Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft
File:                     rKpuJqXy3KoUzfyezI6c9oKaQCE.mft (raw, json)
Hash identifier:          Zl3TUZdRmq2TXDKNnoNj+evDTfODWFfYNXgusAr8hrs=
Subject key identifier:   25:F6:48:1C:77:50:9B:E9:3F:A9:7D:CE:9F:93:46:5D:54:F5:86:59
Authority key identifier: AC:AA:6E:26:A5:F2:DC:AA:14:CD:FC:9E:CC:8E:9C:F6:82:9A:40:21
Certificate issuer:       /CN=A91AEF45/serialNumber=ACAA6E26A5F2DCAA14CDFC9ECC8E9CF6829A4021
Certificate serial:       0480
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft
Manifest number:          0478
Signing time:             Wed 19 Aug 2026 00:26:59 +0000
Manifest this update:     Wed 19 Aug 2026 00:26:59 +0000
Manifest next update:     Wed 26 Aug 2026 00:26:59 +0000
Files and hashes:         1: rKpuJqXy3KoUzfyezI6c9oKaQCE.crl (hash: bCok5Wpkg5lFjubemPys4myEsCAMg4x6QR/BFUklVl4=)
                          2: 1AE323249F2D11EC897FD30CC4F9AE02.roa (hash: Gae8JUGPwA98nYPjIjUYmUnLgpGjlRVDRt5x96k+Igo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.crl
                          rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:26:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1152 (0x480)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEF45, serialNumber=ACAA6E26A5F2DCAA14CDFC9ECC8E9CF6829A4021
        Validity
            Not Before: Aug 19 00:26:59 2026 GMT
            Not After : Aug 26 00:26:59 2026 GMT
        Subject: CN=6a84f853-b5b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c1:81:52:e4:f0:a0:d6:b0:b6:20:c1:d3:b4:
                    d1:a1:09:7f:9c:fe:2e:3c:1f:58:fb:25:a6:6a:48:
                    3b:4d:8e:0a:68:ec:ed:dd:8b:0e:ab:f7:7b:f8:50:
                    59:11:f0:70:d6:a8:0d:fc:32:24:2a:f2:12:3c:ba:
                    e3:4d:0c:31:65:ea:be:33:8b:98:4b:64:a3:7d:19:
                    a6:9a:76:27:9d:01:38:9d:e4:ec:a3:ba:8d:8d:82:
                    63:95:d6:c8:a1:7d:fe:68:04:7b:93:4a:37:81:43:
                    a2:57:c3:68:c5:bb:16:d8:01:b8:a3:6c:2c:77:47:
                    88:dd:a5:cb:99:94:90:02:64:7b:84:b6:0b:9d:34:
                    1d:4e:c3:52:d9:69:1c:c7:03:6d:fe:85:ae:65:c1:
                    ee:bb:af:3c:69:64:e1:67:c1:4a:6c:84:e8:8c:a1:
                    6c:12:7f:02:a0:eb:7a:38:e8:38:97:3e:f7:2c:92:
                    18:31:69:9d:a5:14:52:73:db:b7:08:52:6c:92:9d:
                    11:0d:7b:20:b5:83:c6:d3:f7:4d:4a:bb:9e:17:46:
                    df:ed:75:0d:65:25:06:be:65:51:a1:da:36:aa:64:
                    0a:7d:f0:c1:62:5d:90:d6:7a:b6:ec:97:8f:95:44:
                    f5:d0:67:c4:51:30:84:67:73:b6:76:04:4d:46:f0:
                    49:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F6:48:1C:77:50:9B:E9:3F:A9:7D:CE:9F:93:46:5D:54:F5:86:59
            X509v3 Authority Key Identifier:
                keyid:AC:AA:6E:26:A5:F2:DC:AA:14:CD:FC:9E:CC:8E:9C:F6:82:9A:40:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:e2:ca:84:5e:d6:b9:58:c1:75:3d:4f:48:99:62:8e:2b:7a:
         d3:74:15:28:79:8d:1d:e1:cf:de:62:82:b6:4b:66:50:11:a8:
         99:93:93:ba:12:0a:ad:da:f8:ab:1f:29:ae:65:bb:b3:16:31:
         97:0c:b4:e4:f2:c2:7f:37:25:81:6a:e7:0b:fb:cf:c9:cc:48:
         42:22:50:1d:91:a3:ca:bd:9a:35:fe:4c:03:07:4b:1a:1b:6c:
         e2:5c:87:4f:10:f7:42:04:d0:3b:41:c3:89:c1:9f:04:f0:3f:
         0c:04:1c:c2:4c:4f:a3:87:89:44:e1:d8:b3:52:ea:49:0c:d6:
         cc:4e:ff:41:49:8c:04:39:f7:1c:18:b0:33:28:0d:09:44:ad:
         76:0d:77:f6:09:81:79:11:be:b5:3c:8a:70:bf:0b:bd:35:2e:
         21:c1:cf:75:fb:e8:b8:bd:d9:74:b8:b2:47:cb:ae:b5:80:8d:
         d3:26:73:8e:dd:79:87:31:26:86:85:fd:a1:aa:4b:47:40:4d:
         bf:28:6e:e0:e5:da:50:36:b4:38:8c:93:4d:a7:99:75:2a:ca:
         9a:4d:b7:78:6d:4c:35:1d:7b:7f:c9:10:b0:02:d0:ea:dd:ae:
         5d:ac:07:96:55:29:bd:2f:ec:cd:ef:f6:ac:3f:63:9f:64:4a:
         df:b5:cf:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:52 2026 by rpki-client