Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
File:                     THDgIDLqWcKv1UGhhw10sEDRtqI.mft (raw, json)
Hash identifier:          7vAVkZtvSYH8YrzsvWLWdqK3R4xoAWVapFQd5SOo498=
Subject key identifier:   D3:13:29:7B:84:27:0C:24:D2:EC:2F:B5:A8:65:1D:3A:29:3F:4E:E8
Authority key identifier: 4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2
Certificate issuer:       /CN=A91D615F/serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2
Certificate serial:       0A02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
Manifest number:          09F3
Signing time:             Tue 18 Aug 2026 20:06:51 +0000
Manifest this update:     Tue 18 Aug 2026 20:06:51 +0000
Manifest next update:     Tue 25 Aug 2026 20:06:51 +0000
Files and hashes:         1: THDgIDLqWcKv1UGhhw10sEDRtqI.crl (hash: ESEOj8nM1dgbL3VoMj/hXXx5F0TO0aZ/goFxGLswGBQ=)
                          2: 193128AAD15D11EE8BD5C02BC4F9AE02.roa (hash: GsGKse+jvZV0Ypq4tt+9yydVOYc4iOZZx7JlseayyeQ=)
                          3: 05CABF92A64111EAB544074CC4F9AE02.roa (hash: SF124PgFJdMgEInYT/GtV8Bi1Qw6o/zRPCKi4I6lOOw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl
                          rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:06:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2562 (0xa02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D615F, serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2
        Validity
            Not Before: Aug 18 20:06:51 2026 GMT
            Not After : Aug 25 20:06:51 2026 GMT
        Subject: CN=6a84bb5b-90e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:38:3b:a4:2a:ed:03:5a:1d:8c:30:03:da:1f:
                    3b:34:0c:9a:c2:14:c2:51:a9:fd:15:7c:59:0f:f6:
                    97:19:f3:20:c6:83:11:d5:58:a9:61:c4:25:30:1e:
                    ad:ee:49:48:f9:59:5a:db:ba:2c:09:0c:de:68:32:
                    6a:69:b8:92:44:18:9d:0a:4e:e7:42:e3:5f:fd:9b:
                    70:cc:b5:03:2a:d2:3b:32:bb:88:b0:23:17:68:d1:
                    a7:4b:48:a9:49:85:02:d9:50:67:ee:8b:47:d6:60:
                    c9:24:c2:1c:46:88:cd:16:38:03:2b:af:9c:aa:44:
                    cc:48:a7:de:f4:df:9b:96:6d:c6:88:29:13:66:37:
                    bf:d8:8c:92:d2:78:e0:d6:66:31:b4:0d:6b:30:84:
                    8a:88:aa:ed:58:23:83:2d:b0:6f:90:22:db:cd:fa:
                    6c:37:1b:e6:78:41:1e:76:a0:92:57:61:8d:1c:f0:
                    55:49:d7:c0:09:33:b1:90:ed:c2:53:3a:2a:3f:d7:
                    65:f3:cf:af:4b:7d:1b:81:e0:0a:3c:aa:41:27:10:
                    91:df:96:4f:aa:3b:c8:43:cc:b0:79:6e:e4:f6:45:
                    8e:bd:0d:92:74:5b:4c:aa:25:a3:3c:ec:58:a7:bf:
                    ea:55:74:b8:dd:16:ea:41:58:fa:ab:d3:03:fc:38:
                    0f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:13:29:7B:84:27:0C:24:D2:EC:2F:B5:A8:65:1D:3A:29:3F:4E:E8
            X509v3 Authority Key Identifier:
                keyid:4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:a2:4f:f3:d9:3f:17:47:22:e6:00:77:21:9b:d0:13:2e:56:
         3f:07:65:0f:f6:8e:29:52:bb:b3:9b:a2:9c:2c:fb:5a:f9:26:
         ce:b0:aa:d4:b6:87:2a:dd:33:48:79:ec:2a:54:26:66:50:b8:
         6c:a2:c4:aa:fd:69:d2:1b:34:25:3d:1b:6e:46:91:2f:48:db:
         9a:23:7f:8d:63:a1:c9:ba:7f:94:12:96:8a:c9:39:bc:00:b8:
         dc:ae:96:82:b0:e1:68:8b:14:ff:f7:6d:79:d1:b2:7c:96:9b:
         a7:ea:72:56:95:1c:62:aa:41:40:1d:dc:05:f7:f8:e8:53:bd:
         14:b6:7b:88:87:c2:c9:2a:a7:e9:bb:44:69:21:f7:99:3c:01:
         e1:24:9e:34:88:2f:2c:fc:de:19:87:72:a2:61:90:70:ef:ae:
         40:bf:e5:52:8e:f6:e2:2a:16:67:23:df:2e:7e:89:51:d7:47:
         62:71:91:0f:a7:ce:28:28:ed:cf:1c:08:85:f8:bb:b9:ab:68:
         2b:28:fe:d1:48:fc:de:ab:91:04:2c:5c:b2:9a:9d:3f:55:bb:
         57:76:82:ab:1d:7f:bd:7b:f3:92:4f:91:43:2e:b5:3a:d6:cd:
         03:0d:33:ae:2e:c9:61:0d:5c:66:eb:f1:4c:0b:78:78:51:3a:
         6c:b1:8a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 22:26:28 2026 by rpki-client