Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
File:                     C_K1lEw6LMq2wdErw2pa88Lc938.mft (raw, json)
Hash identifier:          Pc521svFPTKtCSPHFJbAbe5RcHev3RV8GM90AkX4ywA=
Subject key identifier:   66:87:B3:E1:D3:04:AE:FE:A4:4F:75:CC:A3:3D:75:0F:82:7E:8A:97
Authority key identifier: 0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F
Certificate issuer:       /CN=A91473F8/serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F
Certificate serial:       0DA7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
Manifest number:          0D8D
Signing time:             Tue 18 Aug 2026 18:10:45 +0000
Manifest this update:     Tue 18 Aug 2026 18:10:44 +0000
Manifest next update:     Tue 25 Aug 2026 18:10:44 +0000
Files and hashes:         1: C_K1lEw6LMq2wdErw2pa88Lc938.crl (hash: 6CvTDtUjd1kAdDkr6m1UnzvLpk+sy58Y7TK3o5VceDI=)
                          2: C981BB3CF36A11E983B1D764C4F9AE02.roa (hash: utJ70W8kwk0UrAZBtfvLLdbnNC7YzT3hBvwvulsC1zU=)
                          3: F5660FBC160611ECB3912A7EC4F9AE02.roa (hash: jSGQxP09SiqSKhxNXc5lw5g218RQ1wLEioMxa2d9E88=)
                          4: 3AED03D23F0211F186B62790C8833773.roa (hash: O/S7ipxs7LAaw3lfKf/6hOXusOP9np78Uf6jI39ajNI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl
                          rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3495 (0xda7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91473F8, serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F
        Validity
            Not Before: Aug 18 18:10:44 2026 GMT
            Not After : Aug 25 18:10:44 2026 GMT
        Subject: CN=6a84a024-ca94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:12:93:89:03:2b:92:ac:65:a4:87:60:00:d0:
                    d7:de:bf:ee:fa:ab:43:b8:66:d3:72:a9:7c:3c:37:
                    39:36:fd:fc:55:e4:cc:52:23:f7:f1:ee:57:f0:67:
                    9a:44:e3:10:a3:0f:69:71:a6:8b:75:c4:69:f3:c6:
                    e4:3d:44:c7:a8:02:49:74:70:c3:29:c8:5f:14:2b:
                    2e:71:11:45:8a:7a:d6:09:75:55:6b:3e:80:b2:52:
                    b2:e1:0d:07:08:31:08:1e:03:af:a8:48:05:73:07:
                    07:c5:2c:5f:09:88:48:a9:f5:47:3c:3c:9b:b2:ff:
                    ad:88:75:fc:6f:81:ce:65:96:5e:ba:3b:db:ce:6d:
                    a6:45:f9:a3:6b:a0:b5:11:e1:a0:8c:8a:d5:71:83:
                    db:02:93:dc:b9:83:24:78:f8:4b:53:f8:d6:5f:37:
                    61:a4:ec:8e:1f:5b:63:7e:c3:8c:2e:ed:70:27:f4:
                    3c:c5:7f:fc:31:62:e7:a6:0b:cd:b2:ed:44:9c:c2:
                    79:7c:cc:1d:ba:da:a0:f2:c6:3e:76:d6:be:87:e5:
                    84:84:77:22:04:12:8f:95:61:c3:ac:33:92:4a:34:
                    b0:ca:5d:19:93:31:e7:67:b1:ca:b9:50:a9:7d:35:
                    b3:72:a9:4c:25:ad:10:4b:6c:f1:e3:3c:47:03:78:
                    ca:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:87:B3:E1:D3:04:AE:FE:A4:4F:75:CC:A3:3D:75:0F:82:7E:8A:97
            X509v3 Authority Key Identifier:
                keyid:0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:53:c8:9a:84:1c:f7:15:62:ac:f6:be:3b:f8:cb:70:27:80:
         65:49:47:13:b3:e8:e3:d9:13:c0:44:c5:70:5a:1c:4a:fd:c7:
         78:e2:9a:2d:9a:30:ea:02:e1:80:ac:6f:8b:25:39:94:ae:63:
         08:06:e3:a0:59:14:a3:e4:00:ed:8b:9c:b3:d4:f9:58:a3:8e:
         da:65:20:23:c8:99:40:84:55:b4:0b:de:38:fe:c0:61:6a:14:
         25:fe:1b:f3:03:c1:34:91:d8:8e:97:f8:15:9d:a0:0c:ce:88:
         cc:13:f6:31:3c:6d:06:9c:48:bc:42:46:1b:fd:e5:de:e8:09:
         ae:8c:e5:1e:a9:56:57:be:ef:f6:5c:6d:32:eb:26:3c:09:89:
         c9:52:f9:f6:50:86:fd:4c:2a:f3:bd:4c:73:9b:e2:a8:49:1c:
         5b:cb:de:0f:3c:f4:32:f5:c0:86:18:9c:c8:e4:89:ed:84:31:
         da:df:ac:7c:49:06:02:ac:ea:43:f1:b1:bf:b5:8e:63:f3:f9:
         d7:41:f8:e0:42:01:16:88:2f:b3:13:f0:c3:d7:dd:01:a6:85:
         97:8c:a0:48:7b:b9:74:ab:4e:bc:7d:f9:fd:0f:8b:3c:0d:5a:
         91:f0:c5:5a:9a:ff:60:4b:63:f1:2a:53:7c:67:17:2f:47:52:
         b7:17:3c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:17:01 2026 by rpki-client