Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.mft
File:                     h8MVYTVzTVYviayugrfBqOytOao.mft (raw, json)
Hash identifier:          w1VNk+UQ4D2cz0cpMgou2uqshfjKSSaDx94sVz5FPQU=
Subject key identifier:   5C:9D:FB:99:94:A0:D2:D0:47:E9:AB:57:05:AB:62:11:9D:80:8F:39
Authority key identifier: 87:C3:15:61:35:73:4D:56:2F:89:AC:AE:82:B7:C1:A8:EC:AD:39:AA
Certificate issuer:       /CN=A91B821A/serialNumber=87C3156135734D562F89ACAE82B7C1A8ECAD39AA
Certificate serial:       39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8MVYTVzTVYviayugrfBqOytOao.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.mft
Manifest number:          37
Signing time:             Wed 19 Aug 2026 09:20:44 +0000
Manifest this update:     Wed 19 Aug 2026 09:20:44 +0000
Manifest next update:     Wed 26 Aug 2026 09:20:44 +0000
Files and hashes:         1: h8MVYTVzTVYviayugrfBqOytOao.crl (hash: WgdzC6eVozMp5LI6YWLX/oK7GdXKEmF16ug1p+ASpU8=)
                          2: B73DBDC848FD11F1BBA9715993833773.roa (hash: AGc8FPeV1XnTmwaCgwjyk//SDE1tk9ZLKFTYlrVR/0g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.crl
                          rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8MVYTVzTVYviayugrfBqOytOao.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B821A, serialNumber=87C3156135734D562F89ACAE82B7C1A8ECAD39AA
        Validity
            Not Before: Aug 19 09:20:44 2026 GMT
            Not After : Aug 26 09:20:44 2026 GMT
        Subject: CN=6a85756c-4c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:25:7d:3e:c5:48:9a:bc:ac:00:26:cc:e3:c4:
                    e6:f5:7e:c8:1a:40:47:02:29:0a:e9:45:d9:13:36:
                    0b:bc:98:c8:6f:f4:cb:ce:87:e3:75:04:e1:7c:c3:
                    80:e6:c3:e7:ba:ef:c5:98:06:9d:82:27:7c:1e:0e:
                    42:93:8f:61:aa:71:7d:3e:c6:df:31:2d:83:b3:74:
                    14:86:16:16:c3:49:2e:10:74:7f:72:1a:97:ee:49:
                    e6:29:7e:0c:1b:f2:16:89:2a:df:0c:ca:6c:72:fc:
                    26:38:10:8d:59:78:92:dc:b0:16:26:7f:42:86:be:
                    71:80:20:42:70:59:0a:cd:93:7e:a4:f7:75:29:fc:
                    75:38:ee:f8:6a:81:20:90:bb:0f:e8:d3:55:e4:c8:
                    86:c9:cd:3e:6c:0c:ae:de:c7:bc:72:fc:84:c1:10:
                    c0:97:c6:be:bf:2a:97:8b:d7:e4:63:1b:20:2a:25:
                    64:b4:c3:ae:92:e8:2e:28:ab:20:cc:45:f7:3e:e0:
                    37:a2:d4:b6:48:96:e3:d4:45:e4:02:c2:92:8f:75:
                    96:0b:1a:a9:d2:67:67:22:b9:f4:00:c0:d6:5b:6c:
                    73:c7:0d:be:6a:69:f1:be:3c:34:e8:1f:1e:0b:e0:
                    96:4b:88:6c:9b:0d:37:0b:49:d8:b2:f4:45:c7:1c:
                    f2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:9D:FB:99:94:A0:D2:D0:47:E9:AB:57:05:AB:62:11:9D:80:8F:39
            X509v3 Authority Key Identifier:
                keyid:87:C3:15:61:35:73:4D:56:2F:89:AC:AE:82:B7:C1:A8:EC:AD:39:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8MVYTVzTVYviayugrfBqOytOao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ca:17:80:96:36:c7:8a:30:1b:0a:de:10:66:8a:e2:2d:02:
         35:53:0f:1d:87:db:6a:3f:bf:e2:2f:45:42:98:e7:a1:be:a0:
         e5:39:d4:3f:e8:fe:30:2d:22:00:94:9c:15:73:7d:67:45:d9:
         3a:d4:a8:08:7c:01:5a:b1:57:ed:62:27:d3:9a:db:79:69:6a:
         da:57:59:16:84:b6:ba:50:6b:72:25:48:7a:54:d9:d6:22:fb:
         93:a6:18:ce:4e:7b:c8:95:82:7f:34:73:ab:d8:c2:2c:34:32:
         5d:e1:64:86:b3:d1:1e:84:ef:e9:b8:fb:0e:04:cc:df:f1:d5:
         dd:48:0a:05:b6:52:eb:d7:d2:72:7c:d2:8d:6d:db:28:57:3b:
         b5:ae:61:b6:b6:75:b1:9c:58:ec:a8:38:c1:ff:1f:8d:39:5f:
         3f:79:9f:5e:63:0f:a9:17:c4:ca:15:09:6d:c9:0a:2c:fd:05:
         64:c4:29:59:64:16:ba:ce:a7:90:28:28:a2:6c:c5:61:6c:64:
         30:1e:da:aa:29:3e:fd:6e:c7:4c:0f:4a:f3:4b:4d:6e:bf:01:
         41:c7:8f:1a:e2:64:c3:c1:78:02:39:d9:5d:c4:f8:f7:75:06:
         28:9b:02:4c:66:98:83:08:f6:73:29:47:a8:ff:b7:c4:9b:b6:
         23:80:35:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:47:11 2026 by rpki-client