Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
File:                     d4SIFI464vFK1AhU96L6WVd1xXU.mft (raw, json)
Hash identifier:          o7RsiaXK+37D7ubx0KAxHqExu6jvOuci1/UyfiqoK7g=
Subject key identifier:   DC:9D:99:60:AD:70:E5:95:E3:2F:79:84:D2:9A:42:C1:6B:0E:6B:0B
Authority key identifier: 77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75
Certificate issuer:       /CN=A91AFEA8/serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575
Certificate serial:       94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
Manifest number:          8F
Signing time:             Wed 19 Aug 2026 08:10:48 +0000
Manifest this update:     Wed 19 Aug 2026 08:10:47 +0000
Manifest next update:     Wed 26 Aug 2026 08:10:47 +0000
Files and hashes:         1: d4SIFI464vFK1AhU96L6WVd1xXU.crl (hash: 4gM7Hzi336o8u06iRkRjR1/dAGed43jQy0VQY1gi9DY=)
                          2: 681269F8087811F19439B7C20A3D8C67.roa (hash: GfKHo2eQlYNPUrbMHKQtwwJ+sbJRJ6lCyawulNvQePo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl
                          rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 08:10:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFEA8, serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575
        Validity
            Not Before: Aug 19 08:10:47 2026 GMT
            Not After : Aug 26 08:10:47 2026 GMT
        Subject: CN=6a856508-b337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:87:26:1a:56:d3:73:f3:7f:d3:f8:81:2a:e1:
                    95:60:00:70:17:8f:96:22:6b:7d:b5:b4:9e:01:1d:
                    26:83:78:1f:fb:62:a4:f1:a6:db:ad:af:d3:8f:90:
                    5d:b7:a5:6f:53:be:e2:55:f6:14:11:9d:35:31:35:
                    70:8e:69:5c:84:43:6c:e3:8d:79:e6:88:85:21:6e:
                    3a:3a:86:90:96:fd:66:1f:b6:99:1d:18:48:4a:75:
                    43:41:64:dd:ea:6d:b4:40:ec:73:12:fd:23:cb:d6:
                    1a:4d:77:1a:04:ea:ce:a0:ea:46:75:66:71:36:5f:
                    c2:f0:6c:10:83:e7:7a:cf:db:82:87:07:4e:cc:4e:
                    6f:a7:22:4d:d3:b7:9e:c6:08:08:26:b2:4e:54:8e:
                    82:5a:f9:63:1a:45:01:da:f4:76:a6:32:69:95:52:
                    01:bd:dc:4d:b1:49:42:f4:b6:5f:dd:03:b0:ed:1c:
                    74:f2:57:0f:02:e2:2a:0e:0c:7f:c4:1b:5c:6b:5f:
                    14:0e:3f:12:0b:da:45:a3:99:06:02:83:d6:46:e4:
                    c7:d7:bb:3a:b9:7c:42:7f:09:5d:5e:bb:56:70:c8:
                    c9:3b:bd:b9:aa:21:fe:53:b1:6f:32:ef:8a:28:dc:
                    0a:90:09:e7:a4:0c:26:00:3b:c7:fe:03:6b:e7:e7:
                    a6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9D:99:60:AD:70:E5:95:E3:2F:79:84:D2:9A:42:C1:6B:0E:6B:0B
            X509v3 Authority Key Identifier:
                keyid:77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:61:8b:8d:83:fb:fc:81:8c:60:0c:3c:db:65:de:07:6e:2a:
         bf:6c:9f:33:0b:c5:eb:08:ba:b7:ae:44:fd:b6:06:12:3f:03:
         90:a2:c7:0d:3c:32:c2:0e:f6:51:3a:cb:15:48:7e:e3:84:f5:
         68:aa:ce:79:69:14:08:ec:9d:5b:35:9d:1c:d5:20:67:32:7e:
         05:74:78:7e:ce:e0:dd:f3:87:7e:f4:b9:22:ee:7a:c2:37:0c:
         98:cb:71:e3:66:96:34:55:8f:f4:89:5c:c5:1a:46:f6:a7:1e:
         bb:d5:14:ab:42:01:d0:63:ac:fc:2e:87:ca:ab:44:83:33:05:
         5a:14:cb:da:2f:fb:a6:43:68:83:01:4e:58:85:8e:4d:e9:37:
         16:84:66:4d:48:1f:aa:72:00:49:20:f2:4d:a6:65:34:ac:c8:
         15:1b:20:27:07:43:8f:3e:59:04:a7:1d:0e:6b:4b:31:4e:b3:
         2a:b3:7e:da:5a:3b:79:3b:b5:2f:eb:81:ed:1e:19:4b:78:f7:
         f5:d5:c2:9d:1d:27:31:cb:7d:62:d7:b9:81:e9:50:ed:5b:e1:
         3b:e1:62:e2:3d:02:ff:be:68:aa:5e:e5:ea:67:5e:94:8c:ff:
         30:fd:b1:60:44:d2:68:31:03:4e:32:0a:8e:0f:8d:d2:35:98:
         d4:d7:d5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:10 2026 by rpki-client