Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft
File:                     C71wWJDyeOHVk-mKdPA0cPeU_lw.mft (raw, json)
Hash identifier:          xd3lk7TgOlJUhfIL05pwwgZLdgGk3YH4yqgwwWc4pSs=
Subject key identifier:   E9:8C:CA:BC:C3:B6:B0:60:A0:50:4A:B8:36:6E:3C:C9:62:4F:A8:E8
Authority key identifier: 0B:BD:70:58:90:F2:78:E1:D5:93:E9:8A:74:F0:34:70:F7:94:FE:5C
Certificate issuer:       /CN=A91A5E1F/serialNumber=0BBD705890F278E1D593E98A74F03470F794FE5C
Certificate serial:       0B9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft
Manifest number:          0B8D
Signing time:             Tue 18 Aug 2026 19:26:00 +0000
Manifest this update:     Tue 18 Aug 2026 19:26:00 +0000
Manifest next update:     Tue 25 Aug 2026 19:26:00 +0000
Files and hashes:         1: C71wWJDyeOHVk-mKdPA0cPeU_lw.crl (hash: 3h2E72PePJfO/GCbcReMolVQ6KQngf7N7PKfF/L3pVE=)
                          2: FF723568A0F311EBA4E4D83CC4F9AE02.roa (hash: UjDA69nI4M+QE5F7/yUCsXl1oguMiov/k5pjEhYxCYg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.crl
                          rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:25:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2974 (0xb9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5E1F, serialNumber=0BBD705890F278E1D593E98A74F03470F794FE5C
        Validity
            Not Before: Aug 18 19:26:00 2026 GMT
            Not After : Aug 25 19:26:00 2026 GMT
        Subject: CN=6a84b1c8-f000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:88:c8:17:0d:a3:a4:b1:b1:e5:cd:fb:56:98:
                    b2:7e:c9:c2:ad:25:d0:d5:35:b5:32:e1:40:f5:8e:
                    f1:74:3f:33:78:b3:7d:ce:d5:84:6c:7f:4d:fe:3e:
                    d3:5f:e3:d2:cb:2f:3c:50:c5:01:44:f1:08:df:a5:
                    1f:01:cb:8d:b2:2a:b0:cf:b6:c1:40:9b:ab:1d:d1:
                    6a:72:e0:21:ae:ed:5f:f2:dd:ef:40:9d:a9:11:6d:
                    90:e0:ae:3b:4b:59:cb:cd:c2:f5:8d:9d:57:49:b9:
                    08:c2:80:7c:c7:33:2e:b4:41:6d:32:c5:9f:2b:fc:
                    8a:03:db:a8:ce:c4:c2:55:1e:a7:00:d2:c3:5d:76:
                    a1:6c:36:59:67:fd:fa:1c:8c:b6:68:72:6f:d0:28:
                    8c:79:4f:a0:71:76:84:bb:d0:bd:de:03:8f:1b:44:
                    0f:4b:c5:10:33:53:c3:f8:ed:9c:3e:c2:26:d3:a1:
                    e7:57:88:68:1e:12:25:b4:92:13:70:7c:55:93:30:
                    f4:d5:3f:71:ec:ac:14:ee:e5:24:0c:ef:55:88:6a:
                    60:82:ce:4d:e8:ea:ae:5a:ea:b3:11:d2:11:76:a2:
                    97:65:76:98:62:98:11:ce:c2:53:c0:7f:55:05:1d:
                    8c:f6:de:14:b7:a6:58:12:a3:93:c3:ae:a5:e4:22:
                    04:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:8C:CA:BC:C3:B6:B0:60:A0:50:4A:B8:36:6E:3C:C9:62:4F:A8:E8
            X509v3 Authority Key Identifier:
                keyid:0B:BD:70:58:90:F2:78:E1:D5:93:E9:8A:74:F0:34:70:F7:94:FE:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:1d:77:23:b6:70:dd:06:8f:b2:0e:d3:da:fd:ef:7d:51:1d:
         9f:7e:11:89:5b:ba:3c:99:ad:50:f5:92:1a:bc:6a:2c:e7:38:
         2e:45:0d:cf:82:86:81:5d:3e:ab:ee:4c:94:94:3f:7a:25:09:
         f2:5d:31:a4:23:ff:45:1e:fb:7d:1c:c9:65:a4:69:1c:e9:8c:
         d1:df:63:2e:f2:2d:49:21:ef:6f:a9:04:e2:9f:b5:2b:fd:54:
         31:93:b5:ac:69:0f:ae:d0:6b:71:55:bf:34:c0:96:ac:06:84:
         69:62:b2:01:d4:05:80:cb:7e:c4:cf:c3:d7:e7:86:3c:2f:e4:
         79:9f:2f:19:9d:dc:67:69:69:40:20:c1:66:a0:c2:32:60:49:
         4d:e7:b7:52:07:3e:9b:a7:7e:0d:e3:cc:72:c3:51:d2:6d:b5:
         ee:9f:c9:74:49:a0:2a:8f:ad:9a:d1:90:29:0c:57:88:1b:f8:
         d9:65:6f:59:c2:8b:26:f9:b9:b4:2d:b2:1f:63:b1:84:e4:96:
         05:09:74:42:14:08:ac:11:49:c3:95:e2:53:b5:68:28:62:7a:
         fa:71:68:36:6b:30:cf:ed:53:3d:f2:d2:5a:89:3a:af:21:53:
         17:73:a3:eb:90:4a:69:ec:be:e0:b7:7f:78:b8:7b:e4:11:cc:
         74:7d:55:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:34 2026 by rpki-client