Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
File:                     o_JydS7F2eEp5N_KCAuI05t5SUQ.mft (raw, json)
Hash identifier:          +6F0HpMT3vYuWCrrhBcni00/Vi0Ts+iU1skZxxC70xc=
Subject key identifier:   8A:42:0B:F1:AA:B3:AD:C5:7D:D5:EB:D6:B0:A5:DD:C6:0F:C3:A1:17
Authority key identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44
Certificate issuer:       /CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944
Certificate serial:       04A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
Manifest number:          048A
Signing time:             Mon 29 Jun 2026 00:24:57 +0000
Manifest this update:     Mon 29 Jun 2026 00:24:57 +0000
Manifest next update:     Mon 06 Jul 2026 00:24:57 +0000
Files and hashes:         1: o_JydS7F2eEp5N_KCAuI05t5SUQ.crl (hash: cmF/CfB6Hg7QaKot+2CGWGM112y2Xqp9LspcSuhgs9M=)
                          2: 60523BEA0CA411ED96936D79C4F9AE02.roa (hash: 6jrH7luWVFa/EBIKOSXO0MpS17prp6l8m7pIdmNPjD8=)
                          3: 39574A98960D11ECAAC81D60C4F9AE02.roa (hash: rMZ/eL7Ct3fn9wQpOxP0LaOUQqMdK4drCnBgZLgiToY=)
                          4: 0B5742C234AD11F1851A1E75B8833773.roa (hash: mrkKKc0cU8SDUFTCBDWltPPNG2EiLfGGhf70i5GAtLs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 Jul 2026 00:24:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1185 (0x4a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E504E, serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944
        Validity
            Not Before: Jun 29 00:24:57 2026 GMT
            Not After : Jul  6 00:24:57 2026 GMT
        Subject: CN=6a41bb59-9e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a2:86:96:96:42:79:2d:4a:44:64:b4:09:03:
                    bd:65:80:e6:38:31:7a:4f:16:f6:97:0f:75:ef:51:
                    f0:64:7c:6e:0b:e2:bb:71:4e:f3:68:fd:04:60:95:
                    46:76:7e:f3:02:8a:49:49:2c:a0:ff:78:34:c1:a7:
                    7f:ab:77:6b:e2:d5:94:9c:be:04:43:10:29:74:97:
                    a6:b6:95:29:24:5d:17:6b:b4:9f:9a:81:45:6d:d1:
                    32:aa:8a:32:f6:92:1f:6f:a2:52:98:a0:2c:e8:33:
                    18:4d:00:ad:70:b9:d2:eb:ef:3d:6a:bd:4c:cd:a6:
                    20:ac:46:83:b9:21:54:90:cf:84:95:84:0c:1b:af:
                    bc:9e:67:16:96:3d:08:e4:7e:ed:16:a2:96:e8:6b:
                    52:5f:c6:7e:8b:5f:d5:e3:4a:cd:c5:cd:6a:7e:47:
                    20:a5:34:82:17:37:1f:a6:5a:f4:bb:3b:cc:d6:4d:
                    67:bb:06:a8:0e:c1:4a:c5:9c:66:30:f9:82:72:f7:
                    d3:07:87:2c:b4:4d:70:4b:80:0e:7b:62:d3:82:f7:
                    84:f5:c4:b3:17:f7:36:5c:0b:a3:88:a2:95:e4:83:
                    fb:35:4a:f1:fd:ee:d7:5d:c0:2f:69:e9:98:0a:3c:
                    55:69:7e:26:3e:e8:4c:98:f3:4b:02:66:35:54:8d:
                    f5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:42:0B:F1:AA:B3:AD:C5:7D:D5:EB:D6:B0:A5:DD:C6:0F:C3:A1:17
            X509v3 Authority Key Identifier:
                keyid:A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:81:cd:bb:da:30:a3:57:23:9e:58:db:f6:a9:64:58:90:4b:
         13:b7:e2:3c:30:a7:83:e7:06:b0:22:64:5c:54:e0:1b:e5:36:
         d1:84:06:8f:59:c1:dd:2c:46:34:3f:a9:4e:ae:51:36:58:1b:
         cb:65:3e:e6:8c:d6:fc:c7:3d:53:7a:75:08:1a:f9:3b:07:a1:
         b3:a3:0c:90:26:45:fa:fd:a9:b6:c8:92:b3:b2:f1:06:81:67:
         34:70:28:27:41:c2:9a:51:5e:b1:23:4d:f3:f5:9f:c5:1f:19:
         b2:4c:a3:6b:ea:6f:5b:7c:fb:87:96:28:47:38:e3:dd:a6:18:
         d0:86:c9:31:c3:45:70:25:76:2f:80:fe:8a:7b:b4:a8:df:9b:
         9e:0b:21:79:6e:e3:9f:ef:9c:af:14:b6:ae:e7:68:ca:43:56:
         66:db:ee:d1:4d:7c:1f:ba:8f:09:43:2b:b3:d5:17:b8:58:be:
         e9:bb:da:e0:5d:9f:a4:02:a6:21:30:34:0f:e2:8a:1d:4f:9d:
         1a:72:a7:43:1a:6f:ab:62:85:6d:69:1f:a6:1a:56:00:93:07:
         23:39:c0:6a:be:eb:53:42:ef:e7:4f:29:75:da:a1:9c:f6:c2:
         e1:eb:e1:c5:5d:65:c8:d2:5b:c5:29:2f:89:fc:8b:61:fa:2c:
         d5:e5:58:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTUwNEUxMTAvBgNVBAUTKEEzRjI3Mjc1MkVDNUQ5RTEyOUU0REZDQTA4MEI4OEQz
OUI3OTQ5NDQwHhcNMjYwNjI5MDAyNDU3WhcNMjYwNzA2MDAyNDU3WjAYMRYwFAYD
VQQDEw02YTQxYmI1OS05ZTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjaKGlpZCeS1KRGS0CQO9ZYDmODF6Txb2lw9171HwZHxuC+K7cU7zaP0EYJVG
dn7zAopJSSyg/3g0wad/q3dr4tWUnL4EQxApdJemtpUpJF0Xa7SfmoFFbdEyqooy
9pIfb6JSmKAs6DMYTQCtcLnS6+89ar1MzaYgrEaDuSFUkM+ElYQMG6+8nmcWlj0I
5H7tFqKW6GtSX8Z+i1/V40rNxc1qfkcgpTSCFzcfplr0uzvM1k1nuwaoDsFKxZxm
MPmCcvfTB4cstE1wS4AOe2LTgveE9cSzF/c2XAujiKKV5IP7NUrx/e7XXcAvaemY
CjxVaX4mPuhMmPNLAmY1VI31wQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIpCC/Gq
s63FfdXr1rCl3cYPw6EXMB8GA1UdIwQYMBaAFKPycnUuxdnhKeTfyggLiNObeUlE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS81OTA5NDk5MDk2
MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJlRXA1Tl9LQ0F1STA1dDVT
VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29fSnlkUzdGMmVFcDVOX0tDQXVJMDV0NVNVUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NTA0RS81OTA5NDk5MDk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJl
RXA1Tl9LQ0F1STA1dDVTVVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbIHNu9owo1cjnljb9qlkWJBLE7fiPDCng+cGsCJkXFTgG+U20YQGj1nB3SxG
ND+pTq5RNlgby2U+5ozW/Mc9U3p1CBr5Owehs6MMkCZF+v2ptsiSs7LxBoFnNHAo
J0HCmlFesSNN8/WfxR8Zskyja+pvW3z7h5YoRzjj3aYY0IbJMcNFcCV2L4D+inu0
qN+bngsheW7jn++crxS2rudoykNWZtvu0U18H7qPCUMrs9UXuFi+6bva4F2fpAKm
ITA0D+KKHU+dGnKnQxpvq2KFbWkfphpWAJMHIznAar7rU0Lv508pddqhnPbC4evh
xV1lyNJbxSkvifyLYfos1eVYfQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 22:43:09 2026 by rpki-client