Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft
File:                     gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft (raw, json)
Hash identifier:          4HxG8PZr8phmnZpcxaTURIARvFMiA1mS3gQp/X6yFpw=
Subject key identifier:   D0:EA:E7:D1:B0:FE:C6:93:F8:70:13:9B:B6:90:C2:82:D1:F4:FF:BF
Authority key identifier: 81:99:49:3A:D2:65:AD:2D:C7:33:96:F6:BA:0B:6E:D6:CC:41:E1:0B
Certificate issuer:       /CN=A91CDC32/serialNumber=8199493AD265AD2DC73396F6BA0B6ED6CC41E10B
Certificate serial:       0187
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft
Manifest number:          017D
Signing time:             Wed 19 Aug 2026 05:14:33 +0000
Manifest this update:     Wed 19 Aug 2026 05:14:32 +0000
Manifest next update:     Wed 26 Aug 2026 05:14:32 +0000
Files and hashes:         1: gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl (hash: d0kfiMfoJsnIT6/yKjPfiQt0faV4cnCcA8fIPExW36o=)
                          2: 997D587CABD011F0AA576211C4F9AE02.roa (hash: LUO2DzJZDb3MFhgAFK7nfr+kdeF429YVOmQYxveo+6g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl
                          rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:14:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDC32, serialNumber=8199493AD265AD2DC73396F6BA0B6ED6CC41E10B
        Validity
            Not Before: Aug 19 05:14:32 2026 GMT
            Not After : Aug 26 05:14:32 2026 GMT
        Subject: CN=6a853bb8-34e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8c:b2:bc:0c:4d:c0:44:17:eb:06:75:aa:9c:
                    f9:97:0d:6e:93:45:16:c6:fb:88:b6:b8:b5:fe:e6:
                    b0:50:0c:24:af:a7:b6:f2:a0:d5:ef:e0:70:a1:58:
                    7e:ef:16:7a:a5:6a:ea:45:6b:80:43:f6:ef:e1:7c:
                    1c:8b:88:da:83:8a:2c:14:c4:91:20:31:81:42:3f:
                    cd:8b:01:ae:b3:61:42:30:1f:0f:7a:23:53:9d:f8:
                    02:9a:f9:58:5b:07:c8:55:99:19:49:f7:1b:48:c4:
                    01:1e:44:82:9f:a5:a6:dd:dd:8b:28:b7:f2:70:09:
                    ad:d1:e1:fd:20:30:8e:2d:5e:18:82:b4:a6:e1:13:
                    9a:41:2d:49:08:6d:b3:6d:b8:b4:31:07:97:fc:db:
                    75:29:ab:08:d4:c2:a2:05:50:7d:4f:a6:0c:e1:44:
                    b1:37:db:57:42:9b:0f:63:c0:bd:22:b4:e8:3d:a4:
                    f1:88:f1:c4:33:d4:45:63:58:26:9c:dc:e3:3f:1b:
                    f1:ea:59:42:06:9b:1a:4e:4a:53:e5:4a:d9:0e:d4:
                    ed:b6:d0:a4:c9:19:44:bd:32:02:86:ae:d0:bb:0f:
                    81:34:37:f3:bd:6f:06:a8:c2:e8:dc:eb:fc:cb:c9:
                    4c:4f:7b:a5:86:45:4f:a3:97:3e:43:ad:aa:12:68:
                    80:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EA:E7:D1:B0:FE:C6:93:F8:70:13:9B:B6:90:C2:82:D1:F4:FF:BF
            X509v3 Authority Key Identifier:
                keyid:81:99:49:3A:D2:65:AD:2D:C7:33:96:F6:BA:0B:6E:D6:CC:41:E1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:4b:66:01:ea:a9:18:03:85:ff:8e:72:3e:37:f1:19:2e:ab:
         89:36:3b:b9:f3:35:cd:c4:6a:ca:82:ce:07:fe:69:77:d4:21:
         cd:5d:f9:fc:7e:a6:76:33:9e:3d:5f:b4:c4:26:bc:45:de:8f:
         1f:56:d7:0a:54:1c:91:da:37:db:5c:f4:00:44:df:c3:42:76:
         c3:af:f9:5e:a4:20:3b:cf:84:94:32:4c:69:6e:e9:03:2d:90:
         a1:04:39:a8:1e:97:aa:c1:3f:66:a3:4f:4a:f0:36:d2:e6:49:
         4a:5c:fb:42:69:a2:cf:b9:27:61:9c:76:87:6f:5f:eb:b5:06:
         5c:61:43:b2:41:25:d7:9f:45:aa:99:0b:06:1f:2c:ca:af:cf:
         71:b2:17:08:8d:74:7e:f8:28:e4:e6:b3:28:b7:a9:a6:62:0f:
         11:07:e3:78:cf:2d:f8:00:3f:37:9b:f6:d2:23:d8:66:46:54:
         b7:d9:87:d4:6d:cf:65:17:85:d6:7c:1f:0d:57:69:29:7f:5b:
         28:87:26:79:dd:e1:bb:7a:06:97:81:29:77:b1:5b:f3:65:92:
         b6:3a:7a:6a:90:7f:ca:55:88:c2:4f:fc:e0:b2:bd:a3:59:5e:
         03:88:e9:1d:3d:5b:89:6d:12:30:2f:a8:f7:9c:4c:03:37:12:
         f3:8c:a2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:41 2026 by rpki-client