Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
File:                     63_piS3wACVfzzrAsrTRKupv-AY.mft (raw, json)
Hash identifier:          AbbvlOb/wRkzGUlfzX6QL3+wL35jJQNvXPiz5s3ln/g=
Subject key identifier:   C9:03:11:3A:4A:54:39:F9:0F:95:68:DD:98:1B:4A:CA:41:A6:F6:0D
Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
Certificate issuer:       /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Certificate serial:       36C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
Manifest number:          35DF
Signing time:             Sun 26 Jul 2026 14:55:37 +0000
Manifest this update:     Sun 26 Jul 2026 14:55:36 +0000
Manifest next update:     Sun 02 Aug 2026 14:55:36 +0000
Files and hashes:         1: 63_piS3wACVfzzrAsrTRKupv-AY.crl (hash: F0nzVAUobaLpfaoEsfHFwGR2L+4qLgWUpNxMeMND+OQ=)
                          2: D53B3AEE89FE11E6A44EAA55C4F9AE02.roa (hash: wDjWZCYlvqAHpoGlHuqU60x4t0HMkjgrpCE0/r+abO4=)
                          3: 347735B4C00511EE82324069C4F9AE02.roa (hash: wpYv/6h3SqW8245e4AdYHjw8qEO9cy32ZQodZyGpWwQ=)
                          4: 6A6FBBFE16C111ECB341F934C4F9AE02.roa (hash: 6iueJVAhf4v2kdM6Yveea3/kH7Dc2iZ04bEgVA2nnjM=)
                          5: 150612CA903711EEB0B65F74C4F9AE02.roa (hash: 5677i0xvUatwcPa/5/jskM4WbAQqym9rIwlW2GlkFu4=)
                          6: FD206C4EF80B11EAA0659123C4F9AE02.roa (hash: fdXWDhDztPXrPk15fChgPL3cQLQsHsCZlV2Id0G0RsQ=)
                          7: 9F14919E4DEA11F1BCAE97AFBF833773.roa (hash: sS9mgfya8jOQ/LENmEY1GloCq/l1LJzhhaaB/1H45zE=)
                          8: 9566944A8D4111EB81CBE475C4F9AE02.roa (hash: Jbzy3UpXi+GGJP0uV5mEgjI9A62LCGnkFHYN71T0LwU=)
                          9: F4ABC602F57411E9B18D9325C4F9AE02.roa (hash: nHmP3Uq0DseTCp3TbviM06SZ9bgQptrjk3hdxz+na1Y=)
                          10: E28E6B84BB0011F0BF1A9179C4F9AE02.roa (hash: vPX66XWad3croT0TSotRN+Tmca7JmU82GiLY2lKO/+k=)
                          11: E180123A500A11F09FCC5C46C4F9AE02.roa (hash: PvqNT5zkcCGtdh3YXohGg6bWjM2xobJ1FhoWqXmpWM0=)
                          12: B3501A3838BB11EB9F5B573BC4F9AE02.roa (hash: AXv/E/+ZjaenNCMrSykeZpQtw/f1Vc8S+EN/Hqdk3Cg=)
                          13: A18E2F56479711F1844B0A599F833773.roa (hash: VCmfWEEaqy7PRAoluaRNKRuS6ewZLDdrEWgGxYrau1I=)
                          14: 355461A4372C11EDB1059640C4F9AE02.roa (hash: xC4AxLthKoIO9wupJuxOV3grb/ZghSAyWXsgSt6YemQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
                          rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 14:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14021 (0x36c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AABB1, serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
        Validity
            Not Before: Jul 26 14:55:36 2026 GMT
            Not After : Aug  2 14:55:36 2026 GMT
        Subject: CN=6a661fe8-9919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:00:aa:fa:3a:d7:7f:d3:ff:eb:43:bd:d2:12:
                    95:03:7a:c2:38:36:19:a9:e9:39:f6:72:3d:84:74:
                    b4:0d:db:43:80:5c:db:51:f1:3d:c0:ed:e1:06:de:
                    0d:d4:b1:b1:03:9b:8e:6f:68:57:a3:b4:7c:45:6b:
                    5b:b9:66:ca:94:f8:97:81:b0:5f:81:9a:23:c9:4f:
                    6c:73:8c:d7:52:7c:69:01:55:65:3f:d8:6e:8c:5a:
                    ce:2f:d9:23:d9:84:1f:6c:2b:0e:c1:06:d7:2c:3d:
                    09:d5:04:2b:b0:7a:55:66:48:34:6d:e7:fa:9f:52:
                    a9:59:09:78:b0:55:a3:3c:50:f2:08:d9:6a:f9:c9:
                    95:db:39:7e:2e:4b:e1:29:a6:b0:5f:8d:f1:e1:83:
                    26:f3:2c:6c:43:b9:7b:cd:a6:64:12:0f:68:10:b7:
                    07:3d:74:d8:b8:3a:99:f1:32:b5:60:a0:21:22:74:
                    36:58:45:b6:af:d1:75:fe:de:d8:b5:58:8c:50:31:
                    6f:89:6a:a1:ff:2e:c6:bf:00:ae:df:b3:5b:2e:76:
                    5c:b8:f7:7c:7e:3e:ec:fc:15:40:94:f0:7f:dd:44:
                    e9:ae:e2:e9:e6:de:e1:5d:0f:36:de:ca:d7:6e:86:
                    16:b1:d2:54:6c:fe:93:aa:64:0f:2b:04:14:9b:a7:
                    db:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:03:11:3A:4A:54:39:F9:0F:95:68:DD:98:1B:4A:CA:41:A6:F6:0D
            X509v3 Authority Key Identifier:
                keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:86:aa:77:cc:2f:8f:82:66:0d:18:05:7b:1a:71:e9:e2:c5:
         9f:d8:0b:f3:29:9b:f1:8d:f5:17:13:68:e8:92:61:ab:9a:4f:
         21:e1:8d:ff:dc:d6:d8:d4:6f:c4:17:af:52:af:fc:53:2f:90:
         1c:11:36:c7:eb:6e:3a:2d:d8:aa:b6:a7:d5:a5:af:56:df:c7:
         8c:8c:fc:06:b5:e5:c2:b7:eb:05:9b:20:5c:a6:ea:bd:08:74:
         e1:9e:98:42:df:d8:be:23:ac:dc:b3:c9:84:b1:1f:fb:01:75:
         5c:d9:ca:3d:26:26:ca:06:3f:6a:c0:cd:be:19:26:72:aa:7a:
         3d:e0:30:ed:06:b7:86:d6:de:4f:ae:3b:38:af:cf:9a:29:c1:
         a4:c0:60:f9:71:53:78:02:a0:b3:13:a2:0a:0b:63:3a:78:7b:
         b8:e8:14:1d:d0:8f:37:4e:48:8a:bd:77:fb:5b:14:d5:fc:c1:
         67:64:aa:ea:dd:83:f4:ca:be:e1:94:0e:e3:5f:19:c4:a5:d8:
         0d:b5:23:97:33:07:55:ff:38:d5:4f:1c:f8:70:f1:85:44:a3:
         b3:d0:5f:3b:9b:2c:45:93:96:9b:4f:c4:31:ce:7a:90:69:c7:
         f1:c8:e6:6e:8f:75:10:01:5b:33:6a:c1:96:cb:a2:12:ed:b8:
         3f:98:e1:b3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFCQjExMTAvBgNVBAUTKEVCN0ZFOTg5MkRGMDAwMjU1RkNGM0FDMEIyQjREMTJB
RUE2RkY4MDYwHhcNMjYwNzI2MTQ1NTM2WhcNMjYwODAyMTQ1NTM2WjAYMRYwFAYD
VQQDEw02YTY2MWZlOC05OTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAswCq+jrXf9P/60O90hKVA3rCODYZqek59nI9hHS0DdtDgFzbUfE9wO3hBt4N
1LGxA5uOb2hXo7R8RWtbuWbKlPiXgbBfgZojyU9sc4zXUnxpAVVlP9hujFrOL9kj
2YQfbCsOwQbXLD0J1QQrsHpVZkg0bef6n1KpWQl4sFWjPFDyCNlq+cmV2zl+Lkvh
KaawX43x4YMm8yxsQ7l7zaZkEg9oELcHPXTYuDqZ8TK1YKAhInQ2WEW2r9F1/t7Y
tViMUDFviWqh/y7GvwCu37NbLnZcuPd8fj7s/BVAlPB/3UTpruLp5t7hXQ823srX
boYWsdJUbP6TqmQPKwQUm6fbMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMkDETpK
VDn5D5Vo3ZgbSspBpvYNMB8GA1UdIwQYMBaAFOt/6Ykt8AAlX886wLK00Srqb/gG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUJCMS84ODc0RTlFODFE
OTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FDVmZ6enJBc3JUUkt1cHYt
QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzYzX3BpUzN3QUNWZnp6ckFzclRSS3Vwdi1BWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QUJCMS84ODc0RTlFODFEOTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FD
VmZ6enJBc3JUUkt1cHYtQVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUoaqd8wvj4JmDRgFexpx6eLFn9gL8ymb8Y31FxNo6JJhq5pPIeGN/9zW2NRv
xBevUq/8Uy+QHBE2x+tuOi3Yqran1aWvVt/HjIz8BrXlwrfrBZsgXKbqvQh04Z6Y
Qt/YviOs3LPJhLEf+wF1XNnKPSYmygY/asDNvhkmcqp6PeAw7Qa3htbeT647OK/P
minBpMBg+XFTeAKgsxOiCgtjOnh7uOgUHdCPN05Iir13+1sU1fzBZ2Sq6t2D9Mq+
4ZQO418ZxKXYDbUjlzMHVf841U8c+HDxhUSjs9BfO5ssRZOWm0/EMc56kGnH8cjm
bo91EAFbM2rBlsuiEu24P5jhsw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 22:58:24 2026 by rpki-client