Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft
File:                     2zxJsbLapmnoFyU5XfcR6D-K09E.mft (raw, json)
Hash identifier:          Niuu/eNM2592fZA8+9Z7oAVqgSXEQ0nqS+5lyIPfLYM=
Subject key identifier:   76:FD:F7:7C:F4:26:7B:BD:4F:B3:1F:79:06:64:12:F6:DF:14:F1:09
Authority key identifier: DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1
Certificate issuer:       /CN=A91B1833/serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1
Certificate serial:       04B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft
Manifest number:          04A4
Signing time:             Wed 19 Aug 2026 00:17:33 +0000
Manifest this update:     Wed 19 Aug 2026 00:17:33 +0000
Manifest next update:     Wed 26 Aug 2026 00:17:33 +0000
Files and hashes:         1: 2zxJsbLapmnoFyU5XfcR6D-K09E.crl (hash: AG00nswovphDzr0Bgfq/7X7ktDt6dwrJipaqr3eViiw=)
                          2: 48ECA4C48EE411EC9936A210C4F9AE02.roa (hash: SzKheHkyXGhCU9L9E9bj5O9UK/QqaZCVghpUUMIvziw=)
                          3: 93CBDF448EE111EC9D298C83C4F9AE02.roa (hash: lRK5hM0+Ajz1Iu+TnpLxwj4NeRvEETgFEYDFPhqxkGM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl
                          rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1204 (0x4b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1833, serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1
        Validity
            Not Before: Aug 19 00:17:33 2026 GMT
            Not After : Aug 26 00:17:33 2026 GMT
        Subject: CN=6a84f61d-3e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5b:d6:06:f6:d3:a7:68:0f:8a:02:c8:a3:b5:
                    95:e3:55:2a:c9:14:28:50:46:20:2e:34:79:92:db:
                    24:af:e4:78:3e:3c:37:f1:94:4f:1f:39:71:fd:d5:
                    79:d7:d2:dd:9c:93:38:3b:9d:41:cc:a9:f4:11:2a:
                    98:fb:63:78:81:2a:fa:66:22:d2:63:96:bf:54:a5:
                    54:f2:cf:84:cb:a5:06:04:7b:71:1c:f9:89:2e:21:
                    05:3d:19:86:ee:59:34:20:6b:7a:43:16:00:02:b9:
                    54:60:d3:27:39:20:bc:75:8f:e1:35:2a:39:2e:cb:
                    07:a7:38:2c:2d:ff:9b:53:d4:17:95:54:2a:0d:5d:
                    b7:c0:1d:af:8e:a9:91:6b:f0:cc:26:cf:b5:9d:27:
                    13:16:7e:92:c8:a0:14:83:96:78:05:c7:7a:2e:4d:
                    76:2f:d9:67:88:dd:75:ad:a5:2d:57:7d:9d:96:3d:
                    6b:a8:4e:79:01:89:a7:1b:3e:83:88:15:06:b7:64:
                    aa:55:cd:14:32:71:32:94:01:c3:38:2e:a8:ab:46:
                    9d:a7:2d:8a:db:49:f5:32:e9:2f:15:d6:4e:87:19:
                    d8:6c:51:34:5f:aa:56:94:8d:00:6d:34:59:a5:37:
                    44:77:5d:34:9f:24:e3:1f:ea:82:eb:94:a9:15:ab:
                    f1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FD:F7:7C:F4:26:7B:BD:4F:B3:1F:79:06:64:12:F6:DF:14:F1:09
            X509v3 Authority Key Identifier:
                keyid:DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:7d:42:a6:c1:c3:7f:c4:67:db:bc:aa:91:7b:ea:33:00:a6:
         82:ae:82:20:40:55:fc:22:e4:01:39:6d:d6:b8:81:cd:62:39:
         a1:a0:a5:9b:6e:7d:54:87:2e:43:14:20:59:91:01:88:0d:be:
         89:6a:80:0d:7c:52:a3:b3:ab:3e:31:95:78:5c:16:df:31:96:
         74:5f:e7:ef:65:30:57:48:4d:c2:0e:78:a8:0f:6e:a2:9f:0d:
         ec:4a:57:11:e4:51:91:6b:79:93:81:be:dc:98:e3:21:7d:20:
         26:08:ee:5f:5a:1d:cb:fe:e4:a6:e3:64:6f:e6:d1:09:6a:e4:
         0e:df:3d:1e:6c:17:55:53:d1:0e:fd:ec:a2:8d:46:72:b0:f1:
         fd:ce:af:e8:1a:d5:43:56:1a:71:15:21:3a:0a:31:66:03:fd:
         90:94:bb:a3:1b:7b:00:18:51:65:e4:97:7a:bd:e7:eb:fa:06:
         55:5b:6d:b3:7a:2c:0f:59:97:d4:89:dc:27:30:3e:15:47:5e:
         b4:5f:d0:17:88:f8:9d:13:1e:65:17:fc:a5:fd:b6:ac:6d:24:
         1e:eb:8c:13:1a:29:3a:5f:de:d2:86:64:12:3f:89:ae:0b:1d:
         d2:b8:c9:a7:86:ad:d3:05:34:51:13:a5:a5:0d:50:81:23:98:
         87:0a:e8:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjE4MzMxMTAvBgNVBAUTKERCM0M0OUIxQjJEQUE2NjlFODE3MjUzOTVERjcxMUU4
M0Y4QUQzRDEwHhcNMjYwODE5MDAxNzMzWhcNMjYwODI2MDAxNzMzWjAYMRYwFAYD
VQQDEw02YTg0ZjYxZC0zZTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAulvWBvbTp2gPigLIo7WV41UqyRQoUEYgLjR5ktskr+R4Pjw38ZRPHzlx/dV5
19LdnJM4O51BzKn0ESqY+2N4gSr6ZiLSY5a/VKVU8s+Ey6UGBHtxHPmJLiEFPRmG
7lk0IGt6QxYAArlUYNMnOSC8dY/hNSo5LssHpzgsLf+bU9QXlVQqDV23wB2vjqmR
a/DMJs+1nScTFn6SyKAUg5Z4Bcd6Lk12L9lniN11raUtV32dlj1rqE55AYmnGz6D
iBUGt2SqVc0UMnEylAHDOC6oq0adpy2K20n1MukvFdZOhxnYbFE0X6pWlI0AbTRZ
pTdEd100nyTjH+qC65SpFavxMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHb993z0
Jnu9T7MfeQZkEvbfFPEJMB8GA1UdIwQYMBaAFNs8SbGy2qZp6BclOV33Eeg/itPR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTgzMy9GRTY4RTBCMjhF
MzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBtbm9GeVU1WGZjUjZELUsw
OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ6eEpzYkxhcG1ub0Z5VTVYZmNSNkQtSzA5RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MTgzMy9GRTY4RTBCMjhFMzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBt
bm9GeVU1WGZjUjZELUswOUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaH1CpsHDf8Rn27yqkXvqMwCmgq6CIEBV/CLkATlt1riBzWI5oaClm259VIcu
QxQgWZEBiA2+iWqADXxSo7OrPjGVeFwW3zGWdF/n72UwV0hNwg54qA9uop8N7EpX
EeRRkWt5k4G+3JjjIX0gJgjuX1ody/7kpuNkb+bRCWrkDt89HmwXVVPRDv3soo1G
crDx/c6v6BrVQ1YacRUhOgoxZgP9kJS7oxt7ABhRZeSXer3n6/oGVVtts3osD1mX
1IncJzA+FUdetF/QF4j4nRMeZRf8pf22rG0kHuuMExopOl/e0oZkEj+Jrgsd0rjJ
p4at0wU0UROlpQ1QgSOYhwronw==
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:19:15 2026 by rpki-client