Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft
File:                     53anM2-PZ4WjagEEaEC1FKDUGSk.mft (raw, json)
Hash identifier:          tGzTQfqBci4dT0LCwKsUnkgt8AQZk2kVEdKl+yIqfI0=
Subject key identifier:   45:D3:1F:36:E8:48:B8:40:51:86:1D:E8:F0:55:86:42:A0:CD:57:57
Authority key identifier: E7:76:A7:33:6F:8F:67:85:A3:6A:01:04:68:40:B5:14:A0:D4:19:29
Certificate issuer:       /CN=A91E1486/serialNumber=E776A7336F8F6785A36A01046840B514A0D41929
Certificate serial:       0D2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft
Manifest number:          0D21
Signing time:             Tue 18 Aug 2026 18:27:29 +0000
Manifest this update:     Tue 18 Aug 2026 18:27:29 +0000
Manifest next update:     Tue 25 Aug 2026 18:27:29 +0000
Files and hashes:         1: 53anM2-PZ4WjagEEaEC1FKDUGSk.crl (hash: 6o8HWqL9h3F+ytdkcX3ggxgFyvefl3N+h7CIMaQkbW8=)
                          2: 964FB9AE06A111EAAE446E30C4F9AE02.roa (hash: iN7sl2PixdgDnEYUUCbyRGWI2GW4jkLaHOESu7/SU1Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.crl
                          rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:27:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3370 (0xd2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1486, serialNumber=E776A7336F8F6785A36A01046840B514A0D41929
        Validity
            Not Before: Aug 18 18:27:29 2026 GMT
            Not After : Aug 25 18:27:29 2026 GMT
        Subject: CN=6a84a411-1922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a7:b6:05:fd:38:f1:ed:7e:85:e2:62:11:03:
                    51:a8:e4:a9:47:ec:1b:5a:0f:3c:aa:a7:6c:26:6d:
                    3b:47:54:71:f0:14:76:c6:6d:9b:2d:f1:3a:f7:d7:
                    d4:53:aa:50:b9:b7:05:92:ac:1b:37:54:0a:a8:19:
                    e3:0d:4c:87:73:4f:c5:c4:30:7a:f1:f8:a7:d2:61:
                    69:df:53:4b:aa:91:9f:f2:31:b2:61:57:e7:9d:10:
                    57:02:f9:7d:dc:95:98:89:bb:e3:51:67:d5:48:26:
                    85:56:9d:89:8a:bc:4a:be:1e:f6:ac:9d:19:03:b9:
                    68:08:97:b2:b8:c7:f3:91:af:37:1a:80:a8:a8:be:
                    b8:0d:e9:23:f3:cd:05:9b:d3:27:24:1d:4d:81:32:
                    b8:d7:ba:2f:76:61:8d:52:6f:83:d3:d6:de:de:c6:
                    e9:6a:55:ba:b7:8a:38:46:13:ff:11:36:6c:3a:42:
                    f1:96:71:03:5f:e1:a7:0e:ec:75:0a:c5:f4:56:1e:
                    0d:e2:eb:b8:9c:c4:02:94:da:e4:7a:40:00:e5:b4:
                    33:38:14:61:b0:da:2b:64:53:f7:f5:05:be:1c:bc:
                    29:56:47:b2:13:73:02:40:d9:e1:ba:93:3c:f6:70:
                    ec:1a:d8:16:c4:cd:8c:42:96:f0:2a:1d:1c:59:09:
                    62:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D3:1F:36:E8:48:B8:40:51:86:1D:E8:F0:55:86:42:A0:CD:57:57
            X509v3 Authority Key Identifier:
                keyid:E7:76:A7:33:6F:8F:67:85:A3:6A:01:04:68:40:B5:14:A0:D4:19:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:45:df:a6:a6:eb:76:00:a3:82:b8:3a:97:a1:32:7f:0c:43:
         ad:83:1e:85:8a:a3:10:13:d3:6e:5f:dc:48:c2:b9:7c:b1:51:
         69:6a:8d:27:78:49:90:38:70:07:ef:4e:e1:50:81:a0:f4:5c:
         f5:b6:a8:ef:55:3b:b8:5f:5d:8f:28:f6:59:cd:35:ec:38:21:
         6d:94:ee:64:f0:e7:d5:73:62:a1:b5:a7:63:d2:6f:fe:83:86:
         37:5e:0d:95:40:6f:32:b6:12:7b:d3:99:0b:3a:8a:3e:6e:c8:
         d9:d1:29:65:ae:a1:d9:19:95:7d:5e:46:ec:bf:fa:83:69:70:
         43:a4:a0:b9:27:a5:26:45:6f:fd:ee:5e:67:35:57:7c:ec:28:
         80:31:fe:b8:f5:8c:9e:6b:2a:77:bd:19:61:49:3c:15:4a:9f:
         4e:d1:04:aa:33:45:00:cc:ce:de:41:94:94:59:bc:68:44:04:
         b7:e3:fe:46:e9:31:de:b5:70:93:51:d7:36:d5:65:b1:45:f5:
         46:ac:1d:2f:52:9f:38:b3:84:15:67:27:9a:da:73:b5:62:3d:
         81:95:33:c8:d4:3b:b4:17:1d:6f:25:c5:4f:7d:e7:2d:c0:7a:
         c5:9f:f9:ac:19:2d:0a:94:8d:fe:5d:b0:ae:92:a0:e2:d7:8a:
         8d:32:e3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:01 2026 by rpki-client