Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
File:                     fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft (raw, json)
Hash identifier:          oZ6pnF7Om6bfpXMS8GuU+UivxFoHJymtWHx6fT5zO8w=
Subject key identifier:   53:8D:B0:F5:8B:AE:94:BB:87:5B:00:02:AB:A5:01:FA:03:37:12:E1
Authority key identifier: 7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA
Certificate issuer:       /CN=A91AB92D/serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA
Certificate serial:       0290
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
Manifest number:          028A
Signing time:             Wed 19 Aug 2026 02:21:23 +0000
Manifest this update:     Wed 19 Aug 2026 02:21:23 +0000
Manifest next update:     Wed 26 Aug 2026 02:21:23 +0000
Files and hashes:         1: fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl (hash: /BN2wbIXuzEx2jMejh6sQj/QaK0iwz5YMn7eJOs1zb8=)
                          2: 99B10EC4BD3511ED837DED0DC4F9AE02.roa (hash: 6SZegSN1bEm8IpeY56I3OBOVi6qp9uRdOosU1uc4tzc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl
                          rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:21:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 656 (0x290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB92D, serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA
        Validity
            Not Before: Aug 19 02:21:23 2026 GMT
            Not After : Aug 26 02:21:23 2026 GMT
        Subject: CN=6a851323-d955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:76:4c:df:c9:38:1b:77:b8:c7:1d:4c:d1:6c:
                    73:79:f8:48:2b:cd:55:10:8b:c0:66:2b:b4:ec:b1:
                    1f:6d:58:40:5f:07:02:79:1a:58:c2:b7:d4:72:8e:
                    c0:af:c0:b8:af:74:72:7d:29:ea:28:b4:c5:0c:67:
                    99:17:53:36:c9:b8:22:d0:c3:50:5c:65:34:40:fc:
                    14:9d:fc:6f:0d:91:71:ab:07:ac:d0:70:87:95:60:
                    4c:e5:d4:e0:05:dc:39:ea:dd:90:c7:2e:79:9c:c7:
                    b1:c8:21:3a:c8:95:1a:d7:44:f6:af:4f:32:28:d1:
                    e8:98:b7:9f:96:b8:69:41:62:d6:d2:1a:5c:e1:8b:
                    60:f6:e3:fe:a9:c3:45:2b:22:77:12:4a:8c:33:17:
                    19:ec:8c:39:d2:6f:82:b1:5e:d7:87:05:41:b8:bb:
                    2a:76:15:ad:eb:85:1d:a2:74:0c:7c:1a:94:bb:94:
                    10:c1:e5:11:9c:19:2f:aa:8a:db:9f:01:1c:fc:ce:
                    4a:ba:24:fa:ad:7a:de:7d:e1:e5:c6:e7:b5:d9:23:
                    5d:b7:be:e7:74:81:d4:c0:5e:2f:94:e1:28:e1:f3:
                    4c:5a:7b:af:22:24:46:3d:60:02:e5:ab:cb:19:90:
                    4c:0c:69:c7:f0:43:d1:d8:28:90:d0:d4:c9:d4:42:
                    2f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8D:B0:F5:8B:AE:94:BB:87:5B:00:02:AB:A5:01:FA:03:37:12:E1
            X509v3 Authority Key Identifier:
                keyid:7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:f7:d2:81:23:34:06:6a:65:81:25:c1:cb:7f:b0:2c:54:a1:
         87:74:da:90:2b:31:42:8d:c3:3c:06:71:59:a8:1a:0d:37:c1:
         54:2d:7a:e1:d5:bd:19:89:8a:d9:49:8e:7a:ad:48:ea:20:8e:
         e1:af:41:78:2f:ff:0a:65:41:a7:39:91:2c:91:42:4f:b0:4a:
         26:a0:d0:63:a9:18:41:9b:9a:cb:be:73:cb:07:a3:5e:03:76:
         e9:0f:b1:13:18:80:70:d6:fa:68:57:8d:2f:a9:0c:d2:35:e7:
         7b:a8:69:60:22:50:b6:c2:2e:56:da:7a:29:e8:90:79:02:fc:
         56:cc:57:d0:c7:c3:be:32:b5:0b:2f:a2:04:fa:6a:ab:15:4e:
         0f:97:9e:18:71:ed:c7:82:6b:96:c2:95:ee:e1:b4:86:a4:31:
         1d:e8:55:e8:c4:54:61:47:00:71:11:ea:0a:31:48:96:5a:3b:
         e9:8d:b5:26:9d:59:e5:4d:22:88:be:29:86:3c:e4:dd:6f:ab:
         0e:0b:99:97:80:a9:a6:dc:80:d1:5f:73:50:66:b0:5b:1d:72:
         11:2a:94:6c:79:43:32:22:c1:07:b2:28:19:33:e3:24:5a:7d:
         1d:2f:93:f4:87:b2:f0:65:6d:77:33:62:71:5f:80:62:90:38:
         bd:41:4a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:47:21 2026 by rpki-client