Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
File:                     _D97sEVCVvMfJcoAhkvDpr11X5Y.mft (raw, json)
Hash identifier:          uj6/R0jeUFNoTrNH9mTlkHFTTni7o+gWPXcHDy+R+UU=
Subject key identifier:   71:58:BF:17:1A:2D:86:59:BB:C8:C3:6C:A8:9A:FF:40:3C:82:BF:39
Authority key identifier: FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96
Certificate issuer:       /CN=A91CE2DE/serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96
Certificate serial:       02F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
Manifest number:          02F2
Signing time:             Wed 19 Aug 2026 01:34:17 +0000
Manifest this update:     Wed 19 Aug 2026 01:34:17 +0000
Manifest next update:     Wed 26 Aug 2026 01:34:17 +0000
Files and hashes:         1: _D97sEVCVvMfJcoAhkvDpr11X5Y.crl (hash: 2ZLdhx2n3sRHPi9yPF1uZ8DKScP84+54S2DFXnGmCD4=)
                          2: 97B4F5603B3D11ED822BB46CC4F9AE02.roa (hash: qWq9FBfV0TlO+Nnhl0xmqfZ2SJgk0It8nQYA3EDnxXs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:34:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 761 (0x2f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE2DE, serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96
        Validity
            Not Before: Aug 19 01:34:17 2026 GMT
            Not After : Aug 26 01:34:17 2026 GMT
        Subject: CN=6a850819-b1fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:06:36:25:b9:8b:7f:cd:ac:ab:35:62:f0:25:
                    87:30:b7:8d:60:66:e3:ee:7f:c8:15:1c:0c:32:e1:
                    77:ba:f1:81:1f:93:4f:5e:c6:60:eb:81:be:ff:bb:
                    7a:22:62:47:47:1e:d6:7c:87:06:50:a8:7b:83:c2:
                    2a:ed:d2:12:a2:a0:a1:43:e5:54:7a:54:37:00:e2:
                    1a:6e:e1:98:4d:d3:9f:f6:ef:4b:59:23:c8:8c:66:
                    d3:56:ee:3f:21:49:af:b2:88:0c:98:9d:83:74:36:
                    be:7d:ce:ba:d6:48:38:77:ea:e1:31:79:bb:34:90:
                    b1:ea:ee:cb:2c:21:6a:77:ef:87:7d:97:dd:b5:0e:
                    07:a6:6b:68:f2:66:41:eb:08:60:22:ef:3a:78:86:
                    c9:64:e1:44:36:4d:4b:b3:46:41:0e:23:9f:ff:75:
                    c3:f5:f2:e6:75:83:f4:8c:d0:5f:02:ad:dd:c5:76:
                    41:e6:04:19:7a:db:57:26:d7:41:06:d7:16:3d:a1:
                    42:f8:0a:91:ca:22:47:58:02:16:a2:4c:64:8b:78:
                    eb:74:78:c7:d3:4d:f3:49:57:c0:15:31:4b:94:a2:
                    f2:4e:ff:0f:54:6a:75:c3:1d:d5:61:75:42:16:d8:
                    81:82:dd:ba:61:d6:34:7e:1a:44:29:b3:da:a3:4f:
                    09:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:58:BF:17:1A:2D:86:59:BB:C8:C3:6C:A8:9A:FF:40:3C:82:BF:39
            X509v3 Authority Key Identifier:
                keyid:FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:9f:91:db:2f:b7:bb:ad:bf:48:38:50:3f:61:0c:19:5c:f8:
         3c:16:1e:bd:48:64:6e:9f:a7:52:65:e8:ea:ac:d1:8f:08:d0:
         d9:dc:85:f7:aa:4e:46:49:7f:3b:ad:7d:e8:27:f4:d5:45:5a:
         36:74:d3:d6:66:7d:67:4a:56:a4:7c:9b:6b:88:07:24:9f:6f:
         b5:90:86:13:e5:23:be:a6:4c:e5:76:c6:83:20:44:79:d8:00:
         69:24:87:a3:e9:ac:f1:0a:e1:dd:46:0e:55:7a:fa:a0:5b:1d:
         0f:02:36:12:93:af:04:51:57:83:33:99:01:38:88:c8:bc:f2:
         6f:a4:af:a5:56:dd:e4:6c:4e:9b:fd:0d:98:71:4e:76:a2:70:
         34:38:50:2a:f4:9a:07:64:d0:d8:16:be:f9:0a:4e:5a:aa:0d:
         45:e2:cd:80:ce:11:85:83:55:99:fc:a1:38:13:f0:07:e7:13:
         2a:88:2c:6d:2f:00:21:a3:5e:47:e9:c6:a7:6b:93:ae:bc:18:
         71:fd:8b:e0:a2:ef:1a:30:7d:25:96:46:63:6a:e1:99:5d:bc:
         4e:d4:a2:8e:a3:91:1f:98:27:1b:95:fb:d8:1b:ce:5c:92:7c:
         df:6a:ec:a1:0b:b5:b9:d8:19:57:9b:c2:41:dd:26:8f:f8:95:
         b0:35:c3:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0UyREUxMTAvBgNVBAUTKEZDM0Y3QkIwNDU0MjU2RjMxRjI1Q0EwMDg2NEJDM0E2
QkQ3NTVGOTYwHhcNMjYwODE5MDEzNDE3WhcNMjYwODI2MDEzNDE3WjAYMRYwFAYD
VQQDEw02YTg1MDgxOS1iMWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzwY2JbmLf82sqzVi8CWHMLeNYGbj7n/IFRwMMuF3uvGBH5NPXsZg64G+/7t6
ImJHRx7WfIcGUKh7g8Iq7dISoqChQ+VUelQ3AOIabuGYTdOf9u9LWSPIjGbTVu4/
IUmvsogMmJ2DdDa+fc661kg4d+rhMXm7NJCx6u7LLCFqd++HfZfdtQ4Hpmto8mZB
6whgIu86eIbJZOFENk1Ls0ZBDiOf/3XD9fLmdYP0jNBfAq3dxXZB5gQZettXJtdB
BtcWPaFC+AqRyiJHWAIWokxki3jrdHjH003zSVfAFTFLlKLyTv8PVGp1wx3VYXVC
FtiBgt26YdY0fhpEKbPao08JjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHFYvxca
LYZZu8jDbKia/0A8gr85MB8GA1UdIwQYMBaAFPw/e7BFQlbzHyXKAIZLw6a9dV+W
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTJERS9BQkRFRTg3QTM3
RTYxMUVEQjUxRTFENDVDNEY5QUUwMi9fRDk3c0VWQ1Z2TWZKY29BaGt2RHByMTFY
NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19EOTdzRVZDVnZNZkpjb0Foa3ZEcHIxMVg1WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTJERS9BQkRFRTg3QTM3RTYxMUVEQjUxRTFENDVDNEY5QUUwMi9fRDk3c0VWQ1Z2
TWZKY29BaGt2RHByMTFYNVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAt5+R2y+3u62/SDhQP2EMGVz4PBYevUhkbp+nUmXo6qzRjwjQ2dyF96pORkl/
O6196Cf01UVaNnTT1mZ9Z0pWpHyba4gHJJ9vtZCGE+UjvqZM5XbGgyBEedgAaSSH
o+ms8Qrh3UYOVXr6oFsdDwI2EpOvBFFXgzOZATiIyLzyb6SvpVbd5GxOm/0NmHFO
dqJwNDhQKvSaB2TQ2Ba++QpOWqoNReLNgM4RhYNVmfyhOBPwB+cTKogsbS8AIaNe
R+nGp2uTrrwYcf2L4KLvGjB9JZZGY2rhmV28TtSijqORH5gnG5X72BvOXJJ832rs
oQu1udgZV5vCQd0mj/iVsDXDtg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:24 2026 by rpki-client