Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft
File:                     toNIsZBwY8BERWnOsijqUkbQLxk.mft (raw, json)
Hash identifier:          /k5H4fe6uQXr4YdtfyF2WzzLy+GYrf0W0PcEJIlEA6k=
Subject key identifier:   E0:CD:61:05:A6:AD:3D:52:FA:D5:09:01:24:5F:CD:37:F6:75:5C:12
Authority key identifier: B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19
Certificate issuer:       /CN=A91B3CB5/serialNumber=B68348B1907063C0444569CEB228EA5246D02F19
Certificate serial:       86
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft
Manifest number:          83
Signing time:             Thu 16 Jul 2026 18:18:31 +0000
Manifest this update:     Thu 16 Jul 2026 18:18:31 +0000
Manifest next update:     Thu 23 Jul 2026 18:18:31 +0000
Files and hashes:         1: toNIsZBwY8BERWnOsijqUkbQLxk.crl (hash: la/whIOI6EUPTF9Kss3/3amSTZlndEdC1SfYP8UPfhM=)
                          2: 3AF6CDE4CE7E11F0BDD3E452C4F9AE02.roa (hash: 0wi2dknpR06NzdVHMhDQvzTD3ZFfo6Ir3jbrCyXBQX4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl
                          rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 18:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3CB5, serialNumber=B68348B1907063C0444569CEB228EA5246D02F19
        Validity
            Not Before: Jul 16 18:18:31 2026 GMT
            Not After : Jul 23 18:18:31 2026 GMT
        Subject: CN=6a592077-7134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:da:d4:b1:64:d5:62:e5:26:3e:6d:4c:92:43:
                    3a:55:ec:98:77:af:8b:c2:ff:da:0c:d8:01:08:26:
                    97:05:26:27:39:bd:7f:7b:d1:2b:56:c3:29:fb:2a:
                    fe:ae:c0:ee:a7:b5:ca:29:7c:50:c0:1a:68:69:fb:
                    7e:92:6d:4d:0f:4b:57:6d:f9:fa:ff:f6:bd:17:ef:
                    1f:0e:dd:13:90:b2:1d:75:0c:13:6a:09:c4:27:95:
                    2c:0b:39:da:ca:e3:c4:e4:4e:62:17:24:b6:1a:66:
                    25:f9:5a:a5:b3:b2:43:76:ba:79:3b:36:6f:d2:ad:
                    2e:e1:a7:9f:45:d8:aa:dc:47:fb:fa:ba:15:87:60:
                    06:e3:15:6d:6f:5c:05:a7:f0:7c:c0:aa:d8:62:21:
                    88:fa:e2:fc:cd:fe:4d:3a:50:f6:4a:29:d7:d0:6f:
                    bf:e0:fc:a9:b3:71:2e:54:68:73:93:bb:af:03:49:
                    cc:27:22:01:35:9d:85:41:8c:ba:a2:2c:6b:67:b5:
                    52:93:f4:0f:07:19:1a:90:0d:7c:35:de:54:62:16:
                    49:97:db:8e:97:3f:4b:40:6a:d9:28:c5:d8:56:41:
                    f9:ff:eb:f3:31:ed:e8:12:1b:f2:c6:5c:8b:02:0b:
                    a3:b9:af:5b:1c:86:06:17:b4:f7:c6:73:ea:4f:e7:
                    e8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CD:61:05:A6:AD:3D:52:FA:D5:09:01:24:5F:CD:37:F6:75:5C:12
            X509v3 Authority Key Identifier:
                keyid:B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:1e:b7:ac:20:1f:a4:5f:35:74:fd:38:6d:43:6f:ee:b2:a0:
         be:53:0d:1d:5e:29:d2:36:2c:16:c0:a8:21:23:c6:bb:2a:85:
         35:6b:0c:ab:ad:22:4d:e2:62:5d:80:e0:99:e6:cc:c1:b4:71:
         31:34:da:9a:e4:36:2c:16:56:bc:f7:cb:82:ba:d6:7f:44:95:
         de:c7:f3:6e:3d:f9:4e:a5:7c:d8:15:06:c9:f3:a5:25:df:9e:
         50:39:47:45:fb:08:8b:33:82:43:53:b1:9b:03:51:a6:97:aa:
         1d:06:da:25:c2:19:fc:2a:2f:8b:49:c0:61:59:c3:03:7a:79:
         04:25:ac:29:e2:84:6a:70:66:39:2d:3e:c1:3a:2b:8a:58:ba:
         48:60:19:3b:7a:c6:6c:87:b1:0b:d6:05:f1:8c:f4:92:16:ae:
         e9:57:03:74:1f:d0:58:01:32:65:fc:03:80:40:2e:d7:d5:7a:
         fc:e1:2b:bb:17:9d:fe:8f:5a:e5:b6:ac:9d:7a:f1:74:9d:be:
         11:3f:6a:6b:d5:97:2e:86:72:9c:70:90:58:be:a6:a9:e2:89:
         3f:a5:4a:15:7a:df:45:cf:43:fc:6e:67:03:80:76:3b:90:f6:
         06:af:5e:b2:25:28:65:92:7e:fc:c4:2e:a9:6b:3b:25:0e:58:
         3e:cc:99:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjNDQjUxMTAvBgNVBAUTKEI2ODM0OEIxOTA3MDYzQzA0NDQ1NjlDRUIyMjhFQTUy
NDZEMDJGMTkwHhcNMjYwNzE2MTgxODMxWhcNMjYwNzIzMTgxODMxWjAYMRYwFAYD
VQQDEw02YTU5MjA3Ny03MTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoNrUsWTVYuUmPm1MkkM6VeyYd6+Lwv/aDNgBCCaXBSYnOb1/e9ErVsMp+yr+
rsDup7XKKXxQwBpoaft+km1ND0tXbfn6//a9F+8fDt0TkLIddQwTagnEJ5UsCzna
yuPE5E5iFyS2GmYl+Vqls7JDdrp5OzZv0q0u4aefRdiq3Ef7+roVh2AG4xVtb1wF
p/B8wKrYYiGI+uL8zf5NOlD2SinX0G+/4Pyps3EuVGhzk7uvA0nMJyIBNZ2FQYy6
oixrZ7VSk/QPBxkakA18Nd5UYhZJl9uOlz9LQGrZKMXYVkH5/+vzMe3oEhvyxlyL
Agujua9bHIYGF7T3xnPqT+forQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFODNYQWm
rT1S+tUJASRfzTf2dVwSMB8GA1UdIwQYMBaAFLaDSLGQcGPAREVpzrIo6lJG0C8Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0NCNS9FRDIyNTUzMkM0
MzQxMUYwQTgyN0E1N0RDNEY5QUUwMi90b05Jc1pCd1k4QkVSV25Pc2lqcVVrYlFM
eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3RvTklzWkJ3WThCRVJXbk9zaWpxVWtiUUx4ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
M0NCNS9FRDIyNTUzMkM0MzQxMUYwQTgyN0E1N0RDNEY5QUUwMi90b05Jc1pCd1k4
QkVSV25Pc2lqcVVrYlFMeGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUx63rCAfpF81dP04bUNv7rKgvlMNHV4p0jYsFsCoISPGuyqFNWsMq60iTeJi
XYDgmebMwbRxMTTamuQ2LBZWvPfLgrrWf0SV3sfzbj35TqV82BUGyfOlJd+eUDlH
RfsIizOCQ1OxmwNRppeqHQbaJcIZ/Covi0nAYVnDA3p5BCWsKeKEanBmOS0+wTor
ili6SGAZO3rGbIexC9YF8Yz0khau6VcDdB/QWAEyZfwDgEAu19V6/OEruxed/o9a
5basnXrxdJ2+ET9qa9WXLoZynHCQWL6mqeKJP6VKFXrfRc9D/G5nA4B2O5D2Bq9e
siUoZZJ+/MQuqWs7JQ5YPsyZ/Q==
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:21 2026 by rpki-client