Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft
File:                     TH2sISA9rkFsH87q_FVlcgIiCKE.mft (raw, json)
Hash identifier:          lcFmU4XqSd4ifELEMaRRO+itCJNz3BLgewFQDEWYtDE=
Subject key identifier:   8B:AD:2F:6F:6C:69:3A:DD:55:E6:50:A3:58:23:03:AB:77:02:CC:19
Authority key identifier: 4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1
Certificate issuer:       /CN=A91C0CD5/serialNumber=4C7DAC21203DAE416C1FCEEAFC556572022208A1
Certificate serial:       0262
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft
Manifest number:          0256
Signing time:             Wed 19 Aug 2026 02:56:47 +0000
Manifest this update:     Wed 19 Aug 2026 02:56:46 +0000
Manifest next update:     Wed 26 Aug 2026 02:56:46 +0000
Files and hashes:         1: TH2sISA9rkFsH87q_FVlcgIiCKE.crl (hash: kos90jIFc8eXG1U0K079lpJCoxBisLbHXrSJYlW35/8=)
                          2: 6EB972341D6011EEB28A4323C4F9AE02.roa (hash: T4FmHotpF1HHb51u8RCZ4c2+jncHifjTPC5b1o41MQs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.crl
                          rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:56:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 610 (0x262)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0CD5, serialNumber=4C7DAC21203DAE416C1FCEEAFC556572022208A1
        Validity
            Not Before: Aug 19 02:56:46 2026 GMT
            Not After : Aug 26 02:56:46 2026 GMT
        Subject: CN=6a851b6f-e1c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3e:05:11:44:17:4c:b0:62:72:b0:1c:13:c8:
                    7f:3e:20:a7:fc:07:65:60:f4:3a:96:e5:a6:93:9a:
                    ad:e6:de:1d:bf:b4:e0:be:62:1a:87:cd:4b:7c:ff:
                    9d:b0:40:45:1a:0a:ab:1e:4e:33:6f:c0:c1:75:61:
                    7a:b8:29:79:4b:6b:37:12:a2:e4:c3:a4:a6:c5:df:
                    bc:05:c5:e2:2d:42:3f:73:91:09:3c:ad:5b:a1:da:
                    ba:b1:bb:66:d4:ef:a6:ad:c4:98:e7:ab:8e:9e:d0:
                    a7:1c:62:cf:a0:ea:1e:30:a7:fe:4d:e7:d8:97:3b:
                    68:f8:3d:6e:39:73:4e:2c:91:e6:e3:54:9a:de:3c:
                    1c:7b:55:fa:55:4c:81:e4:67:70:a9:05:07:32:90:
                    f6:fe:b4:75:5b:4e:9e:73:d5:1f:b9:da:b6:b8:aa:
                    c7:2f:90:22:ae:da:3c:0c:e9:f6:01:9d:10:f5:62:
                    41:85:a8:31:a4:91:ac:db:9a:9b:d2:1c:cd:5e:d1:
                    9a:51:5d:f3:42:5f:77:58:c2:42:74:b3:a4:3d:08:
                    b0:00:f9:d8:87:66:ac:05:9f:16:f8:71:3e:fe:38:
                    31:f8:94:43:76:5a:9e:80:8a:8c:90:92:3e:3b:bb:
                    6e:bc:fa:58:5b:5e:f0:c9:7f:c5:44:27:df:0c:80:
                    a3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AD:2F:6F:6C:69:3A:DD:55:E6:50:A3:58:23:03:AB:77:02:CC:19
            X509v3 Authority Key Identifier:
                keyid:4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:0a:d0:d3:27:22:5a:d1:a5:f0:18:7e:3c:8a:c3:ef:0f:b5:
         c1:e3:00:69:fd:c1:a6:17:92:a0:35:7c:dc:44:a4:9d:20:b1:
         28:dc:be:9b:9c:0b:05:26:2e:cc:fd:a8:78:96:5a:5f:9c:5a:
         aa:d6:89:d8:75:46:40:80:ce:8a:69:0f:ce:23:21:96:d4:b2:
         04:7d:f9:3f:6e:5f:24:9c:c5:52:5b:73:0d:c2:9c:66:d0:fd:
         2b:01:c0:19:89:bc:95:dc:64:9b:5e:4a:df:df:e7:01:68:d1:
         4b:c8:74:fa:9c:85:c9:3c:c2:ee:43:6b:f5:f1:f9:86:d5:29:
         2f:5e:84:79:3b:eb:55:9e:da:9d:70:37:ea:ad:20:79:d1:6b:
         71:b7:08:cb:ac:9f:7e:fc:54:37:87:bb:73:eb:d3:f7:7a:7e:
         68:61:ba:2e:19:d9:9d:0b:5c:80:62:27:e0:94:cb:fa:7b:16:
         5e:67:17:b9:c1:ee:7d:dd:fb:3d:02:8a:7f:a8:97:4b:32:9f:
         75:42:9f:d5:65:72:17:70:ff:1c:e0:ec:e5:b5:c4:27:d8:ee:
         a4:d9:0c:63:91:ed:22:21:08:12:e8:be:ca:60:f5:03:cd:ad:
         1a:96:8b:12:ce:53:8e:1d:2e:5d:f2:e6:3b:2d:15:35:4f:09:
         6f:39:5a:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBDRDUxMTAvBgNVBAUTKDRDN0RBQzIxMjAzREFFNDE2QzFGQ0VFQUZDNTU2NTcy
MDIyMjA4QTEwHhcNMjYwODE5MDI1NjQ2WhcNMjYwODI2MDI1NjQ2WjAYMRYwFAYD
VQQDEw02YTg1MWI2Zi1lMWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwT4FEUQXTLBicrAcE8h/PiCn/AdlYPQ6luWmk5qt5t4dv7TgvmIah81LfP+d
sEBFGgqrHk4zb8DBdWF6uCl5S2s3EqLkw6Smxd+8BcXiLUI/c5EJPK1bodq6sbtm
1O+mrcSY56uOntCnHGLPoOoeMKf+TefYlzto+D1uOXNOLJHm41Sa3jwce1X6VUyB
5GdwqQUHMpD2/rR1W06ec9Ufudq2uKrHL5Airto8DOn2AZ0Q9WJBhagxpJGs25qb
0hzNXtGaUV3zQl93WMJCdLOkPQiwAPnYh2asBZ8W+HE+/jgx+JRDdlqegIqMkJI+
O7tuvPpYW17wyX/FRCffDICj6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIutL29s
aTrdVeZQo1gjA6t3AswZMB8GA1UdIwQYMBaAFEx9rCEgPa5BbB/O6vxVZXICIgih
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMENENS9DRDJCNEI0NDFE
MEIxMUVFODcwNDhBNENDNEY5QUUwMi9USDJzSVNBOXJrRnNIODdxX0ZWbGNnSWlD
S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RIMnNJU0E5cmtGc0g4N3FfRlZsY2dJaUNLRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MENENS9DRDJCNEI0NDFEMEIxMUVFODcwNDhBNENDNEY5QUUwMi9USDJzSVNBOXJr
RnNIODdxX0ZWbGNnSWlDS0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANwrQ0yciWtGl8Bh+PIrD7w+1weMAaf3BpheSoDV83ESknSCxKNy+m5wLBSYu
zP2oeJZaX5xaqtaJ2HVGQIDOimkPziMhltSyBH35P25fJJzFUltzDcKcZtD9KwHA
GYm8ldxkm15K39/nAWjRS8h0+pyFyTzC7kNr9fH5htUpL16EeTvrVZ7anXA36q0g
edFrcbcIy6yffvxUN4e7c+vT93p+aGG6LhnZnQtcgGIn4JTL+nsWXmcXucHufd37
PQKKf6iXSzKfdUKf1WVyF3D/HODs5bXEJ9jupNkMY5HtIiEIEui+ymD1A82tGpaL
Es5Tjh0uXfLmOy0VNU8JbzlaIA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:43:48 2026 by rpki-client