Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.mft
File:                     G9yKnBE9vfM_vPHBQblLu31wEno.mft (raw, json)
Hash identifier:          tym5xxF70+vn2OAizdA044v9L6SCN7jSmi6z0FsYjN4=
Subject key identifier:   2E:FC:BA:F6:D3:5B:D4:C0:DB:C4:2B:A9:E4:35:EA:1A:7A:64:BE:38
Authority key identifier: 1B:DC:8A:9C:11:3D:BD:F3:3F:BC:F1:C1:41:B9:4B:BB:7D:70:12:7A
Certificate issuer:       /CN=A91C02B3/serialNumber=1BDC8A9C113DBDF33FBCF1C141B94BBB7D70127A
Certificate serial:       06BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9yKnBE9vfM_vPHBQblLu31wEno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.mft
Manifest number:          06B3
Signing time:             Tue 18 Aug 2026 22:44:58 +0000
Manifest this update:     Tue 18 Aug 2026 22:44:58 +0000
Manifest next update:     Tue 25 Aug 2026 22:44:58 +0000
Files and hashes:         1: G9yKnBE9vfM_vPHBQblLu31wEno.crl (hash: 8imF8v5wU1Bhs1/klnotJPqciIE3Uv2gMEJUSHpeE8M=)
                          2: 7F17B380BED411EBA325CC76C4F9AE02.roa (hash: 9JUpK8Q9kWs1/RuBMledq+AFaWoY8q6Hgv+cHGXLEzo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.crl
                          rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9yKnBE9vfM_vPHBQblLu31wEno.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 22:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1723 (0x6bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C02B3, serialNumber=1BDC8A9C113DBDF33FBCF1C141B94BBB7D70127A
        Validity
            Not Before: Aug 18 22:44:58 2026 GMT
            Not After : Aug 25 22:44:58 2026 GMT
        Subject: CN=6a84e06a-76f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e7:2b:8f:4c:73:26:7b:17:1f:a2:94:fc:91:
                    58:c1:41:30:64:19:61:04:3f:9c:21:28:99:6d:5b:
                    c6:68:55:eb:0d:eb:25:71:b0:40:90:1a:a8:4c:50:
                    b4:0d:a0:27:c5:40:29:01:4c:80:3a:94:4c:97:c5:
                    d9:82:70:80:be:0c:86:84:cc:3b:d7:0a:b5:55:bc:
                    13:9f:00:73:0d:16:96:6c:7c:20:13:fa:22:79:18:
                    59:21:a3:3a:19:36:45:4f:e1:9f:36:7a:d2:b2:9f:
                    1d:a9:2a:f1:a7:12:05:df:6b:ab:70:a0:2c:c1:4e:
                    41:06:5c:06:11:00:25:64:9a:04:94:74:50:91:f4:
                    86:c3:db:fb:4a:f8:28:41:3b:fb:37:14:23:d0:0d:
                    0a:31:d3:d4:0a:a7:9d:3e:82:48:cc:a0:0c:c6:f7:
                    ae:b3:79:18:5e:10:b2:24:db:55:02:7d:4b:65:be:
                    c6:84:4f:6e:fe:ea:ae:c6:a6:d4:0c:f8:e9:66:67:
                    5b:24:68:e3:ec:d3:4d:c6:17:21:b5:40:f1:05:d7:
                    25:9c:3a:8a:63:b9:69:29:00:8f:fe:24:0d:f9:8a:
                    92:3e:f4:4b:da:5f:71:08:9c:68:42:02:a3:aa:c9:
                    38:68:11:70:f9:40:c0:11:f8:2f:bb:7e:bc:f6:ff:
                    6d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:FC:BA:F6:D3:5B:D4:C0:DB:C4:2B:A9:E4:35:EA:1A:7A:64:BE:38
            X509v3 Authority Key Identifier:
                keyid:1B:DC:8A:9C:11:3D:BD:F3:3F:BC:F1:C1:41:B9:4B:BB:7D:70:12:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9yKnBE9vfM_vPHBQblLu31wEno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:d5:56:6a:e4:79:6a:27:ee:6f:13:75:7d:f0:42:6d:b9:6f:
         2c:d5:bf:e5:4e:f8:c5:a6:a5:c4:9a:ee:6d:fa:ff:09:c1:35:
         84:16:6c:a4:ab:64:48:35:2c:db:a2:91:60:ba:11:85:de:d6:
         76:f9:63:91:4c:25:5a:4c:a6:b9:e1:30:ec:75:85:1c:ec:cd:
         14:c0:b9:84:5a:a8:24:13:3f:fd:94:7b:17:64:c8:5b:b5:40:
         a4:24:3e:96:ce:10:7e:16:69:4b:ba:cf:9f:4c:d7:3e:21:19:
         e0:99:a5:55:4d:71:41:1e:9a:d0:03:57:79:42:0d:9c:ce:df:
         a3:48:51:92:7b:90:8e:e0:ef:78:61:85:3f:62:26:3b:14:cc:
         1f:49:60:ad:09:54:74:56:bd:ed:12:ce:c3:d1:d6:d3:05:54:
         75:ef:e5:2a:c3:32:a5:54:c2:85:0d:c9:76:7e:8d:20:4c:75:
         d4:b1:ab:9d:f5:b8:9a:45:9b:27:c9:43:4e:13:66:b8:df:9a:
         70:8b:b3:aa:b5:9e:46:41:c5:d2:be:58:48:1c:96:37:c2:0f:
         09:8d:e3:14:2a:03:6e:04:b3:1e:dd:f4:91:3b:2f:52:fa:e5:
         49:c9:a0:73:9b:6f:28:bd:bf:4e:a5:d4:13:61:04:7e:a4:e1:
         c7:cb:e5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:43:51 2026 by rpki-client