Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft
File:                     CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft (raw, json)
Hash identifier:          T4pdZZ/BjSRjKOWwfGeFCsE60YGcwUbpEoaZJ//IcVQ=
Subject key identifier:   67:09:96:59:6B:D0:DA:60:43:11:17:40:E7:4E:23:01:8C:18:82:72
Authority key identifier: 0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22
Certificate issuer:       /CN=A91D890E/serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822
Certificate serial:       0A0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft
Manifest number:          0A05
Signing time:             Thu 06 Aug 2026 19:38:25 +0000
Manifest this update:     Thu 06 Aug 2026 19:38:24 +0000
Manifest next update:     Thu 13 Aug 2026 19:38:24 +0000
Files and hashes:         1: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl (hash: gvARO4zHL0ThpLH9I7OkRvrrUow+RdNBUWWlZhOnX34=)
                          2: FDAEEFB0A12A11EAB063A548C4F9AE02.roa (hash: F2o3bVfdgibRTgDe0DxEdoAWCoUl7F1g3jf5bWQpITQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl
                          rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Aug 2026 19:38:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2575 (0xa0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D890E, serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822
        Validity
            Not Before: Aug  6 19:38:24 2026 GMT
            Not After : Aug 13 19:38:24 2026 GMT
        Subject: CN=6a74e2b0-c7c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:66:6a:86:58:7f:78:55:90:41:55:ce:3d:21:
                    9e:e2:29:77:5a:a2:53:0c:e0:ad:b0:b7:ee:13:10:
                    00:be:dc:16:89:21:2f:23:05:1f:83:d3:05:f5:a3:
                    9e:f9:53:80:5f:db:d0:a6:62:8f:ab:7b:bb:a5:7b:
                    6e:d3:ba:50:3b:6c:6c:c3:d3:37:16:19:61:57:fc:
                    94:93:0e:d6:20:84:6f:26:12:8a:50:8b:66:09:49:
                    f5:28:98:b6:26:a3:ab:73:02:d9:0f:29:b6:13:40:
                    ce:e3:30:2f:c7:96:79:b7:5c:d7:d6:80:84:28:44:
                    56:d0:d9:ca:d5:b6:45:22:49:01:51:48:a6:1e:7a:
                    b0:ff:7d:7a:63:c2:a6:35:61:68:e2:48:d5:fe:08:
                    07:14:41:a8:eb:6d:2f:59:c4:60:42:5c:ae:29:c3:
                    05:98:0f:44:62:91:0b:47:e8:0a:d8:57:aa:6d:6f:
                    cd:24:3e:a1:a7:e4:ee:24:d4:9b:b5:da:31:3f:97:
                    ff:e0:91:76:d0:5f:e0:7e:47:fc:0a:28:da:ef:e4:
                    15:2e:ff:89:23:ff:2f:b9:47:0f:be:c5:66:97:b8:
                    16:81:96:b8:55:30:45:26:0e:06:8f:74:12:db:a3:
                    86:d5:29:9e:fa:1a:63:66:f6:7e:55:2e:57:b2:91:
                    16:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:09:96:59:6B:D0:DA:60:43:11:17:40:E7:4E:23:01:8C:18:82:72
            X509v3 Authority Key Identifier:
                keyid:0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:31:66:08:95:b9:63:04:8f:23:58:ae:9e:4e:a1:2c:ad:a0:
         5d:de:b7:37:a8:f9:62:10:79:f0:df:12:62:25:af:12:50:cd:
         a5:82:7c:e7:17:93:59:1d:cc:f0:13:86:66:3a:6d:af:3c:57:
         ac:2a:02:e7:da:64:64:1c:ae:72:e0:d1:f7:83:1b:5c:7e:21:
         75:ad:15:cf:39:02:65:6e:3f:0f:51:f5:0c:29:2b:d1:fb:49:
         60:56:74:6b:d3:97:73:db:7a:07:0e:d5:cd:95:66:8c:54:5a:
         c1:ba:59:c8:27:11:c8:29:e3:0a:5a:32:9c:fe:94:42:c4:5a:
         dd:b9:56:77:b3:de:45:60:f3:7c:f0:9d:54:84:52:13:c4:78:
         96:84:e7:05:97:e2:2f:8f:12:67:23:df:67:2c:be:ea:5c:1e:
         2e:e4:2f:c1:20:4c:e8:c6:38:59:6a:ca:3d:da:80:d6:2e:9b:
         fe:14:2e:a6:58:b9:a0:a7:2d:a4:d6:32:39:59:aa:07:a6:d2:
         e3:b3:27:5b:a4:da:ec:52:f4:c6:53:c0:f2:ca:8a:ca:54:3e:
         d2:be:8a:d7:3f:25:4e:8a:f5:e3:f0:ab:75:96:d9:f7:4b:29:
         2c:e8:8f:74:5b:ea:db:a0:1d:02:eb:a5:3f:e9:a5:82:e6:ee:
         f0:de:9c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 01:24:32 2026 by rpki-client