Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
File:                     a63X1dESgRLXCrSiRSQBQo-dCXs.mft (raw, json)
Hash identifier:          prX7sK9r/Rt4mJWGw7w5tql41gWD+9bh4Snffeq4lUI=
Subject key identifier:   60:39:A4:26:5B:7A:00:6D:A9:52:E4:3B:6C:6C:54:FA:C1:63:5F:12
Authority key identifier: 6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B
Certificate issuer:       /CN=A91CC86F/serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B
Certificate serial:       025D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
Manifest number:          0253
Signing time:             Wed 19 Aug 2026 02:53:17 +0000
Manifest this update:     Wed 19 Aug 2026 02:53:16 +0000
Manifest next update:     Wed 26 Aug 2026 02:53:16 +0000
Files and hashes:         1: a63X1dESgRLXCrSiRSQBQo-dCXs.crl (hash: dRVwumCnCrljp5PGh0uLjNUCsVLkQTX1cWltD6u9ikQ=)
                          2: 96F5D26CFD5A11EEA0731E55C4F9AE02.roa (hash: Ti9PlBRZuakBk1+DVxnhOg3U/C4AJTP/aQFIX6lbwWg=)
                          3: AE1747DE13FC11EEAD14AF35C4F9AE02.roa (hash: E1zUkI9TO0W/ED1pfVMhvoec/8ENjTvyLHbMDkKK8Fw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl
                          rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:53:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605 (0x25d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC86F, serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B
        Validity
            Not Before: Aug 19 02:53:16 2026 GMT
            Not After : Aug 26 02:53:16 2026 GMT
        Subject: CN=6a851a9c-66e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b3:e3:5f:14:04:51:61:b5:46:0a:0b:e6:4e:
                    d5:03:6a:38:4c:31:1a:fe:47:01:95:e3:87:fd:6c:
                    31:45:7a:79:b0:89:1f:dc:fa:8c:59:b0:2b:b8:3c:
                    e2:6c:3f:e5:cc:75:55:e3:2f:a6:2f:ff:9f:56:4d:
                    55:7e:b7:f1:f1:76:d2:1f:8d:5c:e2:0f:3c:e1:34:
                    b3:b2:c1:66:f9:93:79:5d:29:53:80:ee:90:f4:7f:
                    73:83:5d:ff:85:93:0b:8d:c3:00:17:15:52:82:ae:
                    9f:47:8f:9b:5a:92:49:a6:e6:de:d2:3c:9f:eb:98:
                    f4:85:cf:9a:32:15:fe:ae:ab:b2:4a:e7:be:86:87:
                    22:f0:3b:ea:64:8e:72:01:03:3f:96:81:f9:50:fa:
                    5a:76:ba:08:3d:99:c6:f2:54:7e:0b:49:89:46:34:
                    29:ed:c9:f4:c0:71:ce:cd:2a:12:d7:bd:7b:0b:26:
                    8a:ce:ba:6d:a6:c2:03:f3:b7:38:eb:4f:b8:44:96:
                    fa:cf:d3:be:7a:17:3b:29:4e:11:50:72:39:5b:dc:
                    2e:3d:dc:d3:00:31:f3:7b:91:0f:a8:bf:fd:85:dc:
                    a2:d2:34:ac:5c:03:e8:f9:7e:72:f9:f0:0e:0f:de:
                    8e:ae:78:d7:75:96:33:45:46:14:ad:fc:81:9f:42:
                    ff:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:39:A4:26:5B:7A:00:6D:A9:52:E4:3B:6C:6C:54:FA:C1:63:5F:12
            X509v3 Authority Key Identifier:
                keyid:6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:d4:31:b8:c5:79:eb:55:81:35:57:a7:d4:38:de:14:3c:64:
         07:f2:09:43:7f:79:8d:c2:9d:87:7a:b9:99:6e:84:d0:87:f0:
         61:47:00:aa:2a:a0:2c:1e:36:82:6d:a4:47:e5:9a:bd:34:b3:
         fa:de:7c:cd:70:98:31:29:a0:0b:3a:3f:7e:a1:61:d3:c7:1e:
         34:f4:05:f5:b9:19:4c:e8:b0:1e:91:2b:78:03:4c:0e:e8:1e:
         c4:f2:4b:46:a6:85:31:42:09:50:64:cf:f8:dc:a0:05:a0:82:
         e5:36:b7:0f:ee:b1:24:0d:2d:38:15:d5:bd:4c:ce:b1:48:5a:
         06:e2:8a:b4:84:66:ff:89:d0:92:26:8c:a8:e3:29:a1:7c:60:
         1c:58:8d:54:4f:75:93:70:ca:93:1d:b5:f6:b4:2a:4d:94:c9:
         f3:cc:74:41:33:85:cb:cf:d9:25:18:0d:c0:96:5b:bf:73:37:
         83:31:64:5d:7e:70:6f:0e:61:7d:b6:55:94:29:78:cd:7a:c3:
         18:d6:58:72:26:0d:f1:0c:ef:49:0a:7a:96:1e:ad:88:ce:4c:
         d2:54:4e:c4:fa:e2:2f:d9:fb:77:a1:aa:92:be:40:ac:67:6b:
         bd:66:e1:38:2f:77:e5:48:b4:e5:45:25:c6:3e:e8:20:f5:48:
         ea:da:aa:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:35 2026 by rpki-client