Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
File:                     CyVhxLV9qB1w85cksN4scQF0n10.mft (raw, json)
Hash identifier:          FOv4N8pe7P9plhYgOzad2Q+felerHD53KtwaH3+UbYk=
Subject key identifier:   5F:5E:84:2B:43:47:B1:4F:5D:E4:A7:84:85:F7:DA:75:CE:A9:B0:6B
Authority key identifier: 0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D
Certificate issuer:       /CN=A91E1155/serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D
Certificate serial:       0FF0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
Manifest number:          0FDD
Signing time:             Tue 18 Aug 2026 17:41:29 +0000
Manifest this update:     Tue 18 Aug 2026 17:41:29 +0000
Manifest next update:     Tue 25 Aug 2026 17:41:29 +0000
Files and hashes:         1: CyVhxLV9qB1w85cksN4scQF0n10.crl (hash: geEnaCOslMjlz5dnvIcouYUcd5cPqTp26wYIQHAm/u8=)
                          2: 4B1E3E947EB411E994ED5B25C4F9AE02.roa (hash: kSNCg22bt6PXx3rEaTBPvjpdHaLrIf1YauM4yC/A/tE=)
                          3: AC8695B8A60611EE8FEB2160C4F9AE02.roa (hash: vtr7yAZ74kddk2JEZlUucC+/G3kf3cROk0g8PEEHH8Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl
                          rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 17:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4080 (0xff0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1155, serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D
        Validity
            Not Before: Aug 18 17:41:29 2026 GMT
            Not After : Aug 25 17:41:29 2026 GMT
        Subject: CN=6a849949-3e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c7:3b:d6:62:6f:6b:5a:0e:4b:79:75:a4:98:
                    27:89:88:03:2a:6d:96:ec:db:9f:77:38:0d:57:49:
                    2b:97:0f:54:3f:85:48:32:e5:76:a2:df:72:0e:89:
                    7e:07:c7:80:34:f2:28:0a:6c:74:b0:fb:3a:b9:9a:
                    5f:2e:76:08:6c:d7:6b:e8:0f:86:4c:95:98:ac:50:
                    26:72:5d:5b:41:05:9e:dd:fb:6c:0b:f0:64:9f:26:
                    cf:da:7b:69:7a:08:b6:a6:0e:eb:b8:ed:5e:b2:47:
                    32:bd:80:0f:36:57:09:14:4d:0d:be:4d:71:4e:c8:
                    b2:54:45:a2:43:5b:5a:a7:9a:8e:49:b4:67:47:3c:
                    f4:71:10:b7:9c:09:ab:9e:54:08:08:05:7f:13:d8:
                    1c:e2:16:34:d1:22:f5:41:1e:5a:56:b6:75:fd:25:
                    2a:d7:7b:cf:45:12:60:bd:f9:12:a7:dd:e3:53:46:
                    d8:e9:a2:c2:bb:b8:83:49:54:80:8c:ec:f6:68:db:
                    0e:51:4c:17:3f:ea:76:67:49:e8:cf:10:63:e0:e2:
                    0c:83:80:fa:3f:fd:ca:29:80:8c:d1:8d:ad:f3:8d:
                    0c:d6:52:b4:61:d6:4c:72:e2:bf:d3:11:71:bb:64:
                    52:e5:c2:51:f4:af:05:7d:d9:ca:5b:b1:ba:17:6e:
                    b2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5E:84:2B:43:47:B1:4F:5D:E4:A7:84:85:F7:DA:75:CE:A9:B0:6B
            X509v3 Authority Key Identifier:
                keyid:0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:eb:b0:d9:fc:9d:81:f6:2d:20:33:5d:8d:47:50:93:b3:ee:
         71:75:52:4c:a9:45:bd:8c:5d:a0:52:0b:b8:96:a3:40:96:1c:
         9c:6c:ad:e9:c0:e7:a4:d1:63:b7:e9:d7:36:31:08:f2:bb:20:
         f3:80:51:13:5c:88:b0:9d:cb:bf:8b:45:7e:9c:db:11:3c:44:
         9c:ca:a9:9b:13:48:80:7f:89:23:53:9c:2f:e4:2b:8b:1d:fb:
         3e:9c:9d:09:38:97:8b:6e:c7:7f:50:d6:d1:e6:34:43:55:fe:
         a2:c3:dd:89:23:40:08:4f:f8:21:56:fc:d3:d5:db:e9:7a:a9:
         17:82:69:7f:f1:40:13:c3:0e:ee:b9:b9:a6:f6:34:c6:5b:a8:
         4a:e2:0f:44:59:86:7f:37:34:58:80:a5:fa:3f:37:f6:eb:3b:
         c9:a2:2d:c3:4f:31:b6:c9:b3:e8:38:69:45:36:74:1c:37:f6:
         a2:9a:5e:98:9c:88:75:4c:1d:d8:1e:93:f1:77:71:eb:66:77:
         b0:6d:9c:3d:c9:f7:a4:20:fc:28:c0:d2:91:d0:99:b7:da:0b:
         16:6d:90:a1:75:55:1f:92:b9:2d:9b:e7:c7:14:cd:e3:59:42:
         49:de:47:46:16:5d:22:b7:eb:ae:9e:5b:6b:f0:3f:fc:b9:76:
         55:17:b4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:47:04 2026 by rpki-client