Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft
File:                     AZcEvn5KzguhIRSzKOsCBxHvTq8.mft (raw, json)
Hash identifier:          YTMyPM53Xbn+aq5jRRxRHeUjQ6+HShr+oBWbQYxw2OU=
Subject key identifier:   1B:35:F3:7D:6D:15:63:B4:E2:98:AB:2E:F0:25:73:92:A9:9D:24:D4
Authority key identifier: 01:97:04:BE:7E:4A:CE:0B:A1:21:14:B3:28:EB:02:07:11:EF:4E:AF
Certificate issuer:       /CN=A91728E2/serialNumber=019704BE7E4ACE0BA12114B328EB020711EF4EAF
Certificate serial:       02D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft
Manifest number:          02D1
Signing time:             Wed 19 Aug 2026 01:42:33 +0000
Manifest this update:     Wed 19 Aug 2026 01:42:33 +0000
Manifest next update:     Wed 26 Aug 2026 01:42:33 +0000
Files and hashes:         1: AZcEvn5KzguhIRSzKOsCBxHvTq8.crl (hash: /SR9ayETmDnjMNEGgTNdHJN0sgjrhdzH/KwycGNFu2w=)
                          2: 85AEBA76504C11ED829F7D24C4F9AE02.roa (hash: LRYq0mPrjweqGJPSdcgLlt3nrjlK6fosCT9C7fklNuQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.crl
                          rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 728 (0x2d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91728E2, serialNumber=019704BE7E4ACE0BA12114B328EB020711EF4EAF
        Validity
            Not Before: Aug 19 01:42:33 2026 GMT
            Not After : Aug 26 01:42:33 2026 GMT
        Subject: CN=6a850a09-563d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:92:bf:93:e9:88:9d:c2:c6:e7:8d:90:40:bb:
                    ff:a6:88:c0:b2:9e:28:bb:62:07:62:aa:64:94:e5:
                    7b:ec:40:2c:0e:93:58:18:ef:57:c4:2a:d9:74:f3:
                    e1:29:1e:a5:4a:56:e8:52:db:f9:19:0f:05:4b:e2:
                    63:3f:ae:29:c5:63:3f:6a:ab:44:53:ab:09:13:6f:
                    b9:74:3f:62:0b:f7:0b:bd:ce:e9:df:61:a9:36:27:
                    5f:12:b4:6a:5f:7e:5e:b5:5f:cc:e0:34:b3:be:bc:
                    a9:3b:c6:3e:6b:6d:92:b9:c0:ba:c0:25:4e:6a:78:
                    6c:83:66:83:71:0c:e7:0d:10:84:40:c3:56:24:28:
                    5c:c3:3a:44:43:e2:02:24:e3:bd:68:57:67:04:d2:
                    3b:12:e1:21:f0:db:1c:67:65:1d:d0:3a:dd:2e:7f:
                    fd:b4:14:05:52:6f:f7:40:c9:8a:d2:d6:e1:9a:ed:
                    94:d5:ae:67:e7:da:73:ec:cf:96:5e:69:9b:f8:1a:
                    b3:27:2a:5e:3f:af:7b:ff:6b:a2:50:42:5e:e1:97:
                    f9:78:8a:08:a7:a7:6d:7b:83:21:53:15:a2:5e:ca:
                    39:f3:06:da:6e:7c:4b:88:10:f0:14:e6:e1:d5:6c:
                    56:fb:bc:0e:85:42:bd:17:d9:f6:3b:6f:7f:6e:97:
                    7d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:35:F3:7D:6D:15:63:B4:E2:98:AB:2E:F0:25:73:92:A9:9D:24:D4
            X509v3 Authority Key Identifier:
                keyid:01:97:04:BE:7E:4A:CE:0B:A1:21:14:B3:28:EB:02:07:11:EF:4E:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:89:7c:f2:cb:64:bc:c6:05:e5:07:28:3c:18:4b:47:53:91:
         4c:6b:c6:57:ee:ca:dc:18:1b:ad:cd:0d:d5:de:91:2e:1c:b5:
         f2:e9:dc:34:fc:66:1a:36:86:00:e5:6d:d7:95:3c:96:28:2c:
         52:fe:84:8e:68:10:89:d5:59:3f:94:7e:04:70:04:1f:90:b2:
         55:b1:19:ff:22:79:c1:d7:0f:fa:23:de:9d:e2:37:87:c5:89:
         0f:a9:84:1c:d3:a5:b1:c0:b1:21:f4:33:b0:1b:d3:ea:ed:fc:
         42:20:ff:06:2e:b9:d1:05:76:94:92:e8:3b:9b:53:61:00:fc:
         1f:62:a9:a8:49:5f:44:f1:9e:44:8a:f3:57:75:a5:e5:a6:9e:
         67:f3:ca:54:66:d5:76:fd:92:61:f4:6f:b2:21:01:ca:02:e9:
         29:4d:f7:02:43:c3:68:f9:c3:3b:dc:74:0b:34:ab:09:7c:42:
         fa:73:e8:7f:bb:d6:99:b1:39:c8:e5:a2:5f:bf:93:d5:95:91:
         20:b4:c5:34:08:f2:57:a6:72:dd:ac:be:92:93:42:40:85:3e:
         bc:dc:16:fa:d2:23:51:31:a6:9d:cf:fa:41:c1:5b:1e:03:7f:
         74:06:5b:31:0c:2e:78:46:1b:f7:1b:fc:11:5b:27:31:3c:44:
         7c:f3:50:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:39 2026 by rpki-client