Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft
File:                     4uYwZnXV9U0ge2eCqWx6qWex_JE.mft (raw, json)
Hash identifier:          LSmx9nc+2cSQ4M2qayJBP3nf/O3p2FKZnfv/QFhgR4k=
Subject key identifier:   C5:B5:91:AB:D2:81:17:89:CC:29:1D:5E:B0:AB:78:06:D1:CC:45:20
Authority key identifier: E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91
Certificate issuer:       /CN=A91B8AC8/serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91
Certificate serial:       014C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft
Manifest number:          0146
Signing time:             Wed 19 Aug 2026 06:04:12 +0000
Manifest this update:     Wed 19 Aug 2026 06:04:12 +0000
Manifest next update:     Wed 26 Aug 2026 06:04:12 +0000
Files and hashes:         1: 4uYwZnXV9U0ge2eCqWx6qWex_JE.crl (hash: riDDPKagDByhez5gQaLpqMcmIrqnj3CNsk1ucOA0uYM=)
                          2: 9074B02EB13D11EF9EFDE433C4F9AE02.roa (hash: qQ+iMBsnI6+Y33rIWpsuvyD5YPUXPAMZYZLTuJsOPi8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl
                          rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 06:04:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8AC8, serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91
        Validity
            Not Before: Aug 19 06:04:12 2026 GMT
            Not After : Aug 26 06:04:12 2026 GMT
        Subject: CN=6a85475c-fc70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0b:36:be:8c:b1:5e:06:bc:b5:cd:4b:c9:54:
                    f3:93:9f:44:da:a5:dc:c2:f8:0c:15:5f:19:10:34:
                    28:e0:e9:8e:41:f4:f5:71:a4:a9:5c:28:ff:36:e7:
                    a8:56:1d:59:31:43:9c:c1:14:fd:24:67:1d:c5:aa:
                    5b:a6:6f:59:ad:37:c7:7a:79:5e:fb:33:ac:ce:f7:
                    35:fd:0f:73:0b:b3:ec:ca:03:77:0d:98:6a:08:55:
                    b8:a8:1b:d9:52:79:6b:27:9b:26:6b:87:60:93:ca:
                    f5:91:a4:15:5d:53:1a:a7:fe:a0:00:b9:ae:d9:0a:
                    c9:cd:d2:60:a4:52:31:96:ea:dc:2d:68:e1:e5:a3:
                    d4:af:c9:3b:44:eb:a2:ec:04:0e:14:f4:09:dd:ff:
                    72:d3:69:97:5e:38:d9:08:db:d7:74:76:94:38:da:
                    20:17:4d:62:a6:8c:53:b9:91:c2:d2:de:9f:f4:65:
                    eb:20:e1:f2:ce:a5:a5:17:6a:47:c9:a9:82:d1:fe:
                    c6:b6:9b:fe:c7:45:31:38:27:43:59:a8:27:63:c6:
                    bf:d7:ba:7d:b6:66:9d:ed:a6:76:2d:c3:eb:1a:f8:
                    bd:21:49:a9:d1:5f:e0:0c:14:2f:8e:7f:04:34:02:
                    05:62:12:68:97:88:84:ad:0c:87:21:ef:49:b5:9d:
                    db:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B5:91:AB:D2:81:17:89:CC:29:1D:5E:B0:AB:78:06:D1:CC:45:20
            X509v3 Authority Key Identifier:
                keyid:E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:d6:db:5d:1f:1c:e0:02:84:a6:be:74:da:89:e8:9e:6e:3e:
         f6:b8:17:41:1b:14:96:d2:4f:14:ad:ce:e6:d1:42:ee:71:e6:
         87:86:14:13:5b:fa:17:f7:7d:d3:f1:59:79:9c:1e:9e:64:d4:
         3b:c6:c4:bc:cc:33:01:70:7b:f7:7f:99:45:dd:c0:42:b4:70:
         71:31:39:b5:75:91:e4:f0:de:d3:1c:6e:0e:73:30:00:07:10:
         d7:a0:f2:6d:60:fc:12:e1:5e:7d:9a:32:88:a5:e1:89:ac:bf:
         f3:af:29:3e:ce:24:d3:1e:29:32:e5:74:f2:e9:d8:9a:f4:1c:
         8e:0d:68:36:2c:d4:f5:52:1d:1d:fc:72:b8:1f:50:fc:6a:eb:
         34:6d:74:5f:37:a0:21:62:b5:7e:8c:dc:d1:d3:bf:df:1c:0e:
         55:06:a9:a6:ab:9c:f6:1f:f9:cc:37:c0:64:8f:ef:e2:4e:00:
         e3:e1:2c:a9:83:47:44:59:f0:63:09:de:5c:c9:f3:e6:59:9e:
         d7:16:7f:96:ef:9f:50:64:54:22:f8:ad:1c:b6:3b:e4:38:22:
         a7:da:f4:44:bb:22:64:7f:c5:ae:bb:63:ab:02:b9:c1:7d:75:
         22:84:4c:15:86:0c:7d:ee:06:67:6b:2a:6e:01:7e:63:e0:03:
         a5:f1:66:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:17 2026 by rpki-client