Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft
File:                     iV5rynpcNtnzBEctDScTpILJ2yU.mft (raw, json)
Hash identifier:          VgCj49RiT+Cxkzn/Q9XFqjVjzJdzPUxDyAILs73wwQo=
Subject key identifier:   2A:EC:97:AB:D2:52:07:D1:D5:44:B6:97:C2:31:39:63:7F:50:0F:D6
Authority key identifier: 89:5E:6B:CA:7A:5C:36:D9:F3:04:47:2D:0D:27:13:A4:82:C9:DB:25
Certificate issuer:       /CN=A91B829A/serialNumber=895E6BCA7A5C36D9F304472D0D2713A482C9DB25
Certificate serial:       0D39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft
Manifest number:          0D2D
Signing time:             Tue 18 Aug 2026 18:26:05 +0000
Manifest this update:     Tue 18 Aug 2026 18:26:05 +0000
Manifest next update:     Tue 25 Aug 2026 18:26:05 +0000
Files and hashes:         1: iV5rynpcNtnzBEctDScTpILJ2yU.crl (hash: jcqFBiJim4Ls76epkUJt6xyBB6nhEXaQNf7oXiWtcb0=)
                          2: 37759456617811ECBB095A62C4F9AE02.roa (hash: +R4LaSdSdI4rptj9gcyqC1YCWuipohsg4zPzzR0FvRU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.crl
                          rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3385 (0xd39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B829A, serialNumber=895E6BCA7A5C36D9F304472D0D2713A482C9DB25
        Validity
            Not Before: Aug 18 18:26:05 2026 GMT
            Not After : Aug 25 18:26:05 2026 GMT
        Subject: CN=6a84a3bd-513e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:fd:44:54:ac:59:a3:86:3c:25:43:c8:4a:
                    2e:61:7c:f2:9e:8a:62:cc:c7:1f:74:d9:c5:76:42:
                    bd:21:bb:35:c3:9f:90:13:e7:8e:ea:cf:78:32:2c:
                    fd:4b:e1:54:f3:ef:cd:e3:46:31:44:02:6f:4e:0b:
                    f2:4c:37:d5:27:55:e7:be:d6:68:3a:98:b4:ff:ae:
                    f1:d4:1c:fe:92:e7:5d:21:eb:6a:c9:a1:29:bc:20:
                    b5:42:eb:0e:f4:43:a6:9d:d2:10:e8:10:13:20:91:
                    ed:1a:3c:cc:85:65:d0:da:08:f3:7f:8f:f4:41:58:
                    48:ac:11:6d:c3:ba:b8:2c:81:fe:f8:ed:65:77:e5:
                    a9:78:8f:9e:1a:87:c3:71:25:63:3f:96:45:fb:23:
                    8d:80:d2:9f:64:41:17:de:b5:a0:6a:20:68:68:31:
                    1f:ab:69:2c:4e:5c:71:49:0d:15:ed:41:74:84:62:
                    82:b5:05:c8:ff:d9:12:2c:be:4b:0d:c6:e9:94:79:
                    34:f2:fc:8a:6d:ad:21:a4:25:dc:89:eb:19:36:7f:
                    80:f9:72:c0:86:ce:8d:ff:81:0c:ae:ba:28:d8:e4:
                    4b:9c:f9:c3:dd:52:eb:48:99:e4:0a:4a:2f:96:0e:
                    24:b4:55:a5:c3:17:4a:94:81:19:8e:79:49:3b:06:
                    4c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EC:97:AB:D2:52:07:D1:D5:44:B6:97:C2:31:39:63:7F:50:0F:D6
            X509v3 Authority Key Identifier:
                keyid:89:5E:6B:CA:7A:5C:36:D9:F3:04:47:2D:0D:27:13:A4:82:C9:DB:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:73:0f:81:84:76:4c:dd:c5:09:3a:97:ba:cb:d1:df:3d:58:
         01:86:15:bc:12:71:ae:5d:e3:91:b8:1f:64:5f:df:69:4f:db:
         b6:44:1c:10:d9:21:37:67:03:72:6e:fc:bc:53:bc:dc:24:2e:
         30:6b:2a:55:7b:13:6f:1b:84:b2:91:1a:be:99:b3:0f:c6:18:
         17:96:0b:c6:e1:09:cf:25:42:19:e4:b9:7a:cf:30:22:b9:8e:
         0f:bd:e6:4b:d7:84:3a:15:6a:2a:01:9b:7b:89:f0:ee:40:46:
         ce:46:5d:06:2f:3d:18:67:db:59:11:39:3a:02:1e:e0:c1:d0:
         8a:68:e6:23:4b:ab:b4:63:f9:98:b2:5e:b9:10:12:c6:e7:a9:
         26:6e:88:75:d9:0c:83:e5:0b:e9:75:43:db:17:e8:65:1d:48:
         cb:7e:96:58:d0:1c:da:59:a7:e3:81:1a:13:f3:aa:24:39:0a:
         c2:69:71:d1:69:b6:e4:cd:6c:c3:5a:ae:09:58:ef:0d:c5:81:
         53:93:dd:a2:06:1c:71:41:76:8d:99:ef:4d:52:0a:4f:82:99:
         44:ce:2e:2e:55:94:20:bf:31:9e:de:69:bb:ef:38:8e:3d:a8:
         34:20:bd:18:c7:24:1a:76:30:99:dd:08:d4:7b:4a:0e:c9:72:
         69:87:f9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:44 2026 by rpki-client