Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
File:                     A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft (raw, json)
Hash identifier:          QEKlO2WeDxBtGat+2Tj5oovx4I83UdqBXLApA9ardTk=
Subject key identifier:   BD:12:CD:FD:F6:87:AA:19:D8:1B:B6:F1:78:2C:F1:D1:A2:75:8B:2F
Authority key identifier: 03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4
Certificate issuer:       /CN=A91822BF/serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
Certificate serial:       0CC2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
Manifest number:          0CB8
Signing time:             Tue 18 Aug 2026 18:46:37 +0000
Manifest this update:     Tue 18 Aug 2026 18:46:36 +0000
Manifest next update:     Tue 25 Aug 2026 18:46:36 +0000
Files and hashes:         1: A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl (hash: 7O2UUc/gbVlG0UFCMfKchyPrB5We2vUehLbOfPlTJBA=)
                          2: 37EA3E261ADC11EA8EB46F37C4F9AE02.roa (hash: veYCT0YVn2lsSh/a1SemHmCMUXzXqFx3N+q0M958UTg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl
                          rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:46:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3266 (0xcc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91822BF, serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
        Validity
            Not Before: Aug 18 18:46:36 2026 GMT
            Not After : Aug 25 18:46:36 2026 GMT
        Subject: CN=6a84a88d-d5c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:88:95:27:c6:d5:65:01:36:cb:7b:ba:f7:65:
                    56:f9:92:15:cb:41:84:bf:f9:bf:df:51:16:43:93:
                    48:fe:20:cd:a6:af:11:79:0f:77:58:1b:94:6a:69:
                    c5:fd:4b:22:40:7d:98:ec:73:67:b4:97:24:fa:27:
                    8d:28:bb:f4:32:9f:f0:b9:35:d9:3e:e3:19:27:ba:
                    76:cd:db:2f:cc:a7:1a:17:ad:f4:aa:0b:a1:7f:c7:
                    97:1c:26:f0:18:dc:d8:1a:ba:68:40:64:e2:d3:9f:
                    e6:59:03:fd:9b:a4:c3:5a:f4:b0:cb:2e:a4:1d:0f:
                    e9:02:5b:de:08:3f:72:9b:d8:48:c3:8f:3a:e4:d5:
                    63:73:9c:8d:f7:33:74:ad:31:70:7e:86:56:d3:ca:
                    bb:af:8a:cc:20:91:03:09:f7:da:47:2d:b6:e5:56:
                    73:3d:17:bf:fe:31:56:38:0b:3e:c6:41:92:af:df:
                    0e:c1:eb:2b:dd:46:0c:55:08:80:a9:96:3f:09:5f:
                    e8:d1:fa:59:af:08:b6:b0:0b:48:c1:47:1d:8b:df:
                    4f:88:0a:08:31:b2:1c:1a:37:59:a5:ec:38:5f:9c:
                    a3:1a:a7:5c:26:e6:1b:0c:e3:bc:a2:fd:01:f1:43:
                    2f:ba:04:4d:53:9e:e4:a4:68:47:1c:87:58:33:51:
                    81:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:12:CD:FD:F6:87:AA:19:D8:1B:B6:F1:78:2C:F1:D1:A2:75:8B:2F
            X509v3 Authority Key Identifier:
                keyid:03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:0e:ec:04:ed:97:07:a0:d7:59:8a:88:2f:ef:c6:42:13:ea:
         46:3f:20:fe:14:5c:b2:ef:56:7c:56:43:35:1c:9f:15:15:57:
         7a:67:97:f7:f9:44:3f:f6:57:5c:41:55:f3:dc:51:df:46:34:
         59:fd:be:9b:65:91:cb:95:b3:b0:93:39:04:9b:2f:93:b4:50:
         7f:85:d9:33:9a:a9:92:73:a4:91:8b:2c:9f:13:84:aa:2a:18:
         68:ac:69:42:a9:8f:f3:ca:90:d3:00:15:4e:9b:d5:89:85:db:
         bd:e7:68:85:62:13:67:31:3d:9b:96:39:5d:f8:cf:78:89:64:
         53:81:56:67:63:19:ac:5a:33:88:fc:be:53:29:53:e2:ec:68:
         b1:e6:d7:cd:b9:48:e4:f0:dc:fb:0a:2f:3e:7a:a7:0e:44:f1:
         97:ad:ee:5b:f9:ac:e3:17:61:f4:dd:b9:87:c3:7b:f6:59:b4:
         36:2e:11:31:d6:c3:78:c1:f2:cc:b7:bf:27:49:f6:01:a7:74:
         07:1f:81:8f:ca:14:22:10:75:a5:04:c4:ae:dd:57:82:a5:28:
         dc:89:1c:d4:02:b2:29:62:65:41:c9:f4:b5:d2:0f:fc:7b:53:
         d6:ed:1a:4f:f6:18:07:49:b9:aa:b9:0c:b6:6c:96:e1:d8:97:
         0f:51:8f:72
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODIyQkYxMTAvBgNVBAUTKDAzNzdCOTNDOTFGREFGNDY5QTU5MUI0QzUyRDI0Q0Ix
NTU1RDJCRDQwHhcNMjYwODE4MTg0NjM2WhcNMjYwODI1MTg0NjM2WjAYMRYwFAYD
VQQDEw02YTg0YTg4ZC1kNWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs4iVJ8bVZQE2y3u692VW+ZIVy0GEv/m/31EWQ5NI/iDNpq8ReQ93WBuUamnF
/UsiQH2Y7HNntJck+ieNKLv0Mp/wuTXZPuMZJ7p2zdsvzKcaF630qguhf8eXHCbw
GNzYGrpoQGTi05/mWQP9m6TDWvSwyy6kHQ/pAlveCD9ym9hIw4865NVjc5yN9zN0
rTFwfoZW08q7r4rMIJEDCffaRy225VZzPRe//jFWOAs+xkGSr98Owesr3UYMVQiA
qZY/CV/o0fpZrwi2sAtIwUcdi99PiAoIMbIcGjdZpew4X5yjGqdcJuYbDOO8ov0B
8UMvugRNU57kpGhHHIdYM1GBMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL0Szf32
h6oZ2Bu28Xgs8dGidYsvMB8GA1UdIwQYMBaAFAN3uTyR/a9GmlkbTFLSTLFVXSvU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjJCRi8xMDM5QkM0MDFB
REIxMUVBQUEzQTgyMzVDNEY5QUUwMi9BM2U1UEpIOXIwYWFXUnRNVXRKTXNWVmRL
OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0EzZTVQSkg5cjBhYVdSdE1VdEpNc1ZWZEs5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjJCRi8xMDM5QkM0MDFBREIxMUVBQUEzQTgyMzVDNEY5QUUwMi9BM2U1UEpIOXIw
YWFXUnRNVXRKTXNWVmRLOVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtQ7sBO2XB6DXWYqIL+/GQhPqRj8g/hRcsu9WfFZDNRyfFRVXemeX9/lEP/ZX
XEFV89xR30Y0Wf2+m2WRy5WzsJM5BJsvk7RQf4XZM5qpknOkkYssnxOEqioYaKxp
QqmP88qQ0wAVTpvViYXbvedohWITZzE9m5Y5XfjPeIlkU4FWZ2MZrFoziPy+UylT
4uxosebXzblI5PDc+wovPnqnDkTxl63uW/ms4xdh9N25h8N79lm0Ni4RMdbDeMHy
zLe/J0n2Aad0Bx+Bj8oUIhB1pQTErt1XgqUo3Ikc1AKyKWJlQcn0tdIP/HtT1u0a
T/YYB0m5qrkMtmyW4diXD1GPcg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:48:18 2026 by rpki-client