Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft
File:                     PTiRpGy8urR0eN6kDSkI9nzOOyo.mft (raw, json)
Hash identifier:          pa3gYWn8P4nQ6wdP7ELEy3cWpCmmxZD9MPD/pW/6c60=
Subject key identifier:   01:6B:00:20:F6:5B:25:D4:19:CE:A8:3F:C5:51:5F:15:CC:DF:F1:B7
Authority key identifier: 3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A
Certificate issuer:       /CN=A91AAEC2/serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A
Certificate serial:       096E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft
Manifest number:          0962
Signing time:             Tue 18 Aug 2026 20:27:07 +0000
Manifest this update:     Tue 18 Aug 2026 20:27:07 +0000
Manifest next update:     Tue 25 Aug 2026 20:27:07 +0000
Files and hashes:         1: PTiRpGy8urR0eN6kDSkI9nzOOyo.crl (hash: u3pWvJUfvu+FuMA1RT8JGUkkSta16nAXoJdgmwn3dTE=)
                          2: DFEA30745C3011EEB250DE0EC4F9AE02.roa (hash: xiYVAwV4Hd8CI0pxe/FxOmue7CKhH9jCSO4x/aLBcjA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl
                          rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2414 (0x96e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAEC2, serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A
        Validity
            Not Before: Aug 18 20:27:07 2026 GMT
            Not After : Aug 25 20:27:07 2026 GMT
        Subject: CN=6a84c01b-ff57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e6:aa:1c:0e:bd:a0:65:75:2c:fc:a2:e1:e1:
                    4d:a8:43:9d:7c:69:39:41:1d:d9:25:3d:07:db:06:
                    91:3c:ff:43:47:8f:04:63:38:df:cf:7b:23:68:41:
                    03:fe:d9:77:22:ff:a2:4e:a7:b6:ea:75:29:f1:22:
                    80:1b:77:17:ba:d7:31:ce:2d:6b:d7:db:f9:d5:51:
                    c2:0d:5f:1e:5d:9c:11:42:0d:1c:23:04:54:5d:82:
                    0c:eb:29:33:80:2f:3f:b7:c4:90:88:03:b5:bf:54:
                    be:83:50:ef:59:61:2c:9f:b1:f5:ea:be:76:a5:51:
                    1d:e6:30:0a:d1:e4:aa:7f:7b:40:cb:8d:94:2d:11:
                    97:67:e7:7c:b5:f2:fe:a8:54:af:5c:37:86:c6:ad:
                    08:7b:a7:f8:07:ff:9f:0a:38:fc:3d:96:f4:e4:d2:
                    1f:a4:be:85:4e:cc:d9:9b:7f:88:6b:91:15:c7:98:
                    78:ce:81:63:94:b8:ca:47:d3:9b:82:24:27:45:20:
                    64:27:59:d1:a9:be:7a:89:20:14:ad:f6:52:b6:69:
                    0a:3d:4d:e6:5e:a0:ad:32:d8:2f:16:02:0a:af:87:
                    71:a6:63:52:8a:e9:9b:82:a8:19:88:e9:d7:e1:4a:
                    21:e6:c5:2e:2d:a0:ce:c3:38:58:f3:b6:e7:e8:85:
                    79:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6B:00:20:F6:5B:25:D4:19:CE:A8:3F:C5:51:5F:15:CC:DF:F1:B7
            X509v3 Authority Key Identifier:
                keyid:3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:75:00:db:85:d7:e0:fe:51:e5:b4:3f:d0:bc:16:b3:bd:59:
         82:3a:9f:81:84:fc:44:03:ec:09:36:0f:84:da:51:1e:26:e5:
         88:b5:c2:b2:ab:d5:58:09:e3:17:ee:62:66:5b:34:32:64:c8:
         cb:a0:3c:56:4c:69:77:2b:09:bd:68:28:72:37:3d:ae:e3:52:
         cc:51:b9:ca:07:c7:17:48:61:1b:c4:09:9b:99:b6:65:5f:1d:
         74:ed:94:61:db:b2:fe:c4:63:44:46:73:5e:8e:a6:bf:56:03:
         7e:cb:67:9e:f0:74:89:14:25:fd:84:f3:a9:30:4a:8e:61:a1:
         91:10:f7:5a:b6:96:ef:53:fc:43:61:05:f8:4f:6c:4f:4a:bf:
         24:1d:f1:f7:ad:e5:1a:b7:40:c4:80:f1:e7:3d:57:5e:a7:fb:
         2c:36:1c:10:a4:0a:06:c9:71:f0:45:75:69:65:ee:86:d7:00:
         b4:73:f5:c2:d1:30:14:45:a7:07:32:6b:43:19:b1:0c:17:7e:
         0f:74:8b:32:04:1d:0f:59:a4:ce:ff:ea:56:90:95:9b:a2:fe:
         d2:e9:8f:0f:d9:9a:0b:6a:44:dd:13:6a:81:17:f4:7d:8a:16:
         6b:12:4e:af:a6:87:dc:ec:71:01:5a:08:d4:45:94:9a:03:e8:
         ed:3b:49:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:03 2026 by rpki-client