Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft
File:                     RziIJrgc68tdWOukEDkWDSR7wX8.mft (raw, json)
Hash identifier:          +TlI+6RYRxZMW+7gXPHUeE7cxZDRa7XH7GBqqmZ7oto=
Subject key identifier:   DE:5E:C3:FC:9E:5E:B4:38:27:50:D0:59:03:A6:B4:0B:96:EF:E1:C1
Authority key identifier: 47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F
Certificate issuer:       /CN=A91B9B37/serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F
Certificate serial:       0560
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft
Manifest number:          0555
Signing time:             Tue 18 Aug 2026 23:46:27 +0000
Manifest this update:     Tue 18 Aug 2026 23:46:26 +0000
Manifest next update:     Tue 25 Aug 2026 23:46:26 +0000
Files and hashes:         1: RziIJrgc68tdWOukEDkWDSR7wX8.crl (hash: 8qJCx8XgzG2Gomk7fNqI2ja/nW/D5ya3IhrSsAc+adc=)
                          2: 9F0BF8AE48C711ECAA1A222EC4F9AE02.roa (hash: k7pNWs8rxOIJwQwNSf++pyf5UhHis3rC6IchuHrW/pQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl
                          rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 23:46:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1376 (0x560)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9B37, serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F
        Validity
            Not Before: Aug 18 23:46:26 2026 GMT
            Not After : Aug 25 23:46:26 2026 GMT
        Subject: CN=6a84eed3-06c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:51:9b:8d:07:fc:21:87:90:46:e0:68:d4:14:
                    ae:ce:0e:3e:63:f8:e4:65:56:e7:6e:38:b2:39:79:
                    c0:75:a2:d1:f9:14:53:68:c3:3f:a8:e3:d8:15:5a:
                    aa:21:b6:52:f4:f8:10:43:58:62:9e:4c:c4:a4:db:
                    b2:58:9c:78:a6:cf:d0:58:61:96:f4:d4:02:cf:06:
                    fa:c6:e7:57:4c:b9:ce:c1:df:16:d1:1c:c6:3d:84:
                    b3:b9:2a:42:b4:79:b3:85:9c:08:fe:5a:68:7c:0e:
                    9f:c3:01:9c:5c:70:a9:ab:5a:07:49:ef:41:17:ed:
                    de:04:7d:a9:10:32:07:7c:d6:4b:b2:9f:c1:d8:6b:
                    42:70:47:3a:ea:be:e5:ef:e0:88:e8:50:99:78:e4:
                    48:6e:6b:c2:fd:fb:72:34:74:4d:f9:ca:8e:95:07:
                    f9:6a:03:78:2d:2f:dd:2f:93:eb:66:82:74:a1:85:
                    a7:8e:65:7a:de:75:0f:ad:5f:02:d3:ed:c6:69:1c:
                    da:99:e7:fe:4f:7f:30:8f:11:25:41:d8:3f:d7:9a:
                    87:7c:06:dd:64:d4:dd:3a:d1:8c:35:9b:4c:b0:47:
                    8d:6d:ff:aa:91:a9:08:7f:76:04:dd:60:86:d6:c1:
                    ad:d9:b9:9e:67:9d:99:dd:fb:be:68:86:5b:a0:74:
                    51:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5E:C3:FC:9E:5E:B4:38:27:50:D0:59:03:A6:B4:0B:96:EF:E1:C1
            X509v3 Authority Key Identifier:
                keyid:47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:08:86:ec:c3:2f:69:89:7a:5e:5a:69:4c:69:15:58:a9:e6:
         74:ce:44:da:cf:73:75:b4:4b:bf:94:33:37:f0:4c:6f:b3:d0:
         cf:ff:3b:dc:51:c8:67:16:a5:cb:99:b7:9f:03:1f:ac:5e:41:
         ac:28:b3:f3:1a:78:77:0a:dc:b8:43:db:56:ef:2f:ef:45:2b:
         97:c8:87:d3:d8:7e:9f:55:5f:dc:ba:15:28:a5:96:46:b1:d4:
         df:2e:6d:47:23:15:41:28:4e:5f:a0:09:98:f2:1d:23:85:85:
         d7:69:67:f5:1a:6a:5a:fe:f1:44:f3:52:1b:16:7b:81:57:fc:
         9d:75:ef:64:be:37:ff:e3:04:5b:48:c4:89:56:76:11:c1:53:
         95:ee:ce:fc:29:d1:b1:ca:00:1a:6a:9d:af:82:e8:e7:f0:20:
         54:6e:66:f5:a9:70:2b:d8:15:0f:59:c5:6e:d6:58:ff:de:01:
         b1:02:10:d8:3d:af:21:83:09:4a:cb:71:8d:0e:e9:e0:e8:66:
         42:6a:8b:d4:63:ec:8b:e9:8c:67:98:8a:10:34:bf:02:62:d2:
         da:32:01:ef:d5:10:ef:11:35:2a:dd:63:d0:14:4f:a6:75:04:
         df:3b:5f:73:88:1b:30:ac:88:0e:23:ec:80:b9:69:12:0a:dc:
         17:58:76:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:10 2026 by rpki-client