Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
File:                     MCcwgVkVGUGrc0xyBhfff9zCQQw.mft (raw, json)
Hash identifier:          dx8ReBFx1HgnKTBd2Kwdmy6xEptOe6Vu64g4gWF5VZI=
Subject key identifier:   9F:7F:7A:EF:B6:28:46:EE:AB:F6:1D:7A:41:FE:49:3E:33:8F:28:C6
Authority key identifier: 30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C
Certificate issuer:       /CN=A91D17E8/serialNumber=3027308159151941AB734C720617DF7FDCC2410C
Certificate serial:       10AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
Manifest number:          108C
Signing time:             Wed 12 Aug 2026 17:15:54 +0000
Manifest this update:     Wed 12 Aug 2026 17:15:54 +0000
Manifest next update:     Wed 19 Aug 2026 17:15:54 +0000
Files and hashes:         1: MCcwgVkVGUGrc0xyBhfff9zCQQw.crl (hash: XnOFhXSN9VJqwvjQ5D5a2lV54jjilmcJwWSCFomWWRA=)
                          2: 2E6E6386D21E11F0B5C0A977C4F9AE02.roa (hash: nTtKzX6nzx2xavwKMXRS2HOpDCquUtryYE0DdxLYbWk=)
                          3: 35A169488D8611E9B1106E6FC4F9AE02.roa (hash: RVqLv3EtRj5ErqJMVVt6m4xRrHJQaRXNG5AD8ZsgIFk=)
                          4: 1777F060A7CE11E980B87114C4F9AE02.roa (hash: 6dJXIvYHzCnEDXXSTc0Eos17d9MIrK7ku8xw5lKvqNQ=)
                          5: D8C69E2A5C5511E98C4B6D6BC4F9AE02.roa (hash: +mWwcwjzpPjSVEv9OnV6PLbugEi6LgvVywkhj6tvDeI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl
                          rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Aug 2026 17:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4269 (0x10ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D17E8, serialNumber=3027308159151941AB734C720617DF7FDCC2410C
        Validity
            Not Before: Aug 12 17:15:54 2026 GMT
            Not After : Aug 19 17:15:54 2026 GMT
        Subject: CN=6a7caa4a-eac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cf:d3:f0:d4:b7:5c:e2:c5:78:43:4d:f4:71:
                    84:7b:8f:3e:c6:83:5e:d9:8a:bc:cf:85:a4:ed:d2:
                    50:47:d5:c9:f2:65:ce:51:67:aa:31:8c:d2:cc:9e:
                    15:a6:b6:5e:ae:22:2a:3e:75:ed:e4:aa:b4:60:78:
                    75:69:23:09:75:e2:20:6f:fb:b1:e1:0b:db:d5:64:
                    a3:85:fc:a7:bc:f0:f5:23:81:8c:e0:43:3b:bf:cc:
                    2d:37:d8:0f:61:73:ef:ee:d3:39:a6:2f:7d:7d:e1:
                    b1:84:7e:4b:3f:a9:fd:f9:1b:4a:fe:75:20:f8:b2:
                    68:6f:1f:25:5f:9f:6d:6c:ec:f4:c9:f9:78:77:11:
                    18:64:0f:b3:32:3f:fd:d7:6b:7c:d5:87:d1:71:a1:
                    d8:59:9c:4c:0f:82:f3:b1:97:da:8f:cd:e1:03:38:
                    12:6a:73:f7:e7:bc:c9:d3:7d:4f:8f:05:6e:25:83:
                    1f:d0:cf:f1:3d:22:80:57:42:db:39:84:ac:95:81:
                    b2:92:ec:5e:45:f5:f8:b7:af:2d:ce:f9:e5:8d:d4:
                    4f:d7:cf:08:67:28:dc:63:9c:69:ec:5b:3c:28:8d:
                    bf:71:af:1b:87:43:b2:bc:2c:00:78:e2:7b:3f:8a:
                    fd:06:20:06:c0:d8:09:d3:12:0e:e4:12:4b:74:19:
                    a5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7F:7A:EF:B6:28:46:EE:AB:F6:1D:7A:41:FE:49:3E:33:8F:28:C6
            X509v3 Authority Key Identifier:
                keyid:30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:74:88:c2:6c:69:5b:f6:29:98:b9:58:de:60:31:82:fb:b3:
         84:7e:f7:bf:0d:6e:4c:b5:ae:31:e3:ae:d1:37:df:fb:96:66:
         1c:1b:ae:16:1b:1a:1c:7e:c3:22:a8:a6:6f:9f:d6:85:c8:30:
         ef:75:3a:10:ab:88:fc:3f:a3:fd:c7:57:58:58:87:0e:68:04:
         42:d3:b7:c0:37:dd:db:54:36:d5:c6:3e:20:7d:60:f7:cc:94:
         24:12:f7:8e:b7:72:e6:db:47:74:4f:6b:11:dd:a4:56:37:dc:
         92:d3:67:1b:97:c8:d0:93:fa:16:1a:11:02:8b:bc:90:7d:97:
         7c:a0:bb:00:2d:c1:02:19:9a:f5:f7:43:5e:99:f4:fc:13:6d:
         a6:14:a1:4e:7b:52:67:24:19:74:5e:53:96:ba:8d:1f:b4:99:
         22:7e:4d:ed:ec:4a:ad:b5:5c:e8:ea:b2:7e:8f:c2:a4:b3:fd:
         da:d8:00:cd:28:d7:50:b4:c8:cc:ad:4d:6e:43:80:b9:aa:af:
         7a:b8:e5:a8:80:4d:6d:03:d1:ff:ee:d7:63:96:12:99:9c:76:
         c9:2f:44:c2:e7:17:84:57:15:2a:b9:22:ab:4d:0e:f2:8d:5a:
         ea:bc:82:ce:42:a1:dc:ec:76:17:83:18:29:ae:26:2e:c4:25:
         e9:66:38:96
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDE3RTgxMTAvBgNVBAUTKDMwMjczMDgxNTkxNTE5NDFBQjczNEM3MjA2MTdERjdG
RENDMjQxMEMwHhcNMjYwODEyMTcxNTU0WhcNMjYwODE5MTcxNTU0WjAYMRYwFAYD
VQQDEw02YTdjYWE0YS1lYWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2M/T8NS3XOLFeENN9HGEe48+xoNe2Yq8z4Wk7dJQR9XJ8mXOUWeqMYzSzJ4V
prZeriIqPnXt5Kq0YHh1aSMJdeIgb/ux4Qvb1WSjhfynvPD1I4GM4EM7v8wtN9gP
YXPv7tM5pi99feGxhH5LP6n9+RtK/nUg+LJobx8lX59tbOz0yfl4dxEYZA+zMj/9
12t81YfRcaHYWZxMD4LzsZfaj83hAzgSanP357zJ031PjwVuJYMf0M/xPSKAV0Lb
OYSslYGykuxeRfX4t68tzvnljdRP188IZyjcY5xp7Fs8KI2/ca8bh0OyvCwAeOJ7
P4r9BiAGwNgJ0xIO5BJLdBmlEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ9/eu+2
KEbuq/YdekH+ST4zjyjGMB8GA1UdIwQYMBaAFDAnMIFZFRlBq3NMcgYX33/cwkEM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTdFOC9GMTZFMTg1NjVD
NTMxMUU5OUFCNUNGNjhDNEY5QUUwMi9NQ2N3Z1ZrVkdVR3JjMHh5QmhmZmY5ekNR
UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01DY3dnVmtWR1VHcmMweHlCaGZmZjl6Q1FRdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MTdFOC9GMTZFMTg1NjVDNTMxMUU5OUFCNUNGNjhDNEY5QUUwMi9NQ2N3Z1ZrVkdV
R3JjMHh5QmhmZmY5ekNRUXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbHSIwmxpW/YpmLlY3mAxgvuzhH73vw1uTLWuMeOu0Tff+5ZmHBuuFhsaHH7D
Iqimb5/Whcgw73U6EKuI/D+j/cdXWFiHDmgEQtO3wDfd21Q21cY+IH1g98yUJBL3
jrdy5ttHdE9rEd2kVjfcktNnG5fI0JP6FhoRAou8kH2XfKC7AC3BAhma9fdDXpn0
/BNtphShTntSZyQZdF5TlrqNH7SZIn5N7exKrbVc6Oqyfo/CpLP92tgAzSjXULTI
zK1NbkOAuaqverjlqIBNbQPR/+7XY5YSmZx2yS9EwucXhFcVKrkiq00O8o1a6ryC
zkKh3Ox2F4MYKa4mLsQl6WY4lg==
-----END CERTIFICATE-----
Generated at Thu Aug 13 17:14:59 2026 by rpki-client