Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft
File:                     4u3kp-qXJminlbJ7qdyH9LkNqJc.mft (raw, json)
Hash identifier:          t5q0EyUQz9XgyltceU5+hvRTu3uIXjcl8FuG0pVY/vU=
Subject key identifier:   C2:CE:66:75:8C:27:72:EA:EE:98:33:DE:CA:57:70:80:0C:3E:0F:36
Authority key identifier: E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97
Certificate issuer:       /CN=A9172D91/serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897
Certificate serial:       1773
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft
Manifest number:          1724
Signing time:             Tue 18 Aug 2026 16:49:16 +0000
Manifest this update:     Tue 18 Aug 2026 16:49:16 +0000
Manifest next update:     Tue 25 Aug 2026 16:49:16 +0000
Files and hashes:         1: 4u3kp-qXJminlbJ7qdyH9LkNqJc.crl (hash: rGUDaArdww+fvIxaPAlDWdgqHm++bdJwUb7735MEveY=)
                          2: 9C79DBD23E7911EBBFFAC96BC4F9AE02.roa (hash: aVhexx8H4O1ah6UPgLMQpAuILA0ylRRun3N3rQAJ9MU=)
                          3: 56C8FCACE38011EFBF195482C4F9AE02.roa (hash: 21/YXXRPLk5L/rQp1wiKIAMpRY2JLU1KFkt47LtF7pk=)
                          4: 2357FC145F8D11EF94E7303FC4F9AE02.roa (hash: CAlcqJi6d37i/TxCFyf2svSkqxoKtgQLsLZWuq3dcoE=)
                          5: 854D304E0C9B11EC8433FE7AC4F9AE02.roa (hash: Ab5UYVud2bNs5oNT54NbMqTkTRHIRZLylz4Z+NqHgPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl
                          rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 16:49:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6003 (0x1773)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172D91, serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897
        Validity
            Not Before: Aug 18 16:49:16 2026 GMT
            Not After : Aug 25 16:49:16 2026 GMT
        Subject: CN=6a848d0c-a573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:23:d1:f3:be:5b:bf:cf:c9:3b:d5:72:f5:f0:
                    f4:0b:9b:79:c0:c9:7e:72:be:87:88:f5:ce:13:68:
                    66:1f:ea:73:3e:30:a6:c7:d1:a5:25:8f:dc:8d:0f:
                    ed:de:d0:6d:5e:9f:1b:4e:23:84:d4:5f:68:0c:e4:
                    7b:7a:af:62:77:f4:45:ac:67:10:8e:ca:e1:0d:e0:
                    a9:f9:35:eb:5c:4e:6d:aa:80:f1:9f:32:63:6c:fe:
                    92:11:b1:4a:b8:92:65:03:ff:3b:df:9e:21:fc:16:
                    73:ac:3e:0b:14:bb:29:87:01:d6:24:fb:70:0b:0f:
                    62:1a:33:87:eb:46:2c:97:f6:0c:57:87:24:0e:15:
                    5d:11:4a:0d:da:ec:dd:a3:90:2d:2d:98:68:79:91:
                    47:73:86:ad:5e:25:b1:61:28:c2:fb:e1:57:11:6b:
                    67:23:d6:12:7e:17:29:08:4c:35:d7:39:3b:2e:b9:
                    2f:1b:f2:18:aa:be:1d:b8:7b:83:8a:54:d1:cc:d7:
                    aa:20:c3:68:fa:57:2b:ab:fb:d1:87:57:a7:05:fd:
                    87:ef:8c:46:61:46:64:83:38:4a:15:84:73:6e:0e:
                    c2:af:01:82:c6:62:27:87:56:4d:ef:87:1f:da:d5:
                    ad:5c:c8:5d:00:b0:e8:9b:7b:1a:b7:4f:1e:65:46:
                    3c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CE:66:75:8C:27:72:EA:EE:98:33:DE:CA:57:70:80:0C:3E:0F:36
            X509v3 Authority Key Identifier:
                keyid:E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:2b:47:b0:6f:bc:2e:8b:b0:43:3d:75:08:61:95:15:a4:98:
         f4:4e:e7:7d:b9:60:d0:08:9b:e8:f4:7f:46:e8:76:fc:c0:ab:
         06:6c:d3:10:8d:08:d8:3a:67:58:d2:64:06:0e:67:8f:47:a1:
         22:b8:35:52:a8:d6:63:f8:48:dc:02:c3:b9:ae:70:51:32:1e:
         f0:8a:31:c8:f7:fd:92:7b:9a:37:44:7f:7e:56:b9:e2:f5:aa:
         18:b2:79:a5:79:04:59:4d:6a:c7:2a:5f:51:c9:8e:12:d7:7b:
         28:47:d3:95:db:54:d9:c6:2a:b6:63:38:43:85:1b:43:8d:3a:
         2b:39:62:8a:85:89:03:90:92:0f:a1:8d:05:c9:df:af:dd:3b:
         a4:3f:5e:54:7e:7e:61:31:de:7d:95:6e:dc:c9:ec:4b:a3:1f:
         ae:f5:dc:ac:c6:fd:b2:d3:0c:cc:30:4c:18:03:bc:97:b4:43:
         24:1b:ff:a1:0e:0a:ae:5d:ac:90:c3:c9:34:d0:29:6e:ae:b6:
         62:9f:01:10:5a:00:3b:d8:22:5c:bd:cc:f4:19:9e:e8:16:a4:
         4a:b3:3c:5d:6b:e4:dd:17:55:d1:b9:34:b1:f1:bb:68:b0:c1:
         7d:be:fa:76:35:5e:31:af:a1:02:40:2d:b2:a3:37:81:55:5f:
         78:5c:12:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:43 2026 by rpki-client