Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft
File:                     EHo5wcwE8nzHJmPb97rm2SqVA4A.mft (raw, json)
Hash identifier:          05lpmVhCB+Fr+EG2cruYqgxOOKla5gLUkKWwAcQy5ug=
Subject key identifier:   A5:95:CB:AF:FC:4F:57:D0:37:82:12:FC:1E:39:B6:59:1A:DA:D1:19
Authority key identifier: 10:7A:39:C1:CC:04:F2:7C:C7:26:63:DB:F7:BA:E6:D9:2A:95:03:80
Certificate issuer:       /CN=A91AFBDA/serialNumber=107A39C1CC04F27CC72663DBF7BAE6D92A950380
Certificate serial:       01D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft
Manifest number:          01C8
Signing time:             Wed 19 Aug 2026 04:25:15 +0000
Manifest this update:     Wed 19 Aug 2026 04:25:14 +0000
Manifest next update:     Wed 26 Aug 2026 04:25:14 +0000
Files and hashes:         1: EHo5wcwE8nzHJmPb97rm2SqVA4A.crl (hash: BWFplv4Xwou/l6jgcCCfqCYi0BUk0mhlmCRIpYDXHMA=)
                          2: 62246EC4E67E11EEAD030482C4F9AE02.roa (hash: lBKEJN8TZCW84RdooxHHdwjNaEtHkFFjxRR59Fdc2o0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.crl
                          rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 04:25:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467 (0x1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFBDA, serialNumber=107A39C1CC04F27CC72663DBF7BAE6D92A950380
        Validity
            Not Before: Aug 19 04:25:14 2026 GMT
            Not After : Aug 26 04:25:14 2026 GMT
        Subject: CN=6a85302b-8748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:51:b1:2d:5b:2d:cb:12:83:55:ea:39:a8:b9:
                    30:c3:14:18:a6:c0:38:b7:a5:14:60:3e:e3:bc:f3:
                    8a:23:97:59:19:40:c1:fa:89:9e:f0:80:14:2a:3f:
                    2d:fd:0c:c4:94:10:7f:ed:07:f1:aa:e1:28:92:cb:
                    3a:1a:f7:e9:40:7b:f6:db:f3:be:4d:ca:ea:a3:bb:
                    0a:8a:a5:e1:90:7b:70:a3:38:8f:48:74:3c:4b:21:
                    4e:bc:4a:ec:d2:1b:70:32:f9:c4:66:07:df:7e:3b:
                    31:99:6e:3b:8e:ea:fb:a1:10:0f:f0:93:77:8e:df:
                    1c:18:2c:fa:09:cc:7c:2b:74:f2:10:ed:62:72:bd:
                    4c:df:83:4c:68:f7:17:2e:aa:f8:75:fa:00:68:08:
                    be:80:1f:ae:cc:d2:1f:52:7d:7d:f4:07:bd:22:cb:
                    f3:c8:81:b0:d5:82:f6:ad:68:d6:51:26:85:9f:58:
                    4c:03:01:3d:b0:2f:89:84:80:f4:76:e3:e1:f7:2c:
                    98:6d:37:7f:d5:13:52:c1:86:03:62:fe:7d:da:c4:
                    2b:78:2d:63:a6:9c:f1:f8:aa:ad:e8:96:51:4b:25:
                    3f:05:5e:31:de:6a:bb:90:58:38:9d:37:ab:3b:92:
                    67:4c:0c:6d:a1:95:a2:52:e7:1e:d9:04:43:15:28:
                    d3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:95:CB:AF:FC:4F:57:D0:37:82:12:FC:1E:39:B6:59:1A:DA:D1:19
            X509v3 Authority Key Identifier:
                keyid:10:7A:39:C1:CC:04:F2:7C:C7:26:63:DB:F7:BA:E6:D9:2A:95:03:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:59:be:1a:ac:1e:6f:df:78:39:a1:26:6c:29:d0:3a:42:cb:
         7e:95:c9:82:68:4d:5b:2d:17:f4:24:1a:4d:c1:c9:45:a2:fe:
         bb:f0:fa:5d:1d:7a:ea:77:9f:f4:aa:45:34:b7:f9:eb:ff:e1:
         d7:49:4d:71:46:f4:f8:9c:24:97:27:bc:27:d1:b6:3e:d2:8f:
         79:33:3b:3c:c4:3f:48:92:5c:2e:89:fb:d2:f9:19:2c:78:0d:
         91:c8:3b:5d:56:a5:5f:c4:eb:f4:fa:b2:d3:96:cf:14:a4:2e:
         57:7f:0b:64:98:0b:bc:ff:35:bc:ae:d3:5c:95:26:f9:c5:46:
         50:2b:b8:44:2f:b3:b0:9d:9f:e9:1e:0c:a5:e9:eb:de:0d:3e:
         30:72:72:98:06:fb:af:ab:1a:be:01:84:24:5c:d4:98:44:87:
         f7:45:e9:57:4d:c5:15:f0:9f:c3:54:7b:0b:d6:5a:67:fa:16:
         4f:9d:6b:cc:0a:a8:e4:64:8c:ae:dc:f6:6d:28:92:c9:5b:2a:
         17:88:c9:da:d2:c6:bc:bd:2c:35:25:84:70:85:83:7c:a4:6c:
         ba:4f:c2:1c:92:df:22:9c:0c:58:05:cb:ea:df:f9:46:16:61:
         f8:b1:15:bf:86:1b:5b:2a:c8:a7:d0:6f:a6:76:f4:cd:63:3e:
         c7:c4:f3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:58 2026 by rpki-client