Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
File:                     awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft (raw, json)
Hash identifier:          TU3ZEdQZhb3AowryuVlaXNvTcRTXjz8UvEVZiJLXqmM=
Subject key identifier:   98:B6:A6:EF:31:71:80:17:67:75:9D:17:BF:56:72:D2:11:D5:6F:D8
Authority key identifier: 6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9
Certificate issuer:       /CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9
Certificate serial:       0D31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
Manifest number:          0D00
Signing time:             Tue 18 Aug 2026 18:39:54 +0000
Manifest this update:     Tue 18 Aug 2026 18:39:54 +0000
Manifest next update:     Tue 25 Aug 2026 18:39:54 +0000
Files and hashes:         1: awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl (hash: cDNwRTMQQ4brQSERiJp0HGMI7tXrXjIk9IbVYA6/Ug0=)
                          2: 84CFF0D6D2F311EEAFCF3273C4F9AE02.roa (hash: MNLepmkmDKIhV6gh+S8mCUAnPQoTINkDmI9IbqljxRQ=)
                          3: 884C5FB8E60411EFBF5A7957C4F9AE02.roa (hash: oZ5Fktk/X7IkMniZfmOwOSIMZJUooUAA4uRqYhgv5JA=)
                          4: DF1E2FEA97D611EB8BEF8223C4F9AE02.roa (hash: Q/z2xPgEev/jp2CYBsFY4fwnHwuGTUM4Sob54bGfHrU=)
                          5: 1ECA8050696211EC8A05D115C4F9AE02.roa (hash: UNRqxb3T+0nOQ/GO8zWJElSOEcU0ZScoqyo9xYCh4+U=)
                          6: 7A0359125C0E11ECA36CBF0FC4F9AE02.roa (hash: XSNUZ0r/o28q/R/sUwKxLrt1L1Gim57J92y6DiX5k8o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl
                          rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:39:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3377 (0xd31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A45E0, serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9
        Validity
            Not Before: Aug 18 18:39:54 2026 GMT
            Not After : Aug 25 18:39:54 2026 GMT
        Subject: CN=6a84a6fa-bf59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:74:80:14:10:b5:de:5b:65:24:72:d7:4c:0b:
                    48:a7:2a:76:51:3c:fe:f7:84:cf:94:f9:46:f1:d3:
                    e4:c8:0d:64:18:fc:5e:4b:1a:76:c0:75:bc:93:45:
                    c6:12:2b:81:b6:2b:98:20:c4:ce:a0:de:6d:fd:08:
                    8c:bd:22:15:04:2a:dc:2c:ab:3c:e5:ef:40:66:e2:
                    b2:69:12:ac:7b:09:b2:82:16:99:a9:cb:2b:a3:00:
                    08:93:0f:4e:4d:6e:cf:0c:bc:f7:6a:fb:db:1f:24:
                    e5:cb:03:71:49:35:75:7e:91:c7:b5:9a:3d:61:b5:
                    3d:2d:14:ca:28:13:c2:ea:90:7f:2f:64:42:ed:74:
                    a9:11:1a:26:8b:38:02:4a:51:35:c4:e9:38:c8:66:
                    0a:13:b5:de:19:0b:bf:1d:b9:b9:96:c7:d5:0d:bb:
                    3b:95:07:46:b2:3e:74:6b:84:f3:8b:f8:93:ae:5f:
                    0b:90:32:63:19:f9:f4:94:8d:36:e5:25:90:0b:a6:
                    41:2f:e7:7e:2f:df:b0:fa:ad:f9:34:a1:08:a2:25:
                    7f:47:b1:5c:5b:55:56:bb:11:c4:b8:53:b0:9e:38:
                    87:0a:31:89:c2:ab:6c:4f:a6:bf:93:8e:34:a4:9e:
                    1f:8e:8e:61:dd:02:b4:68:91:2f:02:7a:8a:e2:8b:
                    13:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B6:A6:EF:31:71:80:17:67:75:9D:17:BF:56:72:D2:11:D5:6F:D8
            X509v3 Authority Key Identifier:
                keyid:6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:0a:8c:20:6e:b4:22:83:35:5b:7e:64:7e:04:e7:5c:6c:89:
         df:27:fd:be:bb:a7:aa:bf:e2:5e:1b:6c:c3:c1:43:b6:dc:0c:
         ea:9b:7d:1b:49:b6:21:89:ca:7d:dc:76:ed:db:06:f5:7a:32:
         a8:86:61:66:d6:60:dc:5c:50:56:ca:06:a1:a7:de:03:6c:4a:
         34:10:13:5a:97:34:5d:8b:0f:86:7c:aa:0d:b2:d7:f8:00:f8:
         29:49:72:42:0d:d2:61:4a:1b:0c:f0:e6:41:f8:57:a7:91:56:
         81:34:08:88:b6:39:e6:da:bb:0a:f4:cc:5d:84:1e:73:e3:2b:
         32:8d:fa:54:a9:d2:59:6e:f1:13:7f:e7:98:0e:f0:8f:f3:5f:
         d9:25:6a:80:63:80:dd:b4:90:70:92:40:1a:20:65:8d:9a:4f:
         ca:38:58:7f:2a:64:5c:5c:d6:d7:0b:23:9d:45:c0:f9:ba:8f:
         96:01:1b:ad:46:fb:db:52:8a:92:06:77:2c:43:33:37:13:6e:
         26:27:4d:b8:53:c3:9e:82:f5:33:d1:5a:3a:5a:8d:75:61:43:
         b4:a0:40:d5:28:84:b4:e9:22:6c:ae:56:b3:4a:5a:3d:45:34:
         23:7b:7f:64:3c:a7:23:b8:a4:42:e3:05:1a:ac:b7:26:80:50:
         55:14:d7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:44 2026 by rpki-client