Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft
File:                     dQ-le1kVZTnLFuVKYKbO21sQ654.mft (raw, json)
Hash identifier:          dypHSAVrOGnER9N8Z0kVmFHRiJdaCYuE05SdjPgy4P4=
Subject key identifier:   D4:64:25:F3:9E:B3:25:B3:A8:23:FB:D1:C0:45:E6:BD:58:C6:8B:2D
Authority key identifier: 75:0F:A5:7B:59:15:65:39:CB:16:E5:4A:60:A6:CE:DB:5B:10:EB:9E
Certificate issuer:       /CN=A91BB1F3/serialNumber=750FA57B59156539CB16E54A60A6CEDB5B10EB9E
Certificate serial:       018E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft
Manifest number:          0189
Signing time:             Wed 19 Aug 2026 05:06:44 +0000
Manifest this update:     Wed 19 Aug 2026 05:06:44 +0000
Manifest next update:     Wed 26 Aug 2026 05:06:44 +0000
Files and hashes:         1: dQ-le1kVZTnLFuVKYKbO21sQ654.crl (hash: WDygb2fbZyxHvqeQyOvc2bHytrzPoCmPEVn0/1GzB9g=)
                          2: F9E4E14645AE11EF8870C771C4F9AE02.roa (hash: 92+MCvev4Dufdf+wuDOQcin6Fkp7+RWjlESgBq/RGGs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.crl
                          rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB1F3, serialNumber=750FA57B59156539CB16E54A60A6CEDB5B10EB9E
        Validity
            Not Before: Aug 19 05:06:44 2026 GMT
            Not After : Aug 26 05:06:44 2026 GMT
        Subject: CN=6a8539e4-540c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:61:75:42:a4:83:95:d7:c1:b6:af:87:3d:61:
                    84:7b:2f:64:e3:e1:f7:fe:7e:75:28:bf:4b:1b:13:
                    7d:9b:b2:06:5f:8e:45:d4:82:cd:ba:3b:92:de:c0:
                    2e:2c:40:3f:c6:dc:9c:e6:86:79:4a:1b:38:a6:a2:
                    6a:fb:cc:4f:25:de:95:6b:b3:1b:15:24:f9:dc:24:
                    af:73:10:43:62:2e:3a:cc:6c:96:36:91:10:7d:89:
                    a2:eb:51:54:0a:09:17:78:08:04:37:da:c1:c6:87:
                    ff:d9:35:fd:8e:da:5d:d7:8b:46:5b:dc:08:54:a7:
                    e9:17:0e:01:ae:cf:e8:dc:f5:24:25:a4:05:98:f3:
                    47:cf:4a:dd:44:47:b5:7b:99:71:cf:7d:84:b2:d5:
                    e1:82:57:ad:97:cf:23:73:dc:0f:b7:67:73:b7:d5:
                    d1:9e:11:96:5f:c4:9f:f8:aa:46:65:f3:79:fd:99:
                    14:41:cd:1f:46:17:76:e7:aa:de:4f:15:0d:ea:d5:
                    4d:fa:34:c1:a6:37:5a:a0:a4:ca:55:a1:70:4e:38:
                    ee:07:72:e1:35:94:ff:30:33:fc:eb:89:ab:7a:1e:
                    f6:9b:bc:21:49:4c:cd:7d:66:99:f8:22:f2:0e:05:
                    ca:1c:17:23:94:a4:22:ee:29:11:74:4a:00:d3:15:
                    07:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:64:25:F3:9E:B3:25:B3:A8:23:FB:D1:C0:45:E6:BD:58:C6:8B:2D
            X509v3 Authority Key Identifier:
                keyid:75:0F:A5:7B:59:15:65:39:CB:16:E5:4A:60:A6:CE:DB:5B:10:EB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:37:e7:11:ef:59:53:b2:15:11:23:2a:2c:a5:37:09:54:92:
         e3:e0:8f:d6:fb:30:5c:e8:37:68:08:c3:62:96:63:28:ef:20:
         a7:b8:36:f3:6a:3a:c1:4b:53:48:4e:8f:aa:5c:d6:39:8f:44:
         da:46:1e:2c:06:b9:ce:23:4d:5b:b5:f6:13:f9:6b:de:cd:43:
         dc:b6:89:0d:ab:82:40:e8:e6:f0:b5:c1:8a:b0:e1:d3:f8:87:
         6a:a1:a7:21:e9:0e:b1:4b:2b:22:c1:06:89:21:ef:50:78:f6:
         57:e9:6f:99:2b:98:c8:eb:e7:0c:4c:01:26:b1:32:bb:e8:11:
         3f:06:84:98:64:46:3d:02:23:d5:a0:d6:eb:a6:8e:1f:cd:69:
         33:f5:88:7a:b0:f0:91:8c:3b:9e:dc:0b:84:61:a6:f8:ec:87:
         ca:0c:7a:1d:f8:53:20:8e:d1:e3:0b:36:56:21:13:14:aa:d5:
         ed:ed:48:1b:7a:f7:27:56:f6:9b:03:c9:0f:85:05:80:65:dd:
         c3:9d:ba:d5:46:8d:eb:2a:c3:61:e3:01:13:ff:61:b1:57:77:
         3a:e8:38:41:39:d9:53:98:e9:17:b8:16:86:67:b7:a7:24:60:
         40:d9:49:58:e0:b1:cb:77:38:cc:ec:ca:6d:99:2d:87:3f:35:
         33:50:89:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:47:08 2026 by rpki-client