Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft
File:                     9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft (raw, json)
Hash identifier:          TvYk8VoRCq9FA81yZnuvDKT8MmK8ZLpu4i4bRYgwDuk=
Subject key identifier:   26:21:67:EC:D7:86:7B:2D:7E:6B:D1:DD:62:03:0F:E9:65:12:D9:A3
Authority key identifier: F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4
Certificate issuer:       /CN=A91BDD82/serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4
Certificate serial:       0238
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft
Manifest number:          11A7
Signing time:             Tue 18 Aug 2026 17:44:20 +0000
Manifest this update:     Tue 18 Aug 2026 17:44:20 +0000
Manifest next update:     Tue 25 Aug 2026 17:44:20 +0000
Files and hashes:         1: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl (hash: l/kD5HFFb4TBhQ/u7fuO8suRaTv28kLJ2MasOStnL/k=)
                          2: 324967826D8D11EE9883B985C4F9AE02.roa (hash: FdVP/EbnoWbW+SwswO9IBvz4Tx/t0gGhpNr1OdlhBmA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 17:44:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 568 (0x238)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDD82, serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4
        Validity
            Not Before: Aug 18 17:44:20 2026 GMT
            Not After : Aug 25 17:44:20 2026 GMT
        Subject: CN=6a8499f4-9681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:60:8d:4f:b8:d7:af:a6:b2:80:2c:40:4d:3d:
                    8e:14:5e:bc:ad:18:da:5c:07:0a:8f:1a:b0:26:b9:
                    1e:f9:8a:17:2c:1b:9c:1b:b1:00:5e:e8:54:f9:4a:
                    9f:c6:4f:d0:a7:5a:2e:36:f0:19:84:53:e1:05:f0:
                    48:3e:22:20:7b:a3:af:20:2f:1a:9d:ed:39:f4:88:
                    a4:e0:df:bc:79:51:03:54:25:91:f9:9b:6e:c2:fd:
                    ba:1a:e0:1f:f1:a4:7e:1b:d9:a3:d4:ef:cf:e2:5a:
                    fb:9d:31:34:c9:ee:40:65:1e:63:d2:c5:b6:8f:8b:
                    a3:6e:74:56:d7:b3:80:b6:84:1e:21:f8:47:9a:ed:
                    ef:ef:95:c2:93:67:f3:c9:d0:d9:2d:c2:b3:20:b0:
                    7d:c8:ce:95:89:78:f4:31:07:bb:dc:e8:9b:c0:0e:
                    1e:7b:14:62:4e:f6:90:b4:5b:72:5a:6a:4b:89:91:
                    41:d0:6b:ba:a3:17:14:01:6f:b0:19:c7:20:2b:32:
                    5c:46:d4:00:ed:a0:a4:1d:48:33:8f:da:24:7c:02:
                    22:81:5b:9e:cd:40:a7:0e:b3:81:d1:40:de:c5:d0:
                    24:41:6e:c3:46:71:2f:ee:77:c3:fe:50:cd:3f:69:
                    ca:1e:e8:c6:db:83:26:41:a2:9f:06:58:75:d9:9f:
                    0f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:21:67:EC:D7:86:7B:2D:7E:6B:D1:DD:62:03:0F:E9:65:12:D9:A3
            X509v3 Authority Key Identifier:
                keyid:F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:70:38:1d:59:69:10:82:02:1a:26:37:76:17:7b:57:73:6a:
         4a:7e:30:a3:9e:1d:29:11:74:f9:07:55:61:30:07:94:ac:a7:
         3d:35:8b:46:05:64:0c:92:84:c5:bf:aa:a1:b2:4b:a6:75:59:
         b6:e2:23:6a:32:b9:c8:86:f3:26:09:c2:f8:9f:c8:ab:84:6b:
         fe:4f:7e:40:ff:a4:b1:a0:32:77:7d:c9:da:c0:00:a9:dc:9b:
         fe:03:81:fe:61:5b:5d:0f:a9:6c:7c:3e:b4:8b:3c:45:0e:5a:
         e6:7b:08:93:4c:59:b9:7f:22:6a:13:54:1e:e7:79:15:eb:e9:
         5d:a8:de:2b:31:20:2f:39:f9:2f:13:8b:cc:b6:53:8c:49:c5:
         88:01:4e:5f:bb:e3:5a:c9:0f:c3:b4:a8:d9:0f:cf:da:37:9d:
         fa:49:4e:51:9e:4e:a7:d2:cb:56:1c:37:16:3c:b6:ba:33:b9:
         b0:22:c3:73:1c:d5:c2:c0:45:40:c7:bb:9d:a6:9f:3a:f1:2b:
         51:67:44:06:0d:1f:bb:56:48:58:82:68:6d:45:e7:95:68:56:
         b4:a7:ed:67:91:22:77:dc:bc:8c:41:76:d4:0f:a5:5f:5e:a1:
         4a:fd:d1:32:b6:f8:5a:f9:2a:76:61:f2:e5:9c:96:c6:85:cf:
         dc:1b:3e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:17:36 2026 by rpki-client