Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.mft
File:                     z8OBRZAZiWAcekIm8uBfuM-SloM.mft (raw, json)
Hash identifier:          kQvQMfO3qX073I2KO+ZLDZCgpaw4X6VJXjFCcCMVBBk=
Subject key identifier:   A7:1F:93:79:ED:5B:E6:2C:4E:F1:36:9E:7B:1B:66:CA:DC:AF:A2:A8
Authority key identifier: CF:C3:81:45:90:19:89:60:1C:7A:42:26:F2:E0:5F:B8:CF:92:96:83
Certificate issuer:       /CN=A91629D4/serialNumber=CFC38145901989601C7A4226F2E05FB8CF929683
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8OBRZAZiWAcekIm8uBfuM-SloM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.mft
Manifest number:          14
Signing time:             Wed 19 Aug 2026 09:47:22 +0000
Manifest this update:     Wed 19 Aug 2026 09:47:21 +0000
Manifest next update:     Wed 26 Aug 2026 09:47:21 +0000
Files and hashes:         1: z8OBRZAZiWAcekIm8uBfuM-SloM.crl (hash: itwht71KVaIg2D62jE+T3fPl9B1NjExCCZiIs5Otz2Y=)
                          2: C12E80FC84AC11F188069C008EA30FBC.roa (hash: WPKl0RmubRsg2zOYR5o/LCEZKLKwHEqKhd2tRJMYw50=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.crl
                          rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8OBRZAZiWAcekIm8uBfuM-SloM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91629D4, serialNumber=CFC38145901989601C7A4226F2E05FB8CF929683
        Validity
            Not Before: Aug 19 09:47:21 2026 GMT
            Not After : Aug 26 09:47:21 2026 GMT
        Subject: CN=6a857baa-0091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:94:0e:05:4e:6c:fe:b0:42:ce:37:2f:d4:a9:
                    f6:55:a9:af:c8:df:e6:ae:01:f4:23:8a:7c:f0:eb:
                    be:b7:71:52:1f:54:e8:79:0a:7c:eb:ea:23:46:d3:
                    cc:b1:4a:56:13:54:9a:08:d9:5d:9e:0a:c0:f7:72:
                    70:e1:73:41:de:91:1e:4e:00:f4:59:64:69:d9:a9:
                    50:ba:15:6e:cb:3f:12:3c:80:ce:44:5f:42:3a:9a:
                    53:e8:1b:13:36:9b:21:f3:de:2f:4d:39:d9:39:77:
                    9e:dc:ab:d2:a5:f1:4c:ad:bc:94:53:c1:60:35:8e:
                    1f:97:e3:94:2a:2c:be:4b:18:45:b9:5b:aa:5f:7c:
                    9a:25:af:f0:68:cc:61:6b:f3:f9:87:79:a8:bd:54:
                    90:28:4a:41:7b:4f:f8:1d:b8:73:9a:c3:01:7e:54:
                    3b:3a:e5:84:23:bb:13:3d:9c:1d:b5:e3:db:08:c9:
                    75:2a:54:e9:f5:0d:3b:79:38:bd:67:54:78:ea:8c:
                    15:54:6b:89:09:d5:eb:e6:0b:64:9e:cf:8c:6d:76:
                    2b:cf:a6:03:61:64:4e:c8:ee:79:46:27:be:af:ec:
                    8e:13:29:2d:36:5d:3f:42:2e:52:29:cb:92:24:3c:
                    78:1c:8a:75:13:ee:60:b4:34:f8:de:7d:05:87:d9:
                    2e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1F:93:79:ED:5B:E6:2C:4E:F1:36:9E:7B:1B:66:CA:DC:AF:A2:A8
            X509v3 Authority Key Identifier:
                keyid:CF:C3:81:45:90:19:89:60:1C:7A:42:26:F2:E0:5F:B8:CF:92:96:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8OBRZAZiWAcekIm8uBfuM-SloM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629D4/01745F30849211F1BEE7511B85A30FBC/z8OBRZAZiWAcekIm8uBfuM-SloM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:1b:e0:f0:13:a2:44:e3:15:52:1e:63:16:4c:ee:e2:53:6e:
         26:3d:3a:d8:1d:f3:d7:bc:1a:55:a0:9e:29:c4:2d:18:bb:bd:
         93:77:1d:0b:25:a6:63:17:1d:4b:03:64:2b:c5:d9:fc:bd:b3:
         eb:67:be:6f:ad:3b:2e:f4:e9:14:ba:5e:0b:f3:9b:6f:91:12:
         b9:93:8e:fd:d7:48:71:07:3e:94:37:ce:eb:e1:f9:2f:1e:79:
         a9:0c:67:72:0f:06:ce:e0:c6:be:ec:17:9b:47:aa:8d:76:82:
         fb:a9:e4:88:d5:e5:06:7c:e7:85:8b:1b:77:0b:f4:d7:a7:d3:
         ea:9a:c5:10:4a:46:c6:5d:13:19:cf:73:39:65:a0:11:f7:11:
         8c:12:b9:15:45:6b:7a:ad:c2:a5:f6:23:c6:f4:27:4e:4d:3c:
         d6:5f:8b:c8:98:b3:3d:34:fd:39:f7:c0:62:10:76:17:6d:00:
         11:8b:06:34:14:b5:89:29:06:c5:52:47:b6:4e:62:d6:c3:ac:
         33:9a:0e:75:26:86:7d:eb:86:d8:ae:07:cb:26:a0:6d:a1:36:
         70:93:c1:cf:79:8a:de:d9:8e:b7:83:22:df:63:44:de:6c:77:
         ad:30:55:6e:a8:c5:71:bd:71:07:2f:4a:c8:58:eb:53:39:d4:
         48:82:f0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:59:43 2026 by rpki-client