Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
File:                     S0fJxk08IyF6Fd2rh0fDncMBhPI.mft (raw, json)
Hash identifier:          30J+akz/3I2U4ilhjvvQusUwXLkYCT0n5dKF4A400co=
Subject key identifier:   98:E7:5A:2F:16:04:E3:1E:8C:D1:5F:64:EC:CB:E1:EF:B4:AF:70:8A
Authority key identifier: 4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2
Certificate issuer:       /CN=A91B31CE/serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2
Certificate serial:       0774
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
Manifest number:          0769
Signing time:             Thu 20 Aug 2026 21:38:03 +0000
Manifest this update:     Thu 20 Aug 2026 21:38:03 +0000
Manifest next update:     Thu 27 Aug 2026 21:38:03 +0000
Files and hashes:         1: S0fJxk08IyF6Fd2rh0fDncMBhPI.crl (hash: ME6ET+tgJHT3ZEj37azAiuR0kQ5uGLnReIkJ1ABGsEQ=)
                          2: AA51390A822B11EE8B95E475C4F9AE02.roa (hash: AnaATHT/63NFgMgZ3Y5aYEgFRK7pXkT3QAJXtGEghZM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl
                          rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1908 (0x774)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B31CE, serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2
        Validity
            Not Before: Aug 20 21:38:03 2026 GMT
            Not After : Aug 27 21:38:03 2026 GMT
        Subject: CN=6a8773bb-587a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:29:9d:44:69:10:b4:14:3b:e7:5d:ea:c0:5a:
                    45:08:19:30:b0:6f:bf:21:69:ab:9d:81:bb:bf:3a:
                    3c:15:d7:1f:96:ae:6a:bc:20:39:8c:52:6c:31:e6:
                    5e:7d:9e:b4:f4:85:ed:36:a0:a4:5e:61:22:53:cf:
                    89:21:c5:28:b0:7b:91:67:b6:18:42:40:75:1c:30:
                    92:6f:b0:65:2d:2d:a6:fd:8d:d5:9d:05:77:8e:04:
                    1c:64:4e:c2:20:a5:e7:bb:9d:4c:d6:b4:3a:1b:f1:
                    04:c1:88:3b:f3:c8:45:5e:cb:78:b8:87:5e:84:a8:
                    41:3e:0a:d0:e4:35:f4:fb:d2:e8:4f:8a:a4:da:a7:
                    9f:bb:5f:a3:ab:a9:1d:c0:1b:8a:18:da:1b:46:fb:
                    b3:ec:88:16:04:6b:2e:cf:8f:ac:3f:53:48:7d:42:
                    9c:85:30:a9:c8:de:73:5a:7a:51:90:1e:8a:e6:d6:
                    6f:35:c9:6b:38:94:88:ec:8d:7d:94:ca:14:a3:0a:
                    74:7a:05:22:42:7a:8f:07:8f:23:9b:69:8f:b8:fd:
                    b7:82:e9:13:10:a0:49:50:51:11:26:aa:38:a2:f4:
                    55:2b:56:31:27:e3:24:0c:24:df:20:97:e0:20:0d:
                    45:ff:b6:21:66:e0:90:cf:7f:2a:3e:0a:2a:c2:37:
                    c1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E7:5A:2F:16:04:E3:1E:8C:D1:5F:64:EC:CB:E1:EF:B4:AF:70:8A
            X509v3 Authority Key Identifier:
                keyid:4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:65:f6:05:cf:ee:08:6c:4a:93:c4:e5:98:62:87:53:c0:23:
         a8:86:84:f4:ef:98:fa:9c:60:e0:7f:ab:45:eb:a4:63:70:06:
         84:0f:c3:76:c6:14:9e:07:1b:eb:6d:8f:07:38:4a:c7:a7:1a:
         13:e5:e1:bf:4d:fd:87:4b:8f:cf:57:1f:e6:b4:bc:d9:7c:7e:
         35:af:36:ad:95:cc:d2:f0:69:11:3c:56:d6:46:b3:7b:26:92:
         33:90:1f:59:e5:8f:af:5a:76:8a:81:85:b4:66:15:12:68:7a:
         b0:87:24:1c:9e:f0:65:b5:d3:f6:67:bc:17:c5:a2:58:aa:bb:
         58:35:c3:c9:76:e1:aa:5e:de:3c:7e:94:f0:6b:4c:ce:53:76:
         cc:29:1b:5d:46:b1:c7:84:87:7f:33:19:8a:97:ec:99:39:42:
         d1:27:fc:d5:99:b3:55:83:0b:8c:8c:3c:26:11:85:46:4c:e0:
         10:06:88:d5:69:15:2f:73:05:6d:5f:c4:64:6e:9b:8d:09:e1:
         8e:86:a1:86:5a:5d:97:c9:44:49:52:7b:6b:26:29:dd:2d:1e:
         25:d6:d4:a6:bf:c1:9b:a8:e4:1f:e9:f7:c1:89:d1:67:7a:a8:
         99:a8:87:da:be:9a:d2:98:e0:9d:63:12:29:b5:6f:d4:6f:28:
         b2:4b:20:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:33:38 2026 by rpki-client