Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft
File:                     NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft (raw, json)
Hash identifier:          Y05LIP1XDEKNIXonJqtrIvOKohZ2QafazFmtSh/5lII=
Subject key identifier:   EE:29:3D:8F:F9:4F:B4:9F:1E:DA:E6:53:37:88:0C:A4:93:A9:2B:9D
Authority key identifier: 34:9E:59:7C:71:78:81:04:B0:64:9F:07:3A:BA:72:F6:5F:28:4B:9A
Certificate issuer:       /CN=A91D4E53/serialNumber=349E597C71788104B0649F073ABA72F65F284B9A
Certificate serial:       07D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft
Manifest number:          07CE
Signing time:             Tue 18 Aug 2026 21:42:33 +0000
Manifest this update:     Tue 18 Aug 2026 21:42:32 +0000
Manifest next update:     Tue 25 Aug 2026 21:42:32 +0000
Files and hashes:         1: NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.crl (hash: iLqBBteCJ/O+ek22dPtbYaxcRN0v67cIlVyCF21Fb/I=)
                          2: 349EFE924E6511EBBFE35D1AC4F9AE02.roa (hash: yDS8KPUeg2RwXUxl4NXgC/Qcz1X1ZUUtcQIrqZqysjs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.crl
                          rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2009 (0x7d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4E53, serialNumber=349E597C71788104B0649F073ABA72F65F284B9A
        Validity
            Not Before: Aug 18 21:42:32 2026 GMT
            Not After : Aug 25 21:42:32 2026 GMT
        Subject: CN=6a84d1c8-b4bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a5:c0:11:f7:da:d6:3c:c0:ce:49:76:1e:f5:
                    d0:8d:69:60:ad:72:e0:94:eb:9f:1c:b9:a9:21:ae:
                    5c:c3:b2:c0:a1:f6:07:95:1e:25:d9:e7:12:84:fd:
                    6e:a9:7d:1c:03:93:d7:9d:54:39:70:0a:45:e2:69:
                    58:63:56:b6:0e:59:2f:7d:e4:63:d5:62:ea:9f:e9:
                    7a:01:28:ad:77:df:45:59:3c:ca:a2:43:d5:bd:83:
                    fe:d0:03:db:0a:5c:41:4b:90:79:34:7a:bb:29:72:
                    ad:91:c5:c1:c0:00:cb:1b:95:bc:b8:02:db:8a:75:
                    47:2e:d4:a3:d0:13:a5:69:39:dc:6a:3f:1c:2f:4e:
                    a3:7e:2f:e4:51:73:a9:5c:e1:00:7f:26:89:88:1d:
                    1d:83:d0:e5:e0:9c:9d:00:0c:ea:62:fa:56:6a:9d:
                    95:67:9b:ac:6a:e3:60:98:b0:40:87:78:ed:76:f3:
                    7a:a0:26:4b:9d:09:64:59:5e:45:fc:d4:71:89:a2:
                    5d:b3:bf:20:88:d6:89:85:e5:57:a0:df:d8:6d:ec:
                    64:39:aa:84:b1:55:3c:0c:b4:5e:6c:91:ac:e9:f1:
                    e6:fd:4e:8f:14:cc:d2:b0:6a:4e:b1:b3:25:e9:20:
                    1d:21:8d:6d:a9:17:ff:e0:be:94:83:a1:cc:03:78:
                    3b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:29:3D:8F:F9:4F:B4:9F:1E:DA:E6:53:37:88:0C:A4:93:A9:2B:9D
            X509v3 Authority Key Identifier:
                keyid:34:9E:59:7C:71:78:81:04:B0:64:9F:07:3A:BA:72:F6:5F:28:4B:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:3a:9b:12:de:25:ad:88:a6:c4:73:38:cc:cd:5f:6a:46:60:
         ba:c8:26:39:5e:50:09:55:2b:48:f1:2b:dc:eb:91:f8:01:7b:
         21:db:9c:92:fd:47:f4:3f:9f:af:08:39:00:f9:f0:ff:b8:a5:
         09:5b:ea:2d:db:9a:a1:9a:0b:74:3d:f4:34:45:20:76:52:61:
         1c:fd:20:2e:19:d6:74:48:2a:a3:8b:be:92:21:46:72:2b:0d:
         0e:29:c3:45:3a:40:dd:fc:48:9e:22:88:01:82:34:89:27:b7:
         7b:77:cd:24:f8:ec:7d:75:b2:f7:cf:f6:fb:b2:aa:f3:c9:0c:
         9f:2a:ca:9b:ef:d7:82:c2:52:bf:11:3b:09:ca:9d:58:da:5b:
         87:19:0f:0b:ed:14:3e:07:d3:b6:4e:51:72:96:ed:77:22:ce:
         89:b8:b0:1d:91:c4:53:2a:3e:0b:6b:7f:17:9a:e1:31:b2:96:
         20:7e:12:a2:11:0d:d6:a2:cd:5f:1b:b1:a3:99:95:1c:3b:ae:
         48:1f:e1:8f:9b:6f:ae:e0:85:31:ea:30:9b:e6:7d:9a:3d:62:
         0f:fe:e4:56:d7:5e:64:db:f7:d8:a2:f2:00:fd:b6:59:41:48:
         fb:6c:15:cf:69:81:6b:ec:93:c4:e4:71:41:28:41:19:80:25:
         79:1c:ce:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:17 2026 by rpki-client