Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft
File:                     U05nXomsmsMC9TCid1KM-Bo8UwY.mft (raw, json)
Hash identifier:          srndvYyaGFW2im3RspUUfvAz+kLi8C2N2L83I0Ce9SE=
Subject key identifier:   67:E8:A5:21:B7:59:BE:7D:7B:BB:E3:27:41:DE:3F:A3:BD:79:DC:8D
Authority key identifier: 53:4E:67:5E:89:AC:9A:C3:02:F5:30:A2:77:52:8C:F8:1A:3C:53:06
Certificate issuer:       /CN=A91CC1EB/serialNumber=534E675E89AC9AC302F530A277528CF81A3C5306
Certificate serial:       0693
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft
Manifest number:          067D
Signing time:             Tue 18 Aug 2026 22:58:21 +0000
Manifest this update:     Tue 18 Aug 2026 22:58:20 +0000
Manifest next update:     Tue 25 Aug 2026 22:58:20 +0000
Files and hashes:         1: U05nXomsmsMC9TCid1KM-Bo8UwY.crl (hash: sNMA7w2PMwTNn67hPHah9OI+7g4wf1HjYZHWhGSLaKE=)
                          2: 5C0006B4E1B711EEA6D7F740C4F9AE02.roa (hash: JS+BkuUeBbAKOEIjpvSfqdX1PU3qVq3t7HBFZXPnHlc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.crl
                          rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 22:58:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1683 (0x693)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC1EB, serialNumber=534E675E89AC9AC302F530A277528CF81A3C5306
        Validity
            Not Before: Aug 18 22:58:20 2026 GMT
            Not After : Aug 25 22:58:20 2026 GMT
        Subject: CN=6a84e38c-85c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5a:45:77:75:9a:bb:b3:d1:56:b8:c3:35:4c:
                    fc:a6:22:fe:fa:cb:30:c8:45:41:b1:34:f0:1c:62:
                    85:6a:22:ef:e3:4a:19:5e:28:29:2a:ce:7a:cf:a9:
                    88:4e:5e:61:c3:50:60:00:c5:6d:54:2d:e3:c4:52:
                    04:fb:e0:91:d4:0c:96:ce:f9:31:82:f7:d7:f8:e7:
                    eb:dc:dc:65:c8:ac:da:94:79:c3:cc:ed:98:60:be:
                    a0:42:7a:d6:fe:b9:6d:c5:de:36:69:42:ea:98:33:
                    f7:60:e1:8e:27:ae:65:87:d2:e4:c9:be:c7:99:d6:
                    b7:6a:da:03:b0:21:cb:a7:f7:94:09:00:a6:18:9f:
                    a8:3d:a7:e1:34:18:8e:a1:fe:31:f5:b9:af:93:f2:
                    95:32:4f:73:57:3e:e2:bd:1b:4d:9c:bf:4c:b4:1d:
                    16:64:aa:1c:ba:0e:2d:bd:b9:04:0a:d9:98:1e:44:
                    84:6c:3f:02:39:9d:63:4c:89:71:77:f3:ee:64:fe:
                    ad:fc:78:c2:ae:36:aa:a4:7e:cd:63:59:8b:ee:36:
                    06:a1:e3:3f:f1:13:5d:56:ad:f9:f1:e3:43:7a:33:
                    1a:b5:e5:82:af:e7:d2:88:48:e6:21:db:1f:65:31:
                    07:66:c2:35:26:dc:8c:e5:cb:d8:4d:c5:7e:8a:e7:
                    e8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E8:A5:21:B7:59:BE:7D:7B:BB:E3:27:41:DE:3F:A3:BD:79:DC:8D
            X509v3 Authority Key Identifier:
                keyid:53:4E:67:5E:89:AC:9A:C3:02:F5:30:A2:77:52:8C:F8:1A:3C:53:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:fb:64:c7:a8:73:4c:d0:49:c6:ea:3c:20:75:6d:ab:96:f7:
         6b:23:14:73:9c:68:a9:5f:f2:2b:fe:1c:49:5a:3a:6e:ce:d9:
         ad:b5:7b:36:de:e4:36:cf:fd:08:90:57:3a:45:49:89:eb:51:
         cf:35:b6:87:87:18:38:b5:c4:ae:70:86:9d:e8:61:b1:d3:9f:
         fc:36:f8:fa:35:81:49:31:67:7e:c5:d5:cf:4c:a9:a3:3b:ee:
         42:3b:ae:56:26:a1:da:9b:66:99:5f:f0:84:e1:6e:58:62:a4:
         8d:b6:1b:19:57:db:88:9c:c0:8c:58:35:dc:40:d9:d1:fb:a7:
         d1:0b:b5:61:f6:91:45:fe:7f:cb:59:fc:5d:98:9e:df:b1:01:
         ab:8a:3c:eb:ed:e9:1d:31:34:16:01:74:96:fc:1b:01:01:63:
         34:0c:f8:74:d8:90:a8:5b:66:d4:b3:c4:51:d8:b1:0c:7e:8b:
         0c:ef:52:3b:e6:bb:36:b1:0d:24:9a:1a:58:54:ed:b5:9d:4f:
         51:ee:83:e6:42:25:f9:b1:0f:ae:7e:11:5d:cf:d0:20:15:40:
         7f:cd:2d:3d:cb:5a:06:e1:1e:48:6d:4b:fc:da:d1:60:e3:d1:
         4e:3c:14:a8:4c:be:eb:78:30:3b:54:35:9b:91:ee:19:91:ca:
         48:de:7d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:26 2026 by rpki-client