Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft
File:                     csG8nD23m0PzVvI_lWiEjJz7jdU.mft (raw, json)
Hash identifier:          iBBY23eV/2+APrSiiBgV02YXM5plB70GNMueXjOyzfM=
Subject key identifier:   39:BC:17:E3:3B:38:D7:A7:C2:97:85:10:20:EA:55:5F:51:FC:30:CC
Authority key identifier: 72:C1:BC:9C:3D:B7:9B:43:F3:56:F2:3F:95:68:84:8C:9C:FB:8D:D5
Certificate issuer:       /CN=A91820CE/serialNumber=72C1BC9C3DB79B43F356F23F9568848C9CFB8DD5
Certificate serial:       078C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft
Manifest number:          0784
Signing time:             Tue 18 Aug 2026 21:55:17 +0000
Manifest this update:     Tue 18 Aug 2026 21:55:17 +0000
Manifest next update:     Tue 25 Aug 2026 21:55:17 +0000
Files and hashes:         1: csG8nD23m0PzVvI_lWiEjJz7jdU.crl (hash: 4el5W6DTFIwKXeud2RkrCgIql0Xg/BY30WtaPDl2JHE=)
                          2: EB292D8A6BF811EB8E899650C4F9AE02.roa (hash: atWWdhdNCGzw5vFDKmVi5w9vnS6VXFuLxeYuDlcE0MA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.crl
                          rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:55:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1932 (0x78c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91820CE, serialNumber=72C1BC9C3DB79B43F356F23F9568848C9CFB8DD5
        Validity
            Not Before: Aug 18 21:55:17 2026 GMT
            Not After : Aug 25 21:55:17 2026 GMT
        Subject: CN=6a84d4c5-ca54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:96:a6:b0:bb:12:c3:0a:4e:6b:56:16:f1:5b:
                    22:e6:e6:7b:6b:3f:1b:42:74:dd:66:36:2b:16:b5:
                    ac:27:a7:76:09:96:65:b0:23:95:fd:7e:35:0a:14:
                    f7:2f:a5:6c:39:66:01:50:03:58:f4:bb:f7:d6:7f:
                    98:d8:1a:a6:8f:26:11:0e:b1:40:a7:48:ad:a4:0c:
                    d7:81:16:bb:bd:74:1d:5d:0f:d9:a3:e1:00:ca:c8:
                    cd:e2:3e:04:9f:9d:1a:a8:3e:33:b3:66:1f:61:16:
                    0a:4c:af:57:78:59:91:be:11:c5:c2:f4:89:74:7b:
                    d0:73:62:41:0c:8e:c6:1c:d0:68:4d:be:86:29:00:
                    78:df:17:aa:b4:42:57:79:cb:b8:d1:bf:80:ee:36:
                    e0:c3:88:e7:07:16:46:8c:00:af:b2:3c:8c:06:89:
                    b0:ec:c7:7a:14:5c:58:16:77:1f:6d:9a:33:c7:38:
                    5b:7b:10:43:d0:14:45:53:9c:e0:b1:5a:7a:71:cd:
                    90:cd:97:2f:a8:76:1a:77:19:1a:36:f6:cc:01:d3:
                    d2:72:31:ba:d6:6e:5f:32:63:70:ae:8c:90:cc:42:
                    96:f8:39:85:d8:cb:79:66:1b:52:0f:f7:d5:bb:97:
                    53:c9:e2:b6:47:d0:a2:03:1e:fb:1a:6c:95:12:9c:
                    54:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BC:17:E3:3B:38:D7:A7:C2:97:85:10:20:EA:55:5F:51:FC:30:CC
            X509v3 Authority Key Identifier:
                keyid:72:C1:BC:9C:3D:B7:9B:43:F3:56:F2:3F:95:68:84:8C:9C:FB:8D:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:94:a9:bd:18:9a:11:3f:6b:09:73:0a:d3:60:41:70:46:87:
         b2:fe:0f:9d:5d:cf:2d:da:1b:ff:2b:3a:f0:95:bb:77:d2:b2:
         51:8b:d9:f8:aa:1c:b1:5f:5c:4a:e3:78:fc:97:99:99:c8:ee:
         b1:b5:5e:bb:fa:d9:7f:48:71:e4:4d:e6:56:16:94:f1:d4:f4:
         bc:08:f2:af:d8:3e:ab:de:f3:f3:fb:6e:20:d9:1c:0d:2c:25:
         95:54:34:75:ef:1f:c6:f3:88:95:38:71:a1:51:55:da:7e:08:
         af:04:dc:38:b9:35:a8:5a:dc:1a:12:8b:ef:0f:c9:15:0c:ca:
         9a:cf:0d:88:34:83:2d:b2:42:1f:0d:8e:49:f4:4e:94:68:4e:
         7e:56:cd:e0:8a:0f:15:a0:6f:1d:39:f0:15:2f:13:ac:b9:6e:
         06:06:f8:0d:44:2d:15:b4:bd:f9:ec:76:27:bd:48:85:bb:d1:
         3a:03:a5:1e:f7:37:b4:3e:47:10:16:74:e4:e9:ef:dc:88:da:
         f5:cc:8c:f2:dc:33:9f:0e:ce:f7:ec:7f:54:26:2f:28:95:fc:
         a8:c2:00:1d:b8:71:ed:5e:fa:e8:45:02:6d:73:2f:e3:5c:4c:
         11:97:75:21:06:60:e9:f1:c0:84:17:a9:33:09:70:61:c3:e3:
         ff:34:42:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:47:03 2026 by rpki-client