Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft
File:                     8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft (raw, json)
Hash identifier:          b9feWED9A4u9spKzA7o3NUf2QytvO5TaYLyhCN7kRDk=
Subject key identifier:   78:B5:F2:33:AF:DE:DE:C3:D7:9E:D3:55:79:FC:31:F4:3A:D5:E0:56
Authority key identifier: F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8
Certificate issuer:       /CN=A91BF8D1/serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8
Certificate serial:       0B41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft
Manifest number:          0B37
Signing time:             Tue 18 Aug 2026 19:33:20 +0000
Manifest this update:     Tue 18 Aug 2026 19:33:19 +0000
Manifest next update:     Tue 25 Aug 2026 19:33:19 +0000
Files and hashes:         1: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl (hash: Kx85Cn56MoCKO3Lptl20LuN0Zhc49OKB0BuYwFNSWoQ=)
                          2: 19250B84675711EAA928E22DC4F9AE02.roa (hash: yAFGrO2x35rGErp9E92zZSEZN27Ua7PNYL2jUO6uhv0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl
                          rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2881 (0xb41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF8D1, serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8
        Validity
            Not Before: Aug 18 19:33:19 2026 GMT
            Not After : Aug 25 19:33:19 2026 GMT
        Subject: CN=6a84b380-29f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4b:57:10:5c:36:97:dd:c9:24:c9:06:2a:6a:
                    f1:ac:03:f0:1c:8f:ea:22:5b:57:b0:75:68:66:7a:
                    82:c4:ab:e4:67:f7:a2:10:5f:f1:43:15:c0:09:ee:
                    cc:b7:88:8b:9d:fb:ee:4d:4d:e5:f4:1c:05:43:d7:
                    29:1d:e2:b5:7d:4c:98:51:55:01:4e:6c:42:d0:b7:
                    ee:b2:ae:b0:44:0d:1a:c3:b5:18:4b:67:98:08:1a:
                    ea:8c:42:58:ef:11:6c:3e:98:20:4e:a0:ee:d4:f6:
                    6a:d7:87:88:7e:a7:ba:0f:4e:ea:2e:8e:83:84:49:
                    c1:ee:45:39:13:83:0e:9a:8d:64:de:d1:af:68:51:
                    2a:2e:08:5f:4d:ca:56:1b:fc:c8:c5:93:ec:a3:75:
                    22:22:69:8e:ba:58:c6:28:04:ca:09:42:a6:05:24:
                    9e:fe:22:a2:d7:27:86:c6:67:aa:e9:f3:6f:cd:d8:
                    df:2e:d5:46:30:90:54:32:ee:35:18:0b:5a:a8:09:
                    94:dd:60:ec:e9:23:82:3d:c0:94:f7:83:8b:85:b1:
                    1c:9f:cc:b8:94:53:ef:fb:e1:24:e0:ab:a6:73:13:
                    0e:40:96:39:ea:42:cd:d7:ea:0b:35:7d:ea:d4:15:
                    d5:bd:3a:d9:b6:27:67:85:e3:d6:d8:7a:f2:50:8d:
                    ef:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B5:F2:33:AF:DE:DE:C3:D7:9E:D3:55:79:FC:31:F4:3A:D5:E0:56
            X509v3 Authority Key Identifier:
                keyid:F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:e3:77:32:32:a4:d5:7a:1e:fd:11:aa:94:ad:63:a7:ba:1b:
         dc:a2:18:24:70:1d:76:54:40:02:0b:56:8e:e7:a0:59:84:3f:
         0d:de:ad:9c:72:ba:6f:54:0f:65:58:9f:ed:ae:8d:2a:f1:30:
         91:98:83:8f:4e:e8:d1:81:b3:41:47:10:93:a2:43:e4:6a:6f:
         be:32:54:56:2e:8b:fe:c7:d6:0e:3a:b2:bc:a0:85:c5:d3:c4:
         b7:d2:33:9c:d8:1d:24:53:28:d5:86:f5:1d:0a:e0:6f:19:fe:
         85:2d:df:34:3b:ed:7e:90:0e:0e:50:aa:df:d2:e0:e2:9f:cb:
         a1:16:67:3e:64:cc:fa:f3:73:3c:ac:fd:d1:4b:45:e1:58:bf:
         96:12:cf:04:c4:df:42:31:c4:73:9d:9e:e8:58:ab:90:91:76:
         7c:8b:69:51:8c:a3:f5:bd:ed:76:cd:d6:bc:a6:b9:43:1c:3d:
         4e:a6:3e:3b:c1:21:93:0e:ba:70:d2:55:21:4a:e9:45:52:ee:
         2e:c3:a2:58:a0:7f:21:7f:7d:ae:80:ad:9d:2b:99:eb:c9:a5:
         30:8b:dc:89:80:67:0c:a5:81:26:ae:ad:96:d3:71:b9:77:b5:
         ae:a7:a1:6f:43:f2:c2:23:05:1f:8a:50:88:a7:32:75:eb:6f:
         50:4f:69:18
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkY4RDExMTAvBgNVBAUTKEYwNDY2NTkzQzJCNkNFQTlDQkYwMkUyNkFBRTZCRjc5
MEY1MjdFQTgwHhcNMjYwODE4MTkzMzE5WhcNMjYwODI1MTkzMzE5WjAYMRYwFAYD
VQQDEw02YTg0YjM4MC0yOWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2UtXEFw2l93JJMkGKmrxrAPwHI/qIltXsHVoZnqCxKvkZ/eiEF/xQxXACe7M
t4iLnfvuTU3l9BwFQ9cpHeK1fUyYUVUBTmxC0Lfusq6wRA0aw7UYS2eYCBrqjEJY
7xFsPpggTqDu1PZq14eIfqe6D07qLo6DhEnB7kU5E4MOmo1k3tGvaFEqLghfTcpW
G/zIxZPso3UiImmOuljGKATKCUKmBSSe/iKi1yeGxmeq6fNvzdjfLtVGMJBUMu41
GAtaqAmU3WDs6SOCPcCU94OLhbEcn8y4lFPv++Ek4KumcxMOQJY56kLN1+oLNX3q
1BXVvTrZtidnhePW2HryUI3vmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHi18jOv
3t7D157TVXn8MfQ61eBWMB8GA1UdIwQYMBaAFPBGZZPCts6py/AuJqrmv3kPUn6o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhEMS83QzRFMzRCQzY3
NTUxMUVBQTA4NzMwMkJDNEY5QUUwMi84RVpsazhLMnpxbkw4QzRtcXVhX2VROVNm
cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhFWmxrOEsyenFuTDhDNG1xdWFfZVE5U2ZxZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjhEMS83QzRFMzRCQzY3NTUxMUVBQTA4NzMwMkJDNEY5QUUwMi84RVpsazhLMnpx
bkw4QzRtcXVhX2VROVNmcWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPuN3MjKk1Xoe/RGqlK1jp7ob3KIYJHAddlRAAgtWjuegWYQ/Dd6tnHK6b1QP
ZVif7a6NKvEwkZiDj07o0YGzQUcQk6JD5GpvvjJUVi6L/sfWDjqyvKCFxdPEt9Iz
nNgdJFMo1Yb1HQrgbxn+hS3fNDvtfpAODlCq39Lg4p/LoRZnPmTM+vNzPKz90UtF
4Vi/lhLPBMTfQjHEc52e6FirkJF2fItpUYyj9b3tds3WvKa5Qxw9TqY+O8Ehkw66
cNJVIUrpRVLuLsOiWKB/IX99roCtnSuZ68mlMIvciYBnDKWBJq6tltNxuXe1rqeh
b0PywiMFH4pQiKcydetvUE9pGA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 15:17:05 2026 by rpki-client