Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft
File:                     3Fys5yJTQlYHBjKHYfkTyTZJius.mft (raw, json)
Hash identifier:          dUZg5hmWWtpn8oKMiK6pgK6hef1RGeOGIdciTszdHps=
Subject key identifier:   39:0F:BC:1A:09:98:52:96:97:30:7F:E7:C4:4F:F4:37:D1:DD:87:BB
Authority key identifier: DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB
Certificate issuer:       /CN=A91317CB/serialNumber=DC5CACE7225342560706328761F913C936498AEB
Certificate serial:       1602
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft
Manifest number:          15F8
Signing time:             Tue 18 Aug 2026 16:52:44 +0000
Manifest this update:     Tue 18 Aug 2026 16:52:44 +0000
Manifest next update:     Tue 25 Aug 2026 16:52:44 +0000
Files and hashes:         1: 3Fys5yJTQlYHBjKHYfkTyTZJius.crl (hash: 0a+/nTe8adQFvyZWr3kfAtn7gmjMWSuwJO0x+0ADt1M=)
                          2: CBA65F7C4AB411E887FB7E29C4F9AE02.roa (hash: 3tk4QPsr03ML5SuwBLsP7qy8OTNJWI4sJQvwqcILBHA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl
                          rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 16:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5634 (0x1602)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91317CB, serialNumber=DC5CACE7225342560706328761F913C936498AEB
        Validity
            Not Before: Aug 18 16:52:44 2026 GMT
            Not After : Aug 25 16:52:44 2026 GMT
        Subject: CN=6a848ddc-b142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b0:4e:da:8e:2f:73:56:87:b0:e4:6f:d4:60:
                    17:f9:b1:e0:15:f0:20:13:b1:b6:7c:7b:88:4e:3d:
                    ea:2f:2b:21:ed:86:95:30:46:d1:6b:c5:14:b1:2e:
                    4a:01:35:5c:8e:54:ff:b8:30:f9:47:16:03:c1:78:
                    ae:fd:a7:91:c3:c5:7b:d0:5d:2c:77:f5:97:60:11:
                    01:7c:fc:bd:71:38:c3:75:1e:2a:18:b7:1b:7a:91:
                    ae:b6:7a:d9:78:aa:0f:2c:da:56:a3:4c:2e:99:0b:
                    25:e7:b9:f1:8e:74:74:9a:4b:59:49:06:b9:2f:46:
                    33:f8:c2:9f:b7:dd:1b:02:1e:b3:02:b6:9f:12:d9:
                    a2:26:37:5a:b4:f1:de:b1:34:98:03:79:24:ae:c4:
                    52:be:bc:e0:03:68:82:4a:86:63:88:03:b0:ad:7d:
                    ca:d9:c5:c5:3b:6f:69:80:c7:ed:3f:4e:a0:44:f9:
                    fe:d4:b1:50:0b:bd:fa:03:b8:9c:a5:be:95:4d:42:
                    e9:c6:a7:7f:3b:b9:6f:29:2b:ed:f4:02:2d:93:71:
                    c8:a9:ad:84:e6:56:03:2c:c0:be:f0:0d:43:e2:af:
                    bd:78:0e:51:c2:3b:3a:5a:9f:c1:fe:4e:a7:02:c3:
                    ec:28:ac:00:d3:75:ec:0d:66:6c:49:e1:17:f2:77:
                    fe:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0F:BC:1A:09:98:52:96:97:30:7F:E7:C4:4F:F4:37:D1:DD:87:BB
            X509v3 Authority Key Identifier:
                keyid:DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:bd:26:20:48:d1:e6:45:6f:12:a3:79:59:90:9b:e9:51:6a:
         4c:06:72:8c:e3:c9:0e:57:df:7f:0e:41:f2:89:60:2e:96:44:
         0a:26:ce:a4:f2:83:a4:15:19:33:a0:33:f6:cf:c4:fa:58:5a:
         90:09:30:4f:47:a8:bd:2f:b7:23:a4:c9:a1:19:c8:fa:c6:4e:
         11:d7:43:04:c4:99:fb:72:8b:5f:7f:17:a0:05:4e:7d:24:69:
         c6:6d:f6:15:c6:52:ab:82:1b:ff:0b:da:74:a4:78:46:76:bf:
         3b:dd:7e:cc:a2:e3:e6:58:5e:96:d0:9b:07:86:89:d0:a4:3f:
         d4:ea:d5:64:d2:44:08:e3:7c:91:5e:d2:f2:12:3d:ce:f3:15:
         d5:23:64:35:38:5a:5d:97:c7:20:54:11:27:d7:6b:3f:79:33:
         f0:4f:6f:aa:f9:47:88:a0:d1:cf:18:93:db:31:f2:49:43:a8:
         69:29:95:93:9d:37:20:bf:03:f9:8b:56:ef:5c:aa:be:58:39:
         f8:5f:c8:3a:e0:2b:6f:2e:bb:8d:a0:9b:dc:9e:b4:f5:97:53:
         83:a6:62:63:af:e9:22:52:8d:91:8c:32:26:81:e1:e5:f8:52:
         1e:e4:4b:50:77:ef:7d:50:8f:75:eb:f3:70:2b:99:15:0e:2c:
         90:76:05:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:48:20 2026 by rpki-client