Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft
File:                     0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft (raw, json)
Hash identifier:          z4gyI9XGDLAMUUh3pcvJBkUqkT1Y2sq37IX4fpgSF60=
Subject key identifier:   73:90:65:43:FC:79:53:93:05:82:15:2D:43:03:7D:66:E9:5C:A9:FA
Authority key identifier: D1:8D:44:5D:26:57:EA:FD:D4:A6:6E:75:B0:FB:D6:03:03:F0:25:FC
Certificate issuer:       /CN=A91FD6A0/serialNumber=D18D445D2657EAFDD4A66E75B0FBD60303F025FC
Certificate serial:       BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft
Manifest number:          BA
Signing time:             Mon 27 Jul 2026 09:09:58 +0000
Manifest this update:     Mon 27 Jul 2026 09:09:57 +0000
Manifest next update:     Mon 03 Aug 2026 09:09:57 +0000
Files and hashes:         1: 0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl (hash: tLOnWxChVbBuY9BOnlIX7Mr20Uwy6cSEKozocZ1YFXs=)
                          2: 39926F626DB211F0AC1D0420C4F9AE02.roa (hash: RBAEIDXbn7aMgm9qJyEPSxcCdAduSFbdLObAMZhpbA4=)
                          3: 053416126DB211F0962DC55BC4F9AE02.roa (hash: D1cY+wsL/1tx4TuHaNCoTj1n1/CaZxYlcnpWmDl3198=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl
                          rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD6A0, serialNumber=D18D445D2657EAFDD4A66E75B0FBD60303F025FC
        Validity
            Not Before: Jul 27 09:09:57 2026 GMT
            Not After : Aug  3 09:09:57 2026 GMT
        Subject: CN=6a672065-2c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8d:fc:ba:74:4e:d3:13:31:80:67:85:fa:be:
                    76:a3:b1:d1:8c:31:f4:7f:45:26:82:29:54:4d:5e:
                    56:0a:f0:72:13:88:bc:17:59:a7:be:25:10:bf:8a:
                    b5:85:71:01:cc:88:c5:57:a4:38:e7:12:3c:e2:92:
                    c8:42:e9:fd:0b:fa:07:03:c1:82:f8:c3:7e:12:e9:
                    d2:b5:99:a2:5d:67:01:6e:0d:8c:73:5e:81:92:0d:
                    7b:9e:a2:89:75:97:1f:5f:c4:8a:0b:a1:4a:07:3c:
                    ec:81:28:f7:80:39:44:47:b1:da:65:90:ee:4b:3c:
                    57:50:2a:7d:45:8a:48:a1:15:a4:ce:a7:6f:f8:79:
                    50:aa:09:16:8e:a3:a7:8f:00:ae:f7:86:4e:20:e1:
                    9a:b7:7f:16:d1:42:22:06:90:5d:b9:0c:15:7a:b1:
                    35:89:f8:a6:0f:8b:2b:ea:43:3d:13:16:ee:a5:72:
                    15:e2:43:04:4b:1e:9b:bd:de:7c:7b:7d:be:7b:f7:
                    de:04:2b:a4:ef:db:a8:7d:9a:11:e7:24:2a:86:a5:
                    77:17:2c:31:30:51:e2:9c:2a:ba:95:bb:48:73:44:
                    a1:0e:79:c1:74:12:44:5a:7c:29:5c:3a:d3:b0:96:
                    76:3d:40:6a:24:70:13:45:a9:bc:d6:32:b4:0c:9e:
                    56:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:90:65:43:FC:79:53:93:05:82:15:2D:43:03:7D:66:E9:5C:A9:FA
            X509v3 Authority Key Identifier:
                keyid:D1:8D:44:5D:26:57:EA:FD:D4:A6:6E:75:B0:FB:D6:03:03:F0:25:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:25:8c:d2:21:81:9b:06:ad:9e:5b:2a:e3:f5:25:1b:16:d8:
         c4:bf:07:21:10:c1:39:d7:68:ed:c6:d6:c3:2c:fc:26:e9:da:
         c5:f9:f6:a5:c7:f4:8b:7b:cc:e3:19:3c:1f:54:bc:59:ac:7d:
         ab:37:4d:47:dc:e5:85:d7:b8:1b:6b:38:33:39:66:ba:20:9d:
         48:49:8d:0c:e3:c3:34:9a:13:0d:a8:94:d5:a5:7a:5f:f9:1d:
         c2:f2:7f:2e:6d:97:fb:50:8a:6b:65:8a:be:66:14:c5:47:ec:
         b8:0a:3b:96:d2:5b:a5:40:a1:22:5a:b4:5e:c4:18:c4:80:fb:
         24:b5:0e:ca:c7:e6:35:e6:69:63:7d:9c:4f:c7:3c:6a:a1:97:
         18:d4:38:83:79:4b:f3:79:68:4e:c2:91:0c:2c:e9:0d:d9:16:
         45:8d:e0:4a:65:ad:61:cc:e1:ce:5b:23:5a:ed:3b:4e:21:14:
         72:5e:9f:1e:1e:06:d2:bb:9d:0d:5d:cf:e3:61:da:25:88:9e:
         24:e6:78:6d:f0:aa:d0:9c:43:f2:84:35:c3:0f:bd:83:67:6d:
         59:bb:f6:3f:b5:ad:5a:09:69:19:0b:1f:6b:c9:c6:21:12:7b:
         bf:82:56:ed:aa:49:42:b8:f1:9a:cc:19:89:4f:10:3f:a8:b2:
         a0:05:d0:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkQ2QTAxMTAvBgNVBAUTKEQxOEQ0NDVEMjY1N0VBRkRENEE2NkU3NUIwRkJENjAz
MDNGMDI1RkMwHhcNMjYwNzI3MDkwOTU3WhcNMjYwODAzMDkwOTU3WjAYMRYwFAYD
VQQDEw02YTY3MjA2NS0yYzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Y38unRO0xMxgGeF+r52o7HRjDH0f0UmgilUTV5WCvByE4i8F1mnviUQv4q1
hXEBzIjFV6Q45xI84pLIQun9C/oHA8GC+MN+EunStZmiXWcBbg2Mc16Bkg17nqKJ
dZcfX8SKC6FKBzzsgSj3gDlER7HaZZDuSzxXUCp9RYpIoRWkzqdv+HlQqgkWjqOn
jwCu94ZOIOGat38W0UIiBpBduQwVerE1ifimD4sr6kM9ExbupXIV4kMESx6bvd58
e32+e/feBCuk79uofZoR5yQqhqV3FywxMFHinCq6lbtIc0ShDnnBdBJEWnwpXDrT
sJZ2PUBqJHATRam81jK0DJ5WMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHOQZUP8
eVOTBYIVLUMDfWbpXKn6MB8GA1UdIwQYMBaAFNGNRF0mV+r91KZudbD71gMD8CX8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDZBMC83OERGNjA3QzZE
QjExMUYwQUQ0QjVFNUFDNEY5QUUwMi8wWTFFWFNaWDZ2M1VwbTUxc1B2V0F3UHdK
ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBZMUVYU1pYNnYzVXBtNTFzUHZXQXdQd0pmdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RDZBMC83OERGNjA3QzZEQjExMUYwQUQ0QjVFNUFDNEY5QUUwMi8wWTFFWFNaWDZ2
M1VwbTUxc1B2V0F3UHdKZncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjSWM0iGBmwatnlsq4/UlGxbYxL8HIRDBOddo7cbWwyz8Junaxfn2pcf0i3vM
4xk8H1S8Wax9qzdNR9zlhde4G2s4MzlmuiCdSEmNDOPDNJoTDaiU1aV6X/kdwvJ/
Lm2X+1CKa2WKvmYUxUfsuAo7ltJbpUChIlq0XsQYxID7JLUOysfmNeZpY32cT8c8
aqGXGNQ4g3lL83loTsKRDCzpDdkWRY3gSmWtYczhzlsjWu07TiEUcl6fHh4G0rud
DV3P42HaJYieJOZ4bfCq0JxD8oQ1ww+9g2dtWbv2P7WtWglpGQsfa8nGIRJ7v4JW
7apJQrjxmswZiU8QP6iyoAXQmw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 06:17:26 2026 by rpki-client