Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/M23U8UX716kQau8fBtkXB9JQt3o.mft
File:                     M23U8UX716kQau8fBtkXB9JQt3o.mft (raw, json)
Hash identifier:          VHIxv5lUZvsoh2D0hTr9TD0gSUaQZPl2zFZOvURLfTE=
Subject key identifier:   9E:A2:62:50:49:D1:F5:0D:0E:2B:E0:68:00:7C:5B:F7:04:BB:78:D8
Authority key identifier: 33:6D:D4:F1:45:FB:D7:A9:10:6A:EF:1F:06:D9:17:07:D2:50:B7:7A
Certificate issuer:       /CN=A91A9E90/serialNumber=336DD4F145FBD7A9106AEF1F06D91707D250B77A
Certificate serial:       1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23U8UX716kQau8fBtkXB9JQt3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/M23U8UX716kQau8fBtkXB9JQt3o.mft
Manifest number:          19
Signing time:             Wed 19 Aug 2026 09:43:06 +0000
Manifest this update:     Wed 19 Aug 2026 09:43:05 +0000
Manifest next update:     Wed 26 Aug 2026 09:43:05 +0000
Files and hashes:         1: M23U8UX716kQau8fBtkXB9JQt3o.crl (hash: wTdmsK8YlC2THRac4xYRw7QcUmSz+DEsMj2LpHdS2RU=)
                          2: 16261DCC85D411F1B888CCFF69A30FBC.roa (hash: KhZuvpiH1QtAzasVJFC3Nq++oQgjiVWH6Qo6hINf7iE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/M23U8UX716kQau8fBtkXB9JQt3o.crl
                          rsync://rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/M23U8UX716kQau8fBtkXB9JQt3o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23U8UX716kQau8fBtkXB9JQt3o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:43:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9E90, serialNumber=336DD4F145FBD7A9106AEF1F06D91707D250B77A
        Validity
            Not Before: Aug 19 09:43:05 2026 GMT
            Not After : Aug 26 09:43:05 2026 GMT
        Subject: CN=6a857aaa-e54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:38:0f:70:b0:19:f5:06:4c:de:b1:21:ab:d5:
                    12:cd:f0:d9:fe:50:2f:4e:3b:e6:e3:17:fd:75:c6:
                    43:f2:2f:07:5a:a5:7a:9e:86:33:92:92:92:e4:98:
                    f5:af:a4:a1:d5:1d:06:d9:39:08:ef:33:e6:67:85:
                    dd:78:1c:75:ee:df:5a:cb:1c:b4:9e:6a:c1:b7:b1:
                    29:6a:3a:2a:0a:43:c5:30:68:34:e0:d7:75:b9:56:
                    ae:06:96:d4:85:4f:80:d2:a1:fe:a2:6e:0b:a0:3d:
                    cd:e5:f8:28:c5:91:2d:5c:82:59:22:ec:af:69:32:
                    f1:e5:de:f7:86:a7:7d:1c:e0:81:1a:45:e4:cc:30:
                    13:e9:88:e9:5f:b8:e1:45:a0:0f:ea:87:f2:5c:7c:
                    ba:06:ac:68:ab:a0:7e:6b:f0:9a:42:37:50:de:e9:
                    6c:72:46:71:0c:2b:c0:41:06:e6:0e:af:c3:66:23:
                    af:cc:df:24:e6:ed:3a:1d:bb:20:0a:ea:76:c9:55:
                    73:0f:b4:c6:87:d5:56:23:4d:bd:e3:cb:d0:b2:8d:
                    d7:f0:7c:48:e8:4c:b5:84:4a:3c:bd:10:bf:8b:6e:
                    84:0f:9b:70:ab:43:cc:b9:e5:99:be:a1:d4:7e:7d:
                    c6:b3:e5:50:23:e3:6e:12:46:1b:5c:4b:d3:38:65:
                    00:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A2:62:50:49:D1:F5:0D:0E:2B:E0:68:00:7C:5B:F7:04:BB:78:D8
            X509v3 Authority Key Identifier:
                keyid:33:6D:D4:F1:45:FB:D7:A9:10:6A:EF:1F:06:D9:17:07:D2:50:B7:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/M23U8UX716kQau8fBtkXB9JQt3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23U8UX716kQau8fBtkXB9JQt3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/M23U8UX716kQau8fBtkXB9JQt3o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:6d:7b:78:af:53:e9:c3:53:94:e9:bb:be:42:39:66:ba:da:
         ef:ef:b6:eb:4c:0c:b2:c8:f1:bc:0f:da:44:d7:ee:4b:09:0f:
         3f:a7:84:3a:d7:22:f9:71:9e:a9:cc:1c:af:01:f0:2c:c9:e5:
         cd:2d:cb:50:72:6a:20:07:ae:cc:72:af:23:cb:2c:41:ad:44:
         55:1d:e4:f8:b6:4f:3f:aa:b4:27:d6:74:16:86:92:1a:aa:26:
         66:96:0e:e9:6a:3a:b1:f1:43:08:99:36:63:75:c9:30:31:95:
         93:4a:55:81:61:c3:31:30:37:8c:4b:a1:c3:7a:db:a4:d6:53:
         c5:d1:25:8d:a8:b4:f7:39:3a:9d:55:9b:71:f2:c9:13:09:4f:
         5c:80:8b:bf:ac:39:0d:07:19:2d:2a:b4:d7:f9:38:1d:8d:8c:
         1c:df:6b:02:4e:9b:87:f5:a0:81:b6:6d:53:ae:3e:01:4e:bd:
         bc:54:11:2b:8d:0b:8d:32:0b:6f:c7:40:1d:75:bc:2d:9b:9d:
         79:d8:da:fa:ce:a2:af:64:c7:be:d4:a0:59:9f:b4:03:b6:45:
         bc:db:f4:7d:5a:72:9a:4e:1d:ba:eb:50:0a:e2:61:76:2c:38:
         a4:90:7b:3c:b0:cd:36:2e:6c:d3:b3:9e:b0:c0:1f:39:33:ea:
         e5:9e:5c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:44:36 2026 by rpki-client