Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0ECA/EB2C1B86819011F19BD4BAFB95A30FBC/rwPQUKmJPHMQyt20Cu2s2rXiOOA.mft
File:                     rwPQUKmJPHMQyt20Cu2s2rXiOOA.mft (raw, json)
Hash identifier:          0Aw3b01l4sZTXzYum2/tIzLjltXxkgQWPEYtkW6ieIA=
Subject key identifier:   9D:73:01:4F:95:33:D3:25:35:A4:3C:B6:E8:EF:A8:DA:83:FA:82:BB
Authority key identifier: AF:03:D0:50:A9:89:3C:73:10:CA:DD:B4:0A:ED:AC:DA:B5:E2:38:E0
Certificate issuer:       /CN=A91D0ECA/serialNumber=AF03D050A9893C7310CADDB40AEDACDAB5E238E0
Certificate serial:       1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwPQUKmJPHMQyt20Cu2s2rXiOOA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0ECA/EB2C1B86819011F19BD4BAFB95A30FBC/rwPQUKmJPHMQyt20Cu2s2rXiOOA.mft
Manifest number:          16
Signing time:             Wed 19 Aug 2026 09:46:41 +0000
Manifest this update:     Wed 19 Aug 2026 09:46:41 +0000
Manifest next update:     Wed 26 Aug 2026 09:46:41 +0000
Files and hashes:         1: rwPQUKmJPHMQyt20Cu2s2rXiOOA.crl (hash: 1PCEsE9PeqDOXV4SQm6ScG/8f1yUm4YFZWWtKAtwcmk=)
                          2: BD22BBE0819111F19E01271496A30FBC.roa (hash: 8ErZg6ohMcZyXajrV7ek0726t8ekgrrUiQOSg+s1XoU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0ECA/EB2C1B86819011F19BD4BAFB95A30FBC/rwPQUKmJPHMQyt20Cu2s2rXiOOA.crl
                          rsync://rpki.apnic.net/member_repository/A91D0ECA/EB2C1B86819011F19BD4BAFB95A30FBC/rwPQUKmJPHMQyt20Cu2s2rXiOOA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwPQUKmJPHMQyt20Cu2s2rXiOOA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:46:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0ECA, serialNumber=AF03D050A9893C7310CADDB40AEDACDAB5E238E0
        Validity
            Not Before: Aug 19 09:46:41 2026 GMT
            Not After : Aug 26 09:46:41 2026 GMT
        Subject: CN=6a857b81-a816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c4:c2:90:c5:c1:6e:18:76:a9:9e:43:98:bf:
                    dd:b8:20:12:81:71:78:0d:a5:96:9f:83:fd:01:54:
                    7d:62:cd:8c:d3:a7:d8:32:74:57:e3:43:e4:d8:08:
                    af:76:75:21:d7:6f:a2:51:9c:2d:9c:68:d5:f6:21:
                    be:91:09:6d:3a:cb:10:fe:d7:aa:64:c5:48:23:13:
                    c3:40:14:28:de:23:ac:14:95:d8:fe:45:f6:88:97:
                    27:bd:b9:ab:c0:49:f7:c0:01:62:e8:77:05:f6:68:
                    52:b8:d6:19:ed:2f:a3:4e:6b:35:6d:40:8b:1c:af:
                    67:8b:cc:ef:44:68:c3:a8:e1:d9:7f:29:14:16:22:
                    b5:e4:b2:f8:92:44:16:26:ce:f1:5b:60:dc:7e:8f:
                    6e:48:83:ff:75:cb:92:78:b1:73:84:f8:87:dd:92:
                    59:fa:db:15:df:80:6d:8f:52:c7:75:c9:c6:93:f1:
                    d1:8f:91:bc:d9:b1:0e:3c:53:47:d6:38:9b:7b:0f:
                    e6:11:73:86:8c:3d:1a:dd:a5:65:89:c0:dd:90:a1:
                    7d:09:68:46:b9:79:b5:ab:d6:99:20:43:1b:f1:16:
                    c8:71:c9:09:ab:19:1a:9e:07:0b:73:48:ce:38:e6:
                    c8:63:64:9e:30:c5:42:6f:b2:2d:ee:57:ea:00:cf:
                    ec:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:73:01:4F:95:33:D3:25:35:A4:3C:B6:E8:EF:A8:DA:83:FA:82:BB
            X509v3 Authority Key Identifier:
                keyid:AF:03:D0:50:A9:89:3C:73:10:CA:DD:B4:0A:ED:AC:DA:B5:E2:38:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0ECA/EB2C1B86819011F19BD4BAFB95A30FBC/rwPQUKmJPHMQyt20Cu2s2rXiOOA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwPQUKmJPHMQyt20Cu2s2rXiOOA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0ECA/EB2C1B86819011F19BD4BAFB95A30FBC/rwPQUKmJPHMQyt20Cu2s2rXiOOA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:30:40:96:4c:9f:ca:96:26:4e:08:ae:18:58:23:b0:11:f7:
         8a:00:e0:3c:69:2e:fd:fb:80:da:f6:c6:63:16:5d:3f:c1:6e:
         d5:01:1e:6f:e1:5a:f4:91:4c:2d:7f:e8:4c:4e:0c:d9:23:56:
         b7:27:7e:3f:f6:79:6f:8f:5a:05:f9:3f:52:e9:b3:17:a5:1b:
         2d:1f:a9:58:fe:54:da:5a:a7:f7:aa:98:e6:98:75:35:39:c1:
         75:c3:3f:f7:ae:1b:aa:8f:ec:40:36:de:99:03:72:7d:46:2a:
         fb:a1:68:82:f7:de:30:75:29:f4:bd:7e:4a:ea:20:ec:0f:f2:
         4f:e1:03:9f:71:aa:25:35:81:0d:4e:be:3a:48:b1:f1:93:d0:
         d7:47:71:ee:1d:9d:88:69:b1:36:af:0a:76:e2:82:5f:4e:57:
         e8:eb:c0:35:4a:fd:38:22:f4:ec:db:02:ce:65:8c:c5:72:af:
         54:3e:0a:45:05:b2:e6:aa:e7:ab:8f:88:f4:b3:e6:b0:e9:51:
         66:97:f2:11:06:d7:07:37:8a:c9:af:fe:e8:56:c5:c5:3f:91:
         a6:3e:2f:49:1d:8a:7c:31:3f:ec:76:8f:68:9d:15:23:40:08:
         57:0a:c3:54:36:17:74:d7:25:f7:e4:9c:e3:e6:7d:aa:c9:ae:
         77:26:64:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:43:52 2026 by rpki-client