Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft
File:                     rRapGbMt65RQ0upjx51QMV2RgVU.mft (raw, json)
Hash identifier:          2RuqyvrQngSa9l2mvjVtdvD9G8Wp2IZE7IAPcIYf35M=
Subject key identifier:   32:FE:BA:11:C9:9F:BB:88:1B:6D:C6:52:EF:46:1A:50:1C:89:49:46
Authority key identifier: AD:16:A9:19:B3:2D:EB:94:50:D2:EA:63:C7:9D:50:31:5D:91:81:55
Certificate issuer:       /CN=A91DBA0F/serialNumber=AD16A919B32DEB9450D2EA63C79D50315D918155
Certificate serial:       0BCE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft
Manifest number:          0BC1
Signing time:             Tue 18 Aug 2026 19:19:20 +0000
Manifest this update:     Tue 18 Aug 2026 19:19:20 +0000
Manifest next update:     Tue 25 Aug 2026 19:19:20 +0000
Files and hashes:         1: rRapGbMt65RQ0upjx51QMV2RgVU.crl (hash: JYJ1du/8n78P34u1wcozSwp/Q4eAZF54Cy2+PpsZROs=)
                          2: D54C8E6C4DBD11EAAF427F1AC4F9AE02.roa (hash: tFJq8prm/jm01/luS9MVt882V4/WGQN42LpWhd1UgG4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.crl
                          rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:19:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3022 (0xbce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBA0F, serialNumber=AD16A919B32DEB9450D2EA63C79D50315D918155
        Validity
            Not Before: Aug 18 19:19:20 2026 GMT
            Not After : Aug 25 19:19:20 2026 GMT
        Subject: CN=6a84b038-55a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a6:02:e3:4e:99:ac:4b:7a:2a:0e:22:15:5a:
                    95:65:c4:42:1f:82:85:48:29:cd:14:2b:c3:20:50:
                    b6:09:08:35:0e:e6:f1:d9:5b:cc:3e:4d:02:3c:d9:
                    ed:03:17:2a:29:4d:86:fd:ba:27:62:fc:f7:6f:eb:
                    46:01:4c:68:0a:05:15:27:e4:47:a9:34:fd:20:42:
                    87:a7:de:ac:f7:6d:78:c5:0b:74:7e:20:64:93:b7:
                    88:12:a7:50:ae:0b:b3:0e:60:78:40:9b:cf:e0:e9:
                    5c:a1:d6:04:00:45:48:a4:51:2a:fe:ef:ea:79:39:
                    da:ef:30:f4:88:b1:f2:4c:ab:f4:43:3c:ab:15:2f:
                    21:19:9d:64:2c:a8:87:7c:7f:ad:8c:8f:b4:79:5f:
                    56:3c:f4:5e:b5:78:ae:5e:7d:e4:fb:41:a3:9f:2a:
                    e3:4c:be:65:ed:5b:ab:5f:81:2b:16:0a:99:82:18:
                    1b:d3:ae:23:3b:40:f7:9c:00:4d:87:9d:93:ab:11:
                    87:46:82:72:3f:23:e7:44:22:33:5c:a0:ee:f5:a3:
                    55:29:d3:ad:33:d0:ef:fe:0c:77:58:82:93:da:9b:
                    75:53:07:a2:d4:84:37:22:2f:2e:8d:2d:24:a9:96:
                    d6:bb:14:cb:10:a2:8f:80:77:e6:96:3b:41:69:34:
                    87:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FE:BA:11:C9:9F:BB:88:1B:6D:C6:52:EF:46:1A:50:1C:89:49:46
            X509v3 Authority Key Identifier:
                keyid:AD:16:A9:19:B3:2D:EB:94:50:D2:EA:63:C7:9D:50:31:5D:91:81:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:3e:27:ab:d4:43:d9:85:28:0e:38:2b:c0:8c:db:0e:67:88:
         59:de:67:f9:ac:3f:b6:da:2d:2a:ec:72:0d:d1:c2:4b:f7:c5:
         79:de:d5:a1:af:74:e7:ff:08:09:e0:aa:36:45:fe:20:16:ce:
         76:4b:a0:73:0a:ee:9f:3f:9f:a3:81:a6:2d:6f:5d:23:72:ef:
         20:9c:47:79:19:de:ba:d7:0b:aa:b9:52:7f:97:fa:0c:57:8c:
         b8:6d:dc:97:61:84:a8:f0:dc:9f:83:89:70:30:c6:22:62:bc:
         52:c0:71:91:2b:35:73:54:6a:05:11:db:cf:3c:a2:0b:4a:48:
         84:b3:70:3d:d0:f7:bf:89:7b:4e:47:56:b0:49:1d:40:ed:83:
         fe:3c:e9:6d:bd:a6:00:4b:59:a3:2c:27:9b:0a:12:07:ca:73:
         75:c3:9e:c7:6c:e6:7f:7c:2e:50:9c:bc:85:1f:ca:8b:21:cc:
         89:b6:ce:e1:c3:fa:f8:0c:28:81:9c:41:41:ba:2c:77:62:69:
         f4:6b:7c:18:47:bc:bd:48:bf:10:ee:57:18:e1:27:8b:9c:4c:
         35:0e:d1:46:0b:ef:a1:7b:64:db:fa:0c:af:ee:94:d8:92:f8:
         f2:ef:66:1b:ee:f0:eb:8e:ec:95:ba:71:dd:7c:76:32:95:ef:
         3a:e5:f8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:44 2026 by rpki-client