Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft
File:                     up0rragmh4TwCuhYcC744p5ytLw.mft (raw, json)
Hash identifier:          77NeVhWg5Aq8UGQmxCFvGKt2z/jm17vqDzFkZ66z4zQ=
Subject key identifier:   2E:CA:F6:EA:85:8B:5A:42:6D:96:05:89:5E:A5:63:39:C2:FE:26:3E
Authority key identifier: BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC
Certificate issuer:       /CN=A91A9EE2/serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC
Certificate serial:       35A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft
Manifest number:          3586
Signing time:             Tue 18 Aug 2026 14:31:20 +0000
Manifest this update:     Tue 18 Aug 2026 14:31:19 +0000
Manifest next update:     Tue 25 Aug 2026 14:31:19 +0000
Files and hashes:         1: up0rragmh4TwCuhYcC744p5ytLw.crl (hash: WPst6Rpb0CbKN4qitVsgKpFosizWZBShdxl/gBJV7Lo=)
                          2: D4A8FF0273ED11F08E63C02DC4F9AE02.roa (hash: tHMeyTgXVjqu1F3xAY8dG3i7T9LkiFUkLAwr5V1RAGo=)
                          3: 58D5764A683311ECB9C17757C4F9AE02.roa (hash: y6Cb0qWIx1yRlu9RsKzzdkQCpXsOgAgmZ5vTiuWgcQo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl
                          rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 14:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13728 (0x35a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9EE2, serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC
        Validity
            Not Before: Aug 18 14:31:19 2026 GMT
            Not After : Aug 25 14:31:19 2026 GMT
        Subject: CN=6a846cb7-ebf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:92:51:05:e3:2e:59:3b:94:57:51:0a:ed:9b:
                    87:b7:da:53:72:4d:88:db:b3:c2:a8:8a:01:da:6c:
                    fc:b5:c5:ad:66:ad:0d:d3:74:d2:8a:c4:c1:5a:20:
                    d6:6d:2c:93:af:38:db:3f:36:e8:21:92:a9:59:6e:
                    cf:03:11:77:ce:8c:a5:44:99:56:04:3e:5b:2f:91:
                    1a:19:7d:e3:0d:d8:c1:35:1c:4f:c4:75:10:10:dd:
                    49:1e:5e:33:3b:ac:0e:d4:fb:4c:e8:36:f8:c4:8f:
                    3b:2a:e1:64:02:5d:f5:c7:e4:7f:a3:2a:5e:6c:4c:
                    82:07:11:8a:0b:9e:2c:81:96:f0:ae:e6:ec:64:1b:
                    0a:66:1e:fc:4a:3b:e7:c8:0f:da:a6:29:fa:05:c7:
                    38:aa:b9:44:29:53:ad:b5:05:20:74:1f:bb:54:00:
                    72:b2:81:31:16:8c:ad:f0:13:c0:df:0c:0a:1d:0f:
                    fb:4f:21:a1:c5:75:ea:16:21:6c:73:64:f4:b9:9a:
                    39:3a:6a:92:9c:c0:7d:4c:39:9e:4c:bf:9c:d7:36:
                    a2:b4:dc:65:8f:f3:57:02:84:74:8d:61:dc:23:9e:
                    f2:ca:c3:fd:c0:57:98:39:9c:fd:c8:cb:51:c3:94:
                    5c:da:d1:1a:0f:ce:ca:71:45:dc:77:d5:95:3b:19:
                    f6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CA:F6:EA:85:8B:5A:42:6D:96:05:89:5E:A5:63:39:C2:FE:26:3E
            X509v3 Authority Key Identifier:
                keyid:BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:fb:12:5b:a7:54:ee:7b:1b:47:90:3d:51:f9:27:96:de:8e:
         cc:f4:44:b6:64:8a:04:35:09:2d:a1:b3:f1:48:20:3d:7c:8c:
         6d:8b:f9:28:0d:d2:e7:70:b9:19:30:37:f4:b6:3e:09:77:13:
         c6:8e:69:8d:e2:9a:78:0f:cf:f0:2a:41:ad:65:93:9d:6b:00:
         db:a0:1b:b0:38:89:a5:78:b7:1b:90:eb:29:9b:65:c3:fb:a9:
         fb:1f:2b:3a:9f:3c:b3:37:b8:23:98:2a:a3:3b:d8:60:74:d1:
         e3:6b:1e:d8:59:22:30:0c:44:b3:12:18:95:f5:3f:12:84:a7:
         3a:3c:35:62:79:11:29:39:af:45:3a:1d:de:19:bb:06:6b:87:
         ff:cf:0d:43:03:d3:d6:3b:45:b6:f4:9c:b2:f8:34:cb:5f:d1:
         f5:a8:1a:fb:dd:53:f6:54:08:95:06:fc:dd:82:4e:fe:50:ee:
         6d:90:49:76:b5:1f:c6:79:4a:fa:cf:d0:05:33:58:8c:5c:85:
         82:1c:ef:5d:b9:bb:fa:1f:df:aa:1f:21:31:96:e9:62:ef:e5:
         ce:18:ba:53:92:04:8c:c2:85:5e:35:d6:4e:cb:cc:73:86:0d:
         73:45:89:c1:ed:e7:52:2e:c8:3c:45:c9:a6:c1:8d:45:43:f0:
         15:26:d7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:53 2026 by rpki-client