Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EB9/934FAB92751711F188B09F1E72A30FBC/jaLVp38m0NbVR89fVM32RoXD0wI.mft
File:                     jaLVp38m0NbVR89fVM32RoXD0wI.mft (raw, json)
Hash identifier:          Onh1sqyNCTJti8dPB+je21R7qAj5qt//j/QnjPIjmSo=
Subject key identifier:   D9:54:17:B8:55:30:95:CD:30:2A:7A:36:EE:DA:2C:D7:22:4F:5E:A0
Authority key identifier: 8D:A2:D5:A7:7F:26:D0:D6:D5:47:CF:5F:54:CD:F6:46:85:C3:D3:02
Certificate issuer:       /CN=A91E5EB9/serialNumber=8DA2D5A77F26D0D6D547CF5F54CDF64685C3D302
Certificate serial:       0D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jaLVp38m0NbVR89fVM32RoXD0wI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5EB9/934FAB92751711F188B09F1E72A30FBC/jaLVp38m0NbVR89fVM32RoXD0wI.mft
Manifest number:          0B
Signing time:             Fri 17 Jul 2026 10:30:19 +0000
Manifest this update:     Fri 17 Jul 2026 10:30:18 +0000
Manifest next update:     Fri 24 Jul 2026 10:30:18 +0000
Files and hashes:         1: jaLVp38m0NbVR89fVM32RoXD0wI.crl (hash: +CaRDq2i9Y/mvz4GBp6Y9MvdHPyJNHUQrry5MHXAR/Q=)
                          2: 459D907A7A5411F1853CBD4D89A30FBC.roa (hash: I9kJtF1h7oYctnKqxd8kTl2aBwt4XGPxXvRCQBmjedQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5EB9/934FAB92751711F188B09F1E72A30FBC/jaLVp38m0NbVR89fVM32RoXD0wI.crl
                          rsync://rpki.apnic.net/member_repository/A91E5EB9/934FAB92751711F188B09F1E72A30FBC/jaLVp38m0NbVR89fVM32RoXD0wI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jaLVp38m0NbVR89fVM32RoXD0wI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5EB9, serialNumber=8DA2D5A77F26D0D6D547CF5F54CDF64685C3D302
        Validity
            Not Before: Jul 17 10:30:18 2026 GMT
            Not After : Jul 24 10:30:18 2026 GMT
        Subject: CN=6a5a043b-2b08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cd:a6:45:a1:ae:ce:b4:1f:c2:45:08:7f:d7:
                    b3:5a:dc:37:d7:43:bd:fc:cb:14:57:4f:5c:14:f6:
                    62:98:e1:79:e2:18:0e:ec:d0:2e:07:67:93:47:f3:
                    55:b1:64:e0:5a:a4:1d:39:7e:12:36:e5:a6:d9:67:
                    bd:88:73:3d:6c:26:0d:b8:5f:f1:34:7b:f3:fb:d2:
                    b1:d7:4f:87:38:ad:27:ae:7b:be:d3:bc:6b:d7:8c:
                    ef:d9:5e:cc:b6:f8:3a:46:4c:11:bf:1c:1c:7c:62:
                    04:e2:b6:1d:18:bc:d3:07:3f:c5:af:26:a9:90:ed:
                    c6:37:78:4e:5d:c0:92:03:ed:c9:e0:dc:3c:ca:0f:
                    93:5c:18:f7:16:32:36:eb:76:32:d6:c5:61:07:77:
                    35:57:fd:b1:52:a9:d9:a8:91:76:27:f4:d5:af:8c:
                    95:45:c9:09:6d:05:65:39:73:59:e6:88:6b:83:c6:
                    df:c1:68:da:9a:f3:d3:87:95:3a:b8:73:68:45:87:
                    4f:83:e5:47:95:ff:01:78:78:8b:c7:8d:f5:4a:e7:
                    77:b6:73:02:69:a7:4c:ea:b4:59:46:95:13:d0:64:
                    0f:8c:ce:f6:82:a1:d2:10:de:70:40:09:c9:15:89:
                    47:0f:70:5c:58:33:21:db:a4:b1:90:40:4f:02:45:
                    1b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:54:17:B8:55:30:95:CD:30:2A:7A:36:EE:DA:2C:D7:22:4F:5E:A0
            X509v3 Authority Key Identifier:
                keyid:8D:A2:D5:A7:7F:26:D0:D6:D5:47:CF:5F:54:CD:F6:46:85:C3:D3:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5EB9/934FAB92751711F188B09F1E72A30FBC/jaLVp38m0NbVR89fVM32RoXD0wI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jaLVp38m0NbVR89fVM32RoXD0wI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EB9/934FAB92751711F188B09F1E72A30FBC/jaLVp38m0NbVR89fVM32RoXD0wI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f6:35:72:44:18:25:6e:b5:c3:e7:66:d1:ef:11:b8:39:05:
         48:6e:63:e5:d5:1f:b3:6f:63:96:9d:5c:af:26:9c:5b:11:45:
         ee:4c:1f:a6:2f:f0:3b:f3:bc:12:52:89:79:86:6e:a8:a6:7a:
         c8:99:b7:dd:81:18:8f:41:27:a7:f6:d9:7e:d9:6a:5a:ac:52:
         3b:92:64:ee:e7:6b:fa:79:7c:5b:41:53:d9:7c:88:eb:1f:76:
         50:ab:08:c5:e4:72:f9:c2:40:98:a5:bb:b8:b8:62:11:16:28:
         1e:2a:3a:61:a4:eb:a7:21:23:ba:d1:90:8d:a1:b1:ac:62:c8:
         23:1c:be:2e:ca:17:1f:3e:7e:58:98:09:c5:5f:a0:2e:b5:4c:
         7e:87:ee:31:72:80:c7:90:31:77:45:37:04:fe:d1:4b:fa:ba:
         7c:40:f2:9a:ec:71:57:d2:e6:ff:7e:b1:7e:30:19:9f:53:c4:
         d1:4a:cf:84:7f:40:f7:b8:e9:71:cd:f0:8d:10:3e:83:d6:cd:
         13:f1:9d:09:26:64:70:a9:1a:d8:3c:73:e8:9f:eb:14:a7:fd:
         67:70:34:81:12:8e:75:73:89:85:2a:04:07:55:22:b2:10:b7:
         da:8a:50:c3:d8:6d:cb:9c:0d:5f:d6:5e:a0:a6:3c:f6:3a:a8:
         fd:e9:ab:4e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
NUVCOTExMC8GA1UEBRMoOERBMkQ1QTc3RjI2RDBENkQ1NDdDRjVGNTRDREY2NDY4
NUMzRDMwMjAeFw0yNjA3MTcxMDMwMThaFw0yNjA3MjQxMDMwMThaMBgxFjAUBgNV
BAMTDTZhNWEwNDNiLTJiMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCSzaZFoa7OtB/CRQh/17Na3DfXQ738yxRXT1wU9mKY4XniGA7s0C4HZ5NH81Wx
ZOBapB05fhI25abZZ72Icz1sJg24X/E0e/P70rHXT4c4rSeue77TvGvXjO/ZXsy2
+DpGTBG/HBx8YgTith0YvNMHP8WvJqmQ7cY3eE5dwJID7cng3DzKD5NcGPcWMjbr
djLWxWEHdzVX/bFSqdmokXYn9NWvjJVFyQltBWU5c1nmiGuDxt/BaNqa89OHlTq4
c2hFh0+D5UeV/wF4eIvHjfVK53e2cwJpp0zqtFlGlRPQZA+MzvaCodIQ3nBACckV
iUcPcFxYMyHbpLGQQE8CRRvRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2VQXuFUw
lc0wKno27tos1yJPXqAwHwYDVR0jBBgwFoAUjaLVp38m0NbVR89fVM32RoXD0wIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1RUI5LzkzNEZBQjkyNzUx
NzExRjE4OEIwOUYxRTcyQTMwRkJDL2phTFZwMzhtME5iVlI4OWZWTTMyUm9YRDB3
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvamFMVnAzOG0wTmJWUjg5ZlZNMzJSb1hEMHdJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1
RUI5LzkzNEZBQjkyNzUxNzExRjE4OEIwOUYxRTcyQTMwRkJDL2phTFZwMzhtME5i
VlI4OWZWTTMyUm9YRDB3SS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBR9jVyRBglbrXD52bR7xG4OQVIbmPl1R+zb2OWnVyvJpxbEUXuTB+mL/A787wS
Uol5hm6opnrImbfdgRiPQSen9tl+2WparFI7kmTu52v6eXxbQVPZfIjrH3ZQqwjF
5HL5wkCYpbu4uGIRFigeKjphpOunISO60ZCNobGsYsgjHL4uyhcfPn5YmAnFX6Au
tUx+h+4xcoDHkDF3RTcE/tFL+rp8QPKa7HFX0ub/frF+MBmfU8TRSs+Ef0D3uOlx
zfCNED6D1s0T8Z0JJmRwqRrYPHPon+sUp/1ncDSBEo51c4mFKgQHVSKyELfailDD
2G3LnA1f1l6gpjz2Oqj96atO
-----END CERTIFICATE-----
Generated at Sat Jul 18 04:28:56 2026 by rpki-client