Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
File:                     tADiGrPTJXQtuHeDDrxEB233CUg.mft (raw, json)
Hash identifier:          yTioivKZ8rLl4Stn5rnmYvgILPYIkBib/KnKkoxz04I=
Subject key identifier:   58:B6:86:05:EC:51:A6:8F:90:31:7E:92:E6:A4:0C:CB:1C:4C:DE:67
Authority key identifier: B4:00:E2:1A:B3:D3:25:74:2D:B8:77:83:0E:BC:44:07:6D:F7:09:48
Certificate issuer:       /CN=A91658EF/serialNumber=B400E21AB3D325742DB877830EBC44076DF70948
Certificate serial:       0FEB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
Manifest number:          2E4A
Signing time:             Tue 18 Aug 2026 16:52:58 +0000
Manifest this update:     Tue 18 Aug 2026 16:52:57 +0000
Manifest next update:     Tue 25 Aug 2026 16:52:57 +0000
Files and hashes:         1: tADiGrPTJXQtuHeDDrxEB233CUg.crl (hash: kMKLnwhNXSaGFobfd4FjP4DG8l/i+wu6tXwQur50vy4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.crl
                          rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 16:52:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4075 (0xfeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91658EF, serialNumber=B400E21AB3D325742DB877830EBC44076DF70948
        Validity
            Not Before: Aug 18 16:52:57 2026 GMT
            Not After : Aug 25 16:52:57 2026 GMT
        Subject: CN=6a848dea-c450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2f:00:ab:19:04:58:92:6c:ab:88:a1:c1:00:
                    5e:c6:1e:f9:2f:5d:23:3c:2e:40:f1:8d:75:6a:83:
                    ec:b0:c8:a8:f4:14:eb:fe:97:b5:43:08:39:c8:cf:
                    2e:13:60:1e:57:80:8a:ee:3e:d7:1f:2e:c5:e9:35:
                    6b:5c:a1:ac:3d:60:02:9a:48:65:9b:72:7c:09:d9:
                    d5:a2:4c:43:4f:1f:32:bd:ba:d2:92:ca:c5:b0:6f:
                    38:77:c9:e2:ea:99:83:0b:89:ac:83:9a:72:44:ae:
                    2e:41:c1:63:ca:47:b5:20:dd:a7:e5:9e:77:fe:f8:
                    65:61:b3:4b:02:e4:54:ab:ef:b2:23:48:df:fa:b4:
                    aa:50:00:0e:ef:d1:88:34:94:14:4e:30:94:9c:49:
                    1f:d9:b4:e7:9c:7b:9d:e6:7a:3c:c5:25:68:99:52:
                    08:f8:0b:d3:39:88:b1:8c:1d:0e:e0:59:2b:f9:bc:
                    1a:8e:74:9d:91:ef:54:1f:dd:88:71:1c:27:00:fc:
                    c6:a3:96:6c:d2:ac:ea:71:67:59:8f:0e:16:4a:e0:
                    f2:fc:06:f3:f1:a1:35:31:74:4e:83:1c:74:92:e6:
                    6e:47:aa:f0:1f:d6:e8:38:0c:e4:a0:39:06:9f:78:
                    d6:33:16:7a:29:19:19:26:1d:45:26:fc:b3:2f:af:
                    2a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B6:86:05:EC:51:A6:8F:90:31:7E:92:E6:A4:0C:CB:1C:4C:DE:67
            X509v3 Authority Key Identifier:
                keyid:B4:00:E2:1A:B3:D3:25:74:2D:B8:77:83:0E:BC:44:07:6D:F7:09:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:eb:e9:02:71:c5:52:e9:e2:f4:08:55:40:3e:4f:f6:96:33:
         d8:55:3f:4d:dd:bd:54:cd:b1:ca:1d:e1:05:76:b7:4d:ea:f0:
         26:f1:86:fa:fc:7b:57:3d:ef:2e:52:14:12:f8:bb:65:11:02:
         9a:a2:e3:6c:44:49:c1:bd:7c:34:4a:c3:f8:2d:4b:5f:f6:cc:
         8c:e0:8a:79:bb:07:6a:ba:4f:38:a7:de:95:e1:63:1e:a0:e3:
         53:12:82:aa:ce:95:91:54:88:fc:1b:89:6f:19:3b:d8:5d:28:
         7d:f1:ef:40:fb:15:5c:3a:e0:3f:54:d3:74:3e:de:50:6a:40:
         29:54:8c:23:81:11:9d:7b:a1:bb:31:93:be:7e:64:f4:0e:10:
         32:28:66:c4:81:08:be:6a:2c:0e:3f:d9:b6:37:d8:98:55:b9:
         23:7e:25:a8:5f:5a:66:47:c6:59:ab:ea:87:84:d1:78:25:19:
         ba:ee:38:32:b4:48:9c:06:38:6a:a7:86:ae:85:fb:ca:85:1e:
         cc:ac:3b:96:ad:77:b6:35:df:b4:7d:94:6a:b4:24:8f:6d:b9:
         82:9f:80:8b:7d:05:1e:3c:e7:bc:97:f5:33:f8:92:b2:3a:7c:
         4a:a3:96:67:96:84:7b:a9:c6:dc:80:09:3d:b6:5e:5e:0c:7b:
         fd:a3:85:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:47:43 2026 by rpki-client