Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft
File:                     W2pwDO4aU9VRnlolxk0a0ro3zac.mft (raw, json)
Hash identifier:          2CVFzbgMn5jC3UnHvVjfZ2pQWQ6UW+anN2c0PIDkHx4=
Subject key identifier:   9F:CF:AA:4A:DA:0F:C5:80:22:3F:D6:35:7D:5F:C1:0E:81:30:CE:8E
Authority key identifier: 5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7
Certificate issuer:       /CN=A91AAB94/serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7
Certificate serial:       034D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft
Manifest number:          0346
Signing time:             Wed 19 Aug 2026 01:21:47 +0000
Manifest this update:     Wed 19 Aug 2026 01:21:46 +0000
Manifest next update:     Wed 26 Aug 2026 01:21:46 +0000
Files and hashes:         1: W2pwDO4aU9VRnlolxk0a0ro3zac.crl (hash: inE6sQNBaf04K2Zs5LiE1X4EyBHGbTpBoP+9OU9AfTc=)
                          2: 53AA673C16A911ED88058C80C4F9AE02.roa (hash: TnwXtb5MfhCK20XeLeq1l+qvHKIr2uVnJlZNM+FxEW4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl
                          rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:21:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 845 (0x34d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAB94, serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7
        Validity
            Not Before: Aug 19 01:21:46 2026 GMT
            Not After : Aug 26 01:21:46 2026 GMT
        Subject: CN=6a85052a-fa76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e4:b9:58:84:29:0f:e2:d5:0d:0b:e8:93:54:
                    07:7c:f1:e4:c9:61:49:a6:d4:b9:86:c8:16:b2:ed:
                    41:c9:7f:9c:28:4f:d7:2d:29:e9:e2:a1:ae:45:a7:
                    fe:86:d4:68:47:d7:af:19:0c:55:d2:4a:96:e8:57:
                    7d:f8:a6:c9:f8:be:db:40:33:55:d1:10:7a:d8:39:
                    c8:44:5c:7d:32:d5:d6:ea:f3:0d:ae:59:dd:4a:04:
                    21:f3:95:31:55:46:f1:40:df:48:d7:df:34:bb:be:
                    92:9b:a1:8a:8a:df:d4:80:b2:af:f0:d4:ab:be:dd:
                    39:2d:65:14:0d:c0:e0:62:cd:f9:61:6d:14:7e:04:
                    fd:9b:3a:a3:11:20:76:9a:80:33:98:29:9d:14:b9:
                    4c:a1:c3:f0:46:a4:e0:46:1f:07:c4:fa:f8:3d:0e:
                    b0:fa:53:6a:f4:52:d9:97:e0:05:36:40:1f:86:55:
                    12:a1:c0:63:c5:50:06:22:cd:84:b2:46:17:25:0a:
                    33:89:4e:4b:66:a2:c8:c7:82:f8:bf:80:b1:4c:68:
                    e8:53:0b:c4:21:98:40:07:59:67:a8:b0:a1:d8:2b:
                    72:8c:f2:1f:f3:97:c8:d8:61:1e:ef:47:d4:8e:10:
                    60:08:22:94:79:23:28:48:fe:73:21:f9:3a:12:fc:
                    ff:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:CF:AA:4A:DA:0F:C5:80:22:3F:D6:35:7D:5F:C1:0E:81:30:CE:8E
            X509v3 Authority Key Identifier:
                keyid:5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:2f:a3:a4:2c:13:49:71:bf:c1:1b:99:43:79:c1:6b:ec:20:
         29:5a:1c:cd:e8:fb:27:54:20:6d:61:23:db:d0:7c:89:f2:99:
         41:7b:ce:d4:26:e0:de:6a:21:55:91:eb:00:0d:1d:9f:28:49:
         90:e0:e7:6a:3a:61:69:bf:e0:3a:1f:a9:1f:93:cb:eb:54:af:
         2f:ea:52:a3:c6:fd:8e:4d:60:11:6e:b1:3f:c6:84:16:22:e2:
         45:47:5c:0c:fa:96:9c:40:34:86:fd:3f:58:65:d6:25:63:82:
         5b:5f:3b:41:58:db:06:bd:a9:69:57:8e:09:06:66:11:b0:6c:
         97:b4:55:a6:dd:1c:82:c9:a9:d9:06:34:69:41:d2:47:76:82:
         18:c3:c1:c8:c9:fd:76:e8:47:54:38:ce:3d:6c:d8:04:a7:db:
         15:ba:0f:ed:e0:a1:69:72:c3:d6:2a:07:2d:0c:51:cd:71:9f:
         c3:6f:70:4d:ea:a6:63:cc:2f:13:59:6d:57:fb:b2:60:a1:5f:
         29:cd:c1:ea:67:84:9f:eb:2a:05:76:0d:0f:e4:3c:1c:1c:59:
         4a:59:79:a7:77:0d:a7:56:f5:6e:ff:45:71:fa:7c:c1:79:09:
         44:eb:e2:5c:b0:02:aa:2f:bf:02:37:1e:d1:53:68:cf:b4:a5:
         15:5e:6d:ad
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFCOTQxMTAvBgNVBAUTKDVCNkE3MDBDRUUxQTUzRDU1MTlFNUEyNUM2NEQxQUQy
QkEzN0NEQTcwHhcNMjYwODE5MDEyMTQ2WhcNMjYwODI2MDEyMTQ2WjAYMRYwFAYD
VQQDEw02YTg1MDUyYS1mYTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz+S5WIQpD+LVDQvok1QHfPHkyWFJptS5hsgWsu1ByX+cKE/XLSnp4qGuRaf+
htRoR9evGQxV0kqW6Fd9+KbJ+L7bQDNV0RB62DnIRFx9MtXW6vMNrlndSgQh85Ux
VUbxQN9I1980u76Sm6GKit/UgLKv8NSrvt05LWUUDcDgYs35YW0UfgT9mzqjESB2
moAzmCmdFLlMocPwRqTgRh8HxPr4PQ6w+lNq9FLZl+AFNkAfhlUSocBjxVAGIs2E
skYXJQoziU5LZqLIx4L4v4CxTGjoUwvEIZhAB1lnqLCh2CtyjPIf85fI2GEe70fU
jhBgCCKUeSMoSP5zIfk6Evz/fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ/Pqkra
D8WAIj/WNX1fwQ6BMM6OMB8GA1UdIwQYMBaAFFtqcAzuGlPVUZ5aJcZNGtK6N82n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUI5NC83MDcwMjNGQTE2
QTYxMUVEQUMzQ0ExN0RDNEY5QUUwMi9XMnB3RE80YVU5VlJubG9seGswYTBybzN6
YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1cycHdETzRhVTlWUm5sb2x4azBhMHJvM3phYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QUI5NC83MDcwMjNGQTE2QTYxMUVEQUMzQ0ExN0RDNEY5QUUwMi9XMnB3RE80YVU5
VlJubG9seGswYTBybzN6YWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFy+jpCwTSXG/wRuZQ3nBa+wgKVoczej7J1QgbWEj29B8ifKZQXvO1Cbg3moh
VZHrAA0dnyhJkODnajphab/gOh+pH5PL61SvL+pSo8b9jk1gEW6xP8aEFiLiRUdc
DPqWnEA0hv0/WGXWJWOCW187QVjbBr2paVeOCQZmEbBsl7RVpt0cgsmp2QY0aUHS
R3aCGMPByMn9duhHVDjOPWzYBKfbFboP7eChaXLD1ioHLQxRzXGfw29wTeqmY8wv
E1ltV/uyYKFfKc3B6meEn+sqBXYND+Q8HBxZSll5p3cNp1b1bv9Fcfp8wXkJROvi
XLACqi+/Ajce0VNoz7SlFV5trQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 15:15:55 2026 by rpki-client