Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91665DC/C66C26D8653911F18E895AE18947A888/_rlTXZ5Bcdh6i_b2y2HSMb8vNiw.mft
File:                     _rlTXZ5Bcdh6i_b2y2HSMb8vNiw.mft (raw, json)
Hash identifier:          Bp5Ei/26cjLVJP8WHDlk7tfuj8lzgn42b09HXOO7LM8=
Subject key identifier:   55:80:A2:37:2E:DB:B5:C4:78:50:FE:70:25:96:78:F6:43:9D:69:1C
Authority key identifier: FE:B9:53:5D:9E:41:71:D8:7A:8B:F6:F6:CB:61:D2:31:BF:2F:36:2C
Certificate issuer:       /CN=A91665DC/serialNumber=FEB9535D9E4171D87A8BF6F6CB61D231BF2F362C
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rlTXZ5Bcdh6i_b2y2HSMb8vNiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91665DC/C66C26D8653911F18E895AE18947A888/_rlTXZ5Bcdh6i_b2y2HSMb8vNiw.mft
Manifest number:          25
Signing time:             Wed 19 Aug 2026 09:34:34 +0000
Manifest this update:     Wed 19 Aug 2026 09:34:33 +0000
Manifest next update:     Wed 26 Aug 2026 09:34:33 +0000
Files and hashes:         1: _rlTXZ5Bcdh6i_b2y2HSMb8vNiw.crl (hash: G4z4XXWgPraMB3maeaUv6je1rwo3GTVmFmB+YePKXzQ=)
                          2: 407DE8A2653B11F19447D4298B47A888.roa (hash: 4uGgyHi+pahZitNop8GwY6mUioENqBPhA9aD2Qxg/D0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91665DC/C66C26D8653911F18E895AE18947A888/_rlTXZ5Bcdh6i_b2y2HSMb8vNiw.crl
                          rsync://rpki.apnic.net/member_repository/A91665DC/C66C26D8653911F18E895AE18947A888/_rlTXZ5Bcdh6i_b2y2HSMb8vNiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rlTXZ5Bcdh6i_b2y2HSMb8vNiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91665DC, serialNumber=FEB9535D9E4171D87A8BF6F6CB61D231BF2F362C
        Validity
            Not Before: Aug 19 09:34:33 2026 GMT
            Not After : Aug 26 09:34:33 2026 GMT
        Subject: CN=6a8578aa-58a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:14:16:19:6f:6b:d8:f4:36:e5:c0:f3:69:49:
                    b8:e6:10:9b:20:bc:12:5d:fb:46:cb:38:73:3c:9c:
                    32:dd:a2:1a:cd:25:04:3e:a0:5f:f2:e2:71:6b:2b:
                    4e:a2:3e:69:08:3f:41:0a:72:62:3e:0c:c5:97:50:
                    06:a3:b6:3b:12:b2:6f:9c:3f:99:6c:e6:20:c8:0d:
                    39:3a:6c:1e:fc:d9:ab:90:ac:48:68:46:38:28:e9:
                    e0:da:c3:32:07:85:8c:ca:3f:38:88:a0:3b:fd:b5:
                    5a:2f:10:8d:42:b2:02:db:06:62:fe:0f:14:d3:17:
                    27:86:c3:7f:dc:a2:e1:9b:3d:39:04:32:e5:8a:bb:
                    4d:0f:fc:6a:cb:df:ef:6c:b9:5b:fb:cf:d6:4d:03:
                    04:b2:d2:37:9e:14:83:78:1e:55:8a:bd:db:ab:78:
                    c2:3b:77:9f:cb:1f:d9:c0:ad:6e:af:d2:33:c9:9e:
                    ca:e2:63:d5:de:a4:49:36:9b:cc:d9:b7:ed:b9:63:
                    ca:60:c2:93:0e:33:f8:99:b4:84:ba:69:d2:38:92:
                    1f:37:2a:58:f4:93:48:1e:50:8e:b5:b7:bc:d7:82:
                    c3:03:9c:fe:42:4f:a6:f3:64:94:d4:b4:a3:39:1a:
                    0f:fb:e0:26:41:ac:42:04:0c:5d:65:09:dd:f1:f5:
                    b6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:80:A2:37:2E:DB:B5:C4:78:50:FE:70:25:96:78:F6:43:9D:69:1C
            X509v3 Authority Key Identifier:
                keyid:FE:B9:53:5D:9E:41:71:D8:7A:8B:F6:F6:CB:61:D2:31:BF:2F:36:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91665DC/C66C26D8653911F18E895AE18947A888/_rlTXZ5Bcdh6i_b2y2HSMb8vNiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rlTXZ5Bcdh6i_b2y2HSMb8vNiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91665DC/C66C26D8653911F18E895AE18947A888/_rlTXZ5Bcdh6i_b2y2HSMb8vNiw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:39:28:8a:c4:97:f8:18:b8:a8:38:e1:2f:3f:97:ea:0c:e1:
         ed:21:2f:a8:8f:0f:95:2e:ab:52:15:62:73:e0:fe:4d:2e:c5:
         87:76:f0:72:d9:6c:c2:16:1f:ae:cf:38:5b:ca:2a:ae:6f:54:
         3b:2c:1f:99:b6:78:ea:b2:e0:ad:30:a6:ea:85:88:c7:bd:31:
         a7:03:19:cd:ae:ab:11:82:2f:8a:98:2b:a7:b6:bc:6b:c1:50:
         f7:1f:86:0c:7b:99:d3:14:50:44:08:f6:31:76:5e:0d:68:24:
         1c:eb:55:9b:f4:cc:bc:fa:69:32:5a:a9:ea:b2:00:4a:23:6b:
         3c:b4:85:60:48:5d:ac:f9:8c:49:8f:30:1c:aa:2f:44:c2:c3:
         5a:dd:7b:23:19:aa:49:52:fa:a5:83:2e:7c:03:b7:bd:d1:ab:
         6d:d8:60:9d:35:a8:3c:cb:ec:20:b6:22:46:81:4a:71:ac:0c:
         5e:c2:35:73:17:5f:a4:c5:cd:36:a0:63:1d:ac:d5:2a:9a:8b:
         17:61:93:d4:91:a9:0d:0b:8e:38:7c:23:44:81:35:48:7c:09:
         be:77:b5:9a:ea:9c:15:b8:81:75:0e:69:b8:47:0b:54:f2:47:
         91:81:cc:29:84:c1:4f:48:04:9a:fb:5c:ff:e9:2c:f6:54:44:
         b3:d4:ba:f5
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NjVEQzExMC8GA1UEBRMoRkVCOTUzNUQ5RTQxNzFEODdBOEJGNkY2Q0I2MUQyMzFC
RjJGMzYyQzAeFw0yNjA4MTkwOTM0MzNaFw0yNjA4MjYwOTM0MzNaMBgxFjAUBgNV
BAMTDTZhODU3OGFhLTU4YTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCZFBYZb2vY9DblwPNpSbjmEJsgvBJd+0bLOHM8nDLdohrNJQQ+oF/y4nFrK06i
PmkIP0EKcmI+DMWXUAajtjsSsm+cP5ls5iDIDTk6bB782auQrEhoRjgo6eDawzIH
hYzKPziIoDv9tVovEI1CsgLbBmL+DxTTFyeGw3/couGbPTkEMuWKu00P/GrL3+9s
uVv7z9ZNAwSy0jeeFIN4HlWKvdureMI7d5/LH9nArW6v0jPJnsriY9XepEk2m8zZ
t+25Y8pgwpMOM/iZtIS6adI4kh83Klj0k0geUI61t7zXgsMDnP5CT6bzZJTUtKM5
Gg/74CZBrEIEDF1lCd3x9bY7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVYCiNy7b
tcR4UP5wJZZ49kOdaRwwHwYDVR0jBBgwFoAU/rlTXZ5Bcdh6i/b2y2HSMb8vNiww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2NURDL0M2NkMyNkQ4NjUz
OTExRjE4RTg5NUFFMTg5NDdBODg4L19ybFRYWjVCY2RoNmlfYjJ5MkhTTWI4dk5p
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvX3JsVFhaNUJjZGg2aV9iMnkySFNNYjh2Tml3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2
NURDL0M2NkMyNkQ4NjUzOTExRjE4RTg5NUFFMTg5NDdBODg4L19ybFRYWjVCY2Ro
NmlfYjJ5MkhTTWI4dk5pdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAkOSiKxJf4GLioOOEvP5fqDOHtIS+ojw+VLqtSFWJz4P5NLsWHdvBy2WzCFh+u
zzhbyiqub1Q7LB+ZtnjqsuCtMKbqhYjHvTGnAxnNrqsRgi+KmCuntrxrwVD3H4YM
e5nTFFBECPYxdl4NaCQc61Wb9My8+mkyWqnqsgBKI2s8tIVgSF2s+YxJjzAcqi9E
wsNa3XsjGapJUvqlgy58A7e90att2GCdNag8y+wgtiJGgUpxrAxewjVzF1+kxc02
oGMdrNUqmosXYZPUkakNC444fCNEgTVIfAm+d7Wa6pwVuIF1Dmm4RwtU8keRgcwp
hMFPSASa+1z/6Sz2VESz1Lr1
-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:37 2026 by rpki-client