Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
File:                     kGjeIDMsvR2zmyN0NbF03nCZTwM.mft (raw, json)
Hash identifier:          f6Nle0Lf8FMOj29hlTd4F5+N6np6rMUhV+gNxwvev4Y=
Subject key identifier:   91:92:31:64:36:6E:B1:C0:78:72:32:5B:28:44:83:8C:08:DD:B3:4B
Authority key identifier: 90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03
Certificate issuer:       /CN=A91813E4/serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
Certificate serial:       06D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
Manifest number:          06C9
Signing time:             Tue 18 Aug 2026 22:41:02 +0000
Manifest this update:     Tue 18 Aug 2026 22:41:02 +0000
Manifest next update:     Tue 25 Aug 2026 22:41:02 +0000
Files and hashes:         1: kGjeIDMsvR2zmyN0NbF03nCZTwM.crl (hash: 8rs2sM9OL4Xot9Hq/NSUyQrzQM+zH1N6HhCUsOfngVw=)
                          2: 9609416A33D611EFB34E2C40C4F9AE02.roa (hash: VEOYpLopU2c9FdbzxqgEzKYlCo37XOpklpOWcyDo3bI=)
                          3: BE7CCC22322911F189DD034AA5833773.roa (hash: EZBejfYuKCx6QKKVXG9spabvgPR78DL4iU1w9GXCeXg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl
                          rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 22:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1751 (0x6d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813E4, serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
        Validity
            Not Before: Aug 18 22:41:02 2026 GMT
            Not After : Aug 25 22:41:02 2026 GMT
        Subject: CN=6a84df7e-172a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cf:e7:dc:76:f5:d7:a3:03:ec:75:bd:59:1a:
                    cf:50:f9:df:aa:70:f6:d0:f1:63:5e:da:27:8d:5d:
                    dc:a1:81:28:31:d5:59:e0:45:32:04:c0:43:af:ec:
                    0b:4c:a1:ac:20:3b:22:a3:08:b0:c8:0b:9b:1d:a2:
                    36:90:88:8f:97:cb:0a:e8:9a:55:21:18:59:95:9d:
                    08:e3:53:12:b7:6d:32:c2:e6:f2:39:43:33:4e:87:
                    ec:6a:7a:91:dd:0f:02:e5:23:17:ff:fc:20:45:40:
                    6f:66:c8:ec:28:0d:e4:da:7f:24:13:93:74:73:ce:
                    e4:dc:7c:bd:0e:41:29:1b:71:de:9b:a5:6c:15:fd:
                    50:13:d3:aa:b3:c9:ad:f4:cb:1d:d8:e9:61:b0:a2:
                    af:e1:75:7c:40:a3:37:2a:a1:5b:46:0e:7f:b6:cf:
                    95:2c:31:6e:56:a7:b2:bc:fc:07:42:10:dd:2e:8a:
                    80:51:fa:09:87:29:d7:e9:c9:68:85:3b:f8:73:dd:
                    82:ff:99:5d:bf:50:3d:73:f2:79:0e:f8:44:c3:06:
                    95:0d:4c:73:27:93:18:65:99:1c:04:be:c1:d5:bf:
                    13:7e:a4:e4:58:14:3c:47:52:9c:6f:61:5a:c6:9f:
                    42:16:b6:16:4b:f9:e2:04:82:e3:0e:68:c6:cd:60:
                    1f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:92:31:64:36:6E:B1:C0:78:72:32:5B:28:44:83:8C:08:DD:B3:4B
            X509v3 Authority Key Identifier:
                keyid:90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:3e:6d:b2:ad:0f:64:d7:ea:d2:ac:db:cb:b4:6b:dd:a6:7f:
         e3:07:52:21:c8:7d:94:1f:3f:81:a6:90:41:ad:ed:3f:c1:f1:
         e2:15:fd:8c:4e:9c:3b:22:9f:ba:d6:bb:1a:d1:fb:8f:dc:00:
         34:b7:fa:72:b8:50:f3:27:cf:1c:91:fb:ef:5d:0f:83:f5:7f:
         e2:f6:63:48:ac:ca:78:f2:2d:d2:51:54:bb:36:fc:05:40:ba:
         be:8b:30:bf:57:97:84:2a:fd:cb:e4:1f:9f:a4:77:a6:cb:22:
         f4:18:1c:fe:69:f8:65:69:13:53:33:be:1c:6a:30:7c:0e:17:
         b2:a4:54:df:85:4e:ed:34:ed:21:dd:4a:36:40:39:e0:de:4c:
         b5:3c:4e:33:17:46:af:9e:0f:f4:87:59:c5:b4:45:dc:97:75:
         30:ce:d1:b9:c3:90:3a:60:d0:6d:3c:f9:cc:33:21:e0:2f:99:
         f7:2d:f2:c1:39:c4:43:74:59:00:e1:d7:b9:ff:12:27:53:f1:
         8d:a9:ab:22:c1:92:3c:dd:3f:11:a1:e7:8f:37:b9:14:df:7f:
         f1:a9:e9:db:3a:9d:88:3a:ea:fa:9c:3e:bb:ea:3c:d5:1e:e1:
         0a:ba:d0:70:c5:64:25:29:b0:22:21:f4:90:0b:b4:2a:11:63:
         a9:d9:90:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:16 2026 by rpki-client