Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft
File:                     S9mZS8XP-ey2aDyU3G7s1e7uDng.mft (raw, json)
Hash identifier:          zP2mGSoH/eQ/xfOVxDG4Vx3vCp/Fq5J/tRXP1nlwCfU=
Subject key identifier:   FC:51:B3:80:A6:67:8A:C1:35:7E:D7:D6:E3:1F:A0:8E:0B:0B:1D:C1
Authority key identifier: 4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78
Certificate issuer:       /CN=A91E00FC/serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78
Certificate serial:       0AD4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft
Manifest number:          0AC5
Signing time:             Thu 06 Aug 2026 19:20:05 +0000
Manifest this update:     Thu 06 Aug 2026 19:20:05 +0000
Manifest next update:     Thu 13 Aug 2026 19:20:05 +0000
Files and hashes:         1: S9mZS8XP-ey2aDyU3G7s1e7uDng.crl (hash: swc7u8HEgznNdL2pMaQzXI6N+OHLp8ub2JFeD+R4G/4=)
                          2: CD26CAC0431611EE80B53A75C4F9AE02.roa (hash: vPWknUKvmhzNYKbXzeUeTtIU2gsg4u0/mGjZtAQaw4o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl
                          rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Aug 2026 19:20:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2772 (0xad4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E00FC, serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78
        Validity
            Not Before: Aug  6 19:20:05 2026 GMT
            Not After : Aug 13 19:20:05 2026 GMT
        Subject: CN=6a74de65-ecb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fa:a6:7b:ba:35:59:36:49:18:97:77:c4:8b:
                    56:08:12:03:ef:88:fd:95:46:39:d0:25:79:af:df:
                    02:76:39:e9:6d:a7:ad:5f:d7:f1:f0:40:4e:fc:b4:
                    58:ab:b6:fe:9d:81:b2:11:2e:91:36:af:ab:91:01:
                    0c:ca:a6:8d:03:82:1f:8a:97:da:16:32:00:c8:da:
                    29:44:a0:41:d0:8b:93:cd:b6:20:6e:9a:71:67:bc:
                    39:28:a1:fb:0f:c5:ef:07:1a:a0:c7:a1:ad:98:2f:
                    70:58:65:7d:b0:f0:05:c1:e1:75:ed:1c:a2:ff:78:
                    44:95:54:68:45:53:ba:5f:24:31:69:db:ce:3d:3e:
                    e5:ed:84:be:7d:54:cb:bc:1c:43:b6:95:44:3f:7d:
                    03:77:b3:e1:f6:a2:d4:c6:f7:29:23:a1:f7:6d:af:
                    57:ac:9b:5e:cd:90:9a:7e:a3:df:2e:ed:4c:8f:a9:
                    9e:5b:55:e2:d1:71:ab:c0:6a:fa:2d:36:c3:45:a0:
                    71:c6:a9:30:a1:17:78:20:95:15:74:cc:cc:a8:af:
                    05:37:37:90:02:72:66:30:16:a6:15:4b:95:b3:d4:
                    68:7e:d8:8d:d3:25:90:65:db:55:f7:7d:6f:9d:ec:
                    f1:78:31:2b:77:a5:e8:c3:02:f5:74:65:e0:94:be:
                    45:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:51:B3:80:A6:67:8A:C1:35:7E:D7:D6:E3:1F:A0:8E:0B:0B:1D:C1
            X509v3 Authority Key Identifier:
                keyid:4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:68:37:03:24:18:75:51:07:90:fb:fe:1a:7f:5b:e8:42:61:
         cb:04:c7:2a:5d:d0:7d:e6:dd:3f:1a:1f:55:3f:5e:8b:75:46:
         de:cb:01:ba:15:dd:83:51:31:a3:ad:ea:8a:10:23:22:c4:2d:
         00:e3:d4:ff:f8:6b:c9:a8:0d:20:c7:dd:4f:82:7d:55:f2:d1:
         ff:6f:6d:a2:7d:d4:0b:82:c0:9c:99:9a:26:51:a9:9f:2e:d7:
         62:ab:57:11:fb:6a:ba:24:61:40:83:cd:f3:1c:8f:70:7e:48:
         d5:e7:05:79:12:7e:51:cd:40:39:07:2e:14:30:02:32:46:12:
         af:d9:e1:7d:db:d3:79:fa:0e:a1:86:00:cf:1c:2f:26:00:56:
         fc:79:d8:7a:c9:4a:37:c2:64:a1:1f:38:ef:97:f1:72:6b:b5:
         e3:05:2c:f8:ca:f4:77:c4:4b:cb:04:b9:1f:7c:61:3f:28:fa:
         2c:3a:d1:b2:58:d4:ba:02:52:1a:14:8b:9f:26:6a:57:af:63:
         43:35:af:63:19:85:95:90:b6:5b:41:b1:17:0b:f4:4a:af:3b:
         0f:36:62:df:bb:59:2c:d0:75:92:18:7f:85:52:ee:8d:25:e1:
         ce:d5:4a:b7:5e:ff:52:d9:e4:d4:35:7f:b8:35:72:f4:e6:92:
         db:28:5a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 21:05:01 2026 by rpki-client