Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
File:                     A4qG82KyVX-Uvncu4MX9MYRf4mM.mft (raw, json)
Hash identifier:          oGdAl8H34CKokzEI7T9q41lgHGCUdQ3vdfGhtkcrROo=
Subject key identifier:   D8:57:A7:4D:84:24:AD:33:D4:CD:A3:A9:B0:E3:3B:44:1D:96:19:3E
Authority key identifier: 03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63
Certificate issuer:       /CN=A91C4003/serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263
Certificate serial:       0CE3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
Manifest number:          0CC7
Signing time:             Tue 18 Aug 2026 18:46:30 +0000
Manifest this update:     Tue 18 Aug 2026 18:46:30 +0000
Manifest next update:     Tue 25 Aug 2026 18:46:30 +0000
Files and hashes:         1: A4qG82KyVX-Uvncu4MX9MYRf4mM.crl (hash: qPLoJK/wdpQprPb9HcalblK2JMbJjmY0r27yGMrbwy4=)
                          2: 711115241AD911EA97EF1C30C4F9AE02.roa (hash: L5kpdDSVWGFDk4KnT3wv5patiXhFmEKGdMGTrK+jED0=)
                          3: D669BA2A5B2311F18CBDBA86B5833773.roa (hash: uJJ6umJhiTsyih6RF9yfqw8B9f80UYhsvYbpzsZ+0l8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl
                          rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3299 (0xce3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4003, serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263
        Validity
            Not Before: Aug 18 18:46:30 2026 GMT
            Not After : Aug 25 18:46:30 2026 GMT
        Subject: CN=6a84a886-7b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ec:91:94:16:eb:ce:a4:57:16:31:c1:a5:69:
                    06:24:b7:c4:81:65:b0:e3:d5:fa:b8:83:07:db:d9:
                    ba:64:ed:2c:a4:f6:88:b7:de:5a:92:68:34:22:b6:
                    ae:45:1a:72:8d:16:18:32:03:fe:23:ef:7c:ed:a9:
                    45:30:09:83:ec:a2:2b:fb:e4:3b:ed:fd:8f:68:f5:
                    37:20:11:c6:d6:a9:87:41:5b:86:e7:7a:94:9d:cb:
                    9d:41:5e:82:98:c8:fe:7f:0d:3c:0a:ce:87:a3:c2:
                    f8:6d:ed:61:35:8a:3c:7b:b1:63:aa:de:fd:c6:ab:
                    1c:36:88:54:17:2e:5a:10:21:2e:7b:46:5c:a9:81:
                    ea:ff:dc:32:17:b9:ce:2e:64:5e:e4:2e:c7:36:64:
                    33:9d:2b:38:8c:4f:21:a6:e0:8e:25:29:b6:b2:b6:
                    c7:a6:55:d0:3a:8a:15:1e:52:bd:db:aa:15:48:3c:
                    81:c4:2c:9b:97:d7:ba:9f:e6:1f:83:02:f8:b5:ef:
                    fd:e0:40:bd:4c:2e:71:43:c8:02:3c:ea:71:44:a1:
                    3c:e8:4f:28:bc:3f:e4:69:6c:26:85:08:2a:4f:6c:
                    7b:3c:c0:90:f3:71:a0:95:ad:ea:4a:95:ee:10:31:
                    39:c0:c1:e9:01:dc:8f:77:64:07:f4:b7:a6:e4:80:
                    f9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:57:A7:4D:84:24:AD:33:D4:CD:A3:A9:B0:E3:3B:44:1D:96:19:3E
            X509v3 Authority Key Identifier:
                keyid:03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:6d:6f:00:8d:ef:14:96:e8:8d:ef:58:9a:f2:34:e6:52:77:
         75:c2:a0:da:26:b6:27:13:e5:f0:07:52:45:ff:25:a8:90:13:
         d2:c9:95:54:02:e1:43:22:27:21:f4:2a:f6:c7:6c:88:e3:48:
         78:7f:43:54:9f:81:0a:fa:06:95:79:22:36:4c:4b:d5:d3:13:
         03:11:f1:6c:d7:4d:4d:08:6c:bc:80:f8:5e:c9:11:6d:0d:22:
         bb:f6:7f:03:da:d8:5c:89:03:27:cf:b3:ec:35:8f:b6:9e:f4:
         74:0f:e7:ee:21:ca:d2:e0:fd:03:94:0a:55:d5:eb:23:c9:93:
         6f:07:74:27:58:fc:f5:8d:77:2d:fb:55:88:a4:48:31:fd:af:
         44:ea:2a:e4:e6:fc:1a:6d:fe:3f:a5:7c:f4:71:99:ba:ad:2e:
         8c:0a:2c:5f:9b:e6:5c:a1:a9:69:35:e3:9d:f6:ee:52:dd:1b:
         ed:f4:75:dc:bf:cc:01:9f:46:a4:eb:e0:d5:c6:94:df:09:96:
         08:c2:27:94:9f:88:46:1a:a4:cb:96:94:2a:79:a5:9e:ba:d0:
         9a:d4:83:75:9e:d9:17:c2:65:07:ba:c3:19:7f:15:75:53:8d:
         09:b0:e1:c0:4d:e4:7f:78:78:85:ee:68:43:b0:90:2b:f6:67:
         bc:9e:92:e9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzQwMDMxMTAvBgNVBAUTKDAzOEE4NkYzNjJCMjU1N0Y5NEJFNzcyRUUwQzVGRDMx
ODQ1RkUyNjMwHhcNMjYwODE4MTg0NjMwWhcNMjYwODI1MTg0NjMwWjAYMRYwFAYD
VQQDEw02YTg0YTg4Ni03YjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyOyRlBbrzqRXFjHBpWkGJLfEgWWw49X6uIMH29m6ZO0spPaIt95akmg0Irau
RRpyjRYYMgP+I+987alFMAmD7KIr++Q77f2PaPU3IBHG1qmHQVuG53qUncudQV6C
mMj+fw08Cs6Ho8L4be1hNYo8e7Fjqt79xqscNohUFy5aECEue0ZcqYHq/9wyF7nO
LmRe5C7HNmQznSs4jE8hpuCOJSm2srbHplXQOooVHlK926oVSDyBxCybl9e6n+Yf
gwL4te/94EC9TC5xQ8gCPOpxRKE86E8ovD/kaWwmhQgqT2x7PMCQ83Ggla3qSpXu
EDE5wMHpAdyPd2QH9Lem5ID5xwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNhXp02E
JK0z1M2jqbDjO0Qdlhk+MB8GA1UdIwQYMBaAFAOKhvNislV/lL53LuDF/TGEX+Jj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDAwMy9COEU4QUQ3MjFB
RDgxMUVBODJFNzRCMkZDNEY5QUUwMi9BNHFHODJLeVZYLVV2bmN1NE1YOU1ZUmY0
bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0E0cUc4Mkt5VlgtVXZuY3U0TVg5TVlSZjRtTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NDAwMy9COEU4QUQ3MjFBRDgxMUVBODJFNzRCMkZDNEY5QUUwMi9BNHFHODJLeVZY
LVV2bmN1NE1YOU1ZUmY0bU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACG1vAI3vFJboje9YmvI05lJ3dcKg2ia2JxPl8AdSRf8lqJAT0smVVALhQyIn
IfQq9sdsiONIeH9DVJ+BCvoGlXkiNkxL1dMTAxHxbNdNTQhsvID4XskRbQ0iu/Z/
A9rYXIkDJ8+z7DWPtp70dA/n7iHK0uD9A5QKVdXrI8mTbwd0J1j89Y13LftViKRI
Mf2vROoq5Ob8Gm3+P6V89HGZuq0ujAosX5vmXKGpaTXjnfbuUt0b7fR13L/MAZ9G
pOvg1caU3wmWCMInlJ+IRhqky5aUKnmlnrrQmtSDdZ7ZF8JlB7rDGX8VdVONCbDh
wE3kf3h4he5oQ7CQK/ZnvJ6S6Q==
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:03:50 2026 by rpki-client