Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft
File:                     MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft (raw, json)
Hash identifier:          VcejA8mpN+f4tNHG7DyTDNheoHUOEQVeNRotJUIYNII=
Subject key identifier:   C5:2B:CD:EC:8C:F9:DB:F2:95:DB:A8:1B:8A:99:B1:C8:4D:8C:42:2D
Authority key identifier: 31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF
Certificate issuer:       /CN=A91C8203/serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF
Certificate serial:       014F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft
Manifest number:          013F
Signing time:             Sun 05 Jul 2026 06:03:47 +0000
Manifest this update:     Sun 05 Jul 2026 06:03:47 +0000
Manifest next update:     Sun 12 Jul 2026 06:03:47 +0000
Files and hashes:         1: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl (hash: WRCH6Q9KqECQdAV9Wfn/IqevsJiXIvZ+JJQTvGzat7Q=)
                          2: D9BE56E2927D11EFB83ACB5CC4F9AE02.roa (hash: nelUbxnLDLGVDrJHYxOmJHcdHhK23+JstFe8bl+1cNY=)
                          3: BE48D4AA927D11EF9651FC4AC4F9AE02.roa (hash: MMlCyL0Z5gXZRhtwZCT1rQU/h+kkk4XV7uk2akYMz9M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl
                          rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 06:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8203, serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF
        Validity
            Not Before: Jul  5 06:03:47 2026 GMT
            Not After : Jul 12 06:03:47 2026 GMT
        Subject: CN=6a49f3c3-8ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a1:3b:fd:dd:6d:99:6e:16:58:3b:ab:b6:2a:
                    91:84:c4:84:40:01:b5:e1:59:30:cb:21:74:b3:31:
                    b1:60:86:f0:85:43:a7:f4:92:31:a9:bc:b1:52:96:
                    95:31:9a:99:59:01:18:22:98:c4:74:4e:19:31:36:
                    c1:41:7e:e5:b2:bc:c7:6b:35:df:02:d8:67:a7:b0:
                    44:51:ae:da:b5:15:fa:cd:8f:1a:f8:2f:52:b1:7f:
                    01:7a:27:15:52:19:25:75:43:de:6c:1e:eb:04:b3:
                    a8:24:c0:5a:22:68:0a:d4:0a:36:7e:2e:cc:e0:ec:
                    a5:09:fa:3a:c5:de:70:d5:f6:b5:c7:08:8a:13:eb:
                    a3:01:a0:68:bc:ff:16:97:64:27:52:bd:bb:fa:a1:
                    45:8a:1c:7c:ae:c0:e3:c6:ac:ed:f5:43:ba:1b:36:
                    19:15:6a:67:da:d2:25:dd:2f:76:eb:5f:a9:06:c6:
                    f2:c1:2f:3a:be:22:ca:56:0f:19:bd:86:5a:fc:77:
                    a9:fc:27:eb:b6:0d:aa:20:ec:15:06:8c:89:3a:04:
                    84:1b:b3:ce:66:0f:98:29:75:f4:7d:aa:e2:27:f2:
                    a4:37:31:82:86:6b:82:08:40:4a:24:3a:02:53:19:
                    c2:b6:49:66:08:2e:a5:f7:e9:02:27:1c:38:df:76:
                    7c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2B:CD:EC:8C:F9:DB:F2:95:DB:A8:1B:8A:99:B1:C8:4D:8C:42:2D
            X509v3 Authority Key Identifier:
                keyid:31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:26:97:11:40:e8:13:32:61:4a:ca:4c:5c:d9:76:fb:dd:2f:
         9b:96:23:e6:e3:4b:c3:a6:a7:f1:ac:37:e4:1c:e3:a6:71:79:
         c1:af:42:78:bf:36:3a:23:b2:1c:f2:c0:75:6e:f1:50:8d:4f:
         52:b2:c1:4e:4e:76:5a:cc:bc:5e:ca:dd:74:40:65:39:a8:e7:
         98:a7:d2:49:a2:18:dc:29:e9:34:12:be:b8:2b:14:24:32:64:
         5d:4d:5a:7b:e6:f7:b8:4c:53:26:99:b0:7e:75:c5:37:17:4a:
         b9:1c:25:99:68:fb:0c:8b:20:11:69:7a:ce:5c:3e:27:bc:8a:
         21:4f:6a:ba:e4:d6:ad:8f:c6:ad:c3:a0:34:a1:e8:2e:b2:2c:
         45:da:70:08:0b:6e:10:0d:4b:19:42:57:8e:cc:14:aa:1e:30:
         7a:05:65:bf:9e:bb:75:7a:74:31:97:f1:d5:03:4f:7c:2e:2a:
         8c:51:1e:7a:f7:33:d3:38:8e:72:32:da:cf:4e:fa:53:3f:25:
         d1:ee:7a:d8:83:e1:4c:86:a9:6b:a8:65:1d:4d:1b:e4:76:fd:
         bc:a8:1b:5a:da:93:ac:c5:72:c4:4f:a3:9c:08:db:cb:ee:3b:
         88:b8:1a:b2:92:a9:1c:8a:74:88:e5:40:9c:c4:f6:6b:b0:c6:
         32:d5:a5:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzgyMDMxMTAvBgNVBAUTKDMxRDIxRDVDRUU1RkFDREVGM0M4QzFDODdEMEQ3Mzkx
RjlGNzNBRkYwHhcNMjYwNzA1MDYwMzQ3WhcNMjYwNzEyMDYwMzQ3WjAYMRYwFAYD
VQQDEw02YTQ5ZjNjMy04ZWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsqE7/d1tmW4WWDurtiqRhMSEQAG14VkwyyF0szGxYIbwhUOn9JIxqbyxUpaV
MZqZWQEYIpjEdE4ZMTbBQX7lsrzHazXfAthnp7BEUa7atRX6zY8a+C9SsX8BeicV
UhkldUPebB7rBLOoJMBaImgK1Ao2fi7M4OylCfo6xd5w1fa1xwiKE+ujAaBovP8W
l2QnUr27+qFFihx8rsDjxqzt9UO6GzYZFWpn2tIl3S9261+pBsbywS86viLKVg8Z
vYZa/Hep/Cfrtg2qIOwVBoyJOgSEG7POZg+YKXX0fariJ/KkNzGChmuCCEBKJDoC
UxnCtklmCC6l9+kCJxw433Z8bQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMUrzeyM
+dvylduoG4qZschNjEItMB8GA1UdIwQYMBaAFDHSHVzuX6ze88jByH0Nc5H59zr/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODIwMy9CQzUxNURBQTky
N0ExMUVGQjU2NDNDNEVDNEY5QUUwMi9NZElkWE81ZnJON3p5TUhJZlExemtmbjNP
djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01kSWRYTzVmck43enlNSElmUTF6a2ZuM092OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
ODIwMy9CQzUxNURBQTkyN0ExMUVGQjU2NDNDNEVDNEY5QUUwMi9NZElkWE81ZnJO
N3p5TUhJZlExemtmbjNPdjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAiaXEUDoEzJhSspMXNl2+90vm5Yj5uNLw6an8aw35BzjpnF5wa9CeL82OiOy
HPLAdW7xUI1PUrLBTk52Wsy8XsrddEBlOajnmKfSSaIY3CnpNBK+uCsUJDJkXU1a
e+b3uExTJpmwfnXFNxdKuRwlmWj7DIsgEWl6zlw+J7yKIU9quuTWrY/GrcOgNKHo
LrIsRdpwCAtuEA1LGUJXjswUqh4wegVlv567dXp0MZfx1QNPfC4qjFEeevcz0ziO
cjLaz076Uz8l0e562IPhTIapa6hlHU0b5Hb9vKgbWtqTrMVyxE+jnAjby+47iLga
spKpHIp0iOVAnMT2a7DGMtWlVQ==
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:16:47 2026 by rpki-client