Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft
File:                     ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft (raw, json)
Hash identifier:          XYzVHbZTFiM3Rxr+1dSF3W6B0K/01FXFdkFf+bE4Id4=
Subject key identifier:   C6:C6:A6:67:98:F1:D5:A0:13:01:8F:3E:A3:52:02:FB:2B:A8:C6:77
Authority key identifier: 6B:22:F9:07:91:05:A4:DE:BC:B0:9C:C1:B9:00:96:08:5C:66:2D:44
Certificate issuer:       /CN=A91A6ABE/serialNumber=6B22F9079105A4DEBCB09CC1B90096085C662D44
Certificate serial:       C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft
Manifest number:          C3
Signing time:             Wed 19 Aug 2026 07:36:50 +0000
Manifest this update:     Wed 19 Aug 2026 07:36:50 +0000
Manifest next update:     Wed 26 Aug 2026 07:36:50 +0000
Files and hashes:         1: ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl (hash: 3AQ1XMk/j1jrcOOOA5lCg85s6ur3ZZqolvZOR3HyY5w=)
                          2: EADAF6B2743E11F0ABAB020EC4F9AE02.roa (hash: mhTd4sXqZQkM0yZzJxLZu/7dsOvN9ird2NK8A1L8tLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 07:36:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6ABE, serialNumber=6B22F9079105A4DEBCB09CC1B90096085C662D44
        Validity
            Not Before: Aug 19 07:36:50 2026 GMT
            Not After : Aug 26 07:36:50 2026 GMT
        Subject: CN=6a855d12-6cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:68:e5:dc:85:41:ab:09:ed:91:be:24:51:f8:
                    79:c8:e4:d0:3e:36:63:d5:07:f2:57:c7:cb:f7:de:
                    5c:26:2c:05:6b:e4:a7:e9:86:cd:59:b2:5c:6c:d6:
                    ec:1d:95:a4:a5:24:f1:7e:63:76:6a:09:44:c0:da:
                    18:94:f6:9b:08:d6:d2:b4:86:74:2e:81:15:ce:04:
                    1b:0e:b8:db:5a:5a:69:d3:66:af:a1:00:75:bb:80:
                    62:fb:a9:1b:69:8b:ed:bc:cd:7d:43:6d:cf:b6:53:
                    c2:64:92:94:11:37:d6:cb:c7:1e:f0:2b:50:11:07:
                    93:64:3b:d5:18:5a:7b:ad:6f:78:6c:48:c2:c6:e5:
                    bf:2b:76:a0:35:01:ec:05:be:da:4b:81:aa:ed:ec:
                    bf:1d:96:02:23:ba:02:76:c8:11:bd:17:de:56:4b:
                    47:8c:83:1d:c8:6f:2e:fa:f3:0e:05:e1:d9:46:52:
                    0e:40:76:71:ab:1a:88:7e:42:ab:72:bc:3e:e8:02:
                    25:9c:ff:b5:79:a6:97:59:55:7f:b7:e0:3d:f1:4c:
                    9b:6a:e4:14:60:e1:3c:16:bf:ab:82:25:04:aa:47:
                    c4:0b:79:e9:1b:33:7d:e4:c8:37:52:76:90:8d:78:
                    15:f3:cb:c3:9f:d3:a3:82:3d:4c:fd:5a:87:cb:75:
                    16:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C6:A6:67:98:F1:D5:A0:13:01:8F:3E:A3:52:02:FB:2B:A8:C6:77
            X509v3 Authority Key Identifier:
                keyid:6B:22:F9:07:91:05:A4:DE:BC:B0:9C:C1:B9:00:96:08:5C:66:2D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:e0:a7:8a:24:d3:ad:58:af:83:fa:24:5a:20:b2:ae:09:3a:
         3b:26:64:88:ca:df:d8:35:c6:f3:99:56:18:77:03:5f:07:41:
         ef:95:fc:d6:4d:3d:12:f3:e8:0b:72:17:9b:0f:e3:c4:5c:1c:
         bb:c5:b1:af:6e:64:32:f2:e6:70:61:37:45:e0:b7:96:0e:e8:
         b1:17:48:69:fc:c6:54:5c:b6:f5:78:a2:a2:9d:a4:7f:5c:b4:
         de:20:3d:7e:89:a5:63:19:c2:1c:3d:e7:8e:3e:bb:75:33:96:
         83:88:cf:e4:4d:9b:64:2b:e5:78:de:fc:a4:04:40:25:6f:f3:
         b5:1b:b5:fa:3d:44:0e:95:1c:f9:6e:91:d0:fc:e9:32:4d:e2:
         4f:2f:85:9d:e5:1b:16:a2:2d:1d:ea:14:2c:62:c0:44:b6:46:
         36:c8:c3:27:09:b2:d8:a3:03:4f:e3:9b:9c:d4:dd:a0:6c:8b:
         4b:b0:46:b2:c3:1c:2b:bb:6b:14:ab:c2:ee:53:78:37:d4:0e:
         e0:3c:3f:8a:1e:7b:3d:a9:4e:9b:95:a9:93:0e:dd:f3:4c:ae:
         8d:bd:46:a2:f9:c0:e1:dd:a3:65:cf:a9:7a:5e:bb:00:6a:3d:
         f4:23:33:95:0e:24:a6:33:22:86:c1:b8:af:12:19:cf:51:b6:
         91:e1:22:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:47 2026 by rpki-client