Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft
File:                     EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft (raw, json)
Hash identifier:          ycTinmtx1ZooUjPWn95mY4geV1EtZ10tlpeV6tDOqSo=
Subject key identifier:   4E:73:63:35:2A:88:EB:34:2B:57:49:5F:2B:C5:B8:04:A4:E9:71:B2
Authority key identifier: 11:8D:9B:DE:31:75:4F:98:54:CB:55:47:40:A2:99:F1:37:E2:41:E2
Certificate issuer:       /CN=A91CE814/serialNumber=118D9BDE31754F9854CB554740A299F137E241E2
Certificate serial:       018B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft
Manifest number:          0186
Signing time:             Wed 19 Aug 2026 05:09:50 +0000
Manifest this update:     Wed 19 Aug 2026 05:09:49 +0000
Manifest next update:     Wed 26 Aug 2026 05:09:49 +0000
Files and hashes:         1: EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl (hash: LHHN1re0idZ6Ohussfl1OXZ5rZiLJZDiB8KM2MJMSVM=)
                          2: CA8007604A3011EFB101441AC4F9AE02.roa (hash: wpEukBumTxmT4e2pU7Nv0zr8HBN5v6g/VuuPyeiJSDU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl
                          rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:09:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395 (0x18b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE814, serialNumber=118D9BDE31754F9854CB554740A299F137E241E2
        Validity
            Not Before: Aug 19 05:09:49 2026 GMT
            Not After : Aug 26 05:09:49 2026 GMT
        Subject: CN=6a853a9e-073d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:51:8d:ec:22:bb:bf:be:b4:37:4d:4d:71:b5:
                    7a:8d:b6:fc:17:1e:19:e3:67:08:ee:99:79:5a:c3:
                    31:07:8f:04:5f:a7:cf:29:5c:6d:35:6c:00:3d:aa:
                    05:a7:53:79:d0:d5:74:ce:76:26:5f:71:7f:fb:09:
                    8b:b5:f9:d8:2c:8a:5c:95:66:41:ed:6d:29:c6:5a:
                    aa:b8:85:61:f7:18:77:1d:14:3d:82:9f:7d:88:b1:
                    d4:84:8b:a9:86:be:e5:a1:49:b3:43:1d:6d:6d:09:
                    f0:c7:3c:d3:1d:0b:6d:a5:e9:4d:dd:9e:38:ff:96:
                    a9:42:49:b3:b4:a2:a2:6e:5e:63:2a:12:07:80:4c:
                    b9:68:dd:37:8e:c3:40:b6:6d:77:00:bf:9b:aa:b0:
                    d9:18:04:16:76:1a:22:4a:a8:60:22:c6:e5:5b:4b:
                    2c:2b:de:01:c2:6d:35:48:05:ef:bc:cc:2a:86:af:
                    4a:48:b2:b2:10:3a:37:15:54:2d:d3:a4:18:f3:08:
                    f8:c6:66:b8:70:b5:a2:fa:ce:66:ce:15:d2:e6:9c:
                    14:09:a7:ce:c6:9d:6d:25:fa:3a:7c:ca:ce:09:c7:
                    0c:ca:3e:a5:06:7b:31:11:81:9d:b6:05:a7:35:23:
                    1e:2d:af:29:15:0c:24:5d:84:00:72:e9:dc:8b:3a:
                    de:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:73:63:35:2A:88:EB:34:2B:57:49:5F:2B:C5:B8:04:A4:E9:71:B2
            X509v3 Authority Key Identifier:
                keyid:11:8D:9B:DE:31:75:4F:98:54:CB:55:47:40:A2:99:F1:37:E2:41:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ee:5d:1a:14:be:92:90:08:f6:02:7c:b3:7d:3b:74:d1:51:
         ae:7c:4d:26:4e:96:34:e6:68:dc:bf:3a:50:95:8f:a0:5f:29:
         6d:49:d7:fd:50:86:ce:d7:bf:64:70:44:8a:da:3b:2b:a4:b2:
         3a:f8:23:c8:aa:8a:02:eb:b5:d7:bd:76:25:b8:fd:96:80:c3:
         af:ee:bd:4f:9d:d7:54:c5:65:41:bd:f2:82:46:78:45:7c:ce:
         60:5d:d1:f7:f1:60:fe:bb:2b:88:08:ac:0f:73:bb:d9:49:be:
         a5:05:15:7c:8b:c0:70:9a:70:83:ea:37:b6:16:62:ff:fa:af:
         ac:3d:1e:73:f0:d6:05:cf:fa:0b:8f:05:33:33:07:e3:8e:02:
         5d:0b:5f:1f:71:66:7d:49:5c:da:c6:92:d0:d9:f1:6d:70:2e:
         4a:98:d6:33:ee:41:7b:e2:85:8e:fd:25:52:32:28:fe:30:85:
         81:8a:36:7a:54:46:d1:02:a3:ca:49:91:53:b9:68:73:88:4b:
         5b:e2:74:48:91:47:43:7e:d8:c3:95:bc:4b:94:98:f8:c1:7e:
         9b:09:57:ad:6f:c3:e8:23:f6:fa:fa:15:9e:27:34:e7:7c:13:
         ea:67:8a:22:17:d8:69:ff:c1:2b:07:55:9d:99:9e:8f:25:8c:
         ae:39:42:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:14 2026 by rpki-client