Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft
File:                     hHdPRraSCgXa3UJHe6qzbucka5Q.mft (raw, json)
Hash identifier:          9pcBWYMNm5BUtvkHaWXYKLAeHf7YmDlJdaUfEK8xNnI=
Subject key identifier:   D7:EA:AE:41:B2:F7:87:7C:F2:30:A9:B3:33:4E:8D:CF:8E:6D:24:4B
Authority key identifier: 84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94
Certificate issuer:       /CN=A91D9162/serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94
Certificate serial:       0DFF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft
Manifest number:          0DF4
Signing time:             Tue 18 Aug 2026 18:04:52 +0000
Manifest this update:     Tue 18 Aug 2026 18:04:52 +0000
Manifest next update:     Tue 25 Aug 2026 18:04:52 +0000
Files and hashes:         1: hHdPRraSCgXa3UJHe6qzbucka5Q.crl (hash: dW9JMQt3M0wJYdlEgM7KDojiS+WuTSrPYHeasFRAT2c=)
                          2: E727A05600FD11EB9286115AC4F9AE02.roa (hash: osTG3y7Aw7NEIaD/HGEqWnzu7+4Rus4i5AaVvHjByPU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.crl
                          rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:04:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3583 (0xdff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9162, serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94
        Validity
            Not Before: Aug 18 18:04:52 2026 GMT
            Not After : Aug 25 18:04:52 2026 GMT
        Subject: CN=6a849ec4-9716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6d:80:64:fb:fa:21:c9:8e:bf:5c:5b:7a:c2:
                    c6:fc:16:d5:49:94:1a:f8:ef:3d:02:dc:c6:06:99:
                    d4:e3:b7:00:dd:b5:0d:9a:7e:64:1b:32:a5:20:62:
                    82:e7:01:28:46:b3:9a:59:41:36:ff:b3:e6:ff:7a:
                    66:4b:b3:a0:1a:63:e9:ed:02:1e:37:9f:54:93:de:
                    34:0a:f3:84:74:b0:ce:f5:7c:04:f8:a9:25:d0:3d:
                    1b:8b:2f:7b:b3:d0:52:02:1d:e0:6c:cd:3a:57:74:
                    4c:64:b9:1c:ea:8e:d2:24:89:de:84:2f:3a:8c:e7:
                    81:b5:db:da:60:4c:0e:b8:80:7c:25:b4:ae:ee:19:
                    10:76:44:0e:c5:36:c8:ef:1b:90:63:c4:fc:62:a3:
                    d6:58:ab:6e:94:a6:9d:4c:ec:38:0b:bf:86:a3:80:
                    8d:34:f3:60:b2:88:3b:fd:97:6c:31:1a:44:fd:29:
                    88:99:7b:0b:f6:b6:f7:b3:88:a7:1c:25:3c:c6:38:
                    38:55:13:ea:87:3f:cc:5f:e1:10:d8:2c:5e:92:df:
                    6c:8a:65:d4:d6:e9:e8:bd:87:0f:78:f4:0f:d5:cf:
                    ed:13:98:99:71:a5:14:53:6e:b2:80:62:f1:9e:b7:
                    81:08:49:71:5a:af:92:16:2f:02:a1:de:55:18:30:
                    37:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EA:AE:41:B2:F7:87:7C:F2:30:A9:B3:33:4E:8D:CF:8E:6D:24:4B
            X509v3 Authority Key Identifier:
                keyid:84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:de:3d:62:ba:a2:47:0f:9f:0c:97:61:87:20:97:78:b1:a0:
         ea:fa:ae:09:47:69:22:b3:08:d6:e0:33:c3:b1:e9:2c:48:2a:
         5a:46:6e:02:76:f2:8f:95:9d:74:93:0a:29:82:37:71:11:68:
         ef:59:30:34:d3:02:17:f9:24:f7:2e:a1:dd:ca:57:3b:b4:ef:
         81:ab:ec:84:ff:be:03:0b:6c:a7:c0:18:b7:ce:d7:35:56:7c:
         75:77:e5:01:84:31:38:60:3c:45:0c:8d:02:e6:3e:11:8e:90:
         56:41:d3:d6:9a:a3:ba:2c:39:c9:40:cc:1c:2f:fe:37:75:62:
         ae:30:e7:50:de:ed:6e:5c:b1:1e:9a:93:77:41:98:73:43:86:
         f3:99:42:21:00:b8:65:f9:56:bc:32:91:27:f7:a6:15:9b:f6:
         01:6b:d1:e6:4b:4a:8e:bc:ec:ad:07:95:9b:06:36:f0:1a:14:
         8f:54:63:d2:9b:be:a9:c8:72:1f:78:aa:07:c4:62:4a:f2:96:
         c3:4e:cb:b7:9f:d6:cb:f1:17:dd:33:9d:2b:a9:91:77:26:45:
         fd:ff:fb:95:f5:94:1a:99:e6:6b:af:87:bd:52:fa:ff:ac:1e:
         ee:2e:03:b0:78:ab:08:39:a8:49:b3:f4:e4:62:6a:f9:81:bc:
         d5:28:91:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:21 2026 by rpki-client