Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
File:                     imIbx3o91BcMuRA_-HiLyQkAgtE.mft (raw, json)
Hash identifier:          JOnmd8AmrEeP8NJGu9CFAQ9cPGVNVRjLHXaiSBQJZRg=
Subject key identifier:   FC:77:A3:BF:94:2E:6C:F9:7A:CA:38:98:52:C1:6C:EF:F1:08:6D:DA
Authority key identifier: 8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1
Certificate issuer:       /CN=A91C24C5/serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1
Certificate serial:       020C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
Manifest number:          0206
Signing time:             Wed 19 Aug 2026 03:39:38 +0000
Manifest this update:     Wed 19 Aug 2026 03:39:37 +0000
Manifest next update:     Wed 26 Aug 2026 03:39:37 +0000
Files and hashes:         1: imIbx3o91BcMuRA_-HiLyQkAgtE.crl (hash: Sb6RyvQukaOuSRbLJ5WXkbveYPhrByZ31wIMdxRgFng=)
                          2: 872F5E22835A11EE9FFEC146C4F9AE02.roa (hash: c/jawI9sVhPShnKjCf1i13c+sicTCdQqYFc31eax07o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl
                          rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C24C5, serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1
        Validity
            Not Before: Aug 19 03:39:37 2026 GMT
            Not After : Aug 26 03:39:37 2026 GMT
        Subject: CN=6a85257a-b379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5b:e7:42:40:e7:f0:ef:2d:e1:34:40:5f:e8:
                    95:5a:5b:e1:9f:52:a4:01:78:11:6e:06:f8:d4:5c:
                    1c:5c:25:ed:81:93:15:b1:43:19:40:2f:5b:2d:4c:
                    3a:c3:99:fd:ab:44:9f:87:6d:df:f1:b9:40:d5:67:
                    e0:4e:87:8e:76:22:8b:65:59:e2:03:49:7a:b2:e3:
                    ad:43:10:de:aa:f4:a0:27:96:63:e8:5d:c0:d5:af:
                    cf:69:52:22:a5:74:5d:89:35:1a:0f:fb:6c:7c:02:
                    49:e4:9e:81:5e:1f:41:59:5f:9c:89:81:21:72:fa:
                    75:10:d7:fe:14:29:50:e9:bb:58:20:65:c0:08:61:
                    1c:6f:f7:bf:9e:09:a4:d8:4c:72:40:99:b3:27:93:
                    9a:8f:6c:6d:4b:79:4e:4a:6c:b6:78:1b:09:5d:c1:
                    ad:89:28:d7:c3:37:39:73:15:23:e2:65:2f:3c:cb:
                    04:9d:8a:48:06:93:24:d9:36:64:28:fa:1a:ae:05:
                    65:da:8f:11:cb:4f:76:1c:6f:1e:e7:3f:89:4a:99:
                    f8:72:87:5a:e8:3b:09:5d:8e:22:b8:77:74:36:9a:
                    e1:81:e0:ff:0f:dd:c4:09:f8:da:1f:fb:cb:84:bf:
                    05:0c:98:7a:b2:56:c2:21:d4:b6:62:bb:be:38:7d:
                    dd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:77:A3:BF:94:2E:6C:F9:7A:CA:38:98:52:C1:6C:EF:F1:08:6D:DA
            X509v3 Authority Key Identifier:
                keyid:8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:6e:92:da:f0:d2:25:9e:20:3c:59:0a:06:da:39:8e:7e:c9:
         f5:f0:82:10:60:1a:59:94:12:04:ef:58:5a:21:ff:21:b4:99:
         e9:1b:f3:33:dd:1b:78:a4:61:3a:25:ba:f1:6e:b2:e7:a3:c2:
         6f:5b:b1:8f:8d:1a:83:3a:be:de:f1:52:4e:6a:c9:36:79:c5:
         58:17:3c:2a:bd:53:0f:56:36:b0:bb:79:c1:5f:59:04:44:a0:
         54:52:bc:f6:c3:3f:cb:f3:a6:de:94:6c:e1:a3:da:eb:40:09:
         2b:d2:43:61:56:1d:0e:ec:11:23:10:45:b1:0c:56:4f:16:63:
         d7:6a:80:07:54:08:00:c5:46:20:1e:85:73:9c:d5:b1:bb:e9:
         19:d0:e9:f9:95:ed:5f:8e:fc:d6:69:b6:7e:c3:2a:7b:4e:bf:
         0f:f1:c9:1b:d7:a8:a5:c8:96:56:f5:ce:03:a6:1e:cd:f3:81:
         70:99:ee:4d:75:f3:10:68:2a:40:5a:79:d8:1c:10:9c:38:3c:
         4e:12:cd:6b:33:9b:d4:9a:1b:0c:47:7b:6d:13:83:d6:e8:53:
         15:92:9d:6a:e9:c2:ca:9c:18:21:35:63:9e:1c:7b:26:5a:47:
         1d:2b:7b:53:20:f8:8f:0e:a2:cc:e6:73:22:aa:df:f6:46:f0:
         4b:71:52:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzI0QzUxMTAvBgNVBAUTKDhBNjIxQkM3N0EzREQ0MTcwQ0I5MTAzRkY4Nzg4QkM5
MDkwMDgyRDEwHhcNMjYwODE5MDMzOTM3WhcNMjYwODI2MDMzOTM3WjAYMRYwFAYD
VQQDEw02YTg1MjU3YS1iMzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1VvnQkDn8O8t4TRAX+iVWlvhn1KkAXgRbgb41FwcXCXtgZMVsUMZQC9bLUw6
w5n9q0Sfh23f8blA1WfgToeOdiKLZVniA0l6suOtQxDeqvSgJ5Zj6F3A1a/PaVIi
pXRdiTUaD/tsfAJJ5J6BXh9BWV+ciYEhcvp1ENf+FClQ6btYIGXACGEcb/e/ngmk
2ExyQJmzJ5Oaj2xtS3lOSmy2eBsJXcGtiSjXwzc5cxUj4mUvPMsEnYpIBpMk2TZk
KPoargVl2o8Ry092HG8e5z+JSpn4coda6DsJXY4iuHd0NprhgeD/D93ECfjaH/vL
hL8FDJh6slbCIdS2Yru+OH3dVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPx3o7+U
Lmz5eso4mFLBbO/xCG3aMB8GA1UdIwQYMBaAFIpiG8d6PdQXDLkQP/h4i8kJAILR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjRDNS9EMUUyRDk2ODgz
NTkxMUVFQjI1Q0YxNDRDNEY5QUUwMi9pbUlieDNvOTFCY011UkFfLUhpTHlRa0Fn
dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ltSWJ4M285MUJjTXVSQV8tSGlMeVFrQWd0RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MjRDNS9EMUUyRDk2ODgzNTkxMUVFQjI1Q0YxNDRDNEY5QUUwMi9pbUlieDNvOTFC
Y011UkFfLUhpTHlRa0FndEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACW6S2vDSJZ4gPFkKBto5jn7J9fCCEGAaWZQSBO9YWiH/IbSZ6RvzM90beKRh
OiW68W6y56PCb1uxj40agzq+3vFSTmrJNnnFWBc8Kr1TD1Y2sLt5wV9ZBESgVFK8
9sM/y/Om3pRs4aPa60AJK9JDYVYdDuwRIxBFsQxWTxZj12qAB1QIAMVGIB6Fc5zV
sbvpGdDp+ZXtX4781mm2fsMqe06/D/HJG9eopciWVvXOA6YezfOBcJnuTXXzEGgq
QFp52BwQnDg8ThLNazOb1JobDEd7bROD1uhTFZKdaunCypwYITVjnhx7JlpHHSt7
UyD4jw6izOZzIqrf9kbwS3FSKg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:52:55 2026 by rpki-client