEmZ8fCKvS+IzVO4KFZHFQtnR9sGg2ICAM3UwvJUXLkXvhefKN5rEi0Xut4L
long/wJAErLe4a22UmKpu38yKLO5m0LtiofUFIVH7k02MBctuZWDZQZmITffl8R1
NCn0bJ7iKkUQSMGrlic7bJez3Tkb1ZEcpJbrvlxEPBQaqztLbebt3BOYAn7gZ5HR
1ndzFOMdLEJLEZ4FwfscMySfgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD8NKhjw
D7B4hei1IfWVVLu8L5wZMB8GA1UdIwQYMBaAFNJB9XHNY5eWMNwfFq1ImdW+1Wbl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUNENS83MTk5NUY0RTdG
RUYxMUVGQTgyREY2MzlDNEY5QUUwMi8wa0gxY2Mxamw1WXczQjhXclVpWjFiN1Za
dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzBrSDFjYzFqbDVZdzNCOFdyVWlaMWI3Vlp1VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OUNENS83MTk5NUY0RTdGRUYxMUVGQTgyREY2MzlDNEY5QUUwMi8wa0gxY2Mxamw1
WXczQjhXclVpWjFiN1ZadVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX5ZJMyjsoCOYgcCwgg0QL2hTcNOkPe0xPzCtf9mnMmPdZoLbiOs3WIP0l0VP
pRDBk1fwlLFJ0nIFyOmLOAiID3jgKGAIT8FHpbqOwyYj0eZ46joP8mDFmI32nOdm
Mjdc5A71bythtE00KH/Q/MUOySyCC7TL1VTDYX58pCkKjJbWTIfPxJ6/MnNNpzvS
Sv1rwfvk6oT0m3p373YsrGejm4G0hGrBJA5YSbhVNBatDsQU8G2iV8EnC808LpWO
ErFN7uRL/DCa4D4fvzmjmisl1blCrZhpeiUGqRLNdMwSKBm/nT8Anmquec1vibOF
ln+66L2i1zpBj/tnUx2e9KF1+Q==
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:11 2026 by rpki-client