Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft
File:                     vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft (raw, json)
Hash identifier:          DhCDFGs/Nu46+EuadWClW2S4M1fKtkpNjfj5NUqO27s=
Subject key identifier:   D6:65:91:CA:FC:5C:A5:86:86:23:EE:DF:FF:95:CF:90:1D:7E:80:F5
Authority key identifier: BC:02:B0:05:CC:AA:04:53:FC:9B:81:7B:B7:8C:BA:91:5F:27:C2:A8
Certificate issuer:       /CN=A91B36DC/serialNumber=BC02B005CCAA0453FC9B817BB78CBA915F27C2A8
Certificate serial:       0878
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft
Manifest number:          085D
Signing time:             Tue 18 Aug 2026 21:18:17 +0000
Manifest this update:     Tue 18 Aug 2026 21:18:16 +0000
Manifest next update:     Tue 25 Aug 2026 21:18:16 +0000
Files and hashes:         1: vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl (hash: 3IUbQv6/BxzUKEJQyDDEumdKnDsG/ORgt3QZgcycdVU=)
                          2: 1714A7D489BD11EC9550C184C4F9AE02.roa (hash: yuMEpYdr92StEUkrCtc4em7H5dYpwH9n4xJ+CtwrLj8=)
                          3: FEA1EB7219FA11EBA0F82851C4F9AE02.roa (hash: P/YzwZrXirAfHcAYuoDInMv7oeZdvQaJfgoo3K4BZhU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl
                          rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:18:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2168 (0x878)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B36DC, serialNumber=BC02B005CCAA0453FC9B817BB78CBA915F27C2A8
        Validity
            Not Before: Aug 18 21:18:16 2026 GMT
            Not After : Aug 25 21:18:16 2026 GMT
        Subject: CN=6a84cc19-62f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:28:ec:78:89:1b:ce:9f:1d:aa:ef:70:9f:01:
                    fe:d8:49:f6:be:64:be:5d:c9:4e:b4:b9:62:7e:94:
                    6e:c3:92:c0:0c:1f:94:05:21:70:15:a4:8f:92:1b:
                    70:d1:91:bc:9e:65:e0:fc:c7:a6:7f:e7:48:f0:bb:
                    68:57:fb:d5:43:e4:fe:b7:08:cb:35:3d:51:94:b8:
                    6a:28:e6:02:bb:5f:2a:a6:80:cd:f4:a2:f6:8e:9b:
                    50:d4:b3:07:13:b0:81:d1:d8:d4:fd:75:0e:c7:b8:
                    c8:e2:37:e6:c8:57:de:b1:d8:0a:db:ec:0d:75:59:
                    5c:4a:0e:02:db:d0:21:e8:e4:e0:7a:08:4f:55:59:
                    1f:1e:a3:39:44:78:4c:b8:a3:42:be:5b:34:2f:40:
                    b0:c0:5f:62:0d:25:ba:10:7b:bc:c5:3e:be:2d:72:
                    eb:91:d4:70:e0:7b:5f:8c:63:44:04:6f:e1:3b:f4:
                    b6:21:27:f0:45:bd:b5:a1:bf:27:c9:47:6f:39:2b:
                    81:c5:13:93:bf:61:81:72:ed:bd:7f:cd:2d:cb:1d:
                    7b:10:8a:a1:ef:33:7a:90:87:35:86:9d:73:31:8b:
                    85:80:29:a8:25:57:de:65:6a:13:c4:46:2a:d6:91:
                    f1:25:96:37:fd:b3:c6:a3:88:3e:a4:8f:f8:42:dd:
                    d1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:65:91:CA:FC:5C:A5:86:86:23:EE:DF:FF:95:CF:90:1D:7E:80:F5
            X509v3 Authority Key Identifier:
                keyid:BC:02:B0:05:CC:AA:04:53:FC:9B:81:7B:B7:8C:BA:91:5F:27:C2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:c9:5d:d0:a2:e7:5f:8b:e6:65:86:b5:ea:76:35:d5:df:2a:
         1a:22:84:4d:3b:a7:84:39:ff:14:aa:f5:ec:b4:d9:58:bb:c8:
         c6:05:19:21:e2:9c:95:67:94:cb:6e:9d:33:8c:4f:e3:cf:27:
         63:72:a9:3d:21:3f:4b:7c:8b:60:57:fb:ab:4e:6e:e4:87:16:
         12:65:12:c6:10:4e:67:7e:51:d1:50:1e:c1:1e:51:e0:2e:f6:
         1d:4e:1d:70:84:a3:8e:30:eb:4b:32:d7:f8:26:8d:65:93:ab:
         06:f2:1b:8a:76:e7:04:cf:84:14:1e:bf:70:48:dc:b6:ef:7d:
         39:c3:a5:b3:f6:ed:85:0c:5d:1b:6b:de:14:6f:4d:1e:23:52:
         3c:b5:10:71:5f:c3:9f:ba:c7:3f:0b:cd:90:8e:ad:99:2d:d7:
         f0:9b:20:67:4b:f5:61:11:46:15:6f:ab:ef:c1:75:2d:8f:68:
         6f:f3:68:fb:ad:93:56:77:c6:a5:b8:3e:15:71:80:c2:1c:5e:
         c9:20:c9:32:4d:0c:b9:3a:64:52:1e:ec:70:60:95:a5:40:ca:
         22:8b:02:ea:f6:ae:1e:34:5b:c0:c3:50:80:a1:a6:c8:6c:0c:
         8a:ec:f0:ef:0e:c5:60:37:09:db:14:ca:de:24:fc:a7:c9:73:
         3d:ec:6c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:58 2026 by rpki-client