Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
File:                     b5rATOWscafCt6-xpVcnoQ5bBu4.mft (raw, json)
Hash identifier:          2HcRLFw0Jsrv0QqtJ42wOKIuBBVzRoG9NFeCD8sbv3w=
Subject key identifier:   8C:11:3D:D7:95:0F:F9:05:AB:BA:31:05:09:6D:20:98:A9:26:F4:98
Authority key identifier: 6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE
Certificate issuer:       /CN=A91BD9C2/serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE
Certificate serial:       0C0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
Manifest number:          0C00
Signing time:             Sat 04 Jul 2026 18:56:49 +0000
Manifest this update:     Sat 04 Jul 2026 18:56:48 +0000
Manifest next update:     Sat 11 Jul 2026 18:56:48 +0000
Files and hashes:         1: b5rATOWscafCt6-xpVcnoQ5bBu4.crl (hash: 24HvYLeg8B9iUbFfCzkr6fGBzO5aNb/gFrxT0+upxCI=)
                          2: 1A0B540E3AA711EA83682876C4F9AE02.roa (hash: j3+FqbIbEZA5ldhomHT9hdMFU4oqErbqw6qxTyWi9S0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl
                          rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 18:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3084 (0xc0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD9C2, serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE
        Validity
            Not Before: Jul  4 18:56:48 2026 GMT
            Not After : Jul 11 18:56:48 2026 GMT
        Subject: CN=6a495771-0856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:17:8d:52:2c:51:69:59:be:86:03:6d:8c:9b:
                    fe:8d:cc:00:b1:95:e0:f3:ef:36:bc:dd:7f:38:ce:
                    f5:3a:a1:8b:05:ed:90:9e:d1:2c:60:9a:fd:cc:3f:
                    18:89:16:1a:07:fe:f9:fc:b7:98:47:cb:57:c8:c3:
                    fb:8b:23:82:3a:d5:34:75:9d:19:b7:61:50:58:09:
                    e4:50:37:da:41:a0:a0:49:7b:4c:a1:0c:5f:b2:69:
                    5d:43:60:2e:6e:a8:01:f6:40:93:c6:18:79:8c:19:
                    65:ae:de:9f:55:a5:43:c8:dd:60:30:f2:70:29:b8:
                    0d:e1:ee:fd:bc:36:ff:92:6d:9d:95:b4:75:16:3c:
                    9f:04:3f:0b:40:8b:73:8b:3a:bb:bb:aa:26:34:16:
                    01:80:01:a5:f7:52:60:35:c4:58:cb:87:11:e1:49:
                    cc:b6:1e:4f:3e:6f:d6:d8:07:d3:39:7e:58:09:63:
                    fc:0e:ec:26:77:f0:eb:a4:0f:59:76:b2:e8:dd:01:
                    f6:1a:88:0e:c8:79:68:a7:f9:55:17:1f:9d:90:19:
                    3b:8e:6e:ec:2b:93:19:00:38:ca:7c:3f:aa:c1:25:
                    97:bb:39:3d:f7:ea:7f:4b:59:eb:7e:5c:36:8c:54:
                    8c:17:c6:e9:fd:d5:48:d5:a1:cb:93:f8:8b:05:a0:
                    23:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:11:3D:D7:95:0F:F9:05:AB:BA:31:05:09:6D:20:98:A9:26:F4:98
            X509v3 Authority Key Identifier:
                keyid:6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ad:5c:5d:5b:47:9d:6b:cd:c5:90:0d:14:b9:f3:85:48:bb:
         47:33:65:92:0b:68:e2:30:ad:aa:99:03:21:42:80:6c:07:95:
         80:b2:f5:c6:79:f6:e7:26:b9:e1:55:4b:39:6b:db:9e:0a:49:
         ba:94:a6:1a:2f:11:ad:ea:d8:b5:d7:82:4d:77:8b:74:a1:70:
         30:1c:a9:a2:77:fb:56:79:3d:17:cd:ab:bb:98:2d:66:4d:50:
         3a:98:f1:9d:89:11:1a:c9:49:89:50:87:2e:15:9f:60:4e:f3:
         11:6f:03:07:59:7c:9f:90:8f:33:b0:16:91:1d:09:ee:9e:a1:
         ed:bf:ca:ff:e8:3c:5f:2f:14:38:63:38:0c:b3:23:ab:ba:0c:
         e2:95:07:06:81:9f:08:78:65:04:37:33:b0:ab:59:99:aa:1e:
         29:55:4d:fb:6f:33:4f:6c:e1:86:16:93:66:bb:b0:6a:0a:05:
         de:f0:fc:61:99:d4:37:26:4a:04:4d:90:f9:29:29:03:0d:68:
         dd:97:a2:27:9e:76:d4:12:f6:b5:ef:6d:06:e3:19:f9:50:49:
         30:44:ed:82:57:2e:a3:83:01:70:95:6a:80:f0:3a:9b:3f:89:
         a1:00:74:f0:74:ee:6d:5d:ea:b0:a4:c0:c4:52:34:d9:1f:d3:
         ea:0d:8a:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkQ5QzIxMTAvBgNVBAUTKDZGOUFDMDRDRTVBQzcxQTdDMkI3QUZCMUE1NTcyN0Ex
MEU1QjA2RUUwHhcNMjYwNzA0MTg1NjQ4WhcNMjYwNzExMTg1NjQ4WjAYMRYwFAYD
VQQDEw02YTQ5NTc3MS0wODU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuheNUixRaVm+hgNtjJv+jcwAsZXg8+82vN1/OM71OqGLBe2QntEsYJr9zD8Y
iRYaB/75/LeYR8tXyMP7iyOCOtU0dZ0Zt2FQWAnkUDfaQaCgSXtMoQxfsmldQ2Au
bqgB9kCTxhh5jBllrt6fVaVDyN1gMPJwKbgN4e79vDb/km2dlbR1FjyfBD8LQItz
izq7u6omNBYBgAGl91JgNcRYy4cR4UnMth5PPm/W2AfTOX5YCWP8Duwmd/DrpA9Z
drLo3QH2GogOyHlop/lVFx+dkBk7jm7sK5MZADjKfD+qwSWXuzk99+p/S1nrflw2
jFSMF8bp/dVI1aHLk/iLBaAjZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIwRPdeV
D/kFq7oxBQltIJipJvSYMB8GA1UdIwQYMBaAFG+awEzlrHGnwrevsaVXJ6EOWwbu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDlDMi9BQjBERjRGMjNB
QTIxMUVBQTc5RTZBNjlDNEY5QUUwMi9iNXJBVE9Xc2NhZkN0Ni14cFZjbm9RNWJC
dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I1ckFUT1dzY2FmQ3Q2LXhwVmNub1E1YkJ1NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RDlDMi9BQjBERjRGMjNBQTIxMUVBQTc5RTZBNjlDNEY5QUUwMi9iNXJBVE9Xc2Nh
ZkN0Ni14cFZjbm9RNWJCdTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjq1cXVtHnWvNxZANFLnzhUi7RzNlkgto4jCtqpkDIUKAbAeVgLL1xnn25ya5
4VVLOWvbngpJupSmGi8RrerYtdeCTXeLdKFwMByponf7Vnk9F82ru5gtZk1QOpjx
nYkRGslJiVCHLhWfYE7zEW8DB1l8n5CPM7AWkR0J7p6h7b/K/+g8Xy8UOGM4DLMj
q7oM4pUHBoGfCHhlBDczsKtZmaoeKVVN+28zT2zhhhaTZruwagoF3vD8YZnUNyZK
BE2Q+SkpAw1o3ZeiJ5521BL2te9tBuMZ+VBJMETtglcuo4MBcJVqgPA6mz+JoQB0
8HTubV3qsKTAxFI02R/T6g2KNw==
-----END CERTIFICATE-----
Generated at Sun Jul 5 07:53:13 2026 by rpki-client