Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
File:                     PusZaI0z1iGZTls9nkbsqqUJ9CM.mft (raw, json)
Hash identifier:          Oy3ALpq5dJZPmP+60KlIWUqWGm1phlOKr97iNwL/b44=
Subject key identifier:   A5:68:25:FC:8A:19:80:A6:03:C3:1C:F2:FB:BC:70:04:36:FE:8D:75
Authority key identifier: 3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23
Certificate issuer:       /CN=A91DE4AC/serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423
Certificate serial:       0506
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
Manifest number:          04FE
Signing time:             Wed 19 Aug 2026 00:03:16 +0000
Manifest this update:     Wed 19 Aug 2026 00:03:16 +0000
Manifest next update:     Wed 26 Aug 2026 00:03:16 +0000
Files and hashes:         1: PusZaI0z1iGZTls9nkbsqqUJ9CM.crl (hash: hjOObzA64nm5P9mh09xdgphv6l9AGeG0DUlHk+lxi8s=)
                          2: 0716B2646C7111EC8C5E6967C4F9AE02.roa (hash: n0l/G3zz8221DJQZK1QZg+2i3DJbPsMPV1JZDdgqiFo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl
                          rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1286 (0x506)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE4AC, serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423
        Validity
            Not Before: Aug 19 00:03:16 2026 GMT
            Not After : Aug 26 00:03:16 2026 GMT
        Subject: CN=6a84f2c4-bed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:67:8a:c7:79:c5:6a:8c:9a:0f:15:d4:34:dc:
                    ac:7f:72:46:95:41:b4:2c:76:07:78:4b:3b:ea:da:
                    83:05:51:62:58:15:74:aa:e6:53:45:8f:c0:c3:18:
                    b9:c9:71:61:6b:21:26:5e:fd:e0:08:55:80:ac:1d:
                    18:4d:07:31:4f:8d:86:93:30:f2:79:3d:85:1d:0a:
                    f1:fe:24:ca:05:2c:20:ab:cf:a5:63:41:5f:9e:c3:
                    c3:04:8a:41:26:6e:72:0a:10:4c:12:a3:4a:b5:97:
                    15:d7:79:26:bf:bd:e9:df:b5:ab:87:f3:43:4c:37:
                    72:56:3a:bf:f1:7d:61:2b:f7:be:88:00:b8:a7:a6:
                    27:25:67:19:6c:a1:3c:68:df:da:46:72:d0:c0:96:
                    a3:e5:b7:14:23:d5:24:a0:ce:01:1f:fa:4b:34:95:
                    b8:01:46:65:d2:14:97:db:91:87:1d:5e:93:87:22:
                    c2:08:11:3e:57:c3:de:f5:3a:ed:1e:fb:19:86:10:
                    30:5f:a4:b7:92:c6:d7:10:bc:aa:80:b2:1e:a9:d5:
                    67:51:21:3f:13:b7:10:00:a0:8f:ff:60:3b:ca:9c:
                    01:5c:04:bb:91:82:e0:b6:32:8f:04:03:46:88:ee:
                    a6:09:b8:d2:ef:26:49:3f:42:c3:4d:5f:7f:7a:c1:
                    c4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:68:25:FC:8A:19:80:A6:03:C3:1C:F2:FB:BC:70:04:36:FE:8D:75
            X509v3 Authority Key Identifier:
                keyid:3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:5e:8b:d7:5d:f9:59:a5:c9:96:f9:0a:39:a6:46:20:a8:89:
         64:67:29:20:58:78:6c:f2:80:d1:01:8d:88:35:fc:e6:98:5b:
         fe:08:90:5c:4f:10:1c:8a:8e:00:94:82:20:b9:8c:b1:88:6d:
         35:2a:56:ab:ba:02:40:b8:29:ea:42:ec:2c:be:12:7f:7b:4b:
         c5:12:e7:48:78:d2:92:26:fb:a4:07:5e:f7:6e:74:42:be:a6:
         e4:23:07:f3:53:44:59:3b:0e:87:66:d1:ea:b8:21:97:75:d7:
         34:7b:a1:70:5e:0a:e5:09:39:42:fa:f1:7a:60:b8:e6:63:c2:
         b3:c1:f7:d9:26:19:3d:a0:ea:f3:29:df:b2:88:88:f9:1a:7a:
         92:bb:a6:f0:a4:ee:e2:95:0c:06:08:d2:96:4b:a0:49:81:67:
         49:04:d8:7d:f6:40:4f:3b:ef:48:3a:13:f0:fb:1b:e4:a3:9d:
         3d:6f:da:35:f0:35:cf:55:54:87:f3:8d:da:60:fc:8d:c8:9c:
         46:6c:1d:1c:c0:02:23:24:77:da:49:4f:75:80:08:81:f8:8e:
         bc:e7:6f:45:a1:6a:6d:53:58:e1:ed:6b:8c:de:30:f9:32:a9:
         c8:a1:79:81:cf:22:4c:93:6a:6f:f3:a1:78:ce:50:05:49:75:
         26:32:a6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:40 2026 by rpki-client