Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
File:                     JTgA7RbtD_M39wQNDj3xFBwWFhw.mft (raw, json)
Hash identifier:          caZ1XSmOI0d1c3DZNNom26JcY0qQdwNdq5s+uyNKW6E=
Subject key identifier:   6F:73:2A:80:37:E1:49:57:1E:17:27:8E:BF:99:DA:3A:1A:12:D8:B6
Authority key identifier: 25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C
Certificate issuer:       /CN=A91FB8C9/serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C
Certificate serial:       02E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
Manifest number:          02CB
Signing time:             Mon 27 Jul 2026 02:37:29 +0000
Manifest this update:     Mon 27 Jul 2026 02:37:28 +0000
Manifest next update:     Mon 03 Aug 2026 02:37:28 +0000
Files and hashes:         1: JTgA7RbtD_M39wQNDj3xFBwWFhw.crl (hash: PSvLQYglgNvZq8mdYznq+9s8kQpFzP3iy7N9ar29lwk=)
                          2: 7C562342FB6111F0999DAF114B6F56BC.roa (hash: 4I/aBZekpVxiHK08zsqmF9hWHqatnQF4vOf7EgjVuzw=)
                          3: ED685B8CDFA511EF8CC2890BC4F9AE02.roa (hash: mKIcN9YFRQiDKnYwlenKjFkKtn7bW7/hgN2WOBRtlaY=)
                          4: 2D215B32584111EDBE50107CC4F9AE02.roa (hash: Pa8/tXZDBBcugTIYS0qc4xZU9zj2bowpPp2mEtUG0X8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl
                          rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:37:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 736 (0x2e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB8C9, serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C
        Validity
            Not Before: Jul 27 02:37:28 2026 GMT
            Not After : Aug  3 02:37:28 2026 GMT
        Subject: CN=6a66c469-3fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:06:3b:9c:00:aa:ce:39:de:45:ec:44:0d:ba:
                    15:f5:a8:21:74:c2:e9:1b:1c:ae:02:c4:58:07:c8:
                    e6:49:d4:41:87:14:e7:d2:73:cc:a1:a6:6b:23:cb:
                    f8:c5:5d:d4:60:e6:3e:e1:b9:73:6c:49:3a:2f:84:
                    1c:96:2e:a4:88:3c:d0:52:97:ba:38:bc:e4:3d:5e:
                    fa:95:39:47:a0:46:0d:65:55:64:56:1e:77:c8:dc:
                    dd:83:32:26:63:a0:40:64:85:33:67:23:1b:47:ae:
                    15:f0:d3:8f:db:74:21:72:0c:69:f0:30:25:84:71:
                    fd:aa:7a:82:78:b2:38:f4:0c:2b:1e:1d:da:68:07:
                    59:01:55:d6:54:d2:18:12:cd:64:b6:55:1b:3b:30:
                    01:0f:3b:f7:8e:7b:18:84:05:f8:a5:77:a2:0d:f5:
                    c5:7a:f1:f1:5f:ca:11:d2:d5:87:f6:d7:7a:37:a8:
                    83:39:5d:82:9f:f8:1e:0c:55:b7:27:79:ca:fd:7a:
                    40:2a:9c:f2:d8:cf:b3:ca:8b:18:67:fa:11:3e:30:
                    5b:2d:4f:4c:51:9e:0e:98:63:a7:4c:ef:98:50:4e:
                    9c:00:98:7e:38:cc:be:43:e0:2a:6c:e5:3d:38:d4:
                    64:ff:4e:2b:aa:7a:ff:c7:80:0f:2e:79:df:d5:af:
                    42:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:73:2A:80:37:E1:49:57:1E:17:27:8E:BF:99:DA:3A:1A:12:D8:B6
            X509v3 Authority Key Identifier:
                keyid:25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:56:b9:09:02:0b:b7:4f:31:78:cc:74:4c:dd:af:c8:c9:bc:
         0e:8b:dd:22:65:7a:cd:be:8e:02:6b:ec:51:3b:06:41:8e:b1:
         d9:72:6f:68:a9:73:9c:32:63:96:34:61:32:31:21:35:57:db:
         2e:7a:5f:f5:27:ea:93:f7:82:19:0f:2b:93:22:0e:de:53:f8:
         bc:40:bf:a0:ab:4e:a6:58:6c:5d:2c:0d:0f:aa:26:ce:70:11:
         42:e0:0b:0d:b2:d4:38:1e:12:88:0a:f7:03:0f:82:88:33:7d:
         64:1f:f1:a4:9d:0a:21:01:86:26:22:1f:72:e4:7f:16:19:4a:
         99:ea:b8:4a:00:0b:23:73:88:01:ce:e7:48:52:b6:3b:26:a1:
         f8:4e:b2:f3:e1:d9:9d:7a:c0:a5:8c:65:6b:2e:1c:02:7b:ba:
         ab:36:06:15:38:b6:f2:c5:38:41:0d:af:76:34:f4:05:76:e1:
         9b:0c:7d:07:4d:33:3a:db:42:34:e5:45:aa:17:7a:84:db:36:
         07:1c:af:3a:db:ff:5c:17:ad:0b:fb:58:11:70:70:65:70:2e:
         0d:80:4f:70:24:7f:e1:25:9b:59:2c:e8:ad:a1:d7:81:1c:35:
         a1:1a:b8:09:0a:85:88:4e:6b:f3:83:f3:87:96:71:dd:a0:1c:
         a8:6b:23:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkI4QzkxMTAvBgNVBAUTKDI1MzgwMEVEMTZFRDBGRjMzN0Y3MDQwRDBFM0RGMTE0
MUMxNjE2MUMwHhcNMjYwNzI3MDIzNzI4WhcNMjYwODAzMDIzNzI4WjAYMRYwFAYD
VQQDEw02YTY2YzQ2OS0zZmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlQY7nACqzjneRexEDboV9aghdMLpGxyuAsRYB8jmSdRBhxTn0nPMoaZrI8v4
xV3UYOY+4blzbEk6L4Qcli6kiDzQUpe6OLzkPV76lTlHoEYNZVVkVh53yNzdgzIm
Y6BAZIUzZyMbR64V8NOP23Qhcgxp8DAlhHH9qnqCeLI49AwrHh3aaAdZAVXWVNIY
Es1ktlUbOzABDzv3jnsYhAX4pXeiDfXFevHxX8oR0tWH9td6N6iDOV2Cn/geDFW3
J3nK/XpAKpzy2M+zyosYZ/oRPjBbLU9MUZ4OmGOnTO+YUE6cAJh+OMy+Q+AqbOU9
ONRk/04rqnr/x4APLnnf1a9CxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG9zKoA3
4UlXHhcnjr+Z2joaEti2MB8GA1UdIwQYMBaAFCU4AO0W7Q/zN/cEDQ498RQcFhYc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjhDOS8yMTk3QjA5MjU4
M0YxMUVEODE4MUU1N0JDNEY5QUUwMi9KVGdBN1JidERfTTM5d1FORGozeEZCd1dG
aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pUZ0E3UmJ0RF9NMzl3UU5EajN4RkJ3V0Zody5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QjhDOS8yMTk3QjA5MjU4M0YxMUVEODE4MUU1N0JDNEY5QUUwMi9KVGdBN1JidERf
TTM5d1FORGozeEZCd1dGaHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVla5CQILt08xeMx0TN2vyMm8DovdImV6zb6OAmvsUTsGQY6x2XJvaKlznDJj
ljRhMjEhNVfbLnpf9Sfqk/eCGQ8rkyIO3lP4vEC/oKtOplhsXSwND6omznARQuAL
DbLUOB4SiAr3Aw+CiDN9ZB/xpJ0KIQGGJiIfcuR/FhlKmeq4SgALI3OIAc7nSFK2
Oyah+E6y8+HZnXrApYxlay4cAnu6qzYGFTi28sU4QQ2vdjT0BXbhmwx9B00zOttC
NOVFqhd6hNs2BxyvOtv/XBetC/tYEXBwZXAuDYBPcCR/4SWbWSzoraHXgRw1oRq4
CQqFiE5r84Pzh5Zx3aAcqGsj8A==
-----END CERTIFICATE-----
Generated at Mon Jul 27 05:43:32 2026 by rpki-client