Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
File:                     BZOGVctKEp6P3fsJQsICA-N-G8E.mft (raw, json)
Hash identifier:          VCWv0hZ9fwEXXhq7fzm4Aogd6qjUtG3sTWv6ItY0yw8=
Subject key identifier:   F8:E6:EA:12:CC:83:6B:43:94:13:84:CB:10:70:FF:F2:CC:9D:79:AE
Authority key identifier: 05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1
Certificate issuer:       /CN=A91EF5AE/serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1
Certificate serial:       047B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
Manifest number:          0474
Signing time:             Sun 19 Jul 2026 00:36:53 +0000
Manifest this update:     Sun 19 Jul 2026 00:36:53 +0000
Manifest next update:     Sun 26 Jul 2026 00:36:53 +0000
Files and hashes:         1: BZOGVctKEp6P3fsJQsICA-N-G8E.crl (hash: KgMRp+87jGSx7Rel2p5gwgsl/Cv6OeivQRORcZt0jjY=)
                          2: 1D45733C9AAB11ECBDD79E1EC4F9AE02.roa (hash: QHGUM82zhuPv35Kjoao2FUx1+4roXHxbwl+YxAAtRCE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl
                          rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Jul 2026 00:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1147 (0x47b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF5AE, serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1
        Validity
            Not Before: Jul 19 00:36:53 2026 GMT
            Not After : Jul 26 00:36:53 2026 GMT
        Subject: CN=6a5c1c25-d616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5f:00:01:fb:c7:98:a2:a0:04:ac:28:2e:d5:
                    7c:63:14:65:a0:14:6d:f4:5d:71:a4:25:5d:f4:2d:
                    06:1f:cd:9b:ca:cf:c0:ce:ca:ec:4e:ae:ba:22:b3:
                    d9:26:c6:b6:4e:af:b8:eb:a2:0b:37:bc:57:7d:97:
                    3c:f2:c9:d8:cb:00:b2:23:9b:d0:ec:d9:d3:45:86:
                    0a:2a:96:7e:c4:e4:dd:21:32:e6:02:bd:c0:02:82:
                    ca:64:7e:73:a9:a5:68:70:25:a6:ad:76:e9:79:fb:
                    d5:0f:59:5f:75:89:f4:a4:6b:44:0f:e5:dc:ae:f0:
                    43:76:1d:7c:44:b9:98:5b:23:e0:2c:d8:c9:21:17:
                    c4:a0:33:3e:0a:59:f3:53:c6:65:b5:09:49:b1:dc:
                    c0:39:80:fd:4e:17:e1:bf:d8:71:24:2a:0b:30:ee:
                    47:c9:a4:fe:af:2c:a6:16:62:50:01:3a:00:29:f8:
                    ae:87:c8:6a:c2:c6:dd:66:06:6f:2d:ea:86:41:7b:
                    60:80:34:46:22:d4:41:bf:d4:1e:66:b0:4e:d2:a0:
                    ee:ef:6f:d7:53:61:02:7e:e2:d6:2f:58:f8:30:7d:
                    21:97:b0:87:f4:29:cf:59:fa:28:26:7c:0b:26:dd:
                    81:1f:62:f5:ea:a2:ab:b3:2e:90:62:f4:c7:7b:93:
                    3d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E6:EA:12:CC:83:6B:43:94:13:84:CB:10:70:FF:F2:CC:9D:79:AE
            X509v3 Authority Key Identifier:
                keyid:05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:65:7d:41:ad:9c:44:cb:1a:67:83:f1:fb:de:22:28:ad:c4:
         c4:2d:c9:14:13:ea:04:63:60:62:09:a0:91:0a:40:08:a0:68:
         1d:af:02:b7:a2:0d:29:89:7f:a2:b2:00:d1:cf:f0:ed:b8:8d:
         e6:c6:83:5a:ef:a8:cd:e2:f5:61:de:d1:78:9a:80:f5:e0:8e:
         6a:a7:e6:d0:6e:4b:28:17:3d:57:03:ce:60:1c:67:bb:27:88:
         84:0e:4d:39:3a:c3:08:f3:e6:d9:03:a0:fa:37:5e:76:02:6a:
         8f:37:c1:ac:7b:78:28:94:6d:3a:bc:14:82:c6:90:78:24:a1:
         2a:e1:2f:f1:41:fd:d5:da:75:57:71:38:fe:a5:39:fe:22:50:
         ac:8c:20:69:89:97:6b:9a:bd:1c:12:65:01:63:1d:d9:e3:d1:
         ef:33:5f:54:48:39:17:a7:2d:86:9b:a1:e4:03:de:14:99:ee:
         4d:57:60:bf:d4:b0:bc:90:05:0f:27:78:48:a8:04:0f:65:ee:
         b2:aa:38:c4:d0:02:26:72:ef:5f:04:44:52:87:04:8a:c9:87:
         0d:2b:0f:5e:6c:68:45:69:9f:9b:75:f7:79:ee:87:cc:cd:67:
         e4:11:60:72:eb:96:23:cc:9c:22:d5:7d:07:26:e8:bc:75:dd:
         b0:38:af:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUY1QUUxMTAvBgNVBAUTKDA1OTM4NjU1Q0I0QTEyOUU4RkRERkIwOTQyQzIwMjAz
RTM3RTFCQzEwHhcNMjYwNzE5MDAzNjUzWhcNMjYwNzI2MDAzNjUzWjAYMRYwFAYD
VQQDEw02YTVjMWMyNS1kNjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA318AAfvHmKKgBKwoLtV8YxRloBRt9F1xpCVd9C0GH82bys/AzsrsTq66IrPZ
Jsa2Tq+466ILN7xXfZc88snYywCyI5vQ7NnTRYYKKpZ+xOTdITLmAr3AAoLKZH5z
qaVocCWmrXbpefvVD1lfdYn0pGtED+XcrvBDdh18RLmYWyPgLNjJIRfEoDM+Clnz
U8ZltQlJsdzAOYD9Thfhv9hxJCoLMO5HyaT+ryymFmJQAToAKfiuh8hqwsbdZgZv
LeqGQXtggDRGItRBv9QeZrBO0qDu72/XU2ECfuLWL1j4MH0hl7CH9CnPWfooJnwL
Jt2BH2L16qKrsy6QYvTHe5M9ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPjm6hLM
g2tDlBOEyxBw//LMnXmuMB8GA1UdIwQYMBaAFAWThlXLShKej937CULCAgPjfhvB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjVBRS81RTZFMjA3ODlB
QTgxMUVDODlENDI0NzRDNEY5QUUwMi9CWk9HVmN0S0VwNlAzZnNKUXNJQ0EtTi1H
OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JaT0dWY3RLRXA2UDNmc0pRc0lDQS1OLUc4RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjVBRS81RTZFMjA3ODlBQTgxMUVDODlENDI0NzRDNEY5QUUwMi9CWk9HVmN0S0Vw
NlAzZnNKUXNJQ0EtTi1HOEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxWV9Qa2cRMsaZ4Px+94iKK3ExC3JFBPqBGNgYgmgkQpACKBoHa8Ct6INKYl/
orIA0c/w7biN5saDWu+ozeL1Yd7ReJqA9eCOaqfm0G5LKBc9VwPOYBxnuyeIhA5N
OTrDCPPm2QOg+jdedgJqjzfBrHt4KJRtOrwUgsaQeCShKuEv8UH91dp1V3E4/qU5
/iJQrIwgaYmXa5q9HBJlAWMd2ePR7zNfVEg5F6cthpuh5APeFJnuTVdgv9SwvJAF
Dyd4SKgED2Xusqo4xNACJnLvXwREUocEismHDSsPXmxoRWmfm3X3ee6HzM1n5BFg
cuuWI8ycItV9BybovHXdsDivCQ==
-----END CERTIFICATE-----
Generated at Sun Jul 19 10:03:04 2026 by rpki-client