Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
File:                     dFPYgTvI73KQsRAjI1iJTHfE2zc.mft (raw, json)
Hash identifier:          uK+zcIfvYvsX1MMPgC5chBHm+qzv0WCYm6nGhM4gJbE=
Subject key identifier:   C2:76:7E:52:48:66:B7:90:E1:D2:2A:A3:C8:7E:A4:F9:B5:6F:4E:E7
Authority key identifier: 74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37
Certificate issuer:       /CN=A91BC64F/serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37
Certificate serial:       C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
Manifest number:          BD
Signing time:             Wed 19 Aug 2026 07:37:51 +0000
Manifest this update:     Wed 19 Aug 2026 07:37:50 +0000
Manifest next update:     Wed 26 Aug 2026 07:37:50 +0000
Files and hashes:         1: dFPYgTvI73KQsRAjI1iJTHfE2zc.crl (hash: rQLBvYdWS9Ul50/x3hpgyKs/EX/mI4k8BOdQb6nCs+Q=)
                          2: BAC878D0799511F098E98265C4F9AE02.roa (hash: JxVeh5Wcyk9ehIe8rUu++w1AOb/XCsqY0oC40z9B14A=)
                          3: BB3F5AAE799511F098E98265C4F9AE02.roa (hash: 7+6x+nkCOZ5eJCqABcReNt2hBYcHFj9EJZ35TbWhwnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl
                          rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 07:37:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC64F, serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37
        Validity
            Not Before: Aug 19 07:37:50 2026 GMT
            Not After : Aug 26 07:37:50 2026 GMT
        Subject: CN=6a855d4f-065e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ff:b1:3d:32:a9:9c:03:98:39:7c:82:f0:83:
                    af:71:80:82:52:bf:43:a4:ca:52:be:73:ca:50:63:
                    4d:80:70:ca:c7:27:38:be:5d:7e:ab:fb:84:3b:c8:
                    2c:af:74:4f:44:cf:2d:65:ab:af:e0:29:a4:e5:cd:
                    5f:88:2c:db:b5:c4:7c:78:55:82:5d:b0:3e:b9:97:
                    0c:e4:c5:1c:77:10:32:b5:ff:b0:14:bc:30:b6:72:
                    e7:f5:68:ff:ba:db:b9:ea:89:f9:5d:bd:aa:56:e7:
                    b0:6c:a7:1d:17:44:bb:ef:cd:d4:99:dd:dc:a6:c8:
                    a4:b6:ca:93:10:f6:61:38:29:6c:e0:53:5e:08:a2:
                    ed:53:83:d9:bd:20:ca:a7:a2:40:58:2f:51:e8:68:
                    8a:06:63:a0:4a:e6:67:d9:77:13:25:0c:88:b4:8d:
                    5a:17:1f:b6:bf:3b:26:1b:7c:7c:11:24:f1:85:54:
                    2b:1e:90:67:60:c2:f9:82:0d:05:f5:d3:52:31:d8:
                    06:28:d8:df:0b:ea:6d:89:9c:5a:36:fe:42:f2:1a:
                    22:8f:de:fe:ce:37:95:ba:22:28:11:9f:cb:a5:06:
                    fe:f0:4f:d9:25:cc:04:cd:eb:d6:f1:eb:e9:c5:bd:
                    f1:b3:72:0a:b0:82:ec:9a:06:b5:37:96:62:d0:5b:
                    3a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:76:7E:52:48:66:B7:90:E1:D2:2A:A3:C8:7E:A4:F9:B5:6F:4E:E7
            X509v3 Authority Key Identifier:
                keyid:74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:11:35:30:77:26:53:46:d2:6e:12:70:3b:77:3b:d5:ea:10:
         64:f0:33:fb:56:82:34:58:ce:72:0f:fe:df:5b:37:eb:56:37:
         28:59:9b:38:6c:76:f3:c6:33:1d:62:63:fa:39:53:cd:22:1a:
         66:a2:5a:3e:e6:3f:70:e5:e3:9b:ce:35:1d:5a:a9:df:56:92:
         0b:89:63:82:6f:b8:a8:d2:bd:ae:68:4d:46:73:60:7a:5f:bb:
         d1:f7:ad:b1:3c:21:c6:07:42:d9:26:ce:60:78:58:c8:be:74:
         60:96:9b:cd:be:a7:f5:55:93:4d:d3:20:41:f7:32:1b:42:b5:
         e0:8c:ce:82:fe:ea:d3:d0:c3:69:ef:d8:1d:c6:bc:8a:c9:2b:
         80:b0:5d:d4:f6:d0:d4:c5:89:c3:20:fb:e9:5d:49:a2:ef:2b:
         fb:d0:8e:9d:07:8c:d1:11:c9:87:f8:69:e1:bc:ef:dc:cc:40:
         a5:52:c2:6b:59:f7:bb:64:5f:94:7a:f0:95:d0:c2:98:5b:46:
         1a:98:9b:01:db:72:50:f4:25:82:d7:37:27:77:9d:9d:cf:d6:
         75:b8:4d:6f:51:44:d1:c6:b6:aa:e4:bb:5e:ef:f3:86:6a:02:
         fc:c5:db:20:91:3f:4a:c5:35:96:21:79:49:40:c5:c1:3b:de:
         ab:dc:7d:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkM2NEYxMTAvBgNVBAUTKDc0NTNEODgxM0JDOEVGNzI5MEIxMTAyMzIzNTg4OTRD
NzdDNERCMzcwHhcNMjYwODE5MDczNzUwWhcNMjYwODI2MDczNzUwWjAYMRYwFAYD
VQQDEw02YTg1NWQ0Zi0wNjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm/+xPTKpnAOYOXyC8IOvcYCCUr9DpMpSvnPKUGNNgHDKxyc4vl1+q/uEO8gs
r3RPRM8tZauv4Cmk5c1fiCzbtcR8eFWCXbA+uZcM5MUcdxAytf+wFLwwtnLn9Wj/
utu56on5Xb2qVuewbKcdF0S7783Umd3cpsiktsqTEPZhOCls4FNeCKLtU4PZvSDK
p6JAWC9R6GiKBmOgSuZn2XcTJQyItI1aFx+2vzsmG3x8ESTxhVQrHpBnYML5gg0F
9dNSMdgGKNjfC+ptiZxaNv5C8hoij97+zjeVuiIoEZ/LpQb+8E/ZJcwEzevW8evp
xb3xs3IKsILsmga1N5Zi0Fs6CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMJ2flJI
ZreQ4dIqo8h+pPm1b07nMB8GA1UdIwQYMBaAFHRT2IE7yO9ykLEQIyNYiUx3xNs3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzY0Ri8zNjBDQTE3QTc5
OTUxMUYwQkVDRjJENDBDNEY5QUUwMi9kRlBZZ1R2STczS1FzUkFqSTFpSlRIZkUy
emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RGUFlnVHZJNzNLUXNSQWpJMWlKVEhmRTJ6Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QzY0Ri8zNjBDQTE3QTc5OTUxMUYwQkVDRjJENDBDNEY5QUUwMi9kRlBZZ1R2STcz
S1FzUkFqSTFpSlRIZkUyemMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJBE1MHcmU0bSbhJwO3c71eoQZPAz+1aCNFjOcg/+31s361Y3KFmbOGx288Yz
HWJj+jlTzSIaZqJaPuY/cOXjm841HVqp31aSC4ljgm+4qNK9rmhNRnNgel+70fet
sTwhxgdC2SbOYHhYyL50YJabzb6n9VWTTdMgQfcyG0K14IzOgv7q09DDae/YHca8
iskrgLBd1PbQ1MWJwyD76V1Jou8r+9COnQeM0RHJh/hp4bzv3MxApVLCa1n3u2Rf
lHrwldDCmFtGGpibAdtyUPQlgtc3J3ednc/WdbhNb1FE0ca2quS7Xu/zhmoC/MXb
IJE/SsU1liF5SUDFwTveq9x94A==
-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:26 2026 by rpki-client