Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft
File:                     zIQ-FAouPvvguUneDtgDg5BgVB0.mft (raw, json)
Hash identifier:          JLmxdjW3q933sMqeqYBrHCM6OOIlf3EAK19O6wju/Qo=
Subject key identifier:   E2:A9:FD:E7:82:A8:6B:93:CC:0A:EE:BC:C6:E6:61:B5:08:91:24:4A
Authority key identifier: CC:84:3E:14:0A:2E:3E:FB:E0:B9:49:DE:0E:D8:03:83:90:60:54:1D
Certificate issuer:       /CN=A91C1A37/serialNumber=CC843E140A2E3EFBE0B949DE0ED803839060541D
Certificate serial:       3197
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft
Manifest number:          317C
Signing time:             Tue 18 Aug 2026 15:29:04 +0000
Manifest this update:     Tue 18 Aug 2026 15:29:03 +0000
Manifest next update:     Tue 25 Aug 2026 15:29:03 +0000
Files and hashes:         1: zIQ-FAouPvvguUneDtgDg5BgVB0.crl (hash: hEIBgHT2xGZoxvHKA/w06rUF90RUshqoRKM/qRuUS+s=)
                          2: C3F53A0654F011E7BE4A6431C4F9AE02.roa (hash: QVg7IcJ6NSx06X4qAnqppvTi4+Hmlx/WcbnAXz16lOU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.crl
                          rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 15:29:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12695 (0x3197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1A37, serialNumber=CC843E140A2E3EFBE0B949DE0ED803839060541D
        Validity
            Not Before: Aug 18 15:29:03 2026 GMT
            Not After : Aug 25 15:29:03 2026 GMT
        Subject: CN=6a847a40-befb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ac:be:4f:d4:e3:eb:5f:d8:b2:77:c9:a1:7f:
                    2a:e3:ae:d3:ba:07:10:a2:0b:8a:c3:49:82:42:df:
                    f6:e0:23:16:09:e6:08:b7:0f:36:2d:2d:2c:11:4f:
                    0c:7c:bc:d4:a0:47:c2:82:a6:1b:9b:f8:74:6c:02:
                    64:ff:8b:05:d0:85:27:ff:41:68:86:98:39:60:a8:
                    93:0d:6f:79:06:fc:f5:9c:2e:27:9e:7d:75:62:9e:
                    aa:bf:98:16:fb:e9:b2:4a:b1:06:e5:74:73:4e:5d:
                    ef:57:37:58:40:70:0e:10:15:17:6a:66:cf:bf:3e:
                    52:76:98:ee:e9:5b:94:4c:06:24:3e:4c:a3:15:90:
                    5a:0b:85:3a:c1:0c:a3:18:3c:72:6c:2b:ca:2f:f2:
                    72:56:d6:ac:20:0d:8d:67:b8:e7:a8:5c:8a:2b:70:
                    c9:e2:e5:aa:62:a6:d5:d0:e7:90:c9:ac:75:e2:ea:
                    00:c4:8a:25:62:37:8c:d1:10:92:75:84:1b:d4:ad:
                    2f:2e:26:40:fd:36:bb:57:bd:61:94:48:12:5a:d4:
                    f7:4e:bd:ad:36:d0:2c:2c:8d:50:44:e9:d6:19:99:
                    05:1d:78:65:54:cb:51:01:f1:03:f4:cc:7b:e0:ed:
                    d4:4c:8e:57:c4:c7:95:cc:b9:aa:06:f3:cf:7d:f4:
                    61:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A9:FD:E7:82:A8:6B:93:CC:0A:EE:BC:C6:E6:61:B5:08:91:24:4A
            X509v3 Authority Key Identifier:
                keyid:CC:84:3E:14:0A:2E:3E:FB:E0:B9:49:DE:0E:D8:03:83:90:60:54:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:5d:e3:ba:03:53:db:44:8f:1b:ed:48:77:89:e8:99:19:aa:
         62:a5:d7:aa:5a:20:8c:a7:db:1b:36:97:23:ca:08:22:27:de:
         7b:2c:98:07:fb:96:02:57:bd:e2:3a:d7:47:d0:2a:df:40:23:
         1b:39:b9:c1:bb:0a:98:c1:ed:0f:19:f8:68:8e:10:45:69:f0:
         c4:da:ec:27:9c:95:47:bb:ee:c0:b8:dd:cb:9b:a8:c8:b7:71:
         6f:3d:c9:b5:05:70:96:b7:27:84:e8:f8:e2:14:b9:ba:fb:12:
         e7:a8:f5:11:67:fb:73:1c:51:e8:20:4e:14:d3:86:f4:23:eb:
         06:4e:1b:d6:57:cd:24:af:cb:1f:f8:a7:be:72:f3:b6:f9:71:
         d7:db:05:2d:a8:c1:32:10:eb:da:68:6d:9b:cb:c9:52:af:36:
         84:94:18:39:c1:88:aa:76:e5:ab:33:e9:59:f5:39:44:f8:10:
         2b:c3:14:3e:a0:c5:2c:74:8a:49:d1:a2:71:ab:23:8e:c8:56:
         f6:82:88:fa:26:ff:e7:e9:1f:4a:92:2f:e1:98:00:47:98:9a:
         fb:fe:7e:15:d0:a5:a5:2f:3c:97:10:28:a4:5a:fe:50:55:e7:
         bf:50:cf:c0:1e:c5:66:e5:7e:9c:93:dc:a0:23:7b:9c:a9:0d:
         33:e6:75:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 05:46:00 2026 by rpki-client