Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft
File:                     bODpSXEbID5KyyK2gPP_9H7RbGE.mft (raw, json)
Hash identifier:          bSM/hFKDKLdekLBu/sbwaR1MML1lpwGg26skdZfEnfw=
Subject key identifier:   F4:8C:4C:CF:BD:50:A1:B7:CB:7E:EE:96:05:0E:CA:20:4E:A6:CB:DF
Authority key identifier: 6C:E0:E9:49:71:1B:20:3E:4A:CB:22:B6:80:F3:FF:F4:7E:D1:6C:61
Certificate issuer:       /CN=A91BDC3F/serialNumber=6CE0E949711B203E4ACB22B680F3FFF47ED16C61
Certificate serial:       01C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft
Manifest number:          01B7
Signing time:             Wed 19 Aug 2026 04:41:26 +0000
Manifest this update:     Wed 19 Aug 2026 04:41:25 +0000
Manifest next update:     Wed 26 Aug 2026 04:41:25 +0000
Files and hashes:         1: bODpSXEbID5KyyK2gPP_9H7RbGE.crl (hash: egouvALs7OcArmXjjaSvfVLjUK0z3ZO7qpcT9qEoduc=)
                          2: 7980C32AA71B11EFA8320136C4F9AE02.roa (hash: fTwgf/z1JlaZSIUWhcpYQ8BO2OuYl7hP0D0SmMwZrI4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.crl
                          rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 04:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454 (0x1c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDC3F, serialNumber=6CE0E949711B203E4ACB22B680F3FFF47ED16C61
        Validity
            Not Before: Aug 19 04:41:25 2026 GMT
            Not After : Aug 26 04:41:25 2026 GMT
        Subject: CN=6a8533f6-969c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:65:15:04:5f:d6:85:73:4a:13:27:15:fb:88:
                    8a:a7:f5:f2:fd:53:4d:9a:b7:a2:9d:14:0d:48:34:
                    f7:e8:9b:82:93:e6:95:0f:bf:41:26:4c:e6:9e:ad:
                    02:9d:6c:59:c8:72:a8:98:e0:3b:65:0b:f5:20:03:
                    e9:6c:ff:ff:f1:9c:cb:39:62:d7:cf:dc:be:ed:f2:
                    6b:0f:68:44:88:fe:90:8b:fb:38:bd:f8:ed:20:e0:
                    a8:96:08:0f:58:28:86:08:e4:a3:97:c5:11:90:7d:
                    45:49:3e:48:a6:10:45:ab:bf:71:03:1f:e8:03:a9:
                    da:2d:85:8e:d4:d5:7f:dc:a2:f5:78:fc:46:e1:7a:
                    b0:9b:d8:08:67:87:09:09:91:21:8b:b7:fc:69:0a:
                    2e:f4:23:3b:3c:63:11:10:3f:88:07:b6:f7:fc:77:
                    4d:aa:67:86:5f:72:50:3a:af:61:ed:62:c9:d9:01:
                    3b:4c:07:8e:70:71:92:0e:d3:ed:73:a2:e8:0e:af:
                    6f:c7:54:24:ba:93:e3:2a:39:4e:e8:af:da:ea:6d:
                    8f:43:b8:d4:74:6b:0c:d7:f5:a0:52:89:b9:f1:eb:
                    a4:f0:94:26:98:74:5f:1d:47:79:3b:a4:fc:8a:78:
                    be:d6:e6:08:ac:c2:1a:d7:61:86:15:95:53:23:04:
                    43:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8C:4C:CF:BD:50:A1:B7:CB:7E:EE:96:05:0E:CA:20:4E:A6:CB:DF
            X509v3 Authority Key Identifier:
                keyid:6C:E0:E9:49:71:1B:20:3E:4A:CB:22:B6:80:F3:FF:F4:7E:D1:6C:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:63:ef:49:09:df:11:a2:a4:d7:2c:a3:a3:4d:1e:50:d5:de:
         fb:f2:ae:a7:35:de:04:aa:b6:b9:34:50:1e:61:09:69:c2:4b:
         f6:32:c1:59:47:a5:c1:85:e0:bf:48:fb:16:b5:41:ca:c2:c9:
         66:b0:58:48:64:34:d1:14:a5:eb:47:fd:e7:95:0c:d1:30:d3:
         1c:93:cc:f4:f3:1c:c5:bb:51:9a:9a:28:23:0e:50:22:4f:bb:
         2c:bc:fc:7d:15:5c:8f:69:5b:17:ce:8e:8a:ef:c5:37:44:6a:
         a1:74:a1:a3:64:8d:26:c8:cf:a8:1e:c5:6a:74:00:5d:bb:8c:
         b6:21:61:5e:70:e3:8b:36:2e:31:ba:5d:30:bd:6a:c4:9f:35:
         35:a2:58:ae:be:c5:5f:0d:44:a7:6f:b0:01:fb:9b:0d:2b:73:
         58:00:8b:dd:68:2a:a8:2b:51:57:4c:81:bb:f3:9f:39:88:ef:
         15:20:6b:07:46:d7:68:1c:ec:e8:a3:ea:a3:19:3b:98:52:c4:
         38:76:4c:f4:71:fd:7f:16:91:ed:27:8b:4d:e5:60:5d:02:2e:
         0a:94:4d:de:f4:cf:15:b0:c0:8e:54:14:f7:be:e2:1d:ad:d5:
         2c:2b:a9:84:d8:a1:44:01:33:af:9b:63:ad:47:12:74:ae:8c:
         3f:07:1a:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkRDM0YxMTAvBgNVBAUTKDZDRTBFOTQ5NzExQjIwM0U0QUNCMjJCNjgwRjNGRkY0
N0VEMTZDNjEwHhcNMjYwODE5MDQ0MTI1WhcNMjYwODI2MDQ0MTI1WjAYMRYwFAYD
VQQDEw02YTg1MzNmNi05NjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArWUVBF/WhXNKEycV+4iKp/Xy/VNNmreinRQNSDT36JuCk+aVD79BJkzmnq0C
nWxZyHKomOA7ZQv1IAPpbP//8ZzLOWLXz9y+7fJrD2hEiP6Qi/s4vfjtIOColggP
WCiGCOSjl8URkH1FST5IphBFq79xAx/oA6naLYWO1NV/3KL1ePxG4Xqwm9gIZ4cJ
CZEhi7f8aQou9CM7PGMRED+IB7b3/HdNqmeGX3JQOq9h7WLJ2QE7TAeOcHGSDtPt
c6LoDq9vx1QkupPjKjlO6K/a6m2PQ7jUdGsM1/WgUom58euk8JQmmHRfHUd5O6T8
ini+1uYIrMIa12GGFZVTIwRD5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPSMTM+9
UKG3y37ulgUOyiBOpsvfMB8GA1UdIwQYMBaAFGzg6UlxGyA+SssitoDz//R+0Wxh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREMzRi81Q0U4MTA0NjBF
QjAxMUVGODcyRTgxMjdDNEY5QUUwMi9iT0RwU1hFYklENUt5eUsyZ1BQXzlIN1Ji
R0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JPRHBTWEViSUQ1S3l5SzJnUFBfOUg3UmJHRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
REMzRi81Q0U4MTA0NjBFQjAxMUVGODcyRTgxMjdDNEY5QUUwMi9iT0RwU1hFYklE
NUt5eUsyZ1BQXzlIN1JiR0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcWPvSQnfEaKk1yyjo00eUNXe+/KupzXeBKq2uTRQHmEJacJL9jLBWUelwYXg
v0j7FrVBysLJZrBYSGQ00RSl60f955UM0TDTHJPM9PMcxbtRmpooIw5QIk+7LLz8
fRVcj2lbF86Oiu/FN0RqoXSho2SNJsjPqB7FanQAXbuMtiFhXnDjizYuMbpdML1q
xJ81NaJYrr7FXw1Ep2+wAfubDStzWACL3WgqqCtRV0yBu/OfOYjvFSBrB0bXaBzs
6KPqoxk7mFLEOHZM9HH9fxaR7SeLTeVgXQIuCpRN3vTPFbDAjlQU977iHa3VLCup
hNihRAEzr5tjrUcSdK6MPwcafw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:06 2026 by rpki-client