Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
File:                     IW4UMOXDDg0jp10HDbeJi5CEl5k.mft (raw, json)
Hash identifier:          QgevikJmcP9ZYhaObm9k8/YhJiVMm8M3psjXiJJ4tNw=
Subject key identifier:   50:39:FD:C2:FF:46:D7:F6:3E:91:DB:94:DA:03:28:0C:AE:7C:3A:13
Authority key identifier: 21:6E:14:30:E5:C3:0E:0D:23:A7:5D:07:0D:B7:89:8B:90:84:97:99
Certificate issuer:       /CN=A919A5B5/serialNumber=216E1430E5C30E0D23A75D070DB7898B90849799
Certificate serial:       089F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
Manifest number:          0891
Signing time:             Tue 18 Aug 2026 21:01:55 +0000
Manifest this update:     Tue 18 Aug 2026 21:01:55 +0000
Manifest next update:     Tue 25 Aug 2026 21:01:55 +0000
Files and hashes:         1: IW4UMOXDDg0jp10HDbeJi5CEl5k.crl (hash: qo+Zf6eQkGlKwvIiYrbDGidFvUHF+3qazg45GKbC1bY=)
                          2: ACD444282EC911EB99EC263DC4F9AE02.roa (hash: rCKXyCh+EMd4ulOOsHCpQ92EvtiU4kyrN3RmnguBNlE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.crl
                          rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2207 (0x89f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A5B5, serialNumber=216E1430E5C30E0D23A75D070DB7898B90849799
        Validity
            Not Before: Aug 18 21:01:55 2026 GMT
            Not After : Aug 25 21:01:55 2026 GMT
        Subject: CN=6a84c843-4499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:dc:9f:0f:8c:ae:3f:7d:cb:c0:ae:da:9b:29:
                    b0:ab:86:d2:f5:a6:c8:21:d9:d3:dc:ef:f8:bc:1c:
                    ba:70:92:20:26:2e:92:37:e8:c7:1b:1c:6a:55:ea:
                    98:65:af:36:92:31:d2:ba:d3:6b:ea:49:3f:3f:a6:
                    79:c1:40:fa:0a:10:3c:e5:c8:3a:08:ba:e8:2f:cf:
                    a9:ef:65:3a:f0:5e:7e:a2:52:0e:85:9d:f8:c7:2d:
                    89:ce:80:1d:87:9d:fd:37:a0:08:1c:39:27:f5:27:
                    58:9f:a7:c1:9a:16:5e:64:f4:0e:45:0f:2a:07:92:
                    5d:70:8a:5e:f7:4f:ec:5a:1e:f5:66:c5:ea:38:4e:
                    59:16:48:a2:c2:97:f9:7c:f9:f1:e3:8c:79:9b:01:
                    dc:69:58:d8:76:29:8c:76:a0:2d:80:88:5e:91:ff:
                    cc:50:99:41:bd:da:b8:a1:ba:5d:ec:80:41:af:00:
                    c9:59:ea:22:2e:5c:38:2c:d2:06:6c:57:e9:0d:be:
                    34:5a:00:85:c1:d5:3b:01:69:79:87:97:3d:15:7d:
                    a7:d9:fa:84:75:0b:db:da:d9:b3:c2:c9:e9:c1:8a:
                    7f:ed:7e:2e:a4:5b:4b:c5:70:e7:34:5c:d6:f1:8a:
                    e9:ae:61:4b:9a:e8:d0:64:40:9b:03:0b:63:1f:1b:
                    a8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:39:FD:C2:FF:46:D7:F6:3E:91:DB:94:DA:03:28:0C:AE:7C:3A:13
            X509v3 Authority Key Identifier:
                keyid:21:6E:14:30:E5:C3:0E:0D:23:A7:5D:07:0D:B7:89:8B:90:84:97:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:1a:fe:71:f8:9b:60:15:9e:27:9d:b5:25:1a:cb:f7:ea:29:
         11:e2:fb:f8:4a:fc:d4:b1:ec:b3:51:81:54:fc:bf:6e:72:84:
         bd:b1:0d:dd:2a:d7:51:f2:cb:bf:75:7a:35:e8:10:83:f6:27:
         f1:ab:36:de:d8:8a:9e:d0:b4:3c:45:2b:88:45:10:71:6f:01:
         c7:bb:b7:b6:11:74:f9:ee:4b:3f:ee:f2:a5:45:69:ff:9f:18:
         5c:39:15:52:c7:20:26:f3:8c:bc:1c:cc:e3:27:8e:63:06:e2:
         c3:cf:cb:6b:fb:b2:60:24:59:18:05:9e:64:1d:88:c4:fe:47:
         01:71:6d:54:bd:e0:49:99:da:c0:36:43:39:58:14:45:8d:92:
         7c:0c:e9:08:68:4b:8b:3c:96:c6:74:f0:cc:e0:16:f1:5d:90:
         f8:bf:e5:92:01:37:78:c9:0f:96:11:37:be:7f:0f:b7:31:66:
         5b:5f:cd:11:d9:fc:0f:6e:f3:41:34:b2:63:a8:94:35:5f:ab:
         e9:51:19:01:27:f2:97:25:26:4f:84:1b:af:09:62:06:58:b6:
         86:73:49:e9:30:aa:d0:8f:f1:28:af:b1:9d:a2:4d:5a:ac:e8:
         63:a7:2a:4b:e7:24:5b:d4:f3:93:c6:1c:aa:82:ab:93:53:9a:
         bc:6c:76:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:57 2026 by rpki-client