Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
File:                     0y2jboghgi5r08gs_6mE56kJw_Y.mft (raw, json)
Hash identifier:          Oak+jNYv0D+jJDgIsNUogu5fkGiYbmsG7M7FoVuDfiI=
Subject key identifier:   70:11:29:EF:15:A5:DD:58:B8:6E:4B:B3:AF:12:DB:EB:2A:4D:6C:E4
Authority key identifier: D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6
Certificate issuer:       /CN=A91B8EF9/serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
Certificate serial:       34C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
Manifest number:          34AE
Signing time:             Tue 18 Aug 2026 15:22:19 +0000
Manifest this update:     Tue 18 Aug 2026 15:22:18 +0000
Manifest next update:     Tue 25 Aug 2026 15:22:18 +0000
Files and hashes:         1: 0y2jboghgi5r08gs_6mE56kJw_Y.crl (hash: Pm6QnrCji+3K8PPGR+lgkEDl28VlC0+V2e7UuTaLWdc=)
                          2: A1C2C79680FE11E985D53F55C4F9AE02.roa (hash: Ej83i8NuEYKasou7W/9D745hYaGsqd2oMKEiRlHzF4I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 15:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13504 (0x34c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8EF9, serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
        Validity
            Not Before: Aug 18 15:22:18 2026 GMT
            Not After : Aug 25 15:22:18 2026 GMT
        Subject: CN=6a8478aa-73d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:82:f8:32:ff:df:11:e2:84:ee:b4:17:a6:a1:
                    0e:44:ed:32:23:41:46:9f:25:18:16:6b:6c:ce:b0:
                    bc:24:c2:4b:8a:21:ce:00:3a:70:29:0a:a6:bb:c3:
                    20:a2:6f:57:e8:56:b0:ed:01:b5:88:97:16:a1:c4:
                    57:f3:20:68:a0:4d:53:2c:3c:e2:1c:6d:1f:bf:dc:
                    c8:34:92:86:68:58:67:0a:39:b2:e2:36:01:d5:e5:
                    1b:14:db:7b:ee:01:e9:70:3b:c1:43:3a:0e:40:fa:
                    24:48:80:bf:df:be:7c:f2:39:a3:79:94:75:df:34:
                    14:04:73:e6:d1:fb:ac:9f:75:b1:0a:4b:98:ac:04:
                    21:5c:32:c2:79:dd:63:06:9a:46:42:b1:b6:5d:ef:
                    54:a4:b2:46:d9:a3:f8:60:b8:e5:d6:84:9b:cb:c1:
                    f4:4d:73:2c:30:e0:f6:cd:8e:bf:9a:2b:75:12:8c:
                    13:88:79:11:a8:4c:8c:dd:5b:2a:b2:e8:50:32:96:
                    75:48:99:35:d0:29:bf:ff:39:6f:2c:d6:81:9d:55:
                    fa:43:d7:ff:45:3e:ad:c0:d6:36:53:77:51:c1:42:
                    f2:1f:1c:4e:bf:6f:4a:27:65:10:f0:a1:9b:5a:e5:
                    d7:0c:33:1a:e1:da:4b:a9:5d:05:65:eb:90:aa:87:
                    9a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:11:29:EF:15:A5:DD:58:B8:6E:4B:B3:AF:12:DB:EB:2A:4D:6C:E4
            X509v3 Authority Key Identifier:
                keyid:D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:79:d7:07:4a:a6:f5:e4:a4:a0:4b:1b:46:1d:d4:d3:80:43:
         07:12:df:ff:cb:47:07:31:09:c7:d8:f6:d4:89:12:ad:86:d6:
         f2:c6:09:e2:2a:28:14:12:ba:b0:cb:a4:ce:53:a6:b4:c0:71:
         7a:a5:ec:ce:ea:e7:1c:b0:62:ad:e6:1f:c0:2b:ce:77:bc:28:
         12:21:17:e9:f5:b2:87:b1:9b:72:7b:15:2b:d1:8f:d7:36:f9:
         e6:d2:4d:ca:17:0d:ce:f8:2b:f7:70:7c:dc:8c:36:d3:20:89:
         1e:30:6d:73:e0:2d:22:69:45:e1:ab:03:7b:78:58:b2:95:2d:
         62:e1:42:81:f7:12:78:0c:96:c3:f4:1f:22:12:10:2b:fc:90:
         a1:40:32:d2:6b:f7:29:4a:b4:9b:2f:5c:8f:18:2e:f7:3b:a0:
         60:43:3a:aa:b1:1e:59:6d:fa:26:d2:20:14:0d:18:32:cf:12:
         e0:bb:5a:dd:05:86:33:81:6e:8c:6b:bd:a6:61:90:81:4e:6b:
         84:d3:f4:c5:49:bd:69:60:fe:f4:97:c6:f3:d0:72:a7:67:d2:
         bd:35:62:49:d5:63:1e:62:b2:c9:62:be:34:44:39:24:3a:b7:
         61:c6:d9:06:c2:68:d1:6b:57:52:e5:9c:75:d0:86:46:08:53:
         91:a4:37:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjhFRjkxMTAvBgNVBAUTKEQzMkRBMzZFODgyMTgyMkU2QkQzQzgyQ0ZGQTk4NEU3
QTkwOUMzRjYwHhcNMjYwODE4MTUyMjE4WhcNMjYwODI1MTUyMjE4WjAYMRYwFAYD
VQQDEw02YTg0NzhhYS03M2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvoL4Mv/fEeKE7rQXpqEORO0yI0FGnyUYFmtszrC8JMJLiiHOADpwKQqmu8Mg
om9X6Faw7QG1iJcWocRX8yBooE1TLDziHG0fv9zINJKGaFhnCjmy4jYB1eUbFNt7
7gHpcDvBQzoOQPokSIC/37588jmjeZR13zQUBHPm0fusn3WxCkuYrAQhXDLCed1j
BppGQrG2Xe9UpLJG2aP4YLjl1oSby8H0TXMsMOD2zY6/mit1EowTiHkRqEyM3Vsq
suhQMpZ1SJk10Cm//zlvLNaBnVX6Q9f/RT6twNY2U3dRwULyHxxOv29KJ2UQ8KGb
WuXXDDMa4dpLqV0FZeuQqoea3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHARKe8V
pd1YuG5Ls68S2+sqTWzkMB8GA1UdIwQYMBaAFNMto26IIYIua9PILP+phOepCcP2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEVGOS80NEE4MDVFRTQ0
QzkxMUUyQjM1QUM0ODQyOTc5QkIyMC8weTJqYm9naGdpNXIwOGdzXzZtRTU2a0p3
X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzB5Mmpib2doZ2k1cjA4Z3NfNm1FNTZrSndfWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OEVGOS80NEE4MDVFRTQ0QzkxMUUyQjM1QUM0ODQyOTc5QkIyMC8weTJqYm9naGdp
NXIwOGdzXzZtRTU2a0p3X1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoHnXB0qm9eSkoEsbRh3U04BDBxLf/8tHBzEJx9j21IkSrYbW8sYJ4iooFBK6
sMukzlOmtMBxeqXszurnHLBireYfwCvOd7woEiEX6fWyh7GbcnsVK9GP1zb55tJN
yhcNzvgr93B83Iw20yCJHjBtc+AtImlF4asDe3hYspUtYuFCgfcSeAyWw/QfIhIQ
K/yQoUAy0mv3KUq0my9cjxgu9zugYEM6qrEeWW36JtIgFA0YMs8S4Lta3QWGM4Fu
jGu9pmGQgU5rhNP0xUm9aWD+9JfG89Byp2fSvTViSdVjHmKyyWK+NEQ5JDq3YcbZ
BsJo0WtXUuWcddCGRghTkaQ3pg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:33 2026 by rpki-client