Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
File:                     h_lY2vSYZZqe7g_xRCJrFxBIneA.mft (raw, json)
Hash identifier:          0hssJRuXn1B6N/OTwxIwOqmyXciVj+eFCwDLE791x8M=
Subject key identifier:   04:75:B5:85:C6:98:04:37:33:21:D5:7C:5F:1D:36:E7:83:06:70:82
Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
Certificate issuer:       /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Certificate serial:       0483
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
Manifest number:          046F
Signing time:             Wed 19 Aug 2026 00:30:14 +0000
Manifest this update:     Wed 19 Aug 2026 00:30:13 +0000
Manifest next update:     Wed 26 Aug 2026 00:30:13 +0000
Files and hashes:         1: h_lY2vSYZZqe7g_xRCJrFxBIneA.crl (hash: JXIfOq/M6EL1PqvmdXFguJ/TQN9BOxmtyQXGiGgxpVY=)
                          2: FFF8A36A34E311EE877E760DC4F9AE02.roa (hash: GiZELc+b+jUgp2lXXKA22MVtc86QrBiVWxgNmFeaq0w=)
                          3: 8DB35F6A766511EF8820F844C4F9AE02.roa (hash: YKkvmk+q8uJbT1Z9J9DbUkbZ+Iajvavs0STqwkz+YJA=)
                          4: 8C5D4FF4766511EF8820F844C4F9AE02.roa (hash: iCSd+4enkqxY2lDM1zxQZRRXgBPKUIXfnyxSxCEqtSs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl
                          rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1155 (0x483)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91354AE, serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
        Validity
            Not Before: Aug 19 00:30:13 2026 GMT
            Not After : Aug 26 00:30:13 2026 GMT
        Subject: CN=6a84f915-3ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3c:dd:7c:e9:e4:fc:e5:30:67:95:46:aa:05:
                    dd:89:6d:8c:93:59:22:96:35:3d:64:a4:32:a0:d2:
                    f3:55:2e:8b:e1:15:46:c3:fd:34:c6:cf:03:88:5b:
                    bd:35:0c:48:72:a1:15:2f:cd:67:1e:06:a7:10:35:
                    65:f1:94:da:1a:50:a3:16:e5:c9:dd:4e:3e:ac:c5:
                    89:53:d8:29:a8:1e:a0:de:df:49:94:5c:18:0c:24:
                    19:6e:c2:01:fb:a5:d0:e3:f1:18:f0:34:ff:ca:2b:
                    9f:73:c2:07:8a:3a:62:c8:55:19:58:fa:43:9e:94:
                    58:32:ba:0e:9d:8a:2b:a0:15:45:c1:e8:40:73:aa:
                    bd:a0:14:97:d2:94:f9:76:1d:c4:43:37:d9:54:95:
                    3a:e6:b5:21:0e:eb:d4:bb:f4:89:fa:f0:da:09:85:
                    e2:e7:bb:45:18:7b:1d:05:3b:9c:10:8b:22:51:87:
                    6e:9a:2a:76:f1:bb:c9:8f:a4:c8:67:b6:5b:f7:f3:
                    5e:47:f6:e2:f1:ac:ea:2f:70:cc:e0:cc:fc:bb:dd:
                    af:c1:02:ae:cf:fd:b4:73:b1:67:70:b9:d5:7a:b0:
                    cb:9e:50:55:85:f0:d4:a9:6b:87:1d:24:fe:bb:d7:
                    8e:33:34:02:22:fc:3a:bc:3a:46:45:0d:bd:4a:d9:
                    b7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:75:B5:85:C6:98:04:37:33:21:D5:7C:5F:1D:36:E7:83:06:70:82
            X509v3 Authority Key Identifier:
                keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b7:c3:7b:fc:9e:09:a3:b8:62:89:80:c5:09:fa:6c:68:5a:
         e3:63:2e:80:d2:1a:7e:d7:31:2d:46:50:c8:cf:61:2d:1a:49:
         91:4a:87:2f:64:f9:15:b7:72:45:d2:9b:1e:02:c3:f9:ad:3e:
         3f:c2:4c:5b:d5:cd:28:16:ae:d4:0e:0d:70:1f:9f:56:8c:6b:
         55:38:d1:dc:33:32:50:99:88:af:e1:ec:6a:76:79:86:b1:b0:
         c8:18:09:bf:16:1e:51:b1:7a:59:ee:f0:68:4f:4c:cf:75:31:
         e0:48:a1:6a:23:23:a6:88:26:ff:07:8d:aa:20:82:67:97:4a:
         97:4e:7b:d5:ee:99:cf:63:92:9b:f7:71:e0:b3:5e:88:8e:73:
         ea:36:dc:ce:12:cf:bf:0c:40:e3:1b:8b:79:21:39:d6:4c:3a:
         9f:fb:10:a6:4f:95:57:6a:72:10:3b:c0:c8:72:e4:69:21:64:
         98:ff:a7:16:f4:a9:14:1f:3f:fa:d6:98:fe:e6:16:2d:99:b1:
         a0:2a:42:99:d0:0b:3d:9b:fb:74:d0:2b:6f:30:c6:90:9a:17:
         68:7a:2d:56:ea:98:69:b5:4b:a1:16:12:cb:e4:9b:3a:f6:a0:
         f5:90:54:7f:fb:4a:8b:48:da:c5:44:c8:77:73:26:8b:48:a8:
         e7:7f:87:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzU0QUUxMTAvBgNVBAUTKDg3Rjk1OERBRjQ5ODY1OUE5RUVFMEZGMTQ0MjI2QjE3
MTA0ODlERTAwHhcNMjYwODE5MDAzMDEzWhcNMjYwODI2MDAzMDEzWjAYMRYwFAYD
VQQDEw02YTg0ZjkxNS0zZWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArTzdfOnk/OUwZ5VGqgXdiW2Mk1kiljU9ZKQyoNLzVS6L4RVGw/00xs8DiFu9
NQxIcqEVL81nHganEDVl8ZTaGlCjFuXJ3U4+rMWJU9gpqB6g3t9JlFwYDCQZbsIB
+6XQ4/EY8DT/yiufc8IHijpiyFUZWPpDnpRYMroOnYoroBVFwehAc6q9oBSX0pT5
dh3EQzfZVJU65rUhDuvUu/SJ+vDaCYXi57tFGHsdBTucEIsiUYdumip28bvJj6TI
Z7Zb9/NeR/bi8azqL3DM4Mz8u92vwQKuz/20c7FncLnVerDLnlBVhfDUqWuHHST+
u9eOMzQCIvw6vDpGRQ29Stm3WwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAR1tYXG
mAQ3MyHVfF8dNueDBnCCMB8GA1UdIwQYMBaAFIf5WNr0mGWanu4P8UQiaxcQSJ3g
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTRBRS82QzlGMkRGQUE1
MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpacWU3Z194UkNKckZ4Qklu
ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hfbFkydlNZWlpxZTdnX3hSQ0pyRnhCSW5lQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NTRBRS82QzlGMkRGQUE1MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpa
cWU3Z194UkNKckZ4QkluZUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQrfDe/yeCaO4YomAxQn6bGha42MugNIaftcxLUZQyM9hLRpJkUqHL2T5Fbdy
RdKbHgLD+a0+P8JMW9XNKBau1A4NcB+fVoxrVTjR3DMyUJmIr+HsanZ5hrGwyBgJ
vxYeUbF6We7waE9Mz3Ux4EihaiMjpogm/weNqiCCZ5dKl0571e6Zz2OSm/dx4LNe
iI5z6jbczhLPvwxA4xuLeSE51kw6n/sQpk+VV2pyEDvAyHLkaSFkmP+nFvSpFB8/
+taY/uYWLZmxoCpCmdALPZv7dNArbzDGkJoXaHotVuqYabVLoRYSy+SbOvag9ZBU
f/tKi0jaxUTId3Mmi0io53+HSg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:02:36 2026 by rpki-client