Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft
File:                     Y3kC4bqWiB1HLuyt-kW1V348HDE.mft (raw, json)
Hash identifier:          W1+9IYac63koIJac4zvz96tn4ZTyHPGr0wgfwYapmCU=
Subject key identifier:   B5:12:F7:CB:F8:71:70:CD:14:18:DB:A3:80:89:5F:0A:3A:8F:CF:09
Authority key identifier: 63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31
Certificate issuer:       /CN=A91CE524/serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31
Certificate serial:       0209
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft
Manifest number:          0204
Signing time:             Wed 19 Aug 2026 03:42:06 +0000
Manifest this update:     Wed 19 Aug 2026 03:42:06 +0000
Manifest next update:     Wed 26 Aug 2026 03:42:06 +0000
Files and hashes:         1: Y3kC4bqWiB1HLuyt-kW1V348HDE.crl (hash: 1Tlr01A/LafsBkxWmX1k1zOmR0rTC/t75jCP/zLbK0M=)
                          2: FF1FE402898011EEB3403779C4F9AE02.roa (hash: esJHSwP5qiLnITDA6HOx8pEFmC6BOBPZgF6kgLGLSk8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl
                          rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:42:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 521 (0x209)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE524, serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31
        Validity
            Not Before: Aug 19 03:42:06 2026 GMT
            Not After : Aug 26 03:42:06 2026 GMT
        Subject: CN=6a85260e-13e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8f:d6:b1:f3:3a:01:14:5e:39:55:a6:27:88:
                    82:aa:ff:22:8d:56:07:cf:9b:c1:85:81:6b:f8:65:
                    07:06:c0:57:50:ca:62:6e:1b:11:1d:f5:dc:92:56:
                    8c:9c:f9:a3:fc:db:04:77:2e:f0:06:e7:3d:db:42:
                    c4:a8:78:af:5a:57:18:f1:24:d9:54:bb:62:42:4d:
                    d6:58:57:b9:87:93:55:c5:e5:02:74:45:20:cd:15:
                    92:81:c9:38:33:76:e8:13:a4:24:7d:d2:dc:5a:92:
                    71:c6:b2:bc:41:31:b6:39:42:a6:75:8a:80:ab:ba:
                    80:89:c3:b2:6f:df:3b:7b:f3:23:81:4c:3d:40:20:
                    69:b0:eb:e5:b3:e5:8e:2c:57:c6:6b:2c:a6:fa:f5:
                    31:6d:51:b0:59:be:73:91:97:f7:f9:6f:83:66:af:
                    e9:8c:b7:6b:1c:cc:15:d1:29:89:1d:3d:68:eb:6b:
                    9c:3c:ed:07:be:40:b7:be:3a:ed:35:69:ec:a3:68:
                    d0:5f:a3:7a:a0:da:bd:aa:be:30:c3:6a:d0:ff:64:
                    0b:9d:8a:21:c3:cb:b4:68:a0:65:de:c5:9a:a1:40:
                    e6:64:23:8f:a7:82:a9:31:ca:60:79:00:91:b1:5c:
                    26:64:7d:9d:83:32:46:8c:d2:08:f0:b4:5a:c6:d6:
                    e2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:12:F7:CB:F8:71:70:CD:14:18:DB:A3:80:89:5F:0A:3A:8F:CF:09
            X509v3 Authority Key Identifier:
                keyid:63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:07:8c:46:fb:3a:85:bc:ea:1b:e2:16:0d:70:38:91:8f:88:
         73:54:dc:18:bb:df:dd:c0:0d:5e:c1:2b:10:ea:bb:62:3c:55:
         38:77:d2:f6:a5:71:9c:a0:87:9d:2a:a1:8a:33:87:da:14:c4:
         89:dc:4e:b5:b2:bb:a7:3d:b6:d0:e7:91:ea:f1:60:fe:02:2b:
         68:d3:18:d2:d4:10:a3:14:d5:fc:34:53:a6:48:e9:81:eb:47:
         a6:cb:7d:07:6b:b1:c7:83:18:99:d8:61:ba:e3:73:00:0c:46:
         08:a4:dc:38:99:02:71:d9:68:15:77:18:a1:6b:74:5b:f0:ec:
         83:4a:19:89:48:0e:d0:96:da:be:eb:11:47:cd:28:83:59:79:
         59:ff:2b:77:d8:3d:28:7c:52:6c:ff:73:6d:de:23:4c:db:46:
         88:b2:9e:4c:c6:c3:a2:a4:73:c6:17:14:d9:60:f9:cf:dc:8c:
         1c:31:6b:f9:8a:76:24:b9:4f:5d:95:20:a2:3a:93:c1:e4:c9:
         fd:82:66:05:f5:6a:3e:f4:a1:bb:a7:dd:bf:7b:2e:4e:a9:62:
         37:ab:ea:77:e9:35:90:0b:fe:99:6f:f8:32:2c:b1:65:15:12:
         88:3a:1e:ce:af:45:ff:3b:fe:7b:ad:61:4a:7d:5a:ac:4b:bb:
         2b:bc:de:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:40 2026 by rpki-client