Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft
File:                     2jyR-PFV2QuZh8kTskxPnlRF6cw.mft (raw, json)
Hash identifier:          N+645fG2aiP++fYhWL2ccKSVbPS5dHyzwJYljHZvGuI=
Subject key identifier:   30:A4:BF:A9:97:5A:64:5A:AA:F9:91:70:71:40:45:B1:0E:0F:C6:3A
Authority key identifier: DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC
Certificate issuer:       /CN=A91E70ED/serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC
Certificate serial:       0DD3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft
Manifest number:          0DAB
Signing time:             Mon 06 Jul 2026 18:17:06 +0000
Manifest this update:     Mon 06 Jul 2026 18:17:05 +0000
Manifest next update:     Mon 13 Jul 2026 18:17:05 +0000
Files and hashes:         1: 2jyR-PFV2QuZh8kTskxPnlRF6cw.crl (hash: p2lfoF2/XoLIQWBvNV+6LkpCztxmWcFWrYGNKixU9g0=)
                          2: FEB624F6B94911EE897F7947C4F9AE02.roa (hash: ZqgPOrVGAVhmIWvwXmsHVZQruBjCO1WrYjc/KjSm8/Q=)
                          3: 8E4647E6EB2911EB9891D01DC4F9AE02.roa (hash: AsxJJe7AQfPpeTieWhSPJw58k738mrKqvlACAyMZyn0=)
                          4: 8D9FFB3EEB2911EB9891D01DC4F9AE02.roa (hash: QT3QM4Ca91XVmmXNZAyaNX0ZIAsny+fn6mttdm0kFjo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl
                          rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Jul 2026 18:17:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3539 (0xdd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E70ED, serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC
        Validity
            Not Before: Jul  6 18:17:05 2026 GMT
            Not After : Jul 13 18:17:05 2026 GMT
        Subject: CN=6a4bf122-174e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:89:f8:d4:b8:a6:30:44:40:7b:59:ce:3e:fb:
                    f4:d2:9d:d2:4b:a4:b6:26:aa:58:49:1d:71:6c:9c:
                    a9:af:d7:b3:13:92:e8:74:72:6f:f3:d3:48:f5:ba:
                    e3:ae:de:ad:ac:be:98:e0:ec:3a:96:c4:52:75:4a:
                    78:42:28:22:24:9a:cf:45:7c:7d:88:60:0f:9c:52:
                    14:39:68:6c:12:d9:89:9d:b5:a4:f8:19:28:5c:ae:
                    51:d6:46:09:8a:75:28:db:c7:c3:8f:4e:8d:17:e0:
                    39:57:01:a5:ac:b4:c5:d8:e4:77:ae:ed:d3:3b:fa:
                    07:32:cd:f0:7f:e2:88:e4:e3:2f:3d:26:20:ed:61:
                    ea:01:6a:73:ff:13:d3:27:5b:16:86:58:ee:34:c9:
                    08:bb:12:52:32:d7:5f:36:f3:a6:0f:76:5f:18:3f:
                    ee:48:cb:43:26:7b:0c:5e:93:91:db:02:af:c9:1f:
                    1c:97:0e:59:2d:19:5e:0d:37:07:a5:43:f0:f1:a1:
                    2e:5a:00:01:e3:80:01:a9:78:2c:8b:90:8d:cf:5a:
                    91:7a:1c:c5:fa:46:dc:27:50:51:df:cd:aa:c2:00:
                    a7:41:40:e4:5a:c6:83:fd:93:7c:ba:b5:4c:3c:29:
                    c5:1f:b3:ef:e5:c4:f9:77:c1:5c:74:42:09:5d:db:
                    72:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A4:BF:A9:97:5A:64:5A:AA:F9:91:70:71:40:45:B1:0E:0F:C6:3A
            X509v3 Authority Key Identifier:
                keyid:DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:9e:9e:27:55:66:af:5a:f4:a3:8d:cc:9a:b9:41:9b:f8:85:
         65:7d:51:df:99:bf:42:5f:b5:97:f3:68:2b:cd:23:2a:83:8d:
         1a:62:15:9a:1c:6f:61:4f:56:96:28:21:ab:db:35:9c:bd:d6:
         61:53:40:5c:9b:e3:fb:38:da:3e:7c:61:29:61:1a:da:4c:37:
         6d:93:b9:d1:05:aa:d4:a1:b9:31:0a:c5:b6:b8:f2:76:49:11:
         f3:63:19:40:fb:68:13:1f:46:44:4b:ca:75:c7:d5:b7:96:5e:
         80:92:b6:c4:d6:0c:78:69:6b:c8:1b:96:06:1c:3d:29:9b:96:
         83:16:e7:50:b5:b1:79:c1:c4:b8:77:8b:50:ea:51:d0:65:76:
         ea:dc:cf:4b:04:19:f0:24:fc:4e:c0:3e:85:26:9f:28:4a:56:
         16:d4:f7:85:87:65:39:09:4c:7f:1d:46:45:b4:ac:f2:bd:95:
         bc:5b:60:11:25:20:ef:19:c4:f5:b5:f4:2c:ba:e5:52:7b:98:
         63:79:2e:a3:d8:58:0c:d7:3f:73:ca:2a:99:fc:67:8f:8e:70:
         26:0c:e5:8b:a4:f6:6c:de:ea:2b:bb:84:2d:c4:36:09:4e:a0:
         4e:7d:91:e6:69:01:fd:32:98:7c:5f:19:b6:e1:3e:ea:f8:1b:
         1f:d9:2e:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTcwRUQxMTAvBgNVBAUTKERBM0M5MUY4RjE1NUQ5MEI5OTg3QzkxM0IyNEM0RjlF
NTQ0NUU5Q0MwHhcNMjYwNzA2MTgxNzA1WhcNMjYwNzEzMTgxNzA1WjAYMRYwFAYD
VQQDEw02YTRiZjEyMi0xNzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA74n41LimMERAe1nOPvv00p3SS6S2JqpYSR1xbJypr9ezE5LodHJv89NI9brj
rt6trL6Y4Ow6lsRSdUp4QigiJJrPRXx9iGAPnFIUOWhsEtmJnbWk+BkoXK5R1kYJ
inUo28fDj06NF+A5VwGlrLTF2OR3ru3TO/oHMs3wf+KI5OMvPSYg7WHqAWpz/xPT
J1sWhljuNMkIuxJSMtdfNvOmD3ZfGD/uSMtDJnsMXpOR2wKvyR8clw5ZLRleDTcH
pUPw8aEuWgAB44ABqXgsi5CNz1qRehzF+kbcJ1BR382qwgCnQUDkWsaD/ZN8urVM
PCnFH7Pv5cT5d8FcdEIJXdtyTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDCkv6mX
WmRaqvmRcHFARbEOD8Y6MB8GA1UdIwQYMBaAFNo8kfjxVdkLmYfJE7JMT55URenM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzBFRC9FNjI3N0EzRUU5
RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJRdVpoOGtUc2t4UG5sUkY2
Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJqeVItUEZWMlF1Wmg4a1Rza3hQbmxSRjZjdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NzBFRC9FNjI3N0EzRUU5RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJR
dVpoOGtUc2t4UG5sUkY2Y3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHp6eJ1Vmr1r0o43MmrlBm/iFZX1R35m/Ql+1l/NoK80jKoONGmIVmhxvYU9W
lighq9s1nL3WYVNAXJvj+zjaPnxhKWEa2kw3bZO50QWq1KG5MQrFtrjydkkR82MZ
QPtoEx9GREvKdcfVt5ZegJK2xNYMeGlryBuWBhw9KZuWgxbnULWxecHEuHeLUOpR
0GV26tzPSwQZ8CT8TsA+hSafKEpWFtT3hYdlOQlMfx1GRbSs8r2VvFtgESUg7xnE
9bX0LLrlUnuYY3kuo9hYDNc/c8oqmfxnj45wJgzli6T2bN7qK7uELcQ2CU6gTn2R
5mkB/TKYfF8ZtuE+6vgbH9kuxg==
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:19:32 2026 by rpki-client