Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft
File:                     8psj6k4RTNycptN_Xvee9MNccoI.mft (raw, json)
Hash identifier:          0/V8VGzuB+vJWl5n20T6RRwdTQLXXTgi/Je5KW5QVSs=
Subject key identifier:   55:3A:3C:68:F2:85:6C:3A:15:84:24:16:9F:4F:61:E7:45:84:6E:C3
Authority key identifier: F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82
Certificate issuer:       /CN=A91C0372/serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282
Certificate serial:       0202
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft
Manifest number:          01FC
Signing time:             Sat 29 Aug 2026 03:16:36 +0000
Manifest this update:     Sat 29 Aug 2026 03:16:36 +0000
Manifest next update:     Sat 05 Sep 2026 03:16:36 +0000
Files and hashes:         1: 8psj6k4RTNycptN_Xvee9MNccoI.crl (hash: LTtNbqBqOc084HQ2ZO9qTxohJPow/j3pkvS7yXARIZ8=)
                          2: 4B42335C9D8711EEAF2A6E25C4F9AE02.roa (hash: PdTF8JZAzZqkYsv5aYjwZSB0/7MTqhPMOhGlyT03h9Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl
                          rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Sep 2026 03:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 514 (0x202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0372, serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282
        Validity
            Not Before: Aug 29 03:16:36 2026 GMT
            Not After : Sep  5 03:16:36 2026 GMT
        Subject: CN=6a924f14-1024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:54:8c:52:a7:b2:75:31:bf:5d:c9:5f:21:87:
                    d4:4a:93:d2:e3:c1:df:e5:6a:5a:9a:5e:fb:af:76:
                    f8:a7:06:5f:f5:31:48:36:34:03:ef:a8:49:7e:00:
                    86:c7:08:a7:10:ff:b8:15:7e:58:dd:6f:ff:92:db:
                    d6:63:a6:b4:f6:3d:e1:f3:24:5f:62:f8:47:52:4d:
                    de:b2:fd:0a:46:d9:ba:53:e1:71:96:ed:3e:b1:ec:
                    54:06:46:76:12:6a:41:79:a5:97:a2:21:2b:e4:b1:
                    4d:34:17:9d:35:9f:7e:89:10:15:95:bc:72:bc:d3:
                    4e:2a:82:6e:5e:24:2d:97:be:cb:bd:db:9c:a1:46:
                    f7:38:9f:dc:08:c7:45:5e:2b:45:f2:d3:43:78:61:
                    ca:44:76:e3:3f:d1:89:17:15:40:e1:06:96:4e:3e:
                    d5:9b:9f:6e:9e:60:d0:36:80:52:4e:21:7f:8b:12:
                    64:dd:f8:29:2c:3f:d9:25:5b:ce:b8:a5:ec:14:33:
                    42:86:24:cc:cd:aa:3f:0a:4c:1c:ed:dd:28:9b:33:
                    50:77:a6:33:1b:b2:24:72:45:d1:b1:c1:b9:0a:0b:
                    7b:cb:85:58:8b:a0:28:2f:6f:95:48:41:cd:4b:03:
                    91:01:60:5d:05:cc:58:d2:3e:f6:bc:64:ed:e2:17:
                    4d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3A:3C:68:F2:85:6C:3A:15:84:24:16:9F:4F:61:E7:45:84:6E:C3
            X509v3 Authority Key Identifier:
                keyid:F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:5b:41:68:e7:a8:7e:6d:be:34:a4:f8:ed:6b:a5:fd:ab:a5:
         77:5d:ae:07:ed:42:72:e1:b5:ae:9b:e1:16:e0:09:4e:b0:a8:
         a8:37:e1:64:cc:4a:6a:1a:ac:52:c8:6e:78:b6:6b:af:34:b4:
         7c:09:cf:93:bd:e1:85:a2:01:12:e7:e7:9d:9c:ab:8e:4a:52:
         07:6c:cc:d8:de:05:a6:83:d6:86:4e:b3:a6:33:1e:81:3f:1f:
         93:51:e1:65:e8:3f:2e:8b:17:0f:9d:75:7d:18:a7:55:e6:70:
         f4:38:8d:4e:f5:d3:b2:ec:47:82:d2:d8:ab:61:93:e8:1e:db:
         69:70:28:c8:b2:20:11:8f:07:73:04:6c:72:7e:7c:c0:cd:17:
         3c:88:e3:62:2e:03:60:e2:be:73:58:10:e3:e9:aa:bd:33:6c:
         80:fb:f3:fe:54:a9:89:01:aa:05:7d:73:f0:51:71:3f:7d:34:
         b5:6c:a9:85:1d:5e:f8:17:7a:6d:52:2c:e2:e4:32:7f:f3:55:
         6d:05:44:31:f5:64:f8:78:e9:c3:df:a4:11:88:27:c8:bb:6e:
         69:72:5a:f7:99:45:ae:36:ee:5d:93:be:02:7f:02:1d:d9:9b:
         1f:06:b8:98:3f:ef:91:94:24:62:78:87:10:59:4d:71:9f:4b:
         5b:ee:40:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 07:39:22 2026 by rpki-client