Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft
File:                     9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft (raw, json)
Hash identifier:          au0rLgNWGSwkGHRHNDci+qj9O6+VJ6ZxjAc2N5lkbCA=
Subject key identifier:   CC:68:3A:8F:81:71:A9:B8:06:AB:D3:BA:4D:0C:90:CF:C1:12:2E:5B
Authority key identifier: F6:BA:6E:63:0A:6A:A9:8D:82:15:68:26:4E:02:7B:98:8D:F5:C9:BA
Certificate issuer:       /CN=A91AF3E2/serialNumber=F6BA6E630A6AA98D821568264E027B988DF5C9BA
Certificate serial:       0185
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft
Manifest number:          017E
Signing time:             Wed 19 Aug 2026 05:17:18 +0000
Manifest this update:     Wed 19 Aug 2026 05:17:18 +0000
Manifest next update:     Wed 26 Aug 2026 05:17:18 +0000
Files and hashes:         1: 9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl (hash: U/Tb3m3vZu1x8gQcvWNK1ixiyz839C/1jg6zeOmBgV4=)
                          2: 50D93D94459A11F095E57A12C4F9AE02.roa (hash: jFQyp9A0jxh8bH4gGrf9ly/lEjVIKy3LPj4bj2YPMKc=)
                          3: 3B5B829EABF511F08C00BC38C4F9AE02.roa (hash: hmChBrVE0EuRQzKDJ7uKwkJY+XVRktN6YzaNk+odT7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl
                          rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF3E2, serialNumber=F6BA6E630A6AA98D821568264E027B988DF5C9BA
        Validity
            Not Before: Aug 19 05:17:18 2026 GMT
            Not After : Aug 26 05:17:18 2026 GMT
        Subject: CN=6a853c5e-b202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:df:ff:b8:4d:a5:06:9c:53:82:b7:f9:0e:a6:
                    eb:87:c6:25:33:70:eb:60:c8:1a:3b:2f:22:62:76:
                    4a:35:fc:d3:36:ec:eb:af:d1:01:9e:7c:72:1f:63:
                    9f:a4:e3:77:75:63:18:4d:d8:a9:e5:cd:a7:46:d4:
                    74:13:3b:94:f9:92:dc:99:70:44:aa:8f:54:b8:e5:
                    7c:df:e6:dc:53:ca:3e:1a:9e:bf:72:6b:c3:84:ee:
                    2e:59:9b:9c:cf:28:1b:9c:d8:ee:a0:a4:08:ed:1b:
                    a6:bb:4b:8b:53:95:09:a0:95:10:23:7b:93:55:80:
                    4e:26:2e:76:b5:8e:48:69:db:38:e5:de:11:3d:55:
                    64:10:89:66:ba:26:53:48:fc:c5:7f:0d:d5:3f:77:
                    d8:e1:a2:04:68:95:25:72:fc:2e:f7:81:2e:c7:d8:
                    9d:6f:72:71:21:2b:ce:62:b0:52:a5:db:f8:8f:48:
                    a8:8b:40:c1:29:5b:83:42:d8:7a:a0:cb:19:95:34:
                    cf:29:ab:3f:87:cc:89:67:07:6d:52:cd:ee:70:60:
                    c4:a9:35:b1:f8:ff:66:71:c3:55:8d:66:c2:6d:20:
                    98:3a:59:77:09:ad:84:62:dc:90:3e:bd:6e:b1:12:
                    04:79:e7:c7:ef:99:1e:d5:b4:eb:db:01:32:72:d1:
                    1a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:68:3A:8F:81:71:A9:B8:06:AB:D3:BA:4D:0C:90:CF:C1:12:2E:5B
            X509v3 Authority Key Identifier:
                keyid:F6:BA:6E:63:0A:6A:A9:8D:82:15:68:26:4E:02:7B:98:8D:F5:C9:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:13:a7:95:29:b6:6e:93:08:84:f0:84:27:83:2b:85:fd:dd:
         e7:d8:64:de:9e:dd:52:1e:8e:8d:e4:83:4d:a1:34:c0:2f:5e:
         cf:8c:7d:af:74:6c:7e:2a:35:c8:73:81:7c:14:d2:db:f1:7e:
         f4:bf:9e:21:97:8e:29:6a:6c:4a:d8:fa:97:21:b2:20:1c:81:
         ce:3b:46:fb:b7:8e:b5:1e:18:4c:7d:e1:a7:7a:5e:b7:da:61:
         67:50:58:aa:06:fa:12:70:b7:a5:59:85:97:a2:9a:e7:18:02:
         e8:50:33:4d:cb:ad:3a:f1:d8:09:f8:22:87:91:f7:a4:fe:0b:
         0a:9e:17:9b:e1:3b:cc:45:9b:53:60:46:d5:f8:57:87:25:57:
         95:0a:dc:43:d8:bc:0d:1d:fe:45:69:27:5a:a2:47:4f:16:7d:
         24:b4:b3:41:13:5e:2d:61:d6:0f:dc:d6:aa:7d:ae:58:1c:10:
         65:48:2f:70:1e:56:4d:aa:97:21:7a:98:2d:95:db:bf:e7:36:
         5b:32:6d:01:c8:1a:49:f8:f7:7d:e4:9a:48:47:48:5b:d0:0b:
         8c:e4:ab:a5:46:8e:8f:e0:7f:e5:f5:53:0c:03:ad:77:68:ab:
         3a:b7:73:b0:9e:0f:6b:e4:f7:58:7b:dc:90:a9:b2:36:2c:71:
         43:62:65:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUYzRTIxMTAvBgNVBAUTKEY2QkE2RTYzMEE2QUE5OEQ4MjE1NjgyNjRFMDI3Qjk4
OERGNUM5QkEwHhcNMjYwODE5MDUxNzE4WhcNMjYwODI2MDUxNzE4WjAYMRYwFAYD
VQQDEw02YTg1M2M1ZS1iMjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8N//uE2lBpxTgrf5Dqbrh8YlM3DrYMgaOy8iYnZKNfzTNuzrr9EBnnxyH2Of
pON3dWMYTdip5c2nRtR0EzuU+ZLcmXBEqo9UuOV83+bcU8o+Gp6/cmvDhO4uWZuc
zygbnNjuoKQI7Rumu0uLU5UJoJUQI3uTVYBOJi52tY5Iads45d4RPVVkEIlmuiZT
SPzFfw3VP3fY4aIEaJUlcvwu94Eux9idb3JxISvOYrBSpdv4j0ioi0DBKVuDQth6
oMsZlTTPKas/h8yJZwdtUs3ucGDEqTWx+P9mccNVjWbCbSCYOll3Ca2EYtyQPr1u
sRIEeefH75ke1bTr2wEyctEa9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMxoOo+B
cam4BqvTuk0MkM/BEi5bMB8GA1UdIwQYMBaAFPa6bmMKaqmNghVoJk4Ce5iN9cm6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjNFMi9EQTYyMkU5QTVC
OUUxMUVGQkNEQkM1NUJDNEY5QUUwMi85cnB1WXdwcXFZMkNGV2dtVGdKN21JMzF5
Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlycHVZd3BxcVkyQ0ZXZ21UZ0o3bUkzMXliby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RjNFMi9EQTYyMkU5QTVCOUUxMUVGQkNEQkM1NUJDNEY5QUUwMi85cnB1WXdwcXFZ
MkNGV2dtVGdKN21JMzF5Ym8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABBOnlSm2bpMIhPCEJ4Mrhf3d59hk3p7dUh6OjeSDTaE0wC9ez4x9r3Rsfio1
yHOBfBTS2/F+9L+eIZeOKWpsStj6lyGyIByBzjtG+7eOtR4YTH3hp3pet9phZ1BY
qgb6EnC3pVmFl6Ka5xgC6FAzTcutOvHYCfgih5H3pP4LCp4Xm+E7zEWbU2BG1fhX
hyVXlQrcQ9i8DR3+RWknWqJHTxZ9JLSzQRNeLWHWD9zWqn2uWBwQZUgvcB5WTaqX
IXqYLZXbv+c2WzJtAcgaSfj3feSaSEdIW9ALjOSrpUaOj+B/5fVTDAOtd2irOrdz
sJ4Pa+T3WHvckKmyNixxQ2Jl/g==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:33 2026 by rpki-client