Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft
File:                     -xEsrVYxm_qsoasoznvX9MsmjOk.mft (raw, json)
Hash identifier:          BvLlfmCd8c66OOKSUF4LrcoY6sGt/oH7ilPqJATUwX8=
Subject key identifier:   3A:6E:C5:68:06:E8:D7:4E:D5:4D:33:0A:10:57:91:68:F3:EA:27:07
Authority key identifier: FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9
Certificate issuer:       /CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9
Certificate serial:       066B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft
Manifest number:          0655
Signing time:             Sun 02 Aug 2026 23:43:38 +0000
Manifest this update:     Sun 02 Aug 2026 23:43:37 +0000
Manifest next update:     Sun 09 Aug 2026 23:43:37 +0000
Files and hashes:         1: -xEsrVYxm_qsoasoznvX9MsmjOk.crl (hash: 4WvznnIQsDAewb3mL2ozgKFTanHnWUq2iVWP1HwKJZA=)
                          2: 128DFF02E14611EE80D6C425C4F9AE02.roa (hash: O4RI8nFWIUHGr3lrmWvMSynoOuRE0fzWotx1sdpRx0k=)
                          3: F50A884C5DDF11F197B40288B8833773.roa (hash: q5ErDtvJGiFQsfi0aNFW5nSZE39VbQoqOQCebpIWByc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl
                          rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Aug 2026 23:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1643 (0x66b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADDD5, serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9
        Validity
            Not Before: Aug  2 23:43:37 2026 GMT
            Not After : Aug  9 23:43:37 2026 GMT
        Subject: CN=6a6fd62a-9c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5b:ae:bb:f6:48:1c:56:48:9e:88:16:f7:67:
                    f7:e4:98:99:e1:b2:2a:78:e1:18:28:bb:68:96:b1:
                    44:19:21:99:9b:ce:a0:a3:e7:00:e8:9e:19:78:68:
                    b3:8b:ff:0c:46:2a:cd:dd:34:b6:6b:05:92:a6:76:
                    a1:63:7c:da:67:da:2c:33:59:ef:9b:7b:58:c0:e7:
                    b6:d4:50:ae:f4:08:2d:e0:58:02:93:6a:b9:94:b6:
                    9a:a9:3a:9b:52:d7:be:69:95:e7:06:e5:93:48:bd:
                    0d:b6:08:79:9d:e4:50:4a:c2:12:c9:2d:41:66:f5:
                    d5:1a:4d:45:09:99:67:94:28:70:76:e0:1e:f9:e3:
                    2d:a9:62:1e:8a:7d:d5:24:47:b6:9a:c5:84:6a:13:
                    53:ef:87:3f:c1:ef:7a:55:87:e7:ac:4b:be:5e:32:
                    99:02:90:30:24:55:36:99:24:c2:ca:1f:7d:04:34:
                    ac:34:e5:97:ff:39:54:68:83:c7:3e:e0:9a:0b:7f:
                    ea:50:ab:50:6a:dc:bb:f4:42:bb:3c:de:ff:e8:8a:
                    49:1e:74:76:4e:d9:24:d8:51:cc:87:c6:4d:5b:10:
                    9f:20:ba:78:37:40:fa:cd:38:5d:4e:91:24:e2:ca:
                    13:73:b1:4b:05:13:5c:e4:74:41:e5:b2:60:86:d0:
                    aa:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6E:C5:68:06:E8:D7:4E:D5:4D:33:0A:10:57:91:68:F3:EA:27:07
            X509v3 Authority Key Identifier:
                keyid:FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:85:cc:21:76:30:36:66:2d:9b:1c:94:64:83:a0:af:19:e5:
         90:ae:42:78:44:bb:0f:7c:27:b2:d9:75:4a:ef:06:22:37:ab:
         56:d4:0f:30:77:86:1c:1e:ba:27:da:14:d3:39:e0:9e:27:01:
         35:cb:20:26:5e:f0:9e:e3:aa:bf:8f:46:39:47:35:04:65:ef:
         2d:9a:0f:dd:c1:78:eb:29:0c:36:db:a2:1d:bf:8a:78:c6:8d:
         42:04:cb:7d:6d:52:79:65:9b:d7:8e:27:8b:38:fb:2a:a8:f7:
         f9:55:44:99:91:5d:8d:57:33:43:9a:7a:4a:af:3b:48:a1:2f:
         73:90:d2:2f:1b:27:a2:a9:cd:e9:3a:89:c9:8e:3c:38:12:af:
         5d:cc:be:09:2a:96:a2:8f:dc:d4:2c:f5:dd:49:b5:3e:3f:58:
         1c:2e:e7:57:8d:ac:fd:77:02:ae:d8:b9:cb:60:4c:b0:16:c9:
         eb:b3:dd:2d:bd:0a:dd:a3:4c:9b:89:3b:f1:45:af:51:53:24:
         38:aa:86:89:e0:4c:b4:cf:c4:75:36:16:6b:bc:5e:02:b6:ce:
         0b:a7:18:7f:82:8a:7a:eb:80:70:72:2f:e5:a0:02:4d:ac:d2:
         8d:b1:96:40:d9:d3:6c:82:7d:97:45:01:c6:8e:58:d6:58:65:
         04:aa:3d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:39:44 2026 by rpki-client