Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft
File:                     xPfGGVRtktYGb7L0x2VFqc4v4wM.mft (raw, json)
Hash identifier:          uDIhl69qlsZDEs+KxXE2SekpR440wSUOWE7ZISf1XmE=
Subject key identifier:   E8:53:B9:7A:E3:0C:E3:5E:0F:28:87:1D:29:C3:DF:FE:D0:D3:C6:16
Authority key identifier: C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03
Certificate issuer:       /CN=A91DC0C0/serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303
Certificate serial:       093A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft
Manifest number:          0928
Signing time:             Tue 18 Aug 2026 20:32:50 +0000
Manifest this update:     Tue 18 Aug 2026 20:32:50 +0000
Manifest next update:     Tue 25 Aug 2026 20:32:50 +0000
Files and hashes:         1: xPfGGVRtktYGb7L0x2VFqc4v4wM.crl (hash: B9XtLtl0K+Sm1oNa1kdsOY/zztvUJS73t/0ITMmIrFk=)
                          2: BE243D98CCE311EAA397205EC4F9AE02.roa (hash: u1RDbYNdHTAW3BTDzKScEWLA3q8xl+IocU5STlH9Ois=)
                          3: BEB276EECCE311EAA397205EC4F9AE02.roa (hash: eazjY0QI0IkousembgiUMF6ex//mtspG+XkKlVCT+t4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl
                          rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2362 (0x93a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC0C0, serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303
        Validity
            Not Before: Aug 18 20:32:50 2026 GMT
            Not After : Aug 25 20:32:50 2026 GMT
        Subject: CN=6a84c172-52b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c5:8b:62:4e:4b:0c:ba:f8:47:94:d8:09:37:
                    ca:d2:c7:d1:2f:5e:09:47:cf:33:fb:2b:56:91:8f:
                    55:9b:2a:24:94:4b:a6:a0:8d:f8:04:80:60:51:36:
                    c3:06:a2:cd:21:95:85:2e:b2:0f:f5:b3:73:b7:60:
                    2d:12:50:73:89:21:bd:fc:02:b0:25:81:4e:f2:cc:
                    f9:5c:82:1d:6e:8a:f4:f9:87:ef:6d:5c:1a:db:35:
                    a6:bd:2a:48:3c:45:0d:76:c6:6b:84:88:57:d9:a1:
                    bc:8a:75:3e:77:17:81:d7:60:4f:36:47:d4:31:9f:
                    e6:81:d0:28:56:9c:54:e5:5a:16:cf:36:21:89:a2:
                    46:90:25:ac:6b:31:85:40:54:35:9d:9a:3b:8d:73:
                    86:91:19:12:d3:c3:4d:83:30:5e:da:76:40:a7:14:
                    b2:f7:9d:7a:d5:6c:6c:01:33:1f:ee:0c:97:6b:c5:
                    c1:6b:0e:e9:4c:56:4e:72:2c:f8:0b:8c:5b:f3:85:
                    88:ed:df:aa:25:70:77:23:2b:39:99:b6:e3:f2:4f:
                    c7:ae:4e:ff:72:4c:f3:70:6f:a4:b0:2a:13:4d:51:
                    c8:9e:69:f1:58:eb:c9:d2:dd:54:83:d3:a8:f3:0f:
                    9f:67:13:59:71:a6:f0:7b:fc:70:50:b8:49:77:84:
                    90:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:53:B9:7A:E3:0C:E3:5E:0F:28:87:1D:29:C3:DF:FE:D0:D3:C6:16
            X509v3 Authority Key Identifier:
                keyid:C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:13:43:cf:4f:77:1c:b0:14:2a:53:5e:f5:f9:57:e6:02:39:
         8b:8a:a2:72:fc:00:8b:3b:5a:4f:4d:d6:30:8d:de:d7:eb:eb:
         8b:e3:da:62:41:8e:92:31:5e:c4:8e:ea:cc:ee:6e:f6:f7:19:
         71:93:de:97:b8:ea:63:11:67:ee:98:b2:48:6b:8a:3f:c9:ff:
         28:4b:d7:b9:35:47:d6:e0:d4:2c:be:ec:62:51:04:d3:57:5c:
         81:fb:bd:d5:7d:17:ef:67:15:1d:1f:ac:bd:b7:30:2c:49:5c:
         dd:14:c1:0e:fd:72:27:27:e7:4c:38:fe:5c:ed:5f:c2:74:fd:
         85:ee:73:27:3e:eb:67:f4:53:b7:b0:df:6e:8b:96:a9:03:3d:
         a5:df:41:7c:b2:02:86:e4:12:93:0d:42:04:d5:be:aa:29:a5:
         33:aa:1d:66:84:46:c6:63:3d:91:43:48:af:80:08:85:bc:1b:
         01:41:3d:b9:72:39:89:80:ae:1f:b2:32:4e:6a:2d:5b:67:20:
         d3:2a:61:9d:4d:6d:9c:f0:2c:92:8e:b4:71:42:d4:52:b5:d8:
         5e:d7:9a:c2:0a:a2:5a:47:d7:80:2a:45:6f:62:e9:f6:57:59:
         79:96:4c:28:6b:ae:1f:2e:09:36:04:f8:13:65:56:bb:8e:69:
         57:82:d9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:15:07 2026 by rpki-client