Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
File:                     0uwHkLxOvTQHyVB05rVrQAA4Eto.mft (raw, json)
Hash identifier:          +efD1krMXfDDBLQs6fAi5HfZcPjMPP2oNq9wBEC2RRk=
Subject key identifier:   31:D1:ED:E9:12:ED:AE:23:4C:83:70:2C:97:91:6B:F9:53:10:4A:C0
Authority key identifier: D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA
Certificate issuer:       /CN=A91D87CF/serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA
Certificate serial:       0BB9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
Manifest number:          0BAF
Signing time:             Tue 18 Aug 2026 19:20:26 +0000
Manifest this update:     Tue 18 Aug 2026 19:20:26 +0000
Manifest next update:     Tue 25 Aug 2026 19:20:26 +0000
Files and hashes:         1: 0uwHkLxOvTQHyVB05rVrQAA4Eto.crl (hash: fESll1d4E0RNnJmpecxrnlUQ1z7ZGgT0hYlCV3BktTM=)
                          2: 5E2A4C584ED911EAA7F1A521C4F9AE02.roa (hash: Cslgx6TP1vwc2kxEUex+I7Q7tERor+Z4yAGOK7JvT0w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl
                          rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3001 (0xbb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D87CF, serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA
        Validity
            Not Before: Aug 18 19:20:26 2026 GMT
            Not After : Aug 25 19:20:26 2026 GMT
        Subject: CN=6a84b07a-442b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a7:8e:01:60:33:f2:91:37:6f:24:11:dc:53:
                    38:f3:89:8c:08:25:be:2b:d4:fa:2b:8a:a0:77:c9:
                    2b:c9:2d:55:18:4c:18:b6:8a:9e:09:23:6f:52:29:
                    4b:2b:0c:a4:6e:c9:97:af:36:53:cf:a3:9e:d2:da:
                    ac:a2:2f:83:be:43:54:56:66:cf:b4:e9:e2:d3:86:
                    a1:cc:2c:bd:81:ec:be:40:8a:37:63:1f:ff:f2:f3:
                    8b:66:9b:75:cc:e6:93:98:d4:1c:24:7e:55:ac:8a:
                    06:f5:fc:5a:22:d7:1f:d1:5f:be:67:2e:59:f6:31:
                    9c:f0:c7:5f:ff:f9:38:c8:83:85:5b:80:e7:4d:05:
                    9b:5b:ba:ab:b2:70:fc:bf:cf:7d:d0:d9:1d:b3:f9:
                    b2:f7:f0:6a:ed:05:7f:19:2b:d7:75:e4:35:35:9f:
                    f9:fe:05:42:4b:81:a6:ca:30:24:7b:33:2a:82:25:
                    aa:18:92:58:af:ff:99:ea:9f:07:9a:de:35:09:f3:
                    3e:86:dc:3c:7d:0f:0a:9f:b7:3f:bf:8b:13:6c:cc:
                    42:ac:de:e9:c3:3e:a0:90:0a:ad:11:07:60:8b:3b:
                    96:fb:53:2b:81:06:23:e9:e6:2b:d8:d1:25:fa:71:
                    d0:58:71:e4:f3:1c:b7:19:f7:90:f7:13:3c:83:7e:
                    78:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D1:ED:E9:12:ED:AE:23:4C:83:70:2C:97:91:6B:F9:53:10:4A:C0
            X509v3 Authority Key Identifier:
                keyid:D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:5c:56:32:03:2e:bf:d6:70:fb:02:cc:92:a8:7b:5d:a5:2d:
         9d:fa:61:d5:6e:13:b9:46:4d:98:36:47:54:ae:54:f5:a9:cf:
         91:62:f6:f1:73:e4:36:05:3a:26:07:62:cf:92:2b:18:39:a9:
         0e:6e:20:28:22:97:3e:9c:74:6c:fb:20:f2:c5:44:1a:d1:f7:
         b1:7c:2f:d5:0b:b2:81:b7:ed:71:39:5f:0d:1c:b4:30:95:67:
         96:42:32:7f:b6:75:15:0d:19:09:57:fc:f8:76:60:23:98:4f:
         ee:be:e9:43:51:2f:55:5f:04:34:df:93:47:7c:54:ef:01:c5:
         b0:38:97:b4:10:69:5a:2c:10:ed:28:6b:aa:3c:7a:11:e8:d6:
         33:c2:a1:0d:89:0b:43:69:35:81:3e:32:df:1f:79:3a:58:5f:
         c4:6f:ab:0f:41:28:82:dd:13:0a:20:f4:1a:e9:96:8d:9c:cb:
         55:59:0d:26:62:dc:92:5e:9a:44:83:36:7b:f6:5f:3e:c6:c8:
         71:83:2b:06:1f:0f:f7:72:7a:6d:16:03:fb:a1:1b:26:9e:de:
         22:de:b7:97:dc:ea:fc:3b:db:4a:dd:20:76:18:af:60:2d:5c:
         4e:35:88:52:d1:7c:65:ed:14:c7:28:bb:6f:6a:94:4c:76:c8:
         9f:99:44:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:42 2026 by rpki-client