Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft
File:                     5CK_AmFA0gPv1r_eruJoqosEZtU.mft (raw, json)
Hash identifier:          CTNlEZ2dbfYc7+KJiGNdPqKLfMKezBH9TzwmDxqDy9k=
Subject key identifier:   79:E0:81:4C:AE:73:F3:BC:BD:47:ED:26:CA:E7:F0:30:91:E2:53:25
Authority key identifier: E4:22:BF:02:61:40:D2:03:EF:D6:BF:DE:AE:E2:68:AA:8B:04:66:D5
Certificate issuer:       /CN=A91C3174/serialNumber=E422BF026140D203EFD6BFDEAEE268AA8B0466D5
Certificate serial:       03B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft
Manifest number:          03AF
Signing time:             Wed 19 Aug 2026 01:00:18 +0000
Manifest this update:     Wed 19 Aug 2026 01:00:18 +0000
Manifest next update:     Wed 26 Aug 2026 01:00:18 +0000
Files and hashes:         1: 5CK_AmFA0gPv1r_eruJoqosEZtU.crl (hash: AOSLS4shsG6uFKbnkcDC3I+XuF66BbSwv5t8vCmNo3w=)
                          2: 9A4B6146EED111EC9BDD4C49C4F9AE02.roa (hash: yIITaHKhLktq8hIVDB/hFkrrSu/yxWdnPRfSTHr4wTQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.crl
                          rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 951 (0x3b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3174, serialNumber=E422BF026140D203EFD6BFDEAEE268AA8B0466D5
        Validity
            Not Before: Aug 19 01:00:18 2026 GMT
            Not After : Aug 26 01:00:18 2026 GMT
        Subject: CN=6a850022-9e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:66:ab:3f:15:27:a3:11:f8:0b:07:27:a8:c0:
                    05:c6:67:69:cc:38:d0:24:f6:d2:8f:bf:6d:9c:3a:
                    95:be:a3:88:1e:96:eb:90:35:03:7c:dd:71:14:19:
                    d7:d0:a8:fc:b1:7a:cc:bd:74:d8:46:2c:f6:cf:73:
                    0f:3c:7c:76:a4:c7:ab:09:60:92:a8:8b:fc:f1:86:
                    91:32:27:08:2e:88:cc:04:5e:24:1b:80:2e:39:7e:
                    8f:52:92:d5:28:0e:3c:6c:c0:3f:d8:89:cc:cf:5c:
                    83:9b:15:63:98:8b:4a:be:b3:5e:23:2a:e9:4f:82:
                    6f:9c:31:6c:2d:93:e8:c9:d4:67:1e:84:d9:15:0c:
                    37:23:cb:ad:d8:0c:c9:c3:99:09:5b:8c:45:2f:37:
                    fb:2c:2d:f8:d1:3d:29:8d:88:0a:2c:cb:f3:54:9d:
                    91:d3:d9:43:1e:ef:1a:0e:2f:92:b2:ab:3a:c0:e2:
                    92:65:b6:93:8f:d1:76:9a:5b:c3:20:e6:b3:e6:e3:
                    c8:aa:2c:83:59:da:64:76:7a:eb:6b:60:cd:00:8b:
                    6b:34:b2:f7:44:7d:f3:6b:7e:b5:02:af:88:34:b9:
                    ba:a0:07:f6:7b:c7:0b:f1:99:0f:59:4a:99:89:19:
                    86:ed:fa:2f:8f:98:60:cc:cc:3b:a7:69:c6:f4:2e:
                    fa:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E0:81:4C:AE:73:F3:BC:BD:47:ED:26:CA:E7:F0:30:91:E2:53:25
            X509v3 Authority Key Identifier:
                keyid:E4:22:BF:02:61:40:D2:03:EF:D6:BF:DE:AE:E2:68:AA:8B:04:66:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:56:70:d8:9e:40:35:0a:b3:93:7a:f6:9c:5d:13:b9:d0:81:
         0a:83:66:24:e6:27:4b:21:c7:b2:80:bf:b4:e3:77:b2:03:db:
         ec:eb:0e:ed:37:e0:b3:a9:78:49:a8:b8:b8:c0:23:7d:a8:d6:
         d3:b2:31:34:26:0a:f3:95:d4:c8:a2:d6:8a:ff:1e:3d:41:a1:
         ef:f3:8d:1f:a8:0f:24:da:bb:08:62:47:e5:3e:c9:d5:95:65:
         e5:95:eb:3f:c9:a6:88:eb:de:db:d0:3f:40:d1:40:b1:19:9d:
         37:36:9d:a7:b1:9d:e3:06:ae:d0:84:8c:6a:2b:fe:21:8f:49:
         b8:4e:91:26:b8:3d:21:17:d0:77:2f:a8:c6:92:3f:08:54:43:
         01:ec:d6:b4:0c:ff:2c:5c:31:df:3c:5d:da:5e:6c:17:54:41:
         84:96:17:69:4b:fc:aa:85:17:10:58:41:66:a4:42:b6:fc:42:
         cd:c9:39:10:fb:df:27:6a:4e:b8:d0:cf:06:ac:5c:d7:f0:9c:
         6d:06:da:94:d8:5b:6c:bf:5a:d8:de:9d:79:98:88:57:77:5e:
         b7:69:01:86:b2:a6:8d:c9:02:d8:1f:c2:23:0d:cd:00:06:e9:
         94:83:04:67:c9:94:96:ed:af:4d:b0:9b:92:a4:52:ac:58:92:
         8c:70:0d:e8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzMxNzQxMTAvBgNVBAUTKEU0MjJCRjAyNjE0MEQyMDNFRkQ2QkZERUFFRTI2OEFB
OEIwNDY2RDUwHhcNMjYwODE5MDEwMDE4WhcNMjYwODI2MDEwMDE4WjAYMRYwFAYD
VQQDEw02YTg1MDAyMi05ZTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA02arPxUnoxH4CwcnqMAFxmdpzDjQJPbSj79tnDqVvqOIHpbrkDUDfN1xFBnX
0Kj8sXrMvXTYRiz2z3MPPHx2pMerCWCSqIv88YaRMicILojMBF4kG4AuOX6PUpLV
KA48bMA/2InMz1yDmxVjmItKvrNeIyrpT4JvnDFsLZPoydRnHoTZFQw3I8ut2AzJ
w5kJW4xFLzf7LC340T0pjYgKLMvzVJ2R09lDHu8aDi+Ssqs6wOKSZbaTj9F2mlvD
IOaz5uPIqiyDWdpkdnrra2DNAItrNLL3RH3za361Aq+INLm6oAf2e8cL8ZkPWUqZ
iRmG7fovj5hgzMw7p2nG9C76+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHnggUyu
c/O8vUftJsrn8DCR4lMlMB8GA1UdIwQYMBaAFOQivwJhQNID79a/3q7iaKqLBGbV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzE3NC9CMTMxRjg5Q0VF
Q0QxMUVDOENGNDQ3MUVDNEY5QUUwMi81Q0tfQW1GQTBnUHYxcl9lcnVKb3Fvc0Va
dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVDS19BbUZBMGdQdjFyX2VydUpvcW9zRVp0VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MzE3NC9CMTMxRjg5Q0VFQ0QxMUVDOENGNDQ3MUVDNEY5QUUwMi81Q0tfQW1GQTBn
UHYxcl9lcnVKb3Fvc0VadFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkFZw2J5ANQqzk3r2nF0TudCBCoNmJOYnSyHHsoC/tON3sgPb7OsO7Tfgs6l4
Sai4uMAjfajW07IxNCYK85XUyKLWiv8ePUGh7/ONH6gPJNq7CGJH5T7J1ZVl5ZXr
P8mmiOve29A/QNFAsRmdNzadp7Gd4wau0ISMaiv+IY9JuE6RJrg9IRfQdy+oxpI/
CFRDAezWtAz/LFwx3zxd2l5sF1RBhJYXaUv8qoUXEFhBZqRCtvxCzck5EPvfJ2pO
uNDPBqxc1/CcbQbalNhbbL9a2N6deZiIV3det2kBhrKmjckC2B/CIw3NAAbplIME
Z8mUlu2vTbCbkqRSrFiSjHAN6A==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:39 2026 by rpki-client