Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft
File:                     M0SkOWDcSkdzux3w_wON9BYPNXo.mft (raw, json)
Hash identifier:          iKvFJlUVXBcWoWxVzmS8dUzlEEZVvLLgOR3BReuSfkM=
Subject key identifier:   F4:3A:4B:55:21:FD:B7:22:67:93:F3:6E:EC:BA:54:43:3E:70:C7:4D
Authority key identifier: 33:44:A4:39:60:DC:4A:47:73:BB:1D:F0:FF:03:8D:F4:16:0F:35:7A
Certificate issuer:       /CN=A91676E2/serialNumber=3344A43960DC4A4773BB1DF0FF038DF4160F357A
Certificate serial:       0418
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M0SkOWDcSkdzux3w_wON9BYPNXo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft
Manifest number:          03FE
Signing time:             Wed 19 Aug 2026 00:51:37 +0000
Manifest this update:     Wed 19 Aug 2026 00:51:36 +0000
Manifest next update:     Wed 26 Aug 2026 00:51:36 +0000
Files and hashes:         1: M0SkOWDcSkdzux3w_wON9BYPNXo.crl (hash: h+Lqj5MsC8aOUIyA9aBC/1u54sXdtT81QXRBmZLio38=)
                          2: 4D03B06C83FA11EF9E6EC075C4F9AE02.roa (hash: GS31IweHyWVTb2bQEYgfVbcUzETrTTg70KsbKgZ5rbc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.crl
                          rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M0SkOWDcSkdzux3w_wON9BYPNXo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:51:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1048 (0x418)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91676E2, serialNumber=3344A43960DC4A4773BB1DF0FF038DF4160F357A
        Validity
            Not Before: Aug 19 00:51:36 2026 GMT
            Not After : Aug 26 00:51:36 2026 GMT
        Subject: CN=6a84fe19-2af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:79:34:46:ae:63:9f:10:82:1b:5a:06:84:
                    63:2b:5f:ad:2a:8d:45:f7:90:31:71:0d:b0:27:0a:
                    c6:0a:de:c0:b1:a0:13:87:f0:1e:b7:53:f9:fd:95:
                    1d:f8:52:31:0b:86:1c:3b:55:61:47:f8:bd:57:55:
                    ed:99:e4:23:56:3a:f6:7a:72:73:c1:a2:a2:d2:64:
                    e7:df:d5:64:a7:48:11:db:d4:a2:34:e7:03:47:48:
                    57:c4:c0:6e:e5:75:40:47:ce:09:6b:82:1d:f8:b4:
                    f7:1d:b4:cd:02:ba:92:bd:a8:3d:47:70:dd:90:fd:
                    c4:a7:06:30:13:7a:da:4b:9c:9b:bb:f5:fd:7d:db:
                    b7:a6:d7:28:f0:2a:5b:b5:ae:cb:d0:28:f5:da:67:
                    06:a7:b2:44:09:09:aa:70:56:a9:57:bb:19:c2:bc:
                    a6:bc:13:e5:53:6c:5d:54:9a:fd:f4:de:de:8c:64:
                    12:30:fb:d3:8f:77:c0:4c:f5:8b:49:ce:26:ed:28:
                    f7:bd:2a:ff:70:6a:2b:c9:f9:96:02:4e:72:e0:d9:
                    fa:d5:61:b3:a2:e0:4a:ed:3e:d6:50:8b:6c:95:53:
                    de:08:eb:c5:cf:cb:5a:d5:27:99:38:69:32:35:e6:
                    d1:63:98:0d:81:6f:97:20:95:3b:f8:e8:d2:51:15:
                    a1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:3A:4B:55:21:FD:B7:22:67:93:F3:6E:EC:BA:54:43:3E:70:C7:4D
            X509v3 Authority Key Identifier:
                keyid:33:44:A4:39:60:DC:4A:47:73:BB:1D:F0:FF:03:8D:F4:16:0F:35:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M0SkOWDcSkdzux3w_wON9BYPNXo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:be:82:be:1d:ed:88:2b:e2:35:49:59:aa:86:4b:35:08:94:
         14:86:61:f3:84:c8:af:95:16:a7:d3:9b:d4:3d:5c:97:c4:88:
         99:6e:32:ce:11:68:56:ad:68:9a:c4:e9:f2:7d:8a:1c:9b:96:
         44:5e:2e:32:f5:0e:1d:87:cb:c7:1f:bc:90:82:81:02:e1:91:
         fa:7b:e2:dd:1d:ed:41:fa:1e:a8:5e:fa:24:f1:83:ce:f0:e8:
         ba:55:a1:93:d5:ce:03:5f:79:ac:2a:a0:b8:34:ce:df:f5:3e:
         8a:93:01:dc:68:e8:51:81:03:46:cb:d2:d2:54:ec:6e:35:f5:
         00:f2:48:44:24:b9:f8:73:8a:fd:b2:93:11:cc:4d:95:20:95:
         37:7b:a1:f0:b4:52:61:b3:8b:ea:39:26:c9:ef:ee:2a:6b:02:
         f2:f3:6e:21:3a:6d:f5:1b:ab:5f:ea:58:48:5b:8f:6d:e2:2c:
         44:27:ae:0f:e9:78:a0:a0:f2:8b:b1:e4:5b:c6:28:4d:d2:3d:
         16:f9:79:8a:19:40:d6:88:9c:e1:d3:67:b6:12:d6:11:67:59:
         03:f6:42:da:b9:a5:27:99:4a:de:66:86:e0:2f:ce:b9:0f:61:
         0e:df:f4:64:ff:25:3e:d1:91:69:c5:ae:ef:ac:f9:fb:a1:da:
         fb:5a:59:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njc2RTIxMTAvBgNVBAUTKDMzNDRBNDM5NjBEQzRBNDc3M0JCMURGMEZGMDM4REY0
MTYwRjM1N0EwHhcNMjYwODE5MDA1MTM2WhcNMjYwODI2MDA1MTM2WjAYMRYwFAYD
VQQDEw02YTg0ZmUxOS0yYWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu2h5NEauY58QghtaBoRjK1+tKo1F95AxcQ2wJwrGCt7AsaATh/Aet1P5/ZUd
+FIxC4YcO1VhR/i9V1XtmeQjVjr2enJzwaKi0mTn39Vkp0gR29SiNOcDR0hXxMBu
5XVAR84Ja4Id+LT3HbTNArqSvag9R3DdkP3EpwYwE3raS5ybu/X9fdu3ptco8Cpb
ta7L0Cj12mcGp7JECQmqcFapV7sZwrymvBPlU2xdVJr99N7ejGQSMPvTj3fATPWL
Sc4m7Sj3vSr/cGoryfmWAk5y4Nn61WGzouBK7T7WUItslVPeCOvFz8ta1SeZOGky
NebRY5gNgW+XIJU7+OjSURWhZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPQ6S1Uh
/bciZ5Pzbuy6VEM+cMdNMB8GA1UdIwQYMBaAFDNEpDlg3EpHc7sd8P8DjfQWDzV6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzZFMi8yMjU5QTE4NkQ4
NTQxMUVDQjlFMUU0ODZDNEY5QUUwMi9NMFNrT1dEY1NrZHp1eDN3X3dPTjlCWVBO
WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL00wU2tPV0RjU2tkenV4M3dfd09OOUJZUE5Yby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzZFMi8yMjU5QTE4NkQ4NTQxMUVDQjlFMUU0ODZDNEY5QUUwMi9NMFNrT1dEY1Nr
ZHp1eDN3X3dPTjlCWVBOWG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACb6Cvh3tiCviNUlZqoZLNQiUFIZh84TIr5UWp9Ob1D1cl8SImW4yzhFoVq1o
msTp8n2KHJuWRF4uMvUOHYfLxx+8kIKBAuGR+nvi3R3tQfoeqF76JPGDzvDoulWh
k9XOA195rCqguDTO3/U+ipMB3GjoUYEDRsvS0lTsbjX1APJIRCS5+HOK/bKTEcxN
lSCVN3uh8LRSYbOL6jkmye/uKmsC8vNuITpt9RurX+pYSFuPbeIsRCeuD+l4oKDy
i7HkW8YoTdI9Fvl5ihlA1oic4dNnthLWEWdZA/ZC2rmlJ5lK3maG4C/OuQ9hDt/0
ZP8lPtGRacWu76z5+6Ha+1pZeg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:09 2026 by rpki-client