Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
File:                     a-rAl7V48XydcRl3ez9RFPvglxs.mft (raw, json)
Hash identifier:          LhDnYbGEQTEmt0EP5fnduSJwq/ly55+oq8igdUh6EWA=
Subject key identifier:   3A:F1:30:5C:BA:00:FB:15:8F:84:28:2B:55:F8:DB:39:43:82:0D:BB
Authority key identifier: 6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B
Certificate issuer:       /CN=A91C5A9F/serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B
Certificate serial:       0D84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
Manifest number:          0D68
Signing time:             Thu 02 Jul 2026 18:08:24 +0000
Manifest this update:     Thu 02 Jul 2026 18:08:24 +0000
Manifest next update:     Thu 09 Jul 2026 18:08:24 +0000
Files and hashes:         1: a-rAl7V48XydcRl3ez9RFPvglxs.crl (hash: /JPZx9SAurl2dHNPUSJ67yCiga4iNpyaBNxXidy6+jU=)
                          2: 498956B8FFC411EEB2369013C4F9AE02.roa (hash: bMVnErmgRlLugY09+B5/egD11gP2CX9LPToXy6tEisU=)
                          3: 48B3316EFFC411EEB2369013C4F9AE02.roa (hash: Pvc5GDrJlGSuNYbRyBpLm6q2hwwEqbNDXIDKhGgHHek=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl
                          rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 Jul 2026 18:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3460 (0xd84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5A9F, serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B
        Validity
            Not Before: Jul  2 18:08:24 2026 GMT
            Not After : Jul  9 18:08:24 2026 GMT
        Subject: CN=6a46a918-a85b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:39:7d:50:c8:28:b5:49:be:39:a1:b1:0e:f0:
                    94:d8:87:16:ce:cc:f3:22:1d:73:e9:8c:89:27:5c:
                    d8:8a:f1:12:ef:9e:78:cc:20:5f:e3:73:33:2b:ac:
                    06:c9:3e:b3:79:c1:43:a4:04:d2:32:cf:24:d8:c4:
                    2d:6e:ae:91:48:98:e4:b5:13:c7:3f:f5:17:ea:2d:
                    bc:a4:cf:f6:69:d5:f2:64:e7:c5:0a:d8:a4:8e:bd:
                    e8:c1:ee:89:0e:88:13:87:42:fb:54:fe:fa:e3:b8:
                    62:9b:25:54:09:55:c2:c0:eb:7f:02:ca:92:49:33:
                    ac:2b:2f:57:92:09:1f:aa:04:d0:55:d3:06:e6:6c:
                    a0:6a:ea:c7:2e:bb:a2:1f:19:5d:47:fb:01:5c:fd:
                    7d:3d:0a:99:19:c9:8c:16:16:47:b5:16:50:14:87:
                    9c:7d:b9:3b:81:cf:a6:f6:36:2b:ea:db:78:13:18:
                    ea:2c:49:fa:ce:f6:f2:68:6f:62:09:6e:bc:4b:d1:
                    68:a1:66:df:f1:3f:62:7a:2c:1a:57:e1:e0:df:e8:
                    32:ad:1a:b0:8b:0c:24:c8:d0:7e:a6:c2:ac:41:6e:
                    e7:8c:6a:4a:79:b2:5c:04:03:37:85:0e:2d:8c:4e:
                    62:4a:69:c6:a4:40:ba:47:7c:a4:f2:95:92:76:0e:
                    8f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F1:30:5C:BA:00:FB:15:8F:84:28:2B:55:F8:DB:39:43:82:0D:BB
            X509v3 Authority Key Identifier:
                keyid:6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:28:65:f3:c4:bd:81:48:3c:d8:98:05:ef:1c:e4:c5:6e:6a:
         59:c9:e4:00:2e:bd:cb:96:07:75:44:c8:a2:04:8c:0d:d2:ab:
         73:31:03:42:a6:7c:34:01:d0:29:49:c1:8f:c6:53:4d:3a:d7:
         29:d1:0c:f0:3c:85:ce:5f:a0:b3:15:07:5a:4d:f8:84:ea:2b:
         f0:07:e4:81:da:d9:27:46:10:1c:1e:59:83:60:d7:be:97:1d:
         73:14:27:2a:8c:ae:e3:41:3c:be:9d:97:e6:79:a6:f5:55:ee:
         6c:41:19:ee:65:14:62:42:5a:1a:44:19:5d:f3:d5:4f:7f:5c:
         57:3a:84:26:9b:55:b7:26:a3:f7:58:02:91:47:37:c2:96:da:
         30:d1:cb:28:8f:34:dd:e7:7c:8a:28:2c:00:d6:54:9c:25:cf:
         1d:74:b1:ec:2c:71:3d:2c:73:83:35:5c:5a:fa:bd:56:cd:a0:
         12:95:23:09:3a:4b:1d:3e:56:7f:73:34:0d:88:ec:76:e8:24:
         88:d7:d8:c1:b7:10:ec:fe:2b:45:6d:1e:5d:d9:42:d6:7a:71:
         d4:e2:69:43:db:fc:89:1d:6d:cc:e4:8a:0c:fa:08:68:f6:b4:
         2b:6d:1a:18:85:99:46:ee:10:a9:47:a9:ab:89:53:1d:59:cb:
         5d:91:12:7b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzVBOUYxMTAvBgNVBAUTKDZCRUFDMDk3QjU3OEYxN0M5RDcxMTk3NzdCM0Y1MTE0
RkJFMDk3MUIwHhcNMjYwNzAyMTgwODI0WhcNMjYwNzA5MTgwODI0WjAYMRYwFAYD
VQQDEw02YTQ2YTkxOC1hODViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuDl9UMgotUm+OaGxDvCU2IcWzszzIh1z6YyJJ1zYivES7554zCBf43MzK6wG
yT6zecFDpATSMs8k2MQtbq6RSJjktRPHP/UX6i28pM/2adXyZOfFCtikjr3owe6J
DogTh0L7VP7647himyVUCVXCwOt/AsqSSTOsKy9XkgkfqgTQVdMG5mygaurHLrui
HxldR/sBXP19PQqZGcmMFhZHtRZQFIecfbk7gc+m9jYr6tt4ExjqLEn6zvbyaG9i
CW68S9FooWbf8T9ieiwaV+Hg3+gyrRqwiwwkyNB+psKsQW7njGpKebJcBAM3hQ4t
jE5iSmnGpEC6R3yk8pWSdg6PEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDrxMFy6
APsVj4QoK1X42zlDgg27MB8GA1UdIwQYMBaAFGvqwJe1ePF8nXEZd3s/URT74Jcb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUE5Ri8wMjFBOTYwQ0Y2
NzgxMUU5QjUyMDk2MjVDNEY5QUUwMi9hLXJBbDdWNDhYeWRjUmwzZXo5UkZQdmds
eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2EtckFsN1Y0OFh5ZGNSbDNlejlSRlB2Z2x4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NUE5Ri8wMjFBOTYwQ0Y2NzgxMUU5QjUyMDk2MjVDNEY5QUUwMi9hLXJBbDdWNDhY
eWRjUmwzZXo5UkZQdmdseHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfShl88S9gUg82JgF7xzkxW5qWcnkAC69y5YHdUTIogSMDdKrczEDQqZ8NAHQ
KUnBj8ZTTTrXKdEM8DyFzl+gsxUHWk34hOor8AfkgdrZJ0YQHB5Zg2DXvpcdcxQn
Koyu40E8vp2X5nmm9VXubEEZ7mUUYkJaGkQZXfPVT39cVzqEJptVtyaj91gCkUc3
wpbaMNHLKI803ed8iigsANZUnCXPHXSx7CxxPSxzgzVcWvq9Vs2gEpUjCTpLHT5W
f3M0DYjsdugkiNfYwbcQ7P4rRW0eXdlC1npx1OJpQ9v8iR1tzOSKDPoIaPa0K20a
GIWZRu4QqUepq4lTHVnLXZESew==
-----END CERTIFICATE-----
Generated at Sat Jul 4 02:32:01 2026 by rpki-client