Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft
File:                     xEWgBPxE11F5WpGduE8UoWBFOJE.mft (raw, json)
Hash identifier:          AmWAbDoetLMZ7QQPNxRh6dGIKlWHTWXh83I6CDIIoj0=
Subject key identifier:   33:84:B7:1D:B3:61:81:EE:42:95:BA:0D:07:21:6C:C0:2C:27:55:97
Authority key identifier: C4:45:A0:04:FC:44:D7:51:79:5A:91:9D:B8:4F:14:A1:60:45:38:91
Certificate issuer:       /CN=A91A7F3D/serialNumber=C445A004FC44D751795A919DB84F14A160453891
Certificate serial:       8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft
Manifest number:          8E
Signing time:             Wed 19 Aug 2026 08:12:21 +0000
Manifest this update:     Wed 19 Aug 2026 08:12:20 +0000
Manifest next update:     Wed 26 Aug 2026 08:12:20 +0000
Files and hashes:         1: xEWgBPxE11F5WpGduE8UoWBFOJE.crl (hash: aO0Ux9/+E4xjXQX9UonLqcuzVl0D/4P0E0DxfAbQKtE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.crl
                          rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 08:12:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7F3D, serialNumber=C445A004FC44D751795A919DB84F14A160453891
        Validity
            Not Before: Aug 19 08:12:20 2026 GMT
            Not After : Aug 26 08:12:20 2026 GMT
        Subject: CN=6a856565-d5e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c4:17:b6:49:b0:62:a1:6e:71:4a:b4:49:2a:
                    55:73:c3:21:8b:7d:8f:ce:83:83:4a:01:7c:c3:9c:
                    91:ad:3a:ed:6f:4a:d6:38:e9:8a:67:4d:6a:8d:da:
                    27:eb:6c:7f:a7:c6:41:dd:35:d3:0b:c1:13:95:cd:
                    66:3a:52:e5:4f:22:30:94:d0:e4:b6:6d:e4:38:20:
                    07:13:03:6b:a5:85:b3:db:c8:53:54:1a:22:3b:90:
                    43:aa:00:95:2c:b2:34:bd:00:28:08:fe:97:97:4d:
                    e6:20:c2:cc:a2:86:6c:43:b0:79:41:a0:01:69:ae:
                    16:cb:f3:dc:a1:d2:3f:d9:a7:e0:2a:6f:c7:c0:89:
                    84:13:b3:ec:2c:b4:80:a2:b9:e7:0d:9d:dc:81:6c:
                    3b:77:b1:5e:15:a5:18:cc:7b:fd:4c:e7:9a:39:ec:
                    92:19:d7:5a:91:04:5a:8d:82:64:32:eb:cf:28:83:
                    32:df:16:d1:d1:cc:f4:ff:f5:09:b3:ff:9a:87:7d:
                    7d:4d:49:42:0d:d0:17:18:9c:ad:4b:cb:a3:ea:73:
                    54:90:3c:ba:f6:ff:97:a6:6f:95:3a:40:21:5b:f2:
                    a1:b9:46:9d:c9:7f:d6:48:4e:43:9f:95:68:3a:a7:
                    9a:8f:98:52:f5:a4:b8:6f:04:c5:1e:88:de:14:37:
                    af:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:84:B7:1D:B3:61:81:EE:42:95:BA:0D:07:21:6C:C0:2C:27:55:97
            X509v3 Authority Key Identifier:
                keyid:C4:45:A0:04:FC:44:D7:51:79:5A:91:9D:B8:4F:14:A1:60:45:38:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:05:8d:54:5d:2c:4f:09:86:d5:bb:ee:9c:7d:0b:a6:80:3e:
         81:d3:d8:58:62:e7:86:46:bd:07:a3:3f:97:5b:df:8f:82:6f:
         bb:02:b1:c2:02:e4:a7:d1:eb:07:a8:76:fe:2e:84:52:0e:f0:
         91:28:a3:13:8c:a4:a2:c5:6f:c4:3c:a2:63:48:7d:50:ef:79:
         11:d4:b8:8c:99:fb:81:71:b5:21:3f:9d:a7:d8:0b:c4:b7:46:
         32:54:c3:8a:bb:f4:c8:4a:cc:7a:cd:3e:d0:2a:31:30:85:c9:
         e3:24:79:97:98:b4:ec:76:21:af:d3:c4:80:68:75:7d:09:c5:
         e7:4e:88:85:70:98:c2:db:a6:e2:c9:7a:12:54:aa:e7:2e:29:
         6b:1a:25:15:bd:0e:23:73:17:ef:cb:51:3a:f7:bb:99:95:fb:
         9e:65:80:a9:eb:c3:00:c7:a7:f3:bf:d0:3b:f2:2b:ae:ff:ac:
         e5:ab:b5:ef:5f:ec:9c:70:0e:41:29:69:e5:86:01:03:8c:11:
         7e:c7:68:6b:66:74:d8:3d:5e:95:5e:1c:ea:ef:f5:f3:4f:f7:
         3d:16:9c:69:d3:64:5b:39:96:fa:84:63:f3:26:fb:79:05:03:
         2f:51:a5:d2:98:09:48:5a:37:ee:ca:df:c7:20:dc:da:ab:97:
         11:a9:23:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTdGM0QxMTAvBgNVBAUTKEM0NDVBMDA0RkM0NEQ3NTE3OTVBOTE5REI4NEYxNEEx
NjA0NTM4OTEwHhcNMjYwODE5MDgxMjIwWhcNMjYwODI2MDgxMjIwWjAYMRYwFAYD
VQQDEw02YTg1NjU2NS1kNWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3sQXtkmwYqFucUq0SSpVc8Mhi32PzoODSgF8w5yRrTrtb0rWOOmKZ01qjdon
62x/p8ZB3TXTC8ETlc1mOlLlTyIwlNDktm3kOCAHEwNrpYWz28hTVBoiO5BDqgCV
LLI0vQAoCP6Xl03mIMLMooZsQ7B5QaABaa4Wy/PcodI/2afgKm/HwImEE7PsLLSA
ornnDZ3cgWw7d7FeFaUYzHv9TOeaOeySGddakQRajYJkMuvPKIMy3xbR0cz0//UJ
s/+ah319TUlCDdAXGJytS8uj6nNUkDy69v+Xpm+VOkAhW/KhuUadyX/WSE5Dn5Vo
Oqeaj5hS9aS4bwTFHojeFDevgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDOEtx2z
YYHuQpW6DQchbMAsJ1WXMB8GA1UdIwQYMBaAFMRFoAT8RNdReVqRnbhPFKFgRTiR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0YzRC84OEVEMjA0RUM2
QTMxMUYwQjY5QUM5NTVDNEY5QUUwMi94RVdnQlB4RTExRjVXcEdkdUU4VW9XQkZP
SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hFV2dCUHhFMTFGNVdwR2R1RThVb1dCRk9KRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
N0YzRC84OEVEMjA0RUM2QTMxMUYwQjY5QUM5NTVDNEY5QUUwMi94RVdnQlB4RTEx
RjVXcEdkdUU4VW9XQkZPSkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlAWNVF0sTwmG1bvunH0LpoA+gdPYWGLnhka9B6M/l1vfj4JvuwKxwgLkp9Hr
B6h2/i6EUg7wkSijE4ykosVvxDyiY0h9UO95EdS4jJn7gXG1IT+dp9gLxLdGMlTD
irv0yErMes0+0CoxMIXJ4yR5l5i07HYhr9PEgGh1fQnF506IhXCYwtum4sl6ElSq
5y4paxolFb0OI3MX78tROve7mZX7nmWAqevDAMen87/QO/Irrv+s5au171/snHAO
QSlp5YYBA4wRfsdoa2Z02D1elV4c6u/180/3PRacadNkWzmW+oRj8yb7eQUDL1Gl
0pgJSFo37srfxyDc2quXEakjZw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:02 2026 by rpki-client