Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
File:                     KTvwacT02DHu52nVsTnjAh2zSwA.mft (raw, json)
Hash identifier:          uMxfqTA22PIM5PbgyloTPHdsrbmt6N37qRlAwB/XeLE=
Subject key identifier:   37:C5:10:3C:72:86:86:BC:5F:4E:27:12:2B:44:4A:09:FE:3A:53:80
Authority key identifier: 29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00
Certificate issuer:       /CN=A91CE65A/serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00
Certificate serial:       01A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
Manifest number:          018B
Signing time:             Wed 19 Aug 2026 05:09:37 +0000
Manifest this update:     Wed 19 Aug 2026 05:09:36 +0000
Manifest next update:     Wed 26 Aug 2026 05:09:36 +0000
Files and hashes:         1: KTvwacT02DHu52nVsTnjAh2zSwA.crl (hash: L6FZ1+nLI09Ln4b5Gl2WhEf8o4ufXeTph76rU7tf9NM=)
                          2: AAF88862D51811F0B469126CC4F9AE02.roa (hash: TL/EtRu22ONIBQU9AjMsDMVh2O5yUU42eXjpY7kgULg=)
                          3: AB61CD86D51811F09422126CC4F9AE02.roa (hash: TLLdIsk74f1u3haWZpgZc348xyx6vBubsic7GeU/I8Y=)
                          4: 62959E66682B11F09ECB0C24C4F9AE02.roa (hash: TDlLh34Bo1Qa+MNIEkMopEk/3BJaO3P1cNy38YBcx/A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.crl
                          rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:09:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416 (0x1a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE65A, serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00
        Validity
            Not Before: Aug 19 05:09:36 2026 GMT
            Not After : Aug 26 05:09:36 2026 GMT
        Subject: CN=6a853a91-b560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:26:0d:4e:ad:6a:68:d6:46:df:cf:52:98:ee:
                    1c:7b:d3:9b:b3:9c:de:9a:7b:2e:1d:b3:7f:c7:f8:
                    16:b5:5c:d0:1a:e5:78:2b:ad:a2:00:59:c0:2b:97:
                    3d:e3:7f:f1:ce:9f:74:7a:6b:b7:bf:a1:73:be:38:
                    b2:24:83:28:73:02:41:dd:51:b3:47:2c:6a:8a:52:
                    fc:60:b4:a7:aa:ba:5d:06:f3:6f:6a:85:de:8c:29:
                    76:84:f8:46:66:65:53:76:3c:13:ee:e5:1e:f0:69:
                    e7:2e:e3:a3:6a:0c:03:7a:91:82:45:a5:3c:a8:50:
                    35:8a:16:70:9a:fb:c6:61:56:af:bb:4a:e7:ac:23:
                    88:ad:45:0e:fa:f8:ad:d5:f2:e8:61:fd:ff:70:1a:
                    f9:a8:ea:a1:af:bc:21:15:dd:3c:30:f2:63:09:b7:
                    d2:7a:cb:50:a0:64:9a:4a:37:dd:bb:96:a1:99:ff:
                    a0:13:ef:4f:f8:e9:65:d5:df:4c:2d:11:52:83:b0:
                    29:e3:b6:c8:c4:d2:3f:3c:46:79:4b:24:7e:ef:0a:
                    e1:ee:88:3d:7f:ab:b6:72:04:e2:9e:31:d9:61:11:
                    b9:4d:21:e8:c5:e1:6f:20:20:f4:67:be:af:2d:fb:
                    bd:4f:d6:f9:f4:d4:83:f3:b8:2a:85:4a:82:62:a1:
                    26:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C5:10:3C:72:86:86:BC:5F:4E:27:12:2B:44:4A:09:FE:3A:53:80
            X509v3 Authority Key Identifier:
                keyid:29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:8d:0f:87:43:87:4f:24:e9:5a:51:2d:07:77:51:b0:2e:63:
         5f:74:94:cf:13:9f:92:51:fd:f2:28:d2:67:a5:8a:6d:96:a4:
         a5:9a:74:ff:4a:18:03:79:62:53:73:60:e2:19:56:d3:74:a6:
         1d:d3:75:67:d5:83:82:5b:2c:d9:6a:39:54:39:ff:11:dd:b6:
         73:6d:e9:6c:1d:96:8f:7d:5d:7b:69:60:07:17:7e:92:c0:47:
         2f:af:26:ff:08:2d:4e:4a:4c:22:19:ca:aa:0d:6e:b9:04:97:
         9d:5a:51:38:17:75:3b:ea:12:88:14:10:8d:11:71:32:a1:77:
         9b:1d:3a:f9:86:eb:9a:61:27:8d:f2:02:8d:c4:01:e2:da:5f:
         64:9b:5d:1b:1d:b2:b3:7f:a8:a6:d2:be:40:4a:6b:4e:99:21:
         c4:d7:98:58:31:7e:a5:ac:d9:20:be:47:0e:74:9f:51:6a:00:
         96:21:e8:f6:3a:d7:8e:df:d7:d0:5d:e5:52:b8:6b:5a:e8:34:
         bd:c1:3f:59:6f:73:80:ee:a6:2f:95:a3:74:92:1a:d6:51:24:
         1a:03:73:d3:a4:35:a9:24:d1:72:3f:b3:f0:16:dc:38:f8:2d:
         79:68:ed:e8:31:73:81:cc:2c:17:3b:cd:be:f8:e6:90:83:b8:
         8d:85:59:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:51 2026 by rpki-client