Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.mft
File:                     f8xPf-awzDq4ikFPiUwnT6ebK4o.mft (raw, json)
Hash identifier:          ptraWlLx53F9Y0Bi0vgHVBnF8L/xhJZF1Ija+LjPKPU=
Subject key identifier:   B0:19:40:FA:2B:86:FF:FB:BA:A1:72:E8:3C:B5:80:85:EE:E1:0F:6A
Authority key identifier: 7F:CC:4F:7F:E6:B0:CC:3A:B8:8A:41:4F:89:4C:27:4F:A7:9B:2B:8A
Certificate issuer:       /CN=A91DB6F5/serialNumber=7FCC4F7FE6B0CC3AB88A414F894C274FA79B2B8A
Certificate serial:       18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8xPf-awzDq4ikFPiUwnT6ebK4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.mft
Manifest number:          17
Signing time:             Wed 19 Aug 2026 09:44:33 +0000
Manifest this update:     Wed 19 Aug 2026 09:44:33 +0000
Manifest next update:     Wed 26 Aug 2026 09:44:33 +0000
Files and hashes:         1: f8xPf-awzDq4ikFPiUwnT6ebK4o.crl (hash: is+vwZnudsrMMHGaGPgMSV8rE4nUFXdujOEQ4apiuts=)
                          2: FB8302CC7B4311F1A6C72CC794A30FBC.roa (hash: O3P+wCLcSaZeVnz8hU5Gns4U/UBq9VDtYeZsJeUmjAM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.crl
                          rsync://rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8xPf-awzDq4ikFPiUwnT6ebK4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB6F5, serialNumber=7FCC4F7FE6B0CC3AB88A414F894C274FA79B2B8A
        Validity
            Not Before: Aug 19 09:44:33 2026 GMT
            Not After : Aug 26 09:44:33 2026 GMT
        Subject: CN=6a857b01-5c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:67:17:15:40:eb:53:64:8e:e3:08:8a:97:72:
                    99:a1:87:0a:d7:68:d9:93:c3:ad:05:2d:7b:aa:07:
                    a6:ab:bf:51:3e:67:34:ab:41:a1:29:0d:4c:28:5b:
                    0a:e7:e6:5d:88:7c:b0:43:7c:fb:6e:8a:b6:75:4b:
                    af:ea:f8:0b:c2:74:0d:3b:b0:36:da:03:90:55:3b:
                    3c:94:ca:7b:96:fe:2e:ac:7b:f3:73:eb:d5:c3:2f:
                    1b:27:f0:1d:57:41:bb:3b:3c:f1:80:7b:69:b6:15:
                    38:99:90:f1:f8:c6:1a:49:1f:f5:48:c3:3a:43:27:
                    04:b3:65:35:ce:45:09:80:3b:01:2b:5f:d9:21:9a:
                    ae:06:2f:26:81:a5:b8:1f:8d:3b:9e:84:3f:55:4a:
                    06:84:09:cf:f2:04:6d:c1:ae:d5:3e:da:94:93:94:
                    f6:b6:fb:34:31:ad:c8:07:81:22:19:09:87:45:5f:
                    c3:17:b8:b1:66:39:70:2d:83:a4:2e:94:17:a2:71:
                    d6:25:86:f5:4c:bf:4c:12:1e:44:36:8b:76:ed:d4:
                    64:85:0e:fb:2b:18:68:25:ff:d4:a2:88:cd:ef:0e:
                    74:5a:e1:34:a5:66:7b:13:15:ac:8f:f5:62:bb:cb:
                    4c:57:3c:0d:01:9f:92:cb:f5:56:b0:eb:37:ff:e8:
                    d1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:19:40:FA:2B:86:FF:FB:BA:A1:72:E8:3C:B5:80:85:EE:E1:0F:6A
            X509v3 Authority Key Identifier:
                keyid:7F:CC:4F:7F:E6:B0:CC:3A:B8:8A:41:4F:89:4C:27:4F:A7:9B:2B:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8xPf-awzDq4ikFPiUwnT6ebK4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F5/7B06E3A27B4311F185336E3094A30FBC/f8xPf-awzDq4ikFPiUwnT6ebK4o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:00:5d:cb:f0:2d:d4:ab:de:2c:47:90:c3:d6:b8:0b:28:76:
         88:7a:e3:c5:82:01:23:08:1e:47:1b:76:0e:ba:c7:a5:c9:ef:
         24:db:47:e9:52:14:34:00:49:fe:11:c4:1c:84:d0:55:bb:12:
         02:cb:49:07:2f:18:55:b3:1f:a7:23:c3:2b:38:e6:f6:0b:2d:
         90:52:0d:5f:16:7a:ca:9e:ab:c0:a0:09:0e:bd:9c:17:da:1a:
         1a:24:9d:50:3c:cc:ab:29:02:97:1a:78:00:5c:85:c6:6a:a6:
         55:5f:06:d2:c3:21:92:82:77:38:63:62:fc:1a:be:62:78:22:
         cc:59:69:67:2d:8d:58:8c:91:6e:e8:ee:14:03:f2:20:d9:4a:
         04:45:9c:7e:a9:a2:8b:03:7a:2f:77:18:2e:ea:6d:62:81:8a:
         2d:8f:fa:a5:d8:3f:9f:80:0a:fd:8e:f8:78:79:61:d2:fc:2c:
         f1:e4:53:f9:70:63:2e:73:06:b7:ec:fd:e0:0d:75:6b:5d:63:
         e4:6f:24:c5:d0:99:35:12:e0:3b:96:9c:6a:57:b2:aa:91:58:
         8b:30:50:c9:13:82:09:e9:b0:0b:76:dc:b7:2b:cb:56:4f:b8:
         f6:b1:57:95:ee:1a:36:97:f0:d1:70:d6:45:02:81:77:8a:ca:
         16:03:0b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:44:33 2026 by rpki-client