Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft
File:                     2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft (raw, json)
Hash identifier:          hiGHtABTChOkncxIbXMHImMmV0ZrgwJfPA4SFBA8fa4=
Subject key identifier:   68:5A:C1:EE:FD:EF:CA:B3:71:B4:13:F5:8A:1A:46:2B:03:D4:3B:9B
Authority key identifier: D9:BD:70:E7:77:F8:61:AE:54:38:57:14:8E:63:35:2F:DA:84:C0:7A
Certificate issuer:       /CN=A91F0AF0/serialNumber=D9BD70E777F861AE543857148E63352FDA84C07A
Certificate serial:       0D57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2b1w53f4Ya5UOFcUjmM1L9qEwHo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft
Manifest number:          1F3C
Signing time:             Sun 26 Jul 2026 17:19:07 +0000
Manifest this update:     Sun 26 Jul 2026 17:19:06 +0000
Manifest next update:     Sun 02 Aug 2026 17:19:06 +0000
Files and hashes:         1: 2b1w53f4Ya5UOFcUjmM1L9qEwHo.crl (hash: XV7d3tBZUpoIprEFgFKeV5Vsd8rUdYFWxZKg0hOqGt0=)
                          2: CE3C7EF66FEB11EB91967864C4F9AE02.roa (hash: PoMZXZYHdteODhPAtacBWSXCAi/gVbSsN+xQtOQaEQU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.crl
                          rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2b1w53f4Ya5UOFcUjmM1L9qEwHo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 17:19:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3415 (0xd57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0AF0, serialNumber=D9BD70E777F861AE543857148E63352FDA84C07A
        Validity
            Not Before: Jul 26 17:19:06 2026 GMT
            Not After : Aug  2 17:19:06 2026 GMT
        Subject: CN=6a66418b-5ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:36:20:07:46:aa:2e:dc:e3:51:ed:d3:55:d2:
                    6d:9b:20:ca:dc:df:0c:f4:4d:75:7a:00:48:bb:bb:
                    a9:68:cf:18:52:7e:bd:82:57:8f:fe:df:e5:7b:01:
                    28:1c:01:38:fa:93:24:14:51:69:6f:93:e7:13:56:
                    31:ad:b3:47:76:1a:2d:a5:61:3e:72:e6:42:fe:35:
                    cf:b7:72:75:7b:35:c9:78:9e:d8:2b:b4:e6:05:52:
                    12:27:32:72:06:05:d8:0e:28:a3:30:af:4f:16:dd:
                    d3:a4:93:fb:e8:cf:6d:61:3e:01:e9:dd:20:6f:c2:
                    6e:3e:80:e3:59:d1:1e:71:53:c6:42:f8:f3:20:a1:
                    b8:00:3f:a5:12:43:68:6b:43:ef:6d:fe:0e:a1:fb:
                    f5:7a:66:71:a0:de:a6:32:46:f5:5e:72:dd:b7:fb:
                    16:73:79:97:1d:f5:ac:a4:10:ff:f3:9d:c6:57:fa:
                    ca:0a:37:9a:44:6d:10:eb:4d:d0:d8:13:4b:a9:24:
                    8b:79:0a:f4:03:d4:51:b6:2c:3e:a6:f8:61:20:5b:
                    ed:78:9c:30:6e:e2:d7:a0:ab:b5:8c:d4:d8:c5:7c:
                    21:d2:e0:d4:30:df:82:cf:0e:1d:a6:6b:61:93:db:
                    63:42:48:6a:1e:4f:1a:43:f3:33:87:26:7f:90:e2:
                    25:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5A:C1:EE:FD:EF:CA:B3:71:B4:13:F5:8A:1A:46:2B:03:D4:3B:9B
            X509v3 Authority Key Identifier:
                keyid:D9:BD:70:E7:77:F8:61:AE:54:38:57:14:8E:63:35:2F:DA:84:C0:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2b1w53f4Ya5UOFcUjmM1L9qEwHo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/2b1w53f4Ya5UOFcUjmM1L9qEwHo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:f8:54:79:14:90:bb:b3:2e:54:6d:15:61:55:b6:96:45:96:
         0d:a7:31:dd:cc:ef:53:cb:ae:ee:fe:99:91:98:49:01:7a:23:
         6f:ed:af:a6:a4:e6:4c:85:89:e4:cd:95:df:7e:29:2f:38:86:
         31:8c:20:2a:60:7f:73:2a:c8:86:a2:6f:f7:4e:03:ee:54:46:
         0b:e5:59:59:df:6b:20:12:d0:4f:79:a1:3a:a3:fe:43:d6:f4:
         ae:5f:85:04:e8:1c:2f:cd:a4:8f:89:90:4b:b7:d8:55:7a:5d:
         73:a8:98:44:a1:06:4e:60:5c:a1:ad:54:14:79:c5:16:cc:a2:
         5f:39:fb:e1:27:c9:1a:cd:7a:70:72:64:32:13:06:a3:4b:b0:
         9b:34:89:81:4b:73:fc:76:52:ff:67:41:56:06:c9:b2:12:49:
         f6:8f:94:d2:9d:74:49:ee:ce:81:37:d6:1a:af:01:8e:c0:08:
         ec:8c:ef:09:16:3b:8d:13:90:ea:84:10:80:43:b6:19:f7:c7:
         4f:c5:7a:e3:eb:03:85:ef:9a:67:cf:00:75:2d:e6:12:5c:53:
         b8:44:7a:ec:52:69:48:c9:51:d6:16:a7:59:36:0c:d6:a9:8a:
         f4:8a:ab:fd:6d:50:5f:68:d1:25:0f:6d:9d:ab:9c:58:cc:7a:
         50:35:f2:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjBBRjAxMTAvBgNVBAUTKEQ5QkQ3MEU3NzdGODYxQUU1NDM4NTcxNDhFNjMzNTJG
REE4NEMwN0EwHhcNMjYwNzI2MTcxOTA2WhcNMjYwODAyMTcxOTA2WjAYMRYwFAYD
VQQDEw02YTY2NDE4Yi01YWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyDYgB0aqLtzjUe3TVdJtmyDK3N8M9E11egBIu7upaM8YUn69gleP/t/lewEo
HAE4+pMkFFFpb5PnE1YxrbNHdhotpWE+cuZC/jXPt3J1ezXJeJ7YK7TmBVISJzJy
BgXYDiijMK9PFt3TpJP76M9tYT4B6d0gb8JuPoDjWdEecVPGQvjzIKG4AD+lEkNo
a0Pvbf4Oofv1emZxoN6mMkb1XnLdt/sWc3mXHfWspBD/853GV/rKCjeaRG0Q603Q
2BNLqSSLeQr0A9RRtiw+pvhhIFvteJwwbuLXoKu1jNTYxXwh0uDUMN+Czw4dpmth
k9tjQkhqHk8aQ/MzhyZ/kOIlIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGhawe79
78qzcbQT9YoaRisD1DubMB8GA1UdIwQYMBaAFNm9cOd3+GGuVDhXFI5jNS/ahMB6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEFGMC9FMzc2Mjk1MDBG
RkYxMUU5ODgxNUFFMjJDNEY5QUUwMi8yYjF3NTNmNFlhNVVPRmNVam1NMUw5cUV3
SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJiMXc1M2Y0WWE1VU9GY1VqbU0xTDlxRXdIby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MEFGMC9FMzc2Mjk1MDBGRkYxMUU5ODgxNUFFMjJDNEY5QUUwMi8yYjF3NTNmNFlh
NVVPRmNVam1NMUw5cUV3SG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkfhUeRSQu7MuVG0VYVW2lkWWDacx3czvU8uu7v6ZkZhJAXojb+2vpqTmTIWJ
5M2V334pLziGMYwgKmB/cyrIhqJv904D7lRGC+VZWd9rIBLQT3mhOqP+Q9b0rl+F
BOgcL82kj4mQS7fYVXpdc6iYRKEGTmBcoa1UFHnFFsyiXzn74SfJGs16cHJkMhMG
o0uwmzSJgUtz/HZS/2dBVgbJshJJ9o+U0p10Se7OgTfWGq8BjsAI7IzvCRY7jROQ
6oQQgEO2GffHT8V64+sDhe+aZ88AdS3mElxTuER67FJpSMlR1hanWTYM1qmK9Iqr
/W1QX2jRJQ9tnaucWMx6UDXyfw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 07:34:24 2026 by rpki-client