Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft
File:                     PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft (raw, json)
Hash identifier:          TQKLXTYgNfI4fKYrsjbWaEiZXR+95dn6xJ58tRuGDZE=
Subject key identifier:   4D:9B:BC:2C:C0:4B:84:95:7B:2A:64:CA:4E:FE:FF:97:6E:85:04:59
Authority key identifier: 3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8
Certificate issuer:       /CN=A91B10B9/serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8
Certificate serial:       047E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft
Manifest number:          0476
Signing time:             Wed 19 Aug 2026 00:28:43 +0000
Manifest this update:     Wed 19 Aug 2026 00:28:42 +0000
Manifest next update:     Wed 26 Aug 2026 00:28:42 +0000
Files and hashes:         1: PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl (hash: aYJPFjR8IrBXmsJiX9rt2XsAggnsI26wOmm3vdI/2ko=)
                          2: BCD0F6B0A0FF11EC924D4461C4F9AE02.roa (hash: RLT4OavkIPlkhOt4yNgRmjMZlXgnd7ZiolTVU7K89ho=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl
                          rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1150 (0x47e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B10B9, serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8
        Validity
            Not Before: Aug 19 00:28:42 2026 GMT
            Not After : Aug 26 00:28:42 2026 GMT
        Subject: CN=6a84f8bb-1ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e6:e8:13:48:d1:c6:75:a1:70:90:4a:90:94:
                    b9:ae:bc:d0:7a:53:0d:3e:95:a3:94:49:09:8d:6a:
                    47:7e:fe:f3:c6:8a:00:37:9e:19:bd:a4:ac:d0:1c:
                    42:7c:82:9d:7b:8b:a4:ae:82:f7:81:e1:3a:b3:d6:
                    58:fe:0a:d3:63:49:76:4b:58:71:da:aa:d6:99:dd:
                    bb:3e:0c:72:b1:0f:ac:62:8f:c6:88:ef:d0:38:12:
                    16:1f:86:19:2a:2e:a5:13:9c:fc:78:9e:c3:69:cd:
                    b5:95:aa:bd:eb:39:b1:9e:83:06:fe:9d:75:22:d7:
                    16:86:4c:a4:f0:f6:56:d5:cd:46:8f:25:90:47:dd:
                    b3:eb:f6:68:c3:be:14:0d:5c:34:f6:93:35:62:73:
                    0d:24:1f:b7:0e:8b:9d:8d:09:8f:18:3f:e8:1d:68:
                    71:8f:70:28:4e:d3:5e:47:5a:67:16:bd:79:4e:b1:
                    cb:24:21:31:85:33:05:82:7a:dc:02:84:d4:e1:36:
                    72:25:d5:3e:e3:42:73:46:1c:1b:b5:01:9d:8b:2a:
                    22:d1:12:2d:9c:60:24:32:e1:a1:6b:5a:d4:ef:08:
                    5c:76:fb:1b:36:3a:28:5b:80:11:ba:4a:2e:7d:0e:
                    61:a3:c4:71:c8:05:b8:f9:43:f4:c6:8f:ae:63:87:
                    36:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9B:BC:2C:C0:4B:84:95:7B:2A:64:CA:4E:FE:FF:97:6E:85:04:59
            X509v3 Authority Key Identifier:
                keyid:3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:9c:92:06:81:61:98:04:26:4e:de:8f:c4:71:11:37:6e:d9:
         c3:5f:85:f7:89:48:5f:31:b4:fa:94:8c:f0:e4:0e:6e:d1:f2:
         30:8c:ce:5e:b3:3e:58:ec:81:7c:e5:b9:be:5e:bd:37:bb:9a:
         e2:ca:1d:9e:3c:8d:6e:b5:8c:74:ea:24:8a:fc:75:06:94:26:
         05:8e:64:84:23:50:4b:f8:5f:3c:9c:f4:6f:5c:f2:66:45:15:
         bf:cc:4f:46:20:2b:19:92:0c:9c:21:19:a5:9e:0a:25:09:cf:
         8a:6e:06:b9:c0:57:cc:63:2f:6f:d9:b3:b0:3b:3d:29:68:ea:
         55:ba:39:30:3a:49:eb:dd:19:c5:3a:d3:24:35:ca:2f:89:c9:
         c2:d7:5c:0d:bd:78:89:e4:9e:0d:21:0d:62:58:46:66:82:a0:
         2e:cb:2a:e3:21:74:a5:41:4e:43:dd:5b:b8:f5:7f:c7:c5:ef:
         54:8d:81:6f:14:07:06:3c:2a:ef:23:87:2c:0b:89:b4:3d:55:
         67:db:db:51:76:f8:86:c7:18:33:1b:b3:8a:07:23:a4:3b:20:
         0d:f1:85:1d:54:4d:69:d8:85:80:88:04:6d:55:bd:cc:69:cc:
         46:03:aa:12:ef:cc:00:b4:d7:8d:a9:6a:de:24:99:63:35:9a:
         d6:86:2c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:41 2026 by rpki-client