Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft
File:                     pWcIHaZpXdN7LCsbF6Abo95ZHss.mft (raw, json)
Hash identifier:          l49MdBzKgdN48SSKRjQJUr+3ureG30THcICpLy1R8TM=
Subject key identifier:   BE:5B:9C:E7:4A:AD:19:17:1A:69:65:36:E0:E7:79:B2:D0:49:DB:A6
Authority key identifier: A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB
Certificate issuer:       /CN=A91A284E/serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB
Certificate serial:       086D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft
Manifest number:          0861
Signing time:             Tue 18 Aug 2026 21:14:17 +0000
Manifest this update:     Tue 18 Aug 2026 21:14:16 +0000
Manifest next update:     Tue 25 Aug 2026 21:14:16 +0000
Files and hashes:         1: pWcIHaZpXdN7LCsbF6Abo95ZHss.crl (hash: 7OjvE8KEmj+n32cnaI5ipnfWfK0c8WDVo9egAQD4F4A=)
                          2: A3205106142511EB8FED0427C4F9AE02.roa (hash: 8fEp2+O8zmOzV0vCI6lvkCvaOZTilKPiu1usSNMcmM8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl
                          rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2157 (0x86d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A284E, serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB
        Validity
            Not Before: Aug 18 21:14:16 2026 GMT
            Not After : Aug 25 21:14:16 2026 GMT
        Subject: CN=6a84cb29-1b30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:52:24:b0:b3:99:0a:ca:93:8f:5a:d3:f0:53:
                    ef:71:c2:8b:19:55:ce:aa:f3:e8:96:e7:6f:b5:11:
                    45:a3:e5:ef:72:e0:de:7c:2c:b7:ee:aa:08:ca:7f:
                    f9:ae:a9:40:44:dc:1d:00:c9:c9:5b:cf:ce:f6:33:
                    0f:68:6a:53:65:90:26:90:4d:20:bf:2e:10:d3:7e:
                    53:bc:05:43:e5:d5:e4:45:18:f1:86:fd:d2:25:9b:
                    48:19:9f:8d:4d:4d:bb:cd:94:39:97:4c:79:d7:93:
                    28:da:fd:24:93:4c:0f:08:fe:e2:23:c6:91:a6:df:
                    7e:13:0c:67:61:92:42:98:87:50:71:3e:42:9e:0c:
                    db:a3:41:27:bb:4b:94:aa:0c:fd:1e:3d:05:4f:f6:
                    38:f7:87:ea:81:df:95:24:ae:fc:de:82:01:15:51:
                    ae:86:ba:52:7e:d2:8e:2d:e8:d8:30:bd:b1:57:7e:
                    4e:9d:14:e3:b2:de:20:55:0b:00:d9:0c:0a:e3:c2:
                    ab:f1:86:8b:01:d4:33:61:ab:0a:71:70:fb:15:b7:
                    0b:fc:3b:27:d7:02:65:91:5b:30:a6:32:10:e2:4d:
                    ad:79:43:ef:d4:58:c0:9e:85:94:61:db:68:40:fb:
                    5e:28:19:3c:de:6e:c8:13:ed:a4:73:8a:17:d3:4a:
                    42:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5B:9C:E7:4A:AD:19:17:1A:69:65:36:E0:E7:79:B2:D0:49:DB:A6
            X509v3 Authority Key Identifier:
                keyid:A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ef:17:9c:d9:fc:11:08:95:f9:6c:d2:b1:0c:e0:13:fd:46:
         b4:ef:34:0b:e8:fa:fb:56:8c:d4:25:84:cb:4e:93:ce:ca:5e:
         f4:2a:49:e9:6c:70:b1:e1:c0:18:ec:62:ca:db:88:44:78:b1:
         e2:de:2a:3b:d5:b4:36:a1:3b:68:c9:af:47:e0:39:fe:af:57:
         cf:64:99:19:21:09:cd:50:19:10:3e:1d:8f:df:db:94:a1:bf:
         80:2e:2a:81:7b:8f:38:cb:12:4f:06:a8:00:70:9a:3f:de:97:
         39:f8:ad:33:25:af:3e:79:12:d3:9d:70:80:83:0e:41:8b:4b:
         b5:0d:97:94:2e:bd:3a:93:02:5a:2e:8f:42:c6:09:0b:3d:44:
         72:55:75:ac:5e:7a:65:19:07:af:e9:e5:57:86:ef:7e:ab:17:
         64:f3:53:fe:4d:ec:2a:ab:22:78:19:65:79:35:cd:5e:71:13:
         46:2f:9b:c4:ae:f7:78:0d:c5:2c:ab:67:ec:b0:aa:0d:82:41:
         66:78:8b:20:e8:a5:af:0d:4a:09:38:a7:8a:64:3e:9a:98:a6:
         37:93:6c:1d:9d:e3:59:0f:dd:18:a8:a6:5d:8a:ff:e5:74:87:
         a9:ca:6e:82:59:d4:7b:7e:d4:5a:6e:12:e6:22:c4:32:88:20:
         39:f8:c3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:01 2026 by rpki-client