Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft
File:                     5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft (raw, json)
Hash identifier:          ixYOOs1K9qy2fAULPEHNZtXRkeDo5i+Ag2Po5ceZGxY=
Subject key identifier:   E4:76:13:81:B9:64:C6:60:64:FC:B3:D5:C3:53:DE:8F:70:DD:E9:A1
Authority key identifier: E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20
Certificate issuer:       /CN=A91D2B62/serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720
Certificate serial:       0187
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft
Manifest number:          017D
Signing time:             Wed 19 Aug 2026 05:14:46 +0000
Manifest this update:     Wed 19 Aug 2026 05:14:46 +0000
Manifest next update:     Wed 26 Aug 2026 05:14:46 +0000
Files and hashes:         1: 5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl (hash: 37QypEY8LbOjhU6TnKWc1F6/ERI1/bEaH7dv95/AfPc=)
                          2: E9BDEF2CABD011F0B868ED11C4F9AE02.roa (hash: 6qNEgwLHVAYpgshoxndpSifoEhXIYB8Fbev50w/bqoE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl
                          rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:14:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2B62, serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720
        Validity
            Not Before: Aug 19 05:14:46 2026 GMT
            Not After : Aug 26 05:14:46 2026 GMT
        Subject: CN=6a853bc6-8824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c5:b2:8a:aa:ae:f7:49:8c:41:21:13:6a:96:
                    8c:56:8f:b1:67:9a:e6:80:20:2a:de:71:ef:fa:8f:
                    94:34:86:ee:78:79:9f:b9:16:73:9e:85:84:7c:21:
                    be:7d:47:64:b4:46:3d:a1:f9:14:fa:38:58:ba:d7:
                    57:2f:8f:e6:63:7c:50:50:a4:31:f6:b0:b0:fb:c7:
                    e1:c6:17:a2:0f:9c:8c:92:f2:9c:07:97:78:ce:2a:
                    e6:82:14:df:76:1c:26:44:83:72:60:a3:64:23:b5:
                    67:8d:1e:cc:3e:21:61:fd:85:2d:4b:9d:d8:be:8e:
                    14:52:44:aa:ae:50:82:ec:a7:6f:13:0c:ef:51:5d:
                    cb:6e:17:e1:70:a7:1b:56:db:08:d1:d6:89:96:36:
                    c3:7e:cf:58:61:41:9c:37:3b:0c:af:c3:15:1e:4a:
                    89:2a:64:30:81:e5:3c:09:19:77:a7:9a:eb:04:10:
                    92:a8:7a:ba:59:80:bf:60:40:6d:8d:19:06:a8:39:
                    84:20:98:88:e0:5d:3d:36:2c:3a:5c:17:71:dc:88:
                    f6:de:ec:5a:e9:36:3d:ed:2a:06:38:b0:f2:5c:6e:
                    67:1a:af:ec:8a:b5:75:8b:6a:00:90:aa:e3:04:b3:
                    b6:9d:8b:a8:02:e4:ca:98:e8:f4:c8:67:ef:e0:3e:
                    f1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:76:13:81:B9:64:C6:60:64:FC:B3:D5:C3:53:DE:8F:70:DD:E9:A1
            X509v3 Authority Key Identifier:
                keyid:E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:6d:5f:9e:d0:fd:b5:fc:8a:cb:56:54:07:9a:47:08:d3:0e:
         14:fd:b9:ef:aa:7a:3d:99:9d:bf:53:83:6e:33:c4:3d:a9:aa:
         f6:33:f3:ee:65:3a:c3:6a:20:d9:f1:9e:f5:57:7b:e1:6f:75:
         74:48:69:d0:46:72:14:4d:27:e2:0f:61:1a:d0:a8:db:b3:db:
         d8:f9:7d:9d:89:8f:45:ee:5c:f4:68:1e:8a:49:2f:20:7e:20:
         28:d5:26:16:d1:f9:4a:05:d0:cb:79:97:62:c3:7e:b1:42:82:
         dc:0f:41:63:fb:18:6f:76:cd:00:77:41:c9:9a:c3:0d:86:ab:
         42:23:99:a3:ec:5a:c4:14:df:db:36:37:86:b3:34:07:a2:8f:
         3a:63:5c:3f:ff:9f:fb:bf:11:66:2d:83:77:80:fb:50:f2:a8:
         9b:5f:7f:b0:dd:e2:67:bf:87:ac:32:de:cb:0b:36:2b:31:a3:
         f7:32:2c:a7:ca:f9:04:4c:93:59:ec:3d:0f:10:a7:46:2a:ef:
         3e:60:4f:13:2b:38:97:61:47:c0:21:6a:9b:b0:ab:9a:13:88:
         88:bc:9c:ef:2d:7b:72:13:73:57:2e:5f:5c:36:57:7e:d9:bc:
         69:6f:5d:09:0b:ae:fc:d3:de:02:6f:21:53:4b:1f:53:70:c4:
         aa:ee:83:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:33 2026 by rpki-client