Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
File:                     aU9WG2PafMV3kxY21HiK0rC0riA.mft (raw, json)
Hash identifier:          GjBcDZaS17F7dWpn4DNKFY9Yn9J0T1qN/7vrZ/QMkd4=
Subject key identifier:   D9:A0:2A:72:D5:D7:6D:5B:19:8F:08:B3:5A:7E:A5:4A:49:B3:6C:AF
Authority key identifier: 69:4F:56:1B:63:DA:7C:C5:77:93:16:36:D4:78:8A:D2:B0:B4:AE:20
Certificate issuer:       /CN=A91A9083/serialNumber=694F561B63DA7CC577931636D4788AD2B0B4AE20
Certificate serial:       0130
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
Manifest number:          012C
Signing time:             Thu 13 Aug 2026 05:22:58 +0000
Manifest this update:     Thu 13 Aug 2026 05:22:58 +0000
Manifest next update:     Thu 20 Aug 2026 05:22:58 +0000
Files and hashes:         1: aU9WG2PafMV3kxY21HiK0rC0riA.crl (hash: J2l3pG5q3fl/UqOocHKBWcSG433ss6diPpU0YIFGYwA=)
                          2: 8DDA6872D25311EF8EBE2767C4F9AE02.roa (hash: GJJAq7Y4rDKXzfncSIrWC7/k2iyBuKfDbZCWqya2Ycc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.crl
                          rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Aug 2026 05:22:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304 (0x130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9083, serialNumber=694F561B63DA7CC577931636D4788AD2B0B4AE20
        Validity
            Not Before: Aug 13 05:22:58 2026 GMT
            Not After : Aug 20 05:22:58 2026 GMT
        Subject: CN=6a7d54b2-21f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:64:9c:49:f9:3b:11:ec:a4:61:13:67:ac:af:
                    1b:bf:46:35:0a:de:8e:db:23:13:3b:e0:20:c6:be:
                    33:52:52:f3:d5:48:4e:d9:16:10:a3:44:92:49:39:
                    a1:f7:f1:25:c8:e9:9c:21:1b:d9:e3:5b:fc:f4:6e:
                    04:09:a2:96:58:70:87:59:93:e6:d8:7b:4c:a2:0d:
                    7e:2a:c3:f1:21:be:6a:1e:f3:65:ec:4d:9b:3a:92:
                    4b:b1:1c:80:18:19:24:39:28:a6:09:e5:4c:57:07:
                    db:25:52:98:dd:61:a9:3f:e3:4b:a7:e5:bf:00:05:
                    f8:64:d4:46:52:2e:45:e8:b1:dd:99:4a:32:72:c4:
                    c6:f0:72:6a:5c:83:21:f3:bd:a5:4a:f1:ab:0b:27:
                    ea:f1:4b:d5:f3:8f:d9:24:8c:e8:97:35:de:47:2e:
                    db:54:6e:5b:c4:7c:7b:47:d6:c5:40:bd:98:15:c2:
                    d6:69:0f:4e:46:33:46:a9:11:af:ef:c9:fe:47:23:
                    b0:92:44:94:94:a0:fc:60:9c:bb:ba:07:9e:b6:7e:
                    10:69:db:23:b8:f3:03:11:e7:e3:b5:be:c3:69:b6:
                    67:4a:5a:35:af:f4:b9:04:9a:d5:f6:88:e6:46:9a:
                    d1:bb:af:f5:23:a0:6b:7d:27:7f:e6:b8:47:5f:ef:
                    91:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A0:2A:72:D5:D7:6D:5B:19:8F:08:B3:5A:7E:A5:4A:49:B3:6C:AF
            X509v3 Authority Key Identifier:
                keyid:69:4F:56:1B:63:DA:7C:C5:77:93:16:36:D4:78:8A:D2:B0:B4:AE:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:3d:bd:38:26:42:ec:09:39:a2:f3:63:0f:bf:bb:8b:01:ed:
         1c:6b:d5:ee:32:7c:89:9d:6d:33:52:74:13:c8:3f:1b:e5:5f:
         65:3a:4e:2f:5e:bb:f2:97:1b:e5:cf:6c:7a:6d:7d:fb:bd:10:
         eb:31:1e:49:10:d0:87:ed:73:ba:e8:33:1d:6d:9b:db:ab:74:
         29:0f:27:ec:50:7b:35:e6:a1:83:9b:67:7e:2a:31:51:eb:45:
         2e:94:f6:7f:e9:33:84:4f:68:c4:5e:c7:61:89:23:8e:7f:ab:
         bf:17:33:80:52:ee:c9:95:2a:b1:9d:80:b9:6e:93:1d:00:41:
         2d:2c:c4:bd:56:1e:0f:be:8e:fa:10:b6:33:0c:a5:fe:d0:26:
         66:7b:37:6a:e5:27:20:f1:b7:75:c3:57:22:cc:3e:57:84:00:
         6b:5d:97:32:eb:7a:14:ce:1e:61:38:d5:b5:a4:25:30:ce:0e:
         44:1f:53:a5:84:55:33:7c:d6:21:3f:3f:48:38:12:3a:d6:40:
         16:23:c4:ad:6e:8c:98:fe:19:0d:3f:a0:86:ee:1e:51:7b:6a:
         33:14:f2:2c:01:a7:77:f0:b6:eb:7c:12:75:a6:f2:d8:8d:46:
         72:34:28:87:d4:37:c5:38:c2:7b:33:24:d3:8f:c2:e8:bd:81:
         bd:31:d9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 15:29:42 2026 by rpki-client