Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft
File:                     t3KDxTMROjkeMdlFJxhqz4OZol8.mft (raw, json)
Hash identifier:          i483hOjaKEQ0E2XxH05NpCAD9cr3Fgd8bZ2abEO9rcc=
Subject key identifier:   AC:18:BA:0E:6C:32:83:74:5B:CB:5B:0A:6F:F6:DF:08:49:4D:FE:EB
Authority key identifier: B7:72:83:C5:33:11:3A:39:1E:31:D9:45:27:18:6A:CF:83:99:A2:5F
Certificate issuer:       /CN=A91AEE4B/serialNumber=B77283C533113A391E31D94527186ACF8399A25F
Certificate serial:       0BF4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft
Manifest number:          0BE3
Signing time:             Tue 18 Aug 2026 19:14:54 +0000
Manifest this update:     Tue 18 Aug 2026 19:14:53 +0000
Manifest next update:     Tue 25 Aug 2026 19:14:53 +0000
Files and hashes:         1: t3KDxTMROjkeMdlFJxhqz4OZol8.crl (hash: Kpmk7VzPpaAHbixacvSjmGhMzzesN0ZBNwgQtq6FhnI=)
                          2: 02F1850E45A611EA81CD145AC4F9AE02.roa (hash: qFbD01Y06MvGbRfCg41S8SS4YBNjOiK9a5mH5g9wwHE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.crl
                          rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:14:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3060 (0xbf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEE4B, serialNumber=B77283C533113A391E31D94527186ACF8399A25F
        Validity
            Not Before: Aug 18 19:14:53 2026 GMT
            Not After : Aug 25 19:14:53 2026 GMT
        Subject: CN=6a84af2e-fe9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:af:59:17:1a:94:99:c4:ac:8f:57:c6:bb:d3:
                    77:96:f2:46:b5:93:57:39:94:40:30:f3:91:ec:19:
                    ed:a5:4e:97:7d:14:7a:e5:83:e5:97:97:da:6c:15:
                    6f:bf:de:9b:c6:48:ea:f2:11:09:ce:da:e5:dc:ea:
                    04:8f:00:67:d2:6a:6c:af:46:59:0d:ad:7b:bb:6e:
                    f0:46:fd:0a:be:1a:6a:fa:0d:ee:34:e5:42:49:84:
                    f5:34:38:9e:d1:ef:c0:9f:a2:5d:37:3a:f9:7d:6b:
                    a9:63:1c:a2:99:c8:02:5e:03:e5:af:5b:f5:40:79:
                    65:4d:e4:1d:9d:51:99:cd:2b:e0:17:be:aa:36:24:
                    33:01:48:66:73:52:fc:d6:49:f0:41:92:a1:e0:cd:
                    a3:50:c5:a7:37:ef:f4:5e:ea:0b:fa:8e:7a:77:6a:
                    76:3f:4c:7e:3d:f1:e3:5d:a4:fc:ed:26:20:41:e8:
                    17:5b:15:74:c8:82:0b:55:92:c7:04:ac:89:b5:2e:
                    a0:73:82:e2:e1:39:f7:28:df:33:ea:c0:04:ac:f2:
                    a7:b5:2d:81:d4:dc:b1:23:6d:ee:9b:9b:c6:8b:dc:
                    ca:b8:42:49:c6:18:9e:df:9b:cd:1e:58:d6:ff:ad:
                    c9:9b:ad:69:51:8c:08:70:9e:b0:2d:5a:a2:74:3f:
                    46:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:18:BA:0E:6C:32:83:74:5B:CB:5B:0A:6F:F6:DF:08:49:4D:FE:EB
            X509v3 Authority Key Identifier:
                keyid:B7:72:83:C5:33:11:3A:39:1E:31:D9:45:27:18:6A:CF:83:99:A2:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:17:e5:8e:dd:30:e2:f0:fd:db:f9:4c:6d:9a:35:de:5b:63:
         ac:c2:d5:a1:98:f7:e8:24:ce:af:06:5c:7c:44:18:01:1f:76:
         29:f0:a6:04:82:51:77:86:a1:16:34:95:9a:52:e2:ce:91:39:
         32:10:52:8c:a9:5c:e3:6f:6a:0e:18:53:63:91:f1:b5:08:2a:
         f1:df:49:2f:65:79:f9:c8:c6:4d:21:41:50:81:9d:62:d2:de:
         19:b9:19:13:97:f0:a6:40:85:15:ae:79:24:59:4e:57:87:53:
         30:e4:66:25:62:c3:c9:34:b6:03:43:03:88:46:af:b2:16:68:
         4b:ce:71:fd:f3:67:48:60:f3:e4:95:e9:65:f3:c2:33:f1:59:
         a4:5c:1d:53:ab:75:9a:52:8f:cf:d1:2d:c1:e3:db:ae:36:bc:
         29:a8:31:64:b8:9e:27:34:db:b0:ec:20:6b:6e:64:b4:de:7b:
         fc:d9:53:f6:b9:4f:cd:83:19:d0:d5:5e:77:58:b1:6e:e9:cc:
         63:82:a1:0b:03:f0:ba:1c:0c:21:0f:55:cd:02:06:3b:12:f9:
         e9:2e:50:4a:99:4b:3a:9d:9f:23:11:c1:43:95:55:e7:3a:41:
         8d:65:a1:dd:8d:9b:75:b3:ed:cc:4b:4b:29:79:c5:f6:5a:60:
         73:c0:e1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:08 2026 by rpki-client