Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft
File:                     P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft (raw, json)
Hash identifier:          HlpY2g8RdMsDpdJxXSTypvqt6/UjyoEV9CWu7s00pVA=
Subject key identifier:   29:B0:36:7B:A7:97:EF:95:43:BD:E5:1E:6E:EA:EB:BD:D5:90:21:83
Authority key identifier: 3F:48:64:90:8C:45:B3:A7:15:8E:83:2C:06:F9:32:3D:23:41:99:0F
Certificate issuer:       /CN=A91BB100/serialNumber=3F4864908C45B3A7158E832C06F9323D2341990F
Certificate serial:       0523
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft
Manifest number:          0517
Signing time:             Wed 19 Aug 2026 00:00:21 +0000
Manifest this update:     Wed 19 Aug 2026 00:00:20 +0000
Manifest next update:     Wed 26 Aug 2026 00:00:20 +0000
Files and hashes:         1: P0hkkIxFs6cVjoMsBvkyPSNBmQ8.crl (hash: zZ+oBjxskfSEMKHfxZ8ohuT9hoGtxxLW4Hmc5qARrMs=)
                          2: FE761E84630511EC86F9726BC4F9AE02.roa (hash: rgJw06hmsB9fncZWEsFDb5n/GUpL32l6BWCvyNuaqQg=)
                          3: D94FB378415811F196DB41B8CB833773.roa (hash: gXPdtCnPPAjwnP0Rk/2BzP0izBu2JHp7rkBkmk8m4yU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.crl
                          rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1315 (0x523)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB100, serialNumber=3F4864908C45B3A7158E832C06F9323D2341990F
        Validity
            Not Before: Aug 19 00:00:20 2026 GMT
            Not After : Aug 26 00:00:20 2026 GMT
        Subject: CN=6a84f215-fc5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f9:fd:54:72:fc:cb:4a:32:77:2d:8d:84:f7:
                    55:8d:05:b9:43:39:b0:09:79:29:55:6a:e0:39:59:
                    b1:67:c5:2b:88:a1:aa:33:68:86:04:8e:0b:41:aa:
                    6e:bf:54:06:c7:65:2b:50:5f:80:82:af:f7:95:84:
                    ae:41:21:7a:2b:5d:ed:d0:02:2e:84:8c:16:41:17:
                    c5:e8:78:79:87:64:06:4b:e2:89:01:da:0f:93:57:
                    c2:72:c8:5b:b9:8a:f6:89:54:eb:aa:f5:c0:1b:b6:
                    df:0e:e2:97:f7:e1:31:6a:c5:da:5e:80:d2:2b:a5:
                    8b:2f:bd:07:01:4e:83:23:53:89:bc:27:f4:4c:64:
                    b2:5e:da:8a:1d:4f:d9:6e:24:72:89:cf:d7:98:20:
                    bb:bc:fd:0e:cb:3e:ea:e9:b8:16:a4:9e:3a:74:79:
                    eb:61:39:a1:e7:e1:8d:3e:b7:2e:2e:35:86:68:54:
                    39:27:81:84:e7:ea:2c:b6:a0:2b:b8:68:a1:44:33:
                    d2:58:6e:16:ca:38:38:5e:d2:2b:37:e7:2a:0b:df:
                    8b:ce:5f:d4:2b:7c:14:d5:8c:84:7b:b8:e8:7c:12:
                    7c:63:2f:aa:e7:fe:da:be:11:41:08:d4:4b:d2:64:
                    69:45:19:a2:36:fe:7c:58:04:91:9c:93:ca:03:ec:
                    b9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B0:36:7B:A7:97:EF:95:43:BD:E5:1E:6E:EA:EB:BD:D5:90:21:83
            X509v3 Authority Key Identifier:
                keyid:3F:48:64:90:8C:45:B3:A7:15:8E:83:2C:06:F9:32:3D:23:41:99:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:da:da:86:d0:9d:33:44:4e:37:08:b1:e4:ff:bc:08:77:4d:
         91:bd:fb:84:1f:1c:63:d0:fb:12:55:34:89:45:65:7f:5f:13:
         07:5f:b8:27:3d:10:79:97:7d:01:ba:e8:1a:33:2b:e6:87:af:
         7a:6c:c5:fe:d0:91:70:70:ac:00:ca:c3:e4:c8:a1:02:14:32:
         3f:70:54:8a:03:54:c4:20:ff:90:26:31:f4:6c:dc:f7:a9:d7:
         12:98:6c:63:74:7a:ff:5d:4a:56:eb:00:de:d5:df:fa:c2:ef:
         73:30:ab:33:30:51:6a:d9:4c:a4:25:61:c2:79:1e:ae:e9:f4:
         db:7a:da:fc:24:65:d0:fe:9d:7a:0f:c5:64:f7:2e:13:b9:08:
         e0:9c:ba:92:71:dd:85:ca:51:8c:21:4d:99:9e:66:36:45:91:
         88:0d:52:52:97:6b:f7:1f:20:93:c7:7e:06:0f:e7:9f:eb:35:
         6b:9b:e5:96:43:aa:b8:75:4d:83:56:bc:db:2f:d3:4a:b5:3c:
         50:fe:19:05:ff:7d:4d:81:49:34:59:93:dd:ee:48:db:49:c0:
         22:c2:d7:4b:de:8d:05:e2:a3:4e:69:c8:4b:1c:ce:7d:62:3a:
         b1:28:cd:f2:bb:f3:dd:29:72:1a:e8:8d:f0:4a:e3:88:5e:93:
         ba:d5:5b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:15:58 2026 by rpki-client