Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft
File:                     70llBmvaJCursGhbwuat2fdWM_0.mft (raw, json)
Hash identifier:          edc/OoRGtstDwrfGSIrsH03w+YGgYPKHbyR1rhqRkgQ=
Subject key identifier:   27:06:0D:89:08:51:A7:B7:A3:C0:61:FE:19:F4:39:0A:04:4C:14:88
Authority key identifier: EF:49:65:06:6B:DA:24:2B:AB:B0:68:5B:C2:E6:AD:D9:F7:56:33:FD
Certificate issuer:       /CN=A91FE9B1/serialNumber=EF4965066BDA242BABB0685BC2E6ADD9F75633FD
Certificate serial:       06C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft
Manifest number:          06BD
Signing time:             Tue 18 Aug 2026 22:41:16 +0000
Manifest this update:     Tue 18 Aug 2026 22:41:16 +0000
Manifest next update:     Tue 25 Aug 2026 22:41:16 +0000
Files and hashes:         1: 70llBmvaJCursGhbwuat2fdWM_0.crl (hash: FggRe+NWL4TAY/QK4HIoIw6TeybgKIVeql6YTH5BwZY=)
                          2: 02157718B9DF11EBA8BE9876C4F9AE02.roa (hash: PC7NOM6+hnkG1gPiPyv+NHeq+JDdl65OBUlZqNZsHp0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.crl
                          rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 22:41:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1732 (0x6c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE9B1, serialNumber=EF4965066BDA242BABB0685BC2E6ADD9F75633FD
        Validity
            Not Before: Aug 18 22:41:16 2026 GMT
            Not After : Aug 25 22:41:16 2026 GMT
        Subject: CN=6a84df8c-812b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:38:b5:26:3c:4c:c8:93:85:95:30:6f:f8:e5:
                    fb:3e:ed:71:56:70:99:9c:87:0c:19:d9:a0:3d:77:
                    14:e7:8d:11:93:1d:8d:9f:f2:bd:64:22:23:d5:bf:
                    44:ab:8b:04:36:ae:33:13:d7:1b:12:f6:10:9b:4a:
                    ec:27:48:97:2b:8c:8d:87:42:bd:7d:43:83:7f:c9:
                    df:6c:95:f9:3d:b6:ee:b8:2a:f8:3a:c3:3d:d1:8e:
                    f5:37:2d:78:33:69:3b:c3:9f:c6:e1:df:27:74:ed:
                    f4:d2:21:23:52:e5:88:fe:90:63:01:d8:49:d9:12:
                    23:49:3b:67:45:29:f4:4c:5b:3e:e5:00:55:62:aa:
                    3d:c2:82:c1:92:d4:3f:fc:b2:60:a2:59:ef:79:ff:
                    a4:23:97:88:47:97:6c:cb:cb:7e:24:09:df:22:ff:
                    7e:48:f2:89:08:1f:19:22:1a:a3:32:f2:a8:31:8c:
                    3c:2f:ec:e1:28:c9:85:0d:e4:be:4b:94:e6:a2:27:
                    21:06:72:be:4c:12:72:0f:d4:73:77:f9:47:61:de:
                    80:61:21:37:5f:6e:8e:79:9e:93:6a:bc:54:d7:bc:
                    4c:46:b6:70:22:7e:56:b2:99:95:ce:b3:e7:11:e4:
                    06:b5:c4:51:e9:ca:cc:9d:f6:53:75:86:e0:fc:4f:
                    25:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:06:0D:89:08:51:A7:B7:A3:C0:61:FE:19:F4:39:0A:04:4C:14:88
            X509v3 Authority Key Identifier:
                keyid:EF:49:65:06:6B:DA:24:2B:AB:B0:68:5B:C2:E6:AD:D9:F7:56:33:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:56:32:df:55:62:69:c6:ea:95:75:01:62:e8:c7:a8:c8:9a:
         50:df:3e:88:a3:f5:73:06:3d:5f:90:f4:99:75:ae:a8:ea:4e:
         05:16:86:64:e9:31:83:7d:25:1e:c8:18:0a:95:39:61:41:32:
         ad:f6:fc:a4:78:ca:31:78:2a:49:f7:f1:0f:c8:11:4e:e4:da:
         52:5d:8b:e6:ca:87:96:ef:e2:82:39:6a:7c:d3:93:ba:5b:24:
         fd:66:11:d8:a2:5c:a3:35:39:74:ce:a1:13:75:65:c8:10:4e:
         94:93:16:9b:1e:9e:7c:94:8e:8b:8b:84:f9:f1:db:c5:7b:74:
         9e:9b:e0:d0:48:4f:17:38:3f:2c:45:96:36:ac:c1:d8:f2:a4:
         d6:da:e2:8b:14:08:a3:a2:05:14:ec:c8:8b:bc:3c:b0:29:29:
         c3:65:57:20:ee:82:75:e9:2e:f8:97:16:9a:0c:b1:58:1e:49:
         d4:21:c5:ab:82:3c:95:b6:a4:8c:fb:02:83:e8:5f:09:92:3c:
         6d:38:ca:d1:d0:cd:33:6f:92:c4:56:cd:10:6e:35:f1:2b:0e:
         43:1d:22:76:12:8a:2f:26:34:f2:fc:b5:15:7b:f7:bf:50:76:
         6c:d3:4b:da:10:ac:eb:ce:11:df:3e:64:24:61:d0:f1:ac:42:
         f4:83:74:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkU5QjExMTAvBgNVBAUTKEVGNDk2NTA2NkJEQTI0MkJBQkIwNjg1QkMyRTZBREQ5
Rjc1NjMzRkQwHhcNMjYwODE4MjI0MTE2WhcNMjYwODI1MjI0MTE2WjAYMRYwFAYD
VQQDEw02YTg0ZGY4Yy04MTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApji1JjxMyJOFlTBv+OX7Pu1xVnCZnIcMGdmgPXcU540Rkx2Nn/K9ZCIj1b9E
q4sENq4zE9cbEvYQm0rsJ0iXK4yNh0K9fUODf8nfbJX5PbbuuCr4OsM90Y71Ny14
M2k7w5/G4d8ndO300iEjUuWI/pBjAdhJ2RIjSTtnRSn0TFs+5QBVYqo9woLBktQ/
/LJgolnvef+kI5eIR5dsy8t+JAnfIv9+SPKJCB8ZIhqjMvKoMYw8L+zhKMmFDeS+
S5TmoichBnK+TBJyD9Rzd/lHYd6AYSE3X26OeZ6TarxU17xMRrZwIn5WspmVzrPn
EeQGtcRR6crMnfZTdYbg/E8lIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCcGDYkI
Uae3o8Bh/hn0OQoETBSIMB8GA1UdIwQYMBaAFO9JZQZr2iQrq7BoW8Lmrdn3VjP9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTlCMS81QkI5RTAwQUI5
REIxMUVCOUNGM0I4NkVDNEY5QUUwMi83MGxsQm12YUpDdXJzR2hid3VhdDJmZFdN
XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzcwbGxCbXZhSkN1cnNHaGJ3dWF0MmZkV01fMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RTlCMS81QkI5RTAwQUI5REIxMUVCOUNGM0I4NkVDNEY5QUUwMi83MGxsQm12YUpD
dXJzR2hid3VhdDJmZFdNXzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACVYy31ViacbqlXUBYujHqMiaUN8+iKP1cwY9X5D0mXWuqOpOBRaGZOkxg30l
HsgYCpU5YUEyrfb8pHjKMXgqSffxD8gRTuTaUl2L5sqHlu/igjlqfNOTulsk/WYR
2KJcozU5dM6hE3VlyBBOlJMWmx6efJSOi4uE+fHbxXt0npvg0EhPFzg/LEWWNqzB
2PKk1triixQIo6IFFOzIi7w8sCkpw2VXIO6Cdeku+JcWmgyxWB5J1CHFq4I8lbak
jPsCg+hfCZI8bTjK0dDNM2+SxFbNEG418SsOQx0idhKKLyY08vy1FXv3v1B2bNNL
2hCs684R3z5kJGHQ8axC9IN0CA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:47:08 2026 by rpki-client