Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0DF1/803DD63A942211F1A451A27A4611F970/FnODv1SihfFeIlHuqSMNgzal73o.mft
File:                     FnODv1SihfFeIlHuqSMNgzal73o.mft (raw, json)
Hash identifier:          FdV1kvb2Lzor79yHTmc3ZXZloOT6T/lR8KOd05T7O4E=
Subject key identifier:   1F:55:55:0E:75:89:34:96:7A:50:AC:C5:04:0A:20:2A:4C:C7:93:A0
Authority key identifier: 16:73:83:BF:54:A2:85:F1:5E:22:51:EE:A9:23:0D:83:36:A5:EF:7A
Certificate issuer:       /CN=A91E0DF1/serialNumber=167383BF54A285F15E2251EEA9230D8336A5EF7A
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FnODv1SihfFeIlHuqSMNgzal73o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0DF1/803DD63A942211F1A451A27A4611F970/FnODv1SihfFeIlHuqSMNgzal73o.mft
Manifest number:          07
Signing time:             Wed 19 Aug 2026 09:55:49 +0000
Manifest this update:     Wed 19 Aug 2026 09:55:49 +0000
Manifest next update:     Wed 26 Aug 2026 09:55:49 +0000
Files and hashes:         1: FnODv1SihfFeIlHuqSMNgzal73o.crl (hash: 5v+coJuaVoO8Z7vpYASkGqT1pPJz4qbfGggKP7wlsZc=)
                          2: 1F3E2AB4942311F1800E07964611F970.roa (hash: PRD7VDs1sPKClCFLR4CC9h54upXC7pDprLJycLCxeFw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0DF1/803DD63A942211F1A451A27A4611F970/FnODv1SihfFeIlHuqSMNgzal73o.crl
                          rsync://rpki.apnic.net/member_repository/A91E0DF1/803DD63A942211F1A451A27A4611F970/FnODv1SihfFeIlHuqSMNgzal73o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FnODv1SihfFeIlHuqSMNgzal73o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:55:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0DF1, serialNumber=167383BF54A285F15E2251EEA9230D8336A5EF7A
        Validity
            Not Before: Aug 19 09:55:49 2026 GMT
            Not After : Aug 26 09:55:49 2026 GMT
        Subject: CN=6a857da5-75b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d4:25:80:94:23:22:e6:09:d6:54:6b:3c:09:
                    46:ae:76:97:bc:f2:78:fa:00:51:e7:7d:db:61:08:
                    aa:12:ba:fa:47:3e:fc:96:5f:01:24:c4:34:63:46:
                    4b:15:fa:26:2f:62:af:e4:28:01:3e:11:dd:c5:a7:
                    b5:6a:52:40:f4:bb:03:85:7c:f4:c7:1e:6e:40:f6:
                    7b:4b:ad:68:b2:2c:4d:7b:89:e0:95:07:04:67:eb:
                    f3:88:0a:67:5f:41:a5:2c:ba:f7:bd:2c:07:6d:12:
                    6f:22:ea:58:68:03:f5:58:31:58:f4:21:cb:69:a1:
                    95:83:7b:a5:48:34:ba:ec:41:3f:06:3d:cd:83:37:
                    8c:8d:9a:18:78:11:52:c0:a2:c5:fa:35:30:fb:71:
                    a0:5c:56:24:aa:7f:50:c9:a3:77:d6:29:ed:84:8f:
                    41:74:2b:64:ff:77:7c:9a:ab:19:d9:1a:0c:38:ec:
                    39:10:32:ed:f6:d5:ef:9c:21:14:5c:9b:78:cd:d4:
                    94:0f:1f:e9:9e:cc:ab:2f:fb:89:ce:b2:32:87:0a:
                    4a:42:11:13:f4:5a:83:25:ac:69:d8:5a:98:f0:3c:
                    b5:27:25:dd:cf:49:2c:12:c4:d0:11:35:c0:97:11:
                    a5:3f:ae:ed:27:1a:15:10:84:ad:39:1f:87:99:19:
                    55:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:55:55:0E:75:89:34:96:7A:50:AC:C5:04:0A:20:2A:4C:C7:93:A0
            X509v3 Authority Key Identifier:
                keyid:16:73:83:BF:54:A2:85:F1:5E:22:51:EE:A9:23:0D:83:36:A5:EF:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0DF1/803DD63A942211F1A451A27A4611F970/FnODv1SihfFeIlHuqSMNgzal73o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FnODv1SihfFeIlHuqSMNgzal73o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0DF1/803DD63A942211F1A451A27A4611F970/FnODv1SihfFeIlHuqSMNgzal73o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:23:66:40:56:8a:a3:cb:64:ab:4b:28:29:a0:7e:45:ca:81:
         c4:58:24:1c:39:96:b1:85:3c:da:0a:04:9b:b1:6d:34:ec:d8:
         24:0c:9a:c0:9f:46:0a:26:a4:97:44:a5:5e:36:22:91:be:70:
         1b:9f:21:db:cd:cb:87:97:53:f5:a1:72:8d:69:14:4f:89:2f:
         d0:c8:aa:be:4d:46:4f:6d:66:46:7a:0e:f6:f9:01:10:54:a6:
         82:32:47:c7:16:b0:4c:d7:39:d3:59:39:f4:56:14:4c:48:51:
         64:b3:04:99:87:37:84:e6:04:21:d2:4b:3c:a2:63:b2:60:f6:
         fc:4c:06:62:82:ae:89:27:46:ac:f0:39:d0:3f:a2:77:a2:a7:
         df:72:19:04:6e:9e:fd:dd:4a:f1:66:fa:a6:09:09:bd:eb:03:
         d3:7d:54:99:63:ec:ac:8f:8f:d8:fb:59:8c:73:11:73:da:89:
         c1:1e:8a:6a:f3:00:f2:79:8d:1a:2a:a2:ed:b1:bd:14:3f:35:
         d9:9e:40:05:30:54:62:5c:37:cb:7f:06:50:a4:85:ac:88:61:
         6a:b3:ee:bd:8d:87:6b:0b:a5:0f:dc:4d:8c:99:4c:22:ca:12:
         9f:77:6e:76:17:77:95:0d:d7:d9:fc:ee:89:af:96:23:58:b8:
         d3:83:3d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:00:08 2026 by rpki-client