Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C909E/B820EDDC4B5A11F1928CDCB5AD833773/oYVUdv79oHy8rTr5lUhEq6B7dyw.mft
File:                     oYVUdv79oHy8rTr5lUhEq6B7dyw.mft (raw, json)
Hash identifier:          dzGHlnyjjfjrVfbMlGsjvEShIKT3vchW3gl8/EaUE50=
Subject key identifier:   1A:B1:BA:A4:BB:9C:F0:D6:B3:8A:49:F1:39:49:0A:26:CF:DB:42:29
Authority key identifier: A1:85:54:76:FE:FD:A0:7C:BC:AD:3A:F9:95:48:44:AB:A0:7B:77:2C
Certificate issuer:       /CN=A91C909E/serialNumber=A1855476FEFDA07CBCAD3AF9954844ABA07B772C
Certificate serial:       37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYVUdv79oHy8rTr5lUhEq6B7dyw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C909E/B820EDDC4B5A11F1928CDCB5AD833773/oYVUdv79oHy8rTr5lUhEq6B7dyw.mft
Manifest number:          36
Signing time:             Sun 23 Aug 2026 08:14:01 +0000
Manifest this update:     Sun 23 Aug 2026 08:14:01 +0000
Manifest next update:     Sun 30 Aug 2026 08:14:01 +0000
Files and hashes:         1: oYVUdv79oHy8rTr5lUhEq6B7dyw.crl (hash: 51DSb4w/Gy0ameK6AgnM6Yam/QX796x6I9e/jhJaQgQ=)
                          2: 377E5F464B5C11F1B3CC4A0AAE833773.roa (hash: l+MmjZZ7vb/FC3MXzcOXQHG/MQgYHBCADLYpYIgUX8w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C909E/B820EDDC4B5A11F1928CDCB5AD833773/oYVUdv79oHy8rTr5lUhEq6B7dyw.crl
                          rsync://rpki.apnic.net/member_repository/A91C909E/B820EDDC4B5A11F1928CDCB5AD833773/oYVUdv79oHy8rTr5lUhEq6B7dyw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYVUdv79oHy8rTr5lUhEq6B7dyw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C909E, serialNumber=A1855476FEFDA07CBCAD3AF9954844ABA07B772C
        Validity
            Not Before: Aug 23 08:14:01 2026 GMT
            Not After : Aug 30 08:14:01 2026 GMT
        Subject: CN=6a8aabc9-be13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:58:71:ab:1b:0e:42:af:97:09:64:1d:a7:c9:
                    89:93:ac:5f:86:3c:8e:f9:4b:86:4c:8e:7a:4c:61:
                    c2:76:bf:e2:a0:78:37:22:ca:3c:ed:97:aa:da:9e:
                    75:7a:0c:74:26:c2:6d:b3:78:3d:21:7d:00:18:f5:
                    23:6a:37:ba:a1:28:92:3c:5d:5d:3d:48:6e:7f:d7:
                    f6:b4:b2:2f:c7:bf:b1:f9:15:1c:42:9f:b2:ff:97:
                    74:85:ec:10:b6:db:8e:a8:31:6a:f3:27:88:29:81:
                    0d:08:dd:e9:2e:b3:aa:40:c8:4e:f1:82:3e:c5:88:
                    45:9d:bd:d2:ae:25:5e:99:15:9c:db:6e:85:09:dd:
                    09:15:d3:6d:af:c4:4a:08:14:d3:1d:7c:16:75:6e:
                    dd:77:ed:dd:ad:36:39:20:fd:8a:c9:28:bb:db:53:
                    8b:c0:58:fc:f8:6b:72:41:ad:e0:ae:2d:70:ce:f5:
                    80:f7:5b:39:47:f9:46:85:b2:b2:70:cb:b2:6e:b0:
                    29:a6:9a:85:61:1d:a0:b7:0e:b3:f7:91:5c:38:41:
                    03:17:21:10:4b:72:20:b2:33:ef:f0:6c:19:53:3f:
                    f2:f4:e4:64:4c:ce:25:b2:87:18:ab:ac:16:ca:e6:
                    a1:77:5b:ef:76:d7:b5:a8:93:c1:b3:13:7b:e0:35:
                    41:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B1:BA:A4:BB:9C:F0:D6:B3:8A:49:F1:39:49:0A:26:CF:DB:42:29
            X509v3 Authority Key Identifier:
                keyid:A1:85:54:76:FE:FD:A0:7C:BC:AD:3A:F9:95:48:44:AB:A0:7B:77:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C909E/B820EDDC4B5A11F1928CDCB5AD833773/oYVUdv79oHy8rTr5lUhEq6B7dyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYVUdv79oHy8rTr5lUhEq6B7dyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C909E/B820EDDC4B5A11F1928CDCB5AD833773/oYVUdv79oHy8rTr5lUhEq6B7dyw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:3a:17:a8:2f:07:15:59:4a:7d:e6:8b:f1:60:ef:2f:1b:b9:
         a2:e3:be:07:8e:d5:6e:46:14:97:37:96:76:91:be:fe:53:fa:
         0a:4d:88:c8:ab:9c:e0:77:eb:18:ce:d8:23:9e:39:ab:d2:f3:
         53:cc:3e:40:26:37:a9:52:95:72:10:9e:7f:b5:ea:91:80:33:
         70:90:a3:8f:b1:06:b5:a0:c2:95:bc:8b:2e:ce:04:e2:03:cc:
         69:51:d4:b7:ae:b9:ad:49:c3:56:8d:b2:27:13:17:3c:10:0d:
         e1:bf:89:fe:b4:27:da:c3:b7:b0:af:1a:72:fd:15:ed:db:c2:
         64:de:51:31:ef:ef:7c:d2:91:a8:17:cd:96:1c:28:b4:8c:63:
         18:19:40:25:da:d8:f1:d6:b2:54:65:80:c7:f4:bd:67:80:c7:
         60:ad:11:16:6f:cd:f8:eb:48:04:41:b2:a8:77:14:be:70:37:
         08:69:d9:e8:07:11:8a:30:db:29:7c:b0:aa:a4:2f:7a:17:7e:
         1b:f0:3e:1f:8b:54:95:5d:8b:2a:3a:cc:05:96:17:11:f9:95:
         16:c9:7b:74:0d:5a:d0:87:09:97:dc:f1:6f:3b:2c:70:75:e9:
         bb:08:16:71:51:49:a5:59:08:fe:16:83:d5:91:d7:f3:a4:44:
         97:07:63:61
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
OTA5RTExMC8GA1UEBRMoQTE4NTU0NzZGRUZEQTA3Q0JDQUQzQUY5OTU0ODQ0QUJB
MDdCNzcyQzAeFw0yNjA4MjMwODE0MDFaFw0yNjA4MzAwODE0MDFaMBgxFjAUBgNV
BAMTDTZhOGFhYmM5LWJlMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5WHGrGw5Cr5cJZB2nyYmTrF+GPI75S4ZMjnpMYcJ2v+KgeDciyjztl6rannV6
DHQmwm2zeD0hfQAY9SNqN7qhKJI8XV09SG5/1/a0si/Hv7H5FRxCn7L/l3SF7BC2
246oMWrzJ4gpgQ0I3ekus6pAyE7xgj7FiEWdvdKuJV6ZFZzbboUJ3QkV022vxEoI
FNMdfBZ1bt137d2tNjkg/YrJKLvbU4vAWPz4a3JBreCuLXDO9YD3WzlH+UaFsrJw
y7JusCmmmoVhHaC3DrP3kVw4QQMXIRBLciCyM+/wbBlTP/L05GRMziWyhxirrBbK
5qF3W+9217Wok8GzE3vgNUH3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGrG6pLuc
8NaziknxOUkKJs/bQikwHwYDVR0jBBgwFoAUoYVUdv79oHy8rTr5lUhEq6B7dyww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5MDlFL0I4MjBFRERDNEI1
QTExRjE5MjhDRENCNUFEODMzNzczL29ZVlVkdjc5b0h5OHJUcjVsVWhFcTZCN2R5
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvb1lWVWR2NzlvSHk4clRyNWxVaEVxNkI3ZHl3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5
MDlFL0I4MjBFRERDNEI1QTExRjE5MjhDRENCNUFEODMzNzczL29ZVlVkdjc5b0h5
OHJUcjVsVWhFcTZCN2R5dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQACOheoLwcVWUp95ovxYO8vG7mi474HjtVuRhSXN5Z2kb7+U/oKTYjIq5zgd+sY
ztgjnjmr0vNTzD5AJjepUpVyEJ5/teqRgDNwkKOPsQa1oMKVvIsuzgTiA8xpUdS3
rrmtScNWjbInExc8EA3hv4n+tCfaw7ewrxpy/RXt28Jk3lEx7+980pGoF82WHCi0
jGMYGUAl2tjx1rJUZYDH9L1ngMdgrREWb83460gEQbKodxS+cDcIadnoBxGKMNsp
fLCqpC96F34b8D4fi1SVXYsqOswFlhcR+ZUWyXt0DVrQhwmX3PFvOyxwdem7CBZx
UUmlWQj+FoPVkdfzpESXB2Nh
-----END CERTIFICATE-----
Generated at Sun Aug 23 20:51:29 2026 by rpki-client