Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
File:                     -APDcY8OgSDUPrA0gJ9qiziE15s.mft (raw, json)
Hash identifier:          sW3G/wtgDNfcnEio678If5424OOnqV5QP9uFl6TA768=
Subject key identifier:   C6:A2:B1:0C:98:F1:23:8A:0D:17:49:9D:07:52:97:98:B1:EE:96:79
Authority key identifier: F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B
Certificate issuer:       /CN=A91A36B8/serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B
Certificate serial:       031F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
Manifest number:          0318
Signing time:             Wed 19 Aug 2026 01:29:39 +0000
Manifest this update:     Wed 19 Aug 2026 01:29:39 +0000
Manifest next update:     Wed 26 Aug 2026 01:29:39 +0000
Files and hashes:         1: -APDcY8OgSDUPrA0gJ9qiziE15s.crl (hash: w+o067RC5D7S2ZVeRroSB1FDkNgXo0YcrR9iIsScuvE=)
                          2: 0C04EFB43C9811EDB6A25D4FC4F9AE02.roa (hash: 3EomuYTOYpdRonmxsDgyICA/moRstX6OW0zEPClInuY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl
                          rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 799 (0x31f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A36B8, serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B
        Validity
            Not Before: Aug 19 01:29:39 2026 GMT
            Not After : Aug 26 01:29:39 2026 GMT
        Subject: CN=6a850703-380c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f9:57:82:e3:49:83:0f:0b:e2:bc:69:08:73:
                    45:2b:92:a9:d3:3a:a4:59:bc:98:2f:cd:de:42:0e:
                    3b:8d:e8:49:9e:c4:4e:ea:8a:1a:5e:2e:0f:89:e5:
                    5d:47:69:89:9e:9b:e6:25:15:91:91:a2:09:98:6f:
                    7d:3d:47:b5:18:31:75:0b:20:45:2a:c4:e7:f2:79:
                    8f:33:de:3d:38:2e:76:2e:6c:23:62:06:c2:83:1d:
                    9e:2e:96:57:a0:74:52:77:8a:e8:ab:eb:ae:04:72:
                    45:a4:80:67:d8:7f:43:6f:0b:06:97:57:7b:60:03:
                    83:6c:6e:16:cf:76:90:0f:14:13:12:23:7f:ca:4c:
                    54:2d:e6:8a:ab:1f:20:0b:2e:86:59:f5:7c:b4:09:
                    fb:68:73:01:c3:30:03:fd:6b:70:e1:a5:b7:bb:f5:
                    ba:32:6d:94:20:6b:6e:a5:f8:85:a5:6a:4f:50:c7:
                    06:f3:60:93:87:5f:fc:17:93:74:b8:08:bf:4d:1f:
                    fc:3c:1e:db:83:ec:3e:00:3e:d2:f3:df:75:a5:ec:
                    01:53:62:f1:b7:c5:37:03:b5:aa:6d:90:89:ac:c6:
                    c2:04:3f:ad:e3:8a:e2:b2:49:48:1a:00:97:de:a5:
                    1a:6d:c7:51:db:3c:60:86:48:54:6e:ff:e4:c5:11:
                    4d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A2:B1:0C:98:F1:23:8A:0D:17:49:9D:07:52:97:98:B1:EE:96:79
            X509v3 Authority Key Identifier:
                keyid:F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:7b:a9:55:10:bd:bd:c2:38:16:c8:34:33:03:6c:4a:50:90:
         31:07:c5:b3:ac:72:2f:9b:cd:03:dd:a7:83:95:ca:d1:98:97:
         85:c8:4a:ed:bf:ec:ec:f1:d5:66:9b:38:72:58:ed:7a:10:6d:
         0d:bf:30:d8:04:07:c6:0c:e2:92:7c:3d:1f:7e:80:92:b0:98:
         40:28:11:61:f9:48:9f:cf:a8:70:f4:ef:c8:a4:17:14:19:de:
         af:67:3c:ac:0a:fc:16:83:8f:f8:d6:f4:ba:03:f8:55:c8:c8:
         e6:0d:71:19:06:fb:e9:03:aa:c6:6b:59:17:1d:9d:dd:a9:f8:
         f9:29:d3:cb:37:cc:a6:9f:db:81:d4:f3:92:6b:47:a7:a9:38:
         78:3f:8b:aa:7d:e7:06:c6:8e:65:0b:7a:ce:eb:ec:3d:96:f2:
         90:04:7d:0e:2b:51:c3:fb:0d:0b:d4:b8:4a:40:6d:52:20:fe:
         65:76:a6:51:fc:7a:9b:82:d9:e1:f1:01:c9:ad:96:64:cb:c6:
         65:7f:99:ad:03:ef:e8:ea:2a:ac:90:e8:a5:c3:0a:9f:9a:31:
         2f:bc:31:a5:6d:b1:ec:7c:75:31:4a:38:f5:49:2c:ae:c1:fd:
         5e:48:94:1e:81:b8:08:5f:0e:3e:43:26:b9:5b:ab:a1:3f:88:
         fb:43:46:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:32:39 2026 by rpki-client