Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft
File:                     0rwrzA84njpcUzzEc6fENrsbdNk.mft (raw, json)
Hash identifier:          jrI5Ijr/osXPFpIdEt3BMZoGk1y+74pMyT/rBLkn3yE=
Subject key identifier:   53:C2:C6:4B:2E:D9:49:AA:5D:11:61:42:9B:5A:E2:9A:58:59:52:87
Authority key identifier: D2:BC:2B:CC:0F:38:9E:3A:5C:53:3C:C4:73:A7:C4:36:BB:1B:74:D9
Certificate issuer:       /CN=A91C21C7/serialNumber=D2BC2BCC0F389E3A5C533CC473A7C436BB1B74D9
Certificate serial:       2E3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft
Manifest number:          2E17
Signing time:             Sat 04 Jul 2026 15:30:04 +0000
Manifest this update:     Sat 04 Jul 2026 15:30:04 +0000
Manifest next update:     Sat 11 Jul 2026 15:30:04 +0000
Files and hashes:         1: 0rwrzA84njpcUzzEc6fENrsbdNk.crl (hash: ABWzPMbwmPlGzFiMtCg8xalRGg3E7ifHgkGbmVm4maQ=)
                          2: E2AD90E813E811E9B287C144C4F9AE02.roa (hash: ZGLBdSKyApanjt3DB4LGqUMAAL9hh/eBxEwyqsKMNwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.crl
                          rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 15:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11838 (0x2e3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C21C7, serialNumber=D2BC2BCC0F389E3A5C533CC473A7C436BB1B74D9
        Validity
            Not Before: Jul  4 15:30:04 2026 GMT
            Not After : Jul 11 15:30:04 2026 GMT
        Subject: CN=6a4926fc-2e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d7:49:e7:e1:83:4b:b1:6a:a1:73:f4:08:3a:
                    3c:43:63:10:aa:b3:ac:83:43:ea:76:5a:6c:8f:3f:
                    53:52:6e:86:20:b7:1c:1d:cc:01:d4:06:ad:a1:e5:
                    33:86:09:f4:2c:17:76:06:60:ad:75:64:e3:47:2e:
                    95:9a:9d:f5:3d:75:4c:06:d9:18:2d:27:19:bc:15:
                    f1:98:85:0a:52:fd:36:34:05:5e:f5:a2:e1:bc:c0:
                    3d:21:c5:5a:d1:ff:5f:2a:f1:8e:f1:3b:f5:19:33:
                    93:42:62:65:ac:cd:c1:d6:52:dc:c0:5e:ef:f6:ce:
                    07:0f:7f:ea:89:18:f6:67:b5:d5:5e:a2:f5:48:50:
                    99:a4:b4:5c:84:43:82:c0:83:0d:98:c7:1b:68:e5:
                    b1:b9:94:c1:65:d6:49:45:dd:3f:cc:8e:d9:9c:0d:
                    b8:b5:33:96:56:2e:40:94:05:74:83:38:76:01:1a:
                    72:38:4e:30:2d:d1:6c:e7:80:76:6f:a7:78:09:51:
                    e7:94:ae:14:69:3a:34:f5:d7:94:a0:49:d9:d7:cc:
                    3d:d6:0c:80:5a:60:6a:01:93:89:eb:1f:71:09:90:
                    ea:e9:80:cc:39:47:dc:70:a2:a5:00:da:16:08:3e:
                    54:32:e0:9f:ca:ee:7c:6d:67:eb:b1:4c:74:56:66:
                    8d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C2:C6:4B:2E:D9:49:AA:5D:11:61:42:9B:5A:E2:9A:58:59:52:87
            X509v3 Authority Key Identifier:
                keyid:D2:BC:2B:CC:0F:38:9E:3A:5C:53:3C:C4:73:A7:C4:36:BB:1B:74:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:f5:75:78:4d:3d:f6:17:1a:a6:98:05:59:59:99:17:4c:74:
         54:77:f3:79:20:ec:65:ee:27:f1:72:6a:1c:2b:3b:33:ab:c7:
         31:6e:f7:35:61:46:5b:9d:b3:9f:af:ea:4d:b3:8b:f7:92:8c:
         75:4f:cf:da:f1:39:f1:2e:4a:b1:63:19:77:66:df:ea:9c:18:
         b5:41:1d:d7:86:aa:73:75:94:a9:40:d2:b2:6f:ef:a5:24:49:
         4e:77:3a:f0:95:70:37:36:7b:6d:ec:e8:a8:f3:08:96:bd:f2:
         ca:28:2f:9e:80:e6:a1:93:fa:80:21:36:3d:89:8f:35:f4:6b:
         91:c2:58:3b:2e:92:02:5b:57:be:6d:4c:93:bb:f9:c4:c8:2b:
         3b:e0:0d:4c:1b:d9:4e:22:0b:09:ed:cc:e3:00:f6:fe:11:09:
         bc:97:0d:fb:5a:09:25:20:01:b5:de:05:87:97:a9:03:45:38:
         4a:0e:cb:09:aa:67:7e:6c:40:5d:12:94:fe:8c:67:f6:3a:3b:
         da:4e:88:c6:0c:aa:9d:14:cf:57:b7:c9:84:59:9c:6e:95:c6:
         53:e1:3d:8d:9f:27:4c:86:c3:fa:7f:84:fa:d7:ea:1a:53:d3:
         5f:4c:78:0a:38:b8:c4:a1:1c:a7:5e:8c:d5:5d:e9:0f:72:5b:
         1d:ea:08:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICLj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzIxQzcxMTAvBgNVBAUTKEQyQkMyQkNDMEYzODlFM0E1QzUzM0NDNDczQTdDNDM2
QkIxQjc0RDkwHhcNMjYwNzA0MTUzMDA0WhcNMjYwNzExMTUzMDA0WjAYMRYwFAYD
VQQDEw02YTQ5MjZmYy0yZTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyNdJ5+GDS7FqoXP0CDo8Q2MQqrOsg0Pqdlpsjz9TUm6GILccHcwB1AatoeUz
hgn0LBd2BmCtdWTjRy6Vmp31PXVMBtkYLScZvBXxmIUKUv02NAVe9aLhvMA9IcVa
0f9fKvGO8Tv1GTOTQmJlrM3B1lLcwF7v9s4HD3/qiRj2Z7XVXqL1SFCZpLRchEOC
wIMNmMcbaOWxuZTBZdZJRd0/zI7ZnA24tTOWVi5AlAV0gzh2ARpyOE4wLdFs54B2
b6d4CVHnlK4UaTo09deUoEnZ18w91gyAWmBqAZOJ6x9xCZDq6YDMOUfccKKlANoW
CD5UMuCfyu58bWfrsUx0VmaNpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFPCxksu
2UmqXRFhQpta4ppYWVKHMB8GA1UdIwQYMBaAFNK8K8wPOJ46XFM8xHOnxDa7G3TZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjFDNy81NDIyMkZEMDhG
QUIxMUUzOTM2MkVGMzU1OTExRUEzMi8wcndyekE4NG5qcGNVenpFYzZmRU5yc2Jk
TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzByd3J6QTg0bmpwY1V6ekVjNmZFTnJzYmROay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MjFDNy81NDIyMkZEMDhGQUIxMUUzOTM2MkVGMzU1OTExRUEzMi8wcndyekE4NG5q
cGNVenpFYzZmRU5yc2JkTmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANfV1eE099hcappgFWVmZF0x0VHfzeSDsZe4n8XJqHCs7M6vHMW73NWFGW52z
n6/qTbOL95KMdU/P2vE58S5KsWMZd2bf6pwYtUEd14aqc3WUqUDSsm/vpSRJTnc6
8JVwNzZ7bezoqPMIlr3yyigvnoDmoZP6gCE2PYmPNfRrkcJYOy6SAltXvm1Mk7v5
xMgrO+ANTBvZTiILCe3M4wD2/hEJvJcN+1oJJSABtd4Fh5epA0U4Sg7LCapnfmxA
XRKU/oxn9jo72k6IxgyqnRTPV7fJhFmcbpXGU+E9jZ8nTIbD+n+E+tfqGlPTX0x4
Cji4xKEcp16M1V3pD3JbHeoI3Q==
-----END CERTIFICATE-----
Generated at Sun Jul 5 08:44:06 2026 by rpki-client