Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft
File:                     kHuyYrVxYj40suIMYKcYwXOcw70.mft (raw, json)
Hash identifier:          yybSdtlybxNJ672EPiorRxuoQ6Yd5aSjdmXivuOr3EU=
Subject key identifier:   5C:FF:5C:A4:5D:6A:6F:1B:45:D0:20:F6:00:AD:57:6D:59:91:95:C1
Authority key identifier: 90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD
Certificate issuer:       /CN=A91A3A64/serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD
Certificate serial:       0490
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft
Manifest number:          0487
Signing time:             Wed 19 Aug 2026 00:23:54 +0000
Manifest this update:     Wed 19 Aug 2026 00:23:54 +0000
Manifest next update:     Wed 26 Aug 2026 00:23:54 +0000
Files and hashes:         1: kHuyYrVxYj40suIMYKcYwXOcw70.crl (hash: Qk5RYfZZ+/JYHkFzdZ72W7whL30aocGi3MZUkIqcmKw=)
                          2: 5B92665E9ADD11ECA5401423C4F9AE02.roa (hash: Nb29Wu1CDYoesjc8FMHKjysC8EpiLHTgbPxZYxl0RNM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.crl
                          rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:23:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1168 (0x490)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3A64, serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD
        Validity
            Not Before: Aug 19 00:23:54 2026 GMT
            Not After : Aug 26 00:23:54 2026 GMT
        Subject: CN=6a84f79a-786f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f7:d6:c3:61:cf:f5:4b:2d:42:14:fd:6d:32:
                    10:92:ca:c2:f1:19:c9:f4:08:5b:e3:ca:3d:fe:e2:
                    57:79:bb:53:2c:72:7c:80:4b:ad:b4:5d:49:46:28:
                    f0:74:c8:54:2b:b3:86:a8:0e:86:07:07:42:47:58:
                    54:52:7a:cb:b9:1d:04:ea:06:d9:66:5b:96:f9:6b:
                    56:5a:6a:76:8b:33:76:c9:43:4c:38:72:43:3c:81:
                    bc:1d:67:58:95:15:80:6f:50:3b:ae:6e:3e:db:1b:
                    bd:47:35:22:4e:b0:2e:06:b1:89:39:33:19:09:90:
                    ba:2e:2f:b5:6a:74:53:af:82:8f:f7:98:14:01:89:
                    45:e7:83:67:5d:5a:b7:fe:4f:31:f2:18:0e:5c:15:
                    89:72:ff:c7:00:66:29:78:98:06:17:83:6e:c3:e2:
                    c9:51:75:31:2c:85:e3:ac:52:be:92:ab:99:a3:be:
                    a6:ff:c1:56:e5:95:3f:99:d8:5b:e7:5e:8f:c5:9f:
                    70:23:b8:36:08:48:98:be:cb:96:93:74:23:c6:56:
                    2f:ec:5c:5b:68:93:0d:c9:37:98:a1:ca:cb:d6:a5:
                    55:0b:ce:37:78:e2:12:4b:94:ac:69:6f:dd:f2:b7:
                    57:f3:44:78:68:c8:ee:6f:84:e8:96:dd:24:d4:52:
                    ea:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FF:5C:A4:5D:6A:6F:1B:45:D0:20:F6:00:AD:57:6D:59:91:95:C1
            X509v3 Authority Key Identifier:
                keyid:90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:73:32:f4:47:5e:8b:f8:67:69:77:c1:25:54:d2:6f:1e:01:
         c0:5a:00:fd:25:e4:91:37:bc:9c:03:d6:72:85:bf:76:3c:30:
         c4:be:3d:bc:c3:45:5b:89:70:e1:f9:b9:ae:f1:9c:b0:7e:93:
         63:4c:4b:b9:be:ac:1f:7f:71:64:1c:fc:a3:ae:77:ac:64:23:
         b0:74:a4:ea:34:37:8e:5e:05:a8:3b:98:96:14:a6:7e:e6:b1:
         67:24:d2:f9:44:57:c1:45:07:b8:6f:3c:4c:ed:8b:3e:e2:aa:
         3b:4a:be:7e:a4:22:55:b4:ab:3e:fc:8f:37:ae:42:da:e4:3c:
         3d:e4:56:d2:cb:8f:1b:fa:87:54:b9:e5:61:a8:e6:af:00:40:
         78:66:f9:07:5d:95:51:99:d1:97:62:bb:0b:30:99:fc:0a:19:
         06:65:7c:76:1b:d4:36:d9:6c:0e:5e:ad:ac:ed:e8:0f:9f:d8:
         b2:d2:10:1b:98:43:fa:af:74:c7:19:49:9d:35:bf:f0:52:9c:
         ca:d8:53:fc:ed:d0:eb:d9:ce:f1:e5:5c:ce:1e:39:65:ef:2c:
         ba:bb:87:3e:fc:34:4c:48:f6:db:a8:76:da:7c:17:5a:df:aa:
         49:c3:3c:df:6e:d1:78:2c:ff:82:cf:a8:c9:10:1f:35:0e:3c:
         c4:2c:8a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:37 2026 by rpki-client