Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft
File:                     JtUcwUoj0KiCO18cogDnCGrJqWk.mft (raw, json)
Hash identifier:          ce11MCT5lUGRPu4i91nwUQr/vd5wBqiDUsiPW6Ml8JQ=
Subject key identifier:   86:20:19:E2:C9:2D:6B:82:C6:F3:4A:41:2F:B1:75:47:9E:24:13:E7
Authority key identifier: 26:D5:1C:C1:4A:23:D0:A8:82:3B:5F:1C:A2:00:E7:08:6A:C9:A9:69
Certificate issuer:       /CN=A91B0022/serialNumber=26D51CC14A23D0A8823B5F1CA200E7086AC9A969
Certificate serial:       0818
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft
Manifest number:          0810
Signing time:             Tue 18 Aug 2026 21:33:00 +0000
Manifest this update:     Tue 18 Aug 2026 21:33:00 +0000
Manifest next update:     Tue 25 Aug 2026 21:33:00 +0000
Files and hashes:         1: JtUcwUoj0KiCO18cogDnCGrJqWk.crl (hash: QWa6obBZ6HEJAIZNRXA9SD3dSNDSzHNa+qd+RjAJzCg=)
                          2: 736BC8B433B011EBB38B4E68C4F9AE02.roa (hash: 3VbEprdUkL8m1GA2u2LXvlOjG1yVfgww8DFLCukSZV4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.crl
                          rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:32:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2072 (0x818)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0022, serialNumber=26D51CC14A23D0A8823B5F1CA200E7086AC9A969
        Validity
            Not Before: Aug 18 21:33:00 2026 GMT
            Not After : Aug 25 21:33:00 2026 GMT
        Subject: CN=6a84cf8c-57fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:3c:3b:36:34:85:9c:af:13:89:63:ff:d4:
                    c5:a6:aa:43:c3:55:78:54:72:d6:05:5f:f6:b1:60:
                    6f:7b:6a:71:1f:db:ea:3a:92:f2:d5:ad:3f:e5:15:
                    f1:40:ee:1c:39:ed:1a:d1:5f:08:79:31:e7:43:17:
                    08:e2:53:8f:ba:70:fc:1f:a0:a2:0f:c8:07:2f:78:
                    11:dd:91:29:2a:16:04:d0:f7:59:a0:12:01:6c:4a:
                    05:73:5a:cf:ae:ce:da:85:49:f4:08:c9:11:64:16:
                    3d:3b:2d:f8:8a:0d:11:82:84:4f:eb:fc:94:78:8d:
                    9d:79:8c:c3:35:7d:61:71:c2:56:4e:26:18:e2:e1:
                    9d:e9:7f:bc:71:dc:15:5c:bc:a0:14:a7:85:15:14:
                    df:47:1d:af:4b:34:db:82:99:ae:7c:cc:f5:df:74:
                    91:75:5c:89:0c:b4:4b:f5:af:73:77:16:5a:f9:b0:
                    74:4e:6b:ed:20:10:00:76:dd:1e:9e:2a:51:d0:9a:
                    6c:40:56:5c:7d:12:1a:45:54:58:d5:11:c5:61:d1:
                    61:01:bf:26:24:4b:a1:37:46:31:2b:3a:8d:5c:29:
                    d2:ec:84:10:b5:84:df:72:e3:3f:38:1e:ce:ab:f5:
                    1f:33:13:6f:d7:aa:12:98:ce:99:0b:d7:29:53:f6:
                    af:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:20:19:E2:C9:2D:6B:82:C6:F3:4A:41:2F:B1:75:47:9E:24:13:E7
            X509v3 Authority Key Identifier:
                keyid:26:D5:1C:C1:4A:23:D0:A8:82:3B:5F:1C:A2:00:E7:08:6A:C9:A9:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:bf:e1:31:07:58:af:74:fc:b1:a3:f7:97:f8:91:99:5d:47:
         0a:00:5c:2c:a1:86:4b:35:ce:4d:85:f2:d8:27:34:3b:b0:58:
         53:c8:11:e6:c3:8d:98:7d:ca:39:36:2c:cf:57:d0:d4:ce:6a:
         a1:38:c6:51:b9:a7:64:a1:d2:70:5d:a5:26:ed:77:4a:df:eb:
         e9:1a:da:5e:d7:67:dc:61:0a:fd:e2:88:ae:09:2c:d1:ac:a7:
         4d:00:5d:f5:d7:c4:4f:0b:36:c3:40:33:57:cf:bc:0e:ab:72:
         ed:4c:49:9a:e3:32:43:f3:40:c8:3c:d7:5b:ae:a6:88:3a:44:
         de:64:1c:53:6b:94:03:94:bf:94:8d:86:67:0a:90:0a:1d:4e:
         90:16:f3:27:15:83:aa:d8:1b:30:96:c2:20:1a:33:2b:2c:74:
         9f:6b:7c:fc:a6:e6:a5:6c:d8:bf:64:c3:82:32:7c:15:45:90:
         25:21:47:f2:5b:a6:45:67:7c:81:a7:23:54:26:e7:d2:2d:f2:
         09:20:bb:1f:a3:c7:6d:b2:4a:2f:8c:c9:ad:7d:91:36:2a:51:
         20:23:c3:62:2f:6a:3b:36:09:cc:57:95:49:ae:bb:7a:80:d0:
         b1:41:9d:03:3f:a8:5d:89:4a:86:9b:d5:94:75:b4:8f:ec:48:
         71:be:d7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:52 2026 by rpki-client