Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft
File:                     3oqNpw4WUAnRQNn2JFJNxNR51eg.mft (raw, json)
Hash identifier:          t3bTxlqLBZtqY9tm89+Eo/kUla6w9SCVh3MOycaJIdc=
Subject key identifier:   5E:5C:25:FC:C7:50:24:FF:47:51:FC:F8:59:3F:D4:C7:C2:EA:60:7B
Authority key identifier: DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8
Certificate issuer:       /CN=A91DA13E/serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8
Certificate serial:       08BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft
Manifest number:          0890
Signing time:             Thu 16 Jul 2026 21:04:47 +0000
Manifest this update:     Thu 16 Jul 2026 21:04:47 +0000
Manifest next update:     Thu 23 Jul 2026 21:04:47 +0000
Files and hashes:         1: 3oqNpw4WUAnRQNn2JFJNxNR51eg.crl (hash: JsifRgT5WrqdYJ+QcCLx1/2CorlIBiY3eSzAZUS5eUo=)
                          2: 29D6DCB2849211EE8F9C5870C4F9AE02.roa (hash: cXh6EKmO4mNgo6W7SACQlk54+m7ofX19QIFxCjJGshk=)
                          3: 298965AC06B611EBBBFD6B2CC4F9AE02.roa (hash: Oay45StLaCFy3ElLitbFqzSRt2aPUrYuOR3+p3SZq8E=)
                          4: B9A51B1AFA4F11EDB82FCB1FC4F9AE02.roa (hash: j/nx+4vpcVwnZKmSSpLKnqMW2rDHsGt2fGRTh04AQY4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl
                          rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 21:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2234 (0x8ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA13E, serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8
        Validity
            Not Before: Jul 16 21:04:47 2026 GMT
            Not After : Jul 23 21:04:47 2026 GMT
        Subject: CN=6a59476f-9d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0f:eb:f7:02:e1:55:db:f9:dd:4e:25:22:b6:
                    84:e2:81:44:c6:64:84:b9:bd:25:2b:6d:1b:32:8c:
                    65:ca:5a:ec:74:56:74:64:50:1e:07:c8:9b:c7:64:
                    52:aa:46:db:c4:83:47:2c:9c:dc:ba:11:24:8e:dc:
                    a7:ff:42:5f:49:32:9a:3a:72:1d:b5:09:2c:c5:ea:
                    c1:10:cf:d9:c0:02:08:3c:e1:05:a3:ca:c7:ef:ad:
                    69:75:a1:94:51:58:72:c3:33:bf:9b:27:65:d2:df:
                    07:fd:cf:33:e6:ef:f3:92:3d:ba:81:70:17:02:ae:
                    e6:6b:06:21:aa:d8:70:fd:49:a6:93:b8:8d:2f:df:
                    f4:fb:19:ed:16:0b:4a:d0:14:63:87:30:c0:06:22:
                    b3:87:ad:94:e3:a7:e1:41:cb:66:36:3a:4b:76:7e:
                    b0:80:b5:e3:2d:44:1d:c6:ad:09:f9:46:5c:03:93:
                    64:f2:d0:4d:bc:92:75:a3:38:78:43:91:f3:65:c4:
                    9b:c2:f0:36:cc:b4:a1:cb:eb:2e:d4:3a:af:50:31:
                    29:06:97:88:b0:62:a1:f4:7d:47:27:6b:20:fd:3c:
                    da:5c:80:a5:c1:c6:74:74:3e:af:c3:32:e6:c5:c3:
                    79:d1:e7:2c:dc:48:c5:fc:4b:d4:44:46:7b:a2:04:
                    6e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:5C:25:FC:C7:50:24:FF:47:51:FC:F8:59:3F:D4:C7:C2:EA:60:7B
            X509v3 Authority Key Identifier:
                keyid:DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:88:10:9d:a6:be:95:12:e4:e4:c4:90:0c:ba:37:54:cf:8a:
         d4:33:aa:63:f0:96:29:60:1f:1b:43:73:10:19:7f:21:67:f5:
         93:63:2e:31:89:85:d1:ca:c4:cc:82:2d:79:5c:c0:9e:22:8d:
         51:0f:60:67:c8:56:ab:a2:d7:77:ba:35:cf:2f:ab:26:12:41:
         20:7e:df:ff:4d:49:15:e1:fc:e4:38:8c:5a:24:82:fa:00:92:
         e9:c2:2c:36:d8:9a:c1:9d:bc:7e:3e:06:9d:a7:b5:63:fd:78:
         92:37:23:60:30:af:96:25:3d:14:ff:27:77:fc:3a:f0:47:fc:
         b0:9b:14:3a:eb:1e:76:ea:89:7d:df:0c:77:f3:40:da:32:42:
         43:7d:19:b9:4e:3c:02:22:98:0e:4c:17:98:19:45:a6:46:23:
         fb:40:8f:5d:1e:fe:b6:a8:19:da:98:4a:23:52:95:79:87:e1:
         1b:d1:cb:5e:42:c6:5d:ea:ea:15:92:5c:29:3c:db:99:ef:bf:
         de:b8:29:e7:4a:55:fd:db:60:e5:4c:45:81:29:2e:32:d3:86:
         fe:43:ee:3c:b8:aa:21:f2:67:67:b6:04:58:7c:bf:d6:9a:a3:
         c7:b1:76:79:72:2b:60:72:13:76:e6:76:67:d5:6b:fd:02:e1:
         da:c9:31:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REExM0UxMTAvBgNVBAUTKERFOEE4REE3MEUxNjUwMDlEMTQwRDlGNjI0NTI0REM0
RDQ3OUQ1RTgwHhcNMjYwNzE2MjEwNDQ3WhcNMjYwNzIzMjEwNDQ3WjAYMRYwFAYD
VQQDEw02YTU5NDc2Zi05ZDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnA/r9wLhVdv53U4lIraE4oFExmSEub0lK20bMoxlylrsdFZ0ZFAeB8ibx2RS
qkbbxINHLJzcuhEkjtyn/0JfSTKaOnIdtQksxerBEM/ZwAIIPOEFo8rH761pdaGU
UVhywzO/mydl0t8H/c8z5u/zkj26gXAXAq7mawYhqthw/Ummk7iNL9/0+xntFgtK
0BRjhzDABiKzh62U46fhQctmNjpLdn6wgLXjLUQdxq0J+UZcA5Nk8tBNvJJ1ozh4
Q5HzZcSbwvA2zLShy+su1DqvUDEpBpeIsGKh9H1HJ2sg/TzaXIClwcZ0dD6vwzLm
xcN50ecs3EjF/EvUREZ7ogRu3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF5cJfzH
UCT/R1H8+Fk/1MfC6mB7MB8GA1UdIwQYMBaAFN6KjacOFlAJ0UDZ9iRSTcTUedXo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS81NEQ2QTUwRTA2
QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VBblJRTm4ySkZKTnhOUjUx
ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNvcU5wdzRXVUFuUlFObjJKRkpOeE5SNTFlZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QTEzRS81NEQ2QTUwRTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VB
blJRTm4ySkZKTnhOUjUxZWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV4gQnaa+lRLk5MSQDLo3VM+K1DOqY/CWKWAfG0NzEBl/IWf1k2MuMYmF0crE
zIIteVzAniKNUQ9gZ8hWq6LXd7o1zy+rJhJBIH7f/01JFeH85DiMWiSC+gCS6cIs
NtiawZ28fj4Gnae1Y/14kjcjYDCvliU9FP8nd/w68Ef8sJsUOuseduqJfd8Md/NA
2jJCQ30ZuU48AiKYDkwXmBlFpkYj+0CPXR7+tqgZ2phKI1KVeYfhG9HLXkLGXerq
FZJcKTzbme+/3rgp50pV/dtg5UxFgSkuMtOG/kPuPLiqIfJnZ7YEWHy/1pqjx7F2
eXIrYHITduZ2Z9Vr/QLh2skxfA==
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:18:07 2026 by rpki-client