Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft
File:                     dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft (raw, json)
Hash identifier:          W9icgavRwD5d8PQOVb4XCPnVg8eXMArfWdxYtSiqQpg=
Subject key identifier:   B8:03:09:B7:A3:EE:55:17:53:42:10:14:06:63:48:7B:87:9F:B1:66
Authority key identifier: 74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49
Certificate issuer:       /CN=A91249C2/serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49
Certificate serial:       EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft
Manifest number:          E2
Signing time:             Wed 19 Aug 2026 07:14:54 +0000
Manifest this update:     Wed 19 Aug 2026 07:14:54 +0000
Manifest next update:     Wed 26 Aug 2026 07:14:54 +0000
Files and hashes:         1: dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl (hash: D4p8mo5jzykgUQZDDyFDQwy//Qjwy4z1WNB0HFkbiYk=)
                          2: ED3D0F9E48C911F0B59FB71DC4F9AE02.roa (hash: 3GDgDAyytAqGw1QJu48r4HFjWRXZvVa4Wmp9uyTwi6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl
                          rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 07:14:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91249C2, serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49
        Validity
            Not Before: Aug 19 07:14:54 2026 GMT
            Not After : Aug 26 07:14:54 2026 GMT
        Subject: CN=6a8557ee-391e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ed:e1:4a:de:9d:f4:0a:af:84:37:a1:9c:03:
                    19:f0:c2:70:f7:5d:66:f6:bc:fd:21:0d:4f:3e:46:
                    92:0b:76:f4:53:b6:5b:82:c3:3e:88:48:4a:db:6f:
                    2e:13:23:6a:e5:6a:ae:28:61:4d:03:d0:8f:c0:38:
                    a3:0c:87:e2:89:0d:8a:1a:38:1b:0f:6a:62:02:c0:
                    dc:34:60:7c:61:55:17:cf:9c:f3:ab:b9:c3:b0:0b:
                    46:e7:77:b4:f1:d0:39:1e:d0:22:e7:88:82:c2:4a:
                    76:34:4f:22:b6:c7:da:1a:01:e5:5d:df:c8:24:42:
                    47:5d:f3:73:91:e7:92:0e:ce:78:28:f2:4f:be:ad:
                    f2:26:72:25:35:09:47:1e:83:dc:9c:2e:f2:e7:cb:
                    48:d7:9b:4d:c1:57:b7:4a:c2:6c:a4:f2:d7:b4:14:
                    b4:28:dd:82:5c:42:33:d9:92:2e:43:be:f6:c3:93:
                    30:f8:de:c9:b6:4b:15:16:25:51:76:99:41:ba:bf:
                    d2:27:ce:ce:d6:23:5a:ac:e8:d8:06:12:60:ef:2f:
                    8e:08:01:26:84:7d:d0:8c:73:ef:df:e7:59:0a:fb:
                    3e:34:68:13:49:79:50:0f:30:0c:d5:98:3b:47:af:
                    4a:55:0c:98:3e:fa:60:fb:31:b0:7d:a5:a5:92:d8:
                    59:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:03:09:B7:A3:EE:55:17:53:42:10:14:06:63:48:7B:87:9F:B1:66
            X509v3 Authority Key Identifier:
                keyid:74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:5d:1c:24:29:28:3a:71:db:aa:6d:72:fa:06:a1:3d:f8:0f:
         92:fe:fb:33:60:58:69:78:6f:9b:94:a7:40:b6:9f:91:e5:16:
         7c:69:3c:4b:79:47:61:cd:f0:6b:f3:cf:8e:33:41:bb:11:c8:
         9a:bd:d1:52:76:6f:63:38:72:e9:f8:fc:03:f1:57:b1:b1:6f:
         9c:68:37:22:aa:ec:f6:c4:db:f8:ce:85:db:b9:60:33:28:ac:
         75:12:f2:92:f0:97:da:f2:16:7d:f6:c7:29:fd:81:b3:6b:60:
         f2:10:d3:54:e4:57:9d:1a:f0:98:81:18:cd:4f:6d:ca:39:79:
         9e:7c:65:23:8b:fe:8a:ac:ce:38:50:3b:a8:61:34:8c:f5:3b:
         67:e2:3e:90:03:99:d1:dc:f6:85:9d:ad:25:9f:13:80:2d:bf:
         23:b2:ec:3f:f6:92:3d:bf:90:f6:8b:3c:1d:d2:f7:b6:80:16:
         fd:05:aa:f9:3f:a4:65:89:6c:ea:4f:c9:cd:98:8d:42:96:be:
         8c:29:61:fd:ea:e2:68:dc:1a:d3:ae:24:47:52:76:6a:6d:80:
         49:32:67:5b:59:24:ed:2f:98:41:ef:2c:75:7d:dd:fd:bf:88:
         48:cf:d0:8b:69:92:b2:33:81:48:34:dd:e2:9b:21:5a:9c:e6:
         6a:52:d6:28
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQ5QzIxMTAvBgNVBAUTKDc0RENFQUE4NTA2QTJCMzI3Rjg3QTQyRDA3NDFBQzM2
RUVERUVCNDkwHhcNMjYwODE5MDcxNDU0WhcNMjYwODI2MDcxNDU0WjAYMRYwFAYD
VQQDEw02YTg1NTdlZS0zOTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApO3hSt6d9AqvhDehnAMZ8MJw911m9rz9IQ1PPkaSC3b0U7ZbgsM+iEhK228u
EyNq5WquKGFNA9CPwDijDIfiiQ2KGjgbD2piAsDcNGB8YVUXz5zzq7nDsAtG53e0
8dA5HtAi54iCwkp2NE8itsfaGgHlXd/IJEJHXfNzkeeSDs54KPJPvq3yJnIlNQlH
HoPcnC7y58tI15tNwVe3SsJspPLXtBS0KN2CXEIz2ZIuQ772w5Mw+N7JtksVFiVR
dplBur/SJ87O1iNarOjYBhJg7y+OCAEmhH3QjHPv3+dZCvs+NGgTSXlQDzAM1Zg7
R69KVQyYPvpg+zGwfaWlkthZUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLgDCbej
7lUXU0IQFAZjSHuHn7FmMB8GA1UdIwQYMBaAFHTc6qhQaisyf4ekLQdBrDbu3utJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDlDMi9FM0EzREVFNjQ4
QzgxMUYwQjk1NzI2MUNDNEY5QUUwMi9kTnpxcUZCcUt6Sl9oNlF0QjBHc051N2U2
MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ROenFxRkJxS3pKX2g2UXRCMEdzTnU3ZTYway5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NDlDMi9FM0EzREVFNjQ4QzgxMUYwQjk1NzI2MUNDNEY5QUUwMi9kTnpxcUZCcUt6
Sl9oNlF0QjBHc051N2U2MGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAa10cJCkoOnHbqm1y+gahPfgPkv77M2BYaXhvm5SnQLafkeUWfGk8S3lHYc3w
a/PPjjNBuxHImr3RUnZvYzhy6fj8A/FXsbFvnGg3Iqrs9sTb+M6F27lgMyisdRLy
kvCX2vIWffbHKf2Bs2tg8hDTVORXnRrwmIEYzU9tyjl5nnxlI4v+iqzOOFA7qGE0
jPU7Z+I+kAOZ0dz2hZ2tJZ8TgC2/I7LsP/aSPb+Q9os8HdL3toAW/QWq+T+kZYls
6k/JzZiNQpa+jClh/eriaNwa064kR1J2am2ASTJnW1kk7S+YQe8sdX3d/b+ISM/Q
i2mSsjOBSDTd4pshWpzmalLWKA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:04:25 2026 by rpki-client