Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
File:                     ihprqbt2zysN7jXqTP0vX_jAieM.mft (raw, json)
Hash identifier:          qd4a//uQ3oTfq1Ezo9Qa3ayhfvomVy4SHA5WeWhrSjc=
Subject key identifier:   8B:3A:91:5B:0A:CE:D8:56:8E:8A:0D:86:A1:BC:10:6A:1A:F7:7F:0B
Authority key identifier: 8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3
Certificate issuer:       /CN=A91C36EE/serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3
Certificate serial:       0CCE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
Manifest number:          0CC5
Signing time:             Tue 18 Aug 2026 18:44:28 +0000
Manifest this update:     Tue 18 Aug 2026 18:44:28 +0000
Manifest next update:     Tue 25 Aug 2026 18:44:28 +0000
Files and hashes:         1: ihprqbt2zysN7jXqTP0vX_jAieM.crl (hash: Rc4179tQwmOgh8vdDwlj++k7wxu3EMrG85HkG4SY7Gg=)
                          2: 6FCF7FF2180411EA9AA70A57C4F9AE02.roa (hash: Jmt3gOA3SMMnVdNR/G0V8b2lUdwKqb+fxUhA4ydziJ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl
                          rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:44:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3278 (0xcce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C36EE, serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3
        Validity
            Not Before: Aug 18 18:44:28 2026 GMT
            Not After : Aug 25 18:44:28 2026 GMT
        Subject: CN=6a84a80c-2eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:46:ac:37:04:b8:e0:89:0e:a7:97:a6:cf:32:
                    b3:d4:cd:78:41:a8:22:8a:a3:be:ba:ef:7d:7b:51:
                    b1:1d:cc:95:49:af:4e:31:08:a2:39:cf:00:01:ba:
                    74:64:6a:3f:c3:14:c2:dd:04:55:80:29:75:fc:70:
                    dc:82:2b:50:2d:0c:45:3c:ef:1d:c8:83:02:eb:41:
                    1b:eb:67:71:e8:58:e1:74:a4:d8:cb:00:d2:96:d9:
                    b0:07:1e:fa:f0:a7:90:cd:d8:4b:0f:07:7e:37:70:
                    29:4d:c4:72:0f:24:70:44:32:a0:ec:54:9f:f7:24:
                    60:64:77:37:d0:6d:c5:c3:af:d3:03:b0:a6:75:e1:
                    bd:d0:c0:b9:cd:d6:f0:70:d9:ea:07:5d:7e:6e:78:
                    95:2c:6b:50:96:40:84:43:f1:47:c1:f9:b8:b8:99:
                    4d:12:84:12:d0:25:be:b2:86:3a:3a:3d:b1:3f:52:
                    4e:eb:98:e3:fa:c6:2c:1c:0c:e6:7e:5d:99:7a:38:
                    9e:b7:52:33:7c:91:26:40:39:db:21:a8:a7:94:30:
                    11:b9:a3:8e:ba:8b:c7:a2:d0:7f:b9:de:6d:ee:1a:
                    5d:8a:22:c1:8d:fd:2e:60:48:93:f1:b1:97:0e:0d:
                    eb:5b:e3:16:f1:76:86:16:fc:ac:89:58:e2:a9:57:
                    e6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3A:91:5B:0A:CE:D8:56:8E:8A:0D:86:A1:BC:10:6A:1A:F7:7F:0B
            X509v3 Authority Key Identifier:
                keyid:8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a1:96:6f:51:e3:85:7b:95:da:d2:9c:e7:cd:09:df:dc:0b:
         17:62:2e:0b:e9:1b:df:07:67:ce:32:fb:1a:f1:53:c9:85:88:
         52:95:e8:e9:5c:9c:f7:eb:91:7d:08:8f:90:9d:ad:55:aa:9d:
         9d:8d:cf:df:a9:ae:57:b5:a5:77:69:d4:34:88:d1:b5:45:15:
         03:c5:4e:b4:92:67:8d:41:ba:53:a4:b8:a9:93:b7:9d:6f:e6:
         0d:ef:1d:88:d5:15:3c:ec:d9:5b:9d:92:49:19:b5:5b:47:da:
         3a:07:4a:c7:29:1b:31:67:23:f9:db:97:fb:4b:7c:e2:99:11:
         ce:84:54:2d:37:91:3a:6e:75:a3:02:3d:02:07:69:72:25:53:
         78:e5:73:fe:11:5e:95:eb:5d:c9:6b:0a:2d:4a:45:dc:c5:74:
         78:c0:d4:17:9f:46:7c:8e:7e:99:95:6a:e4:28:e1:87:e3:e3:
         27:b6:c8:d6:f9:ab:5a:5d:95:ce:8f:de:c7:b7:86:0b:72:c5:
         05:fb:22:b2:84:60:c3:c8:31:41:de:32:0d:3c:de:ae:9d:76:
         87:4b:12:f6:bf:c8:db:32:01:20:86:9e:05:a8:15:31:31:67:
         21:81:5b:73:ff:39:79:fc:38:42:cf:a6:31:85:aa:3a:fd:39:
         69:e9:6e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:47:06 2026 by rpki-client