Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
File:                     rEGRrDoak5bnjWEvN026zI8tkbU.mft (raw, json)
Hash identifier:          3vEIzq+anis2Ru2PaaP2Rn9/pTGsQwC+XleyS+skCV0=
Subject key identifier:   CC:FA:BF:80:38:E3:E4:C2:9F:A0:B7:D2:8B:FC:13:E1:8A:92:E1:4E
Authority key identifier: AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5
Certificate issuer:       /CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5
Certificate serial:       259A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
Manifest number:          2577
Signing time:             Tue 18 Aug 2026 15:49:56 +0000
Manifest this update:     Tue 18 Aug 2026 15:49:56 +0000
Manifest next update:     Tue 25 Aug 2026 15:49:56 +0000
Files and hashes:         1: rEGRrDoak5bnjWEvN026zI8tkbU.crl (hash: 6CjF8g+6lwa/H0a6rawFYkF9HCSXnlCo9NPRqNKvPco=)
                          2: E507094286EE11F19E006003A7EE528E.roa (hash: nsWM9yKzF5tc+ZfDYi+OoEdvVrdphbJD92x8fp+aXT4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl
                          rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 15:49:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9626 (0x259a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169CD3, serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5
        Validity
            Not Before: Aug 18 15:49:56 2026 GMT
            Not After : Aug 25 15:49:56 2026 GMT
        Subject: CN=6a847f24-c575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7f:7c:55:c9:e7:b7:95:3b:ea:70:a4:8a:63:
                    6a:69:96:83:3a:28:f8:98:a7:46:f1:cb:fc:a9:61:
                    2d:41:44:e3:f5:73:3c:8f:ca:85:fe:bf:a7:12:0a:
                    b6:de:c9:3c:d7:3d:88:6c:e5:e7:e2:7e:3d:d6:08:
                    f3:63:f6:a9:4d:de:30:68:fb:d9:56:c9:7f:e5:70:
                    17:43:4e:1c:e9:95:d8:05:0a:c5:40:19:d6:fa:3f:
                    60:49:5d:6f:1f:12:1c:07:b6:43:31:46:b4:92:24:
                    6c:dc:d9:8a:21:fc:79:e5:c4:28:c4:59:14:53:52:
                    5e:b2:80:c2:29:5d:80:35:20:ac:81:8c:a7:7e:68:
                    ac:50:2c:29:e9:38:a2:c8:dd:c9:aa:61:ee:a1:41:
                    fe:81:c6:a9:91:af:40:4e:86:d2:8b:91:b8:f1:45:
                    ad:a9:49:c3:96:3c:c0:fa:f5:19:7d:8d:c2:83:f0:
                    8b:d1:43:68:49:37:54:07:12:26:46:61:0c:ca:7b:
                    be:91:99:9a:df:ba:92:08:33:01:c2:f7:73:e7:bb:
                    c6:4e:44:49:c6:0d:36:5f:43:37:1e:ea:1a:36:58:
                    a2:48:24:e0:60:de:d4:8a:ac:71:09:0d:72:86:ad:
                    f1:7b:5f:b3:c7:11:b4:8b:5f:7f:e6:16:5e:e8:ac:
                    a4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FA:BF:80:38:E3:E4:C2:9F:A0:B7:D2:8B:FC:13:E1:8A:92:E1:4E
            X509v3 Authority Key Identifier:
                keyid:AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:5e:8e:7d:1b:9d:dd:a3:5c:57:2b:c6:5c:13:54:16:c8:85:
         55:8c:db:b2:fc:41:90:45:1f:c2:df:5f:ff:be:37:cd:d5:3a:
         95:f8:14:72:57:6e:c5:bb:db:32:2a:cc:ec:7b:dc:ca:07:e1:
         60:b0:d7:ec:ca:d8:d7:99:0d:4c:93:93:f2:93:46:e5:43:a1:
         0d:7c:10:c2:36:14:b8:43:d6:04:bd:37:c3:7f:d5:9a:2b:23:
         bc:81:c4:14:72:e8:97:12:30:57:77:99:f9:a5:b7:d7:3f:9a:
         f7:61:33:43:98:fa:c2:1a:6d:36:8a:53:14:b1:bc:eb:3d:75:
         a1:c2:78:fb:af:de:ea:bc:b9:47:3c:df:ae:22:47:43:e4:51:
         14:76:e7:56:91:bc:65:86:55:82:7b:3c:ea:65:b7:81:09:e4:
         1e:1c:69:b7:e6:27:56:53:84:2b:25:d0:c3:ed:d4:8b:9f:92:
         88:bc:3a:92:48:78:f2:3e:05:12:80:57:c7:3f:e0:50:88:a8:
         f3:c4:3d:66:57:dc:86:34:f6:cb:78:2a:02:df:c6:03:e6:8d:
         c0:53:34:92:97:6b:8b:bc:62:0b:a6:f7:a0:8e:bb:3e:d8:42:
         b6:cb:f8:be:6c:0b:88:b8:8a:0e:17:7a:0b:39:99:57:92:22:
         f3:75:cb:c7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlDRDMxMTAvBgNVBAUTKEFDNDE5MUFDM0ExQTkzOTZFNzhENjEyRjM3NERCQUND
OEYyRDkxQjUwHhcNMjYwODE4MTU0OTU2WhcNMjYwODI1MTU0OTU2WjAYMRYwFAYD
VQQDEw02YTg0N2YyNC1jNTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzn98Vcnnt5U76nCkimNqaZaDOij4mKdG8cv8qWEtQUTj9XM8j8qF/r+nEgq2
3sk81z2IbOXn4n491gjzY/apTd4waPvZVsl/5XAXQ04c6ZXYBQrFQBnW+j9gSV1v
HxIcB7ZDMUa0kiRs3NmKIfx55cQoxFkUU1JesoDCKV2ANSCsgYynfmisUCwp6Tii
yN3JqmHuoUH+gcapka9ATobSi5G48UWtqUnDljzA+vUZfY3Cg/CL0UNoSTdUBxIm
RmEMynu+kZma37qSCDMBwvdz57vGTkRJxg02X0M3HuoaNliiSCTgYN7UiqxxCQ1y
hq3xe1+zxxG0i19/5hZe6KykjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMz6v4A4
4+TCn6C30ov8E+GKkuFOMB8GA1UdIwQYMBaAFKxBkaw6GpOW541hLzdNusyPLZG1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUNEMy84MTIyODZEMjQ3
MTExMUU1QTQ0OTYzMzVDNEY5QUUwMi9yRUdSckRvYWs1Ym5qV0V2TjAyNnpJOHRr
YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JFR1JyRG9hazVibmpXRXZOMDI2ekk4dGtiVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OUNEMy84MTIyODZEMjQ3MTExMUU1QTQ0OTYzMzVDNEY5QUUwMi9yRUdSckRvYWs1
Ym5qV0V2TjAyNnpJOHRrYlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKV6OfRud3aNcVyvGXBNUFsiFVYzbsvxBkEUfwt9f/743zdU6lfgUclduxbvb
MirM7HvcygfhYLDX7MrY15kNTJOT8pNG5UOhDXwQwjYUuEPWBL03w3/VmisjvIHE
FHLolxIwV3eZ+aW31z+a92EzQ5j6whptNopTFLG86z11ocJ4+6/e6ry5RzzfriJH
Q+RRFHbnVpG8ZYZVgns86mW3gQnkHhxpt+YnVlOEKyXQw+3Ui5+SiLw6kkh48j4F
EoBXxz/gUIio88Q9ZlfchjT2y3gqAt/GA+aNwFM0kpdri7xiC6b3oI67PthCtsv4
vmwLiLiKDhd6CzmZV5Ii83XLxw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:29 2026 by rpki-client