Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft
File:                     y8CtGWWFFkH2YRHo4pAmmKm57YA.mft (raw, json)
Hash identifier:          mdCGw1cjF0shSGq2d0/Lr8PVDcNyXPVYpGyb1vil/tc=
Subject key identifier:   EE:50:2A:78:7E:CB:6E:31:BA:34:FC:07:3A:6F:0C:CA:C4:52:16:A6
Authority key identifier: CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80
Certificate issuer:       /CN=A91C38CC/serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80
Certificate serial:       01E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft
Manifest number:          01DB
Signing time:             Wed 19 Aug 2026 04:18:56 +0000
Manifest this update:     Wed 19 Aug 2026 04:18:55 +0000
Manifest next update:     Wed 26 Aug 2026 04:18:55 +0000
Files and hashes:         1: y8CtGWWFFkH2YRHo4pAmmKm57YA.crl (hash: NP2u5vnAdUIztQzEWfUCew+tOoEw9DKVAtHrfF18BJw=)
                          2: CA2A06D6D5E511EE9B319A12C4F9AE02.roa (hash: yIHsiGXUbr4yiSWIbyeH/+lnd1LO5enPoNYE+CObcWw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl
                          rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 04:18:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 484 (0x1e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C38CC, serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80
        Validity
            Not Before: Aug 19 04:18:55 2026 GMT
            Not After : Aug 26 04:18:55 2026 GMT
        Subject: CN=6a852eaf-dd5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:db:9f:8d:fb:e5:3a:52:b1:5d:e1:3a:ba:46:
                    05:47:98:a3:e5:11:a4:cd:54:f3:6c:9b:0d:0b:38:
                    0d:d3:03:72:8d:ea:e7:9a:dc:21:28:a2:fa:4b:f9:
                    0e:b7:93:54:a9:ab:a1:b1:57:eb:aa:f7:75:03:c4:
                    c2:76:81:19:c2:22:99:95:29:fd:69:ae:71:8c:9e:
                    b8:53:1a:f8:e8:12:9f:bc:0a:43:b0:2a:23:96:c6:
                    df:c2:85:c6:71:d5:89:06:7a:86:b0:cd:fb:8f:5b:
                    92:4d:dd:0b:98:6a:7f:0f:4a:b7:82:96:c3:4b:12:
                    0d:ce:d1:66:46:67:b9:e6:ef:2a:77:86:2c:a7:b8:
                    dd:fc:1a:d0:2c:2f:13:1c:6b:e5:7b:a1:a1:1c:ae:
                    01:da:75:78:a4:45:70:e3:61:7b:c7:d9:9b:00:a1:
                    d6:63:10:b5:06:c7:b0:a9:81:b6:5e:e0:17:c9:da:
                    94:9c:f2:86:9b:94:19:87:46:0b:3d:df:82:fd:5f:
                    1d:41:63:e3:e0:7e:0a:be:03:de:03:5a:40:0e:79:
                    1e:97:76:ba:4a:06:9c:59:15:0f:cb:98:7c:eb:45:
                    bd:5c:49:42:61:02:44:e7:0a:09:32:1a:49:80:99:
                    11:53:15:6e:d1:1f:cb:6f:3b:8a:a8:dc:1b:3e:cf:
                    f3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:50:2A:78:7E:CB:6E:31:BA:34:FC:07:3A:6F:0C:CA:C4:52:16:A6
            X509v3 Authority Key Identifier:
                keyid:CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:6c:30:3f:97:de:76:3a:75:1b:75:7f:c5:6d:a6:dc:e0:78:
         b3:19:c3:e3:0d:32:c5:58:59:7a:3e:f1:0c:c5:a4:86:59:50:
         fb:83:db:71:81:f3:7b:34:4e:ad:18:91:28:0e:45:6c:a5:79:
         98:1d:85:9e:2c:7c:40:4f:3f:aa:f7:de:97:5d:ce:ad:d1:1b:
         f4:79:61:83:50:1b:dd:fe:07:cc:a0:d7:86:fc:12:f4:60:7a:
         b7:d1:b0:12:ba:97:43:f9:74:20:cb:58:44:54:5b:39:6c:35:
         39:b8:c1:05:04:57:16:b5:80:c7:98:47:24:24:c4:fd:81:5a:
         4a:a6:7f:b4:9f:6b:92:3e:86:9c:52:e9:dd:86:7a:cf:f5:c1:
         fa:86:5f:7c:13:20:80:48:58:e2:73:11:9a:a1:14:8e:76:8a:
         fa:a7:68:47:e4:44:f2:ad:ae:0b:00:a9:0c:f8:92:13:be:1f:
         4e:29:e7:37:a9:e7:64:bc:7c:4f:32:cb:1b:93:e5:1f:d9:35:
         f5:18:f8:50:da:7c:2e:cf:78:fb:67:4f:53:ae:8c:a4:65:47:
         99:69:20:36:52:43:e6:f9:73:8c:ab:5f:7d:6e:cc:01:ca:77:
         f3:c8:f4:02:2b:c5:2d:b2:5d:d8:24:48:4e:a0:04:a6:3c:92:
         a0:fe:27:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:47:50 2026 by rpki-client