Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/dqSXJWH75So6Zwt4JFETuDvo2AY.mft
File:                     dqSXJWH75So6Zwt4JFETuDvo2AY.mft (raw, json)
Hash identifier:          CTzADABjSKWZGdA2pOUXtB2bpFdy1+tigA5QInV3bzI=
Subject key identifier:   87:5D:BC:42:89:8C:1F:46:F7:26:1C:73:A2:40:20:92:D3:60:BF:73
Authority key identifier: 76:A4:97:25:61:FB:E5:2A:3A:67:0B:78:24:51:13:B8:3B:E8:D8:06
Certificate issuer:       /CN=A91644E2/serialNumber=76A4972561FBE52A3A670B78245113B83BE8D806
Certificate serial:       3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqSXJWH75So6Zwt4JFETuDvo2AY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/dqSXJWH75So6Zwt4JFETuDvo2AY.mft
Manifest number:          3A
Signing time:             Wed 19 Aug 2026 09:19:20 +0000
Manifest this update:     Wed 19 Aug 2026 09:19:19 +0000
Manifest next update:     Wed 26 Aug 2026 09:19:19 +0000
Files and hashes:         1: dqSXJWH75So6Zwt4JFETuDvo2AY.crl (hash: DpbC1p8/WLALS5BL0hCqr2K9T1wGe1ex6TR15OA8HJM=)
                          2: CAB4E520455111F1948CBD49A9833773.roa (hash: YgzxIambRazcLPo5M/vTIgat079etY7a7Ji9ovX3ixs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/dqSXJWH75So6Zwt4JFETuDvo2AY.crl
                          rsync://rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/dqSXJWH75So6Zwt4JFETuDvo2AY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqSXJWH75So6Zwt4JFETuDvo2AY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:19:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91644E2, serialNumber=76A4972561FBE52A3A670B78245113B83BE8D806
        Validity
            Not Before: Aug 19 09:19:19 2026 GMT
            Not After : Aug 26 09:19:19 2026 GMT
        Subject: CN=6a857518-a786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e8:f0:18:e7:2e:22:a1:6b:bf:58:01:72:42:
                    00:3c:09:33:41:aa:86:82:ee:a3:c3:cf:fb:4f:a2:
                    cd:f3:93:49:07:d7:4d:2c:4d:5b:ee:b5:71:ae:85:
                    d7:3e:b9:80:0c:1e:77:a2:41:85:9e:b2:02:3d:47:
                    3e:ae:b3:b1:4f:24:90:a9:2b:36:40:cd:7e:83:ae:
                    dc:7f:df:51:7d:ff:a1:42:e7:67:05:b3:df:32:84:
                    af:34:b3:6c:a6:36:c7:c9:e1:99:56:0b:81:2b:c2:
                    30:58:bf:35:77:b5:5b:f6:2d:0b:69:99:3c:6f:1d:
                    d2:dc:c8:75:c3:64:0d:9b:dc:98:71:49:eb:9e:b8:
                    ad:95:29:c9:87:46:38:66:d9:cc:f8:61:1b:b3:22:
                    7e:a3:85:a1:08:46:4f:ce:d5:1e:69:f4:06:ba:aa:
                    4f:ab:00:09:b3:3e:2b:a2:e6:a5:1c:b9:80:b8:df:
                    d1:d3:2c:13:4b:f9:53:de:6f:07:c2:47:82:1b:5f:
                    42:3a:a9:ae:cf:d8:44:51:3e:cc:7e:5f:a5:58:c1:
                    ce:c4:58:45:a8:4c:95:b1:d4:44:a1:e0:1a:20:64:
                    6f:27:1f:e4:08:c7:c2:dd:4a:c2:b6:67:37:e9:ed:
                    80:86:1b:3e:f8:27:5a:c0:4c:f4:fb:95:cc:2f:e2:
                    97:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:5D:BC:42:89:8C:1F:46:F7:26:1C:73:A2:40:20:92:D3:60:BF:73
            X509v3 Authority Key Identifier:
                keyid:76:A4:97:25:61:FB:E5:2A:3A:67:0B:78:24:51:13:B8:3B:E8:D8:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/dqSXJWH75So6Zwt4JFETuDvo2AY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqSXJWH75So6Zwt4JFETuDvo2AY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/dqSXJWH75So6Zwt4JFETuDvo2AY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ff:b8:c6:ed:e4:e6:f1:f5:d1:8c:7e:c8:de:c2:48:bc:7e:
         66:75:1d:b1:1e:1d:21:e2:ea:17:78:f1:be:51:1e:aa:45:d8:
         ac:11:34:ec:13:7f:c2:f4:83:9e:61:c0:4f:da:45:8c:6a:93:
         f4:9b:7d:4b:b6:38:d7:0f:19:8d:29:aa:4f:ed:22:8d:88:16:
         79:38:91:87:82:06:36:8b:c2:49:87:d7:68:e2:37:d3:53:37:
         fa:aa:eb:82:ed:b9:74:6a:da:31:00:5d:06:79:3f:12:e9:30:
         8e:45:49:a2:d2:78:3a:0d:c4:42:3c:63:e6:99:f2:32:f1:c9:
         e0:73:63:34:a2:da:d9:94:2e:49:43:db:13:ba:44:03:5d:e9:
         1c:b7:f8:18:22:82:3e:98:4a:b6:95:08:5e:63:87:91:44:62:
         58:70:75:b0:88:29:10:bb:8a:d3:09:c8:54:92:fb:38:5d:e4:
         02:62:e9:f8:64:4e:82:6c:38:c0:38:8b:8c:19:15:fb:7e:dc:
         e8:86:a0:89:61:b0:a1:8c:53:fb:7a:88:92:40:01:89:42:07:
         9d:c1:e1:59:e5:1f:2b:c1:af:61:f2:cd:63:f0:db:8a:d5:c7:
         53:e4:51:f7:ec:f9:34:df:0c:93:dd:2d:37:12:95:fc:46:c0:
         82:37:40:67
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NDRFMjExMC8GA1UEBRMoNzZBNDk3MjU2MUZCRTUyQTNBNjcwQjc4MjQ1MTEzQjgz
QkU4RDgwNjAeFw0yNjA4MTkwOTE5MTlaFw0yNjA4MjYwOTE5MTlaMBgxFjAUBgNV
BAMTDTZhODU3NTE4LWE3ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJ6PAY5y4ioWu/WAFyQgA8CTNBqoaC7qPDz/tPos3zk0kH100sTVvutXGuhdc+
uYAMHneiQYWesgI9Rz6us7FPJJCpKzZAzX6Drtx/31F9/6FC52cFs98yhK80s2ym
NsfJ4ZlWC4ErwjBYvzV3tVv2LQtpmTxvHdLcyHXDZA2b3JhxSeueuK2VKcmHRjhm
2cz4YRuzIn6jhaEIRk/O1R5p9Aa6qk+rAAmzPiui5qUcuYC439HTLBNL+VPebwfC
R4IbX0I6qa7P2ERRPsx+X6VYwc7EWEWoTJWx1ESh4BogZG8nH+QIx8LdSsK2Zzfp
7YCGGz74J1rATPT7lcwv4pd1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUh128QomM
H0b3JhxzokAgktNgv3MwHwYDVR0jBBgwFoAUdqSXJWH75So6Zwt4JFETuDvo2AYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0NEUyL0VDRDQ1MDI4NDUy
NDExRjE4NkJGN0NGNjk5ODMzNzczL2RxU1hKV0g3NVNvNlp3dDRKRkVUdUR2bzJB
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZHFTWEpXSDc1U282Wnd0NEpGRVR1RHZvMkFZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0
NEUyL0VDRDQ1MDI4NDUyNDExRjE4NkJGN0NGNjk5ODMzNzczL2RxU1hKV0g3NVNv
Nlp3dDRKRkVUdUR2bzJBWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCZ/7jG7eTm8fXRjH7I3sJIvH5mdR2xHh0h4uoXePG+UR6qRdisETTsE3/C9IOe
YcBP2kWMapP0m31LtjjXDxmNKapP7SKNiBZ5OJGHggY2i8JJh9do4jfTUzf6quuC
7bl0atoxAF0GeT8S6TCORUmi0ng6DcRCPGPmmfIy8cngc2M0otrZlC5JQ9sTukQD
Xekct/gYIoI+mEq2lQheY4eRRGJYcHWwiCkQu4rTCchUkvs4XeQCYun4ZE6CbDjA
OIuMGRX7ftzohqCJYbChjFP7eoiSQAGJQgedweFZ5R8rwa9h8s1j8NuK1cdT5FH3
7Pk03wyT3S03EpX8RsCCN0Bn
-----END CERTIFICATE-----
Generated at Wed Aug 19 14:31:43 2026 by rpki-client