Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
File:                     JfPSFoirk4Gqi5UrziZBKTVCp_I.mft (raw, json)
Hash identifier:          nJHPVRcrBhCvatg45GZo9sk+thdgd81T37cSf0ooq14=
Subject key identifier:   AD:8C:96:1A:92:04:43:86:8C:90:74:5F:26:A3:2F:39:31:5D:65:FA
Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2
Certificate issuer:       /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2
Certificate serial:       0871
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
Manifest number:          0847
Signing time:             Mon 20 Jul 2026 21:38:20 +0000
Manifest this update:     Mon 20 Jul 2026 21:38:19 +0000
Manifest next update:     Mon 27 Jul 2026 21:38:19 +0000
Files and hashes:         1: JfPSFoirk4Gqi5UrziZBKTVCp_I.crl (hash: V95Twe9r/K5vTYhxKgUB+Bk6DPmojXHYgK7a0yWum5I=)
                          2: 7C76080E08D611EE82522448C4F9AE02.roa (hash: RXzPjqfGnjMFGEe5IJDvXNa9x/aOyMwECSrglqs4E24=)
                          3: 27D76814848711EF8CFAA23AC4F9AE02.roa (hash: 9WsTqu+1S58PdgHzRyv83r6EckHxHEZwWgMoiXQIwXs=)
                          4: 2A67700A9B4411EFA1772153C4F9AE02.roa (hash: JDvNYbjYgzAUv5kVDBgi2KEkPnPhEG9d4dMtXb+ev6I=)
                          5: 73C6444A12FF11F195EAA2BD143D8C67.roa (hash: xBZ85olwrfzXLCOhjfMqnMRpD3SifUSCqGx8tZttr5c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl
                          rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 21:38:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2161 (0x871)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBAF1, serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2
        Validity
            Not Before: Jul 20 21:38:19 2026 GMT
            Not After : Jul 27 21:38:19 2026 GMT
        Subject: CN=6a5e954b-47e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:27:ea:a3:c7:00:44:9e:2e:cf:da:19:0b:17:
                    f0:76:6a:e6:bd:94:5d:9d:f5:fc:26:33:a1:31:1c:
                    e9:fc:35:6d:22:81:46:28:fa:62:1e:64:09:33:0b:
                    27:1e:00:05:5f:a4:c5:ed:db:9e:2a:6e:f5:cf:e9:
                    66:49:13:9a:94:9f:2a:6c:47:07:7e:b2:65:a2:4b:
                    4f:56:6c:ba:d8:db:9e:50:9f:e0:c7:29:1b:be:90:
                    8f:36:f9:a3:ba:bd:76:b7:42:cb:62:61:88:bb:fb:
                    b7:e3:bb:c1:af:b2:d8:87:99:ab:99:d5:e4:01:95:
                    d4:06:be:23:f1:0c:a6:f3:af:db:ad:8c:1b:f9:3b:
                    22:86:e4:8c:60:58:71:7b:ac:e3:12:7c:39:91:0c:
                    2f:be:31:1a:d5:a3:c0:5f:0c:05:3d:63:b7:c4:f8:
                    7c:91:68:8d:e9:26:f1:74:a3:03:e9:5c:d3:cf:f3:
                    a7:20:ad:d5:0e:82:28:56:14:3a:67:b0:28:af:09:
                    ae:fe:f6:c6:f2:71:bf:8e:41:de:2f:c9:7a:73:0a:
                    90:97:4c:8d:4e:4f:83:3f:00:fb:9c:a5:40:45:4c:
                    58:3b:8f:97:ff:fc:8a:35:42:78:2e:62:08:b8:e6:
                    4c:46:a6:f6:58:df:11:f1:29:52:33:f1:82:93:a5:
                    3c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8C:96:1A:92:04:43:86:8C:90:74:5F:26:A3:2F:39:31:5D:65:FA
            X509v3 Authority Key Identifier:
                keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:27:f2:8d:06:91:e4:7a:62:3e:cb:f5:f1:3f:1d:74:87:02:
         78:85:b5:7f:6f:3b:a4:bc:d9:a3:b4:ca:97:d9:b2:11:9c:fb:
         e6:41:82:15:d4:a7:06:bd:cd:59:ba:7b:40:27:36:ae:39:92:
         c4:a0:40:b1:67:84:f8:bc:55:52:22:1f:6f:d3:6b:6a:1e:c3:
         66:98:aa:d5:60:a7:1c:0f:b7:24:25:ee:06:1d:f1:b6:67:49:
         7f:21:68:ac:15:21:ff:86:d5:97:e3:35:93:06:5c:1c:fc:c3:
         c0:a3:9d:54:e7:b6:53:e7:d9:43:8e:ab:7d:9f:72:46:0f:6e:
         93:5e:5d:98:e9:eb:f0:07:2a:51:12:33:d7:40:25:6f:66:16:
         38:25:7b:72:41:50:1b:d5:60:62:df:8f:f3:62:f0:25:2f:88:
         ee:50:78:da:da:57:da:63:50:4d:23:10:83:8d:18:de:94:7d:
         b9:ea:41:5e:f0:35:19:68:23:bb:18:37:73:29:09:6f:1d:40:
         75:7f:13:53:aa:8e:64:83:f6:83:93:48:79:0d:d2:51:70:d1:
         16:bc:4a:3f:28:3e:98:57:a5:54:b4:26:6e:d0:2b:fa:3e:f4:
         42:14:7f:48:c3:99:f9:f2:4e:6d:db:5e:8b:40:ae:fc:e3:eb:
         4d:b8:fc:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REJBRjExMTAvBgNVBAUTKDI1RjNEMjE2ODhBQjkzODFBQThCOTUyQkNFMjY0MTI5
MzU0MkE3RjIwHhcNMjYwNzIwMjEzODE5WhcNMjYwNzI3MjEzODE5WjAYMRYwFAYD
VQQDEw02YTVlOTU0Yi00N2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoifqo8cARJ4uz9oZCxfwdmrmvZRdnfX8JjOhMRzp/DVtIoFGKPpiHmQJMwsn
HgAFX6TF7dueKm71z+lmSROalJ8qbEcHfrJloktPVmy62NueUJ/gxykbvpCPNvmj
ur12t0LLYmGIu/u347vBr7LYh5mrmdXkAZXUBr4j8Qym86/brYwb+TsihuSMYFhx
e6zjEnw5kQwvvjEa1aPAXwwFPWO3xPh8kWiN6SbxdKMD6VzTz/OnIK3VDoIoVhQ6
Z7Aorwmu/vbG8nG/jkHeL8l6cwqQl0yNTk+DPwD7nKVARUxYO4+X//yKNUJ4LmII
uOZMRqb2WN8R8SlSM/GCk6U8QwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK2MlhqS
BEOGjJB0XyajLzkxXWX6MB8GA1UdIwQYMBaAFCXz0haIq5OBqouVK84mQSk1Qqfy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84NkRCMkNDQzI0
OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0R3FpNVVyemlaQktUVkNw
X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0pmUFNGb2lyazRHcWk1VXJ6aVpCS1RWQ3BfSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QkFGMS84NkRCMkNDQzI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0
R3FpNVVyemlaQktUVkNwX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsCfyjQaR5HpiPsv18T8ddIcCeIW1f287pLzZo7TKl9myEZz75kGCFdSnBr3N
Wbp7QCc2rjmSxKBAsWeE+LxVUiIfb9Nrah7DZpiq1WCnHA+3JCXuBh3xtmdJfyFo
rBUh/4bVl+M1kwZcHPzDwKOdVOe2U+fZQ46rfZ9yRg9uk15dmOnr8AcqURIz10Al
b2YWOCV7ckFQG9VgYt+P82LwJS+I7lB42tpX2mNQTSMQg40Y3pR9uepBXvA1GWgj
uxg3cykJbx1AdX8TU6qOZIP2g5NIeQ3SUXDRFrxKPyg+mFelVLQmbtAr+j70QhR/
SMOZ+fJObdtei0Cu/OPrTbj8PQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:49:39 2026 by rpki-client