Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
File:                     h6XSzfwKU6WS2h-P8ndToSk0N_g.mft (raw, json)
Hash identifier:          YDlRNlZNn2uERb5cpd7kj58TDhgMRtxGpO3Bo2rkAek=
Subject key identifier:   B9:70:D6:2E:4F:8A:55:8E:24:E2:56:2B:C8:A2:87:AF:4A:DC:3C:99
Authority key identifier: 87:A5:D2:CD:FC:0A:53:A5:92:DA:1F:8F:F2:77:53:A1:29:34:37:F8
Certificate issuer:       /CN=A91E1BB0/serialNumber=87A5D2CDFC0A53A592DA1F8FF27753A1293437F8
Certificate serial:       8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
Manifest number:          8D
Signing time:             Wed 19 Aug 2026 08:09:46 +0000
Manifest this update:     Wed 19 Aug 2026 08:09:45 +0000
Manifest next update:     Wed 26 Aug 2026 08:09:45 +0000
Files and hashes:         1: h6XSzfwKU6WS2h-P8ndToSk0N_g.crl (hash: 5N+8KpqRj/rLjTOJch3JhZzXvowoW0kI+XBFMzhhTUE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.crl
                          rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 08:09:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1BB0, serialNumber=87A5D2CDFC0A53A592DA1F8FF27753A1293437F8
        Validity
            Not Before: Aug 19 08:09:45 2026 GMT
            Not After : Aug 26 08:09:45 2026 GMT
        Subject: CN=6a8564ca-3d33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d8:e0:73:35:d9:ab:87:7a:e1:85:84:c9:54:
                    c3:e4:33:b1:ca:fd:a8:a8:e2:93:0a:55:4c:5b:10:
                    f0:fc:fc:00:23:cc:e6:82:98:82:13:76:cb:3f:2e:
                    49:a9:18:ba:9f:a4:8c:ca:d5:0d:f9:3c:c6:c3:ee:
                    b9:ea:b9:75:cf:fb:76:eb:bb:4d:93:2e:a4:be:ce:
                    e6:3e:dc:8a:50:48:ee:01:a6:39:17:6f:ad:55:79:
                    31:af:c4:80:f3:8f:1a:ac:57:ce:04:5c:ae:66:58:
                    e4:b9:53:6b:af:11:c7:95:3c:45:59:a2:01:e9:cb:
                    da:ef:ec:10:28:a5:0b:15:7f:6f:a3:40:9e:19:7c:
                    b0:0c:e9:5d:1c:17:f9:2e:8f:dc:35:22:0c:68:5a:
                    c1:d7:a9:c1:15:72:e6:61:33:d6:a0:43:4f:c7:0c:
                    0c:38:c9:a2:c7:89:0a:b7:bc:16:c9:c4:f5:d2:b1:
                    a2:51:24:88:63:2b:fc:92:12:62:b1:71:c1:1d:23:
                    b5:33:34:f0:11:4e:db:75:13:53:5a:fb:a5:8f:74:
                    4e:89:63:c7:78:42:70:e0:8b:35:b7:cf:f1:fd:17:
                    5d:fa:dc:f1:d6:1c:28:9f:7d:95:c5:ed:f6:74:a0:
                    b6:78:c5:b6:84:10:f4:41:9d:3f:36:d5:bc:7c:b7:
                    ee:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:70:D6:2E:4F:8A:55:8E:24:E2:56:2B:C8:A2:87:AF:4A:DC:3C:99
            X509v3 Authority Key Identifier:
                keyid:87:A5:D2:CD:FC:0A:53:A5:92:DA:1F:8F:F2:77:53:A1:29:34:37:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:8f:e7:b8:a5:b4:d2:db:c9:2d:42:d4:6d:e6:8a:99:ff:43:
         83:2f:98:15:78:0c:08:c4:51:52:39:da:a1:cf:04:fa:f3:cb:
         07:bc:9f:52:db:bb:b8:5d:a4:66:21:bf:0f:10:78:17:9a:fd:
         0a:0c:e9:a3:72:91:dd:54:bb:4f:53:a5:d6:f7:c3:74:d0:4b:
         61:72:4d:a1:48:57:1f:7f:1e:41:a9:e8:6d:99:30:c7:13:7d:
         c5:03:5a:49:e5:5d:70:45:81:ed:66:2d:a9:3e:d8:aa:a8:82:
         68:02:f7:28:59:5d:c3:1f:7a:a3:80:88:29:fd:8d:8e:3e:62:
         90:4a:7a:6d:4a:52:53:37:ef:e6:94:f4:5f:c6:26:ba:7a:bc:
         a9:4e:ff:19:7f:b3:7d:72:c9:bc:ec:68:27:24:83:f1:f8:34:
         41:3a:6e:b8:3d:5f:93:29:25:00:74:2c:75:03:c6:5e:96:68:
         3c:ee:69:3a:91:b4:de:69:c5:ff:62:47:2e:f7:40:e6:98:e0:
         25:54:94:7a:86:9f:ad:eb:05:1c:2c:ab:11:90:90:0d:33:f5:
         86:c4:d4:30:22:04:42:bc:1b:c8:56:1a:d9:52:7d:c8:ac:9d:
         1c:ca:88:18:a5:36:5c:84:fe:c8:0b:57:28:53:f7:1f:42:7a:
         32:69:32:45
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTFCQjAxMTAvBgNVBAUTKDg3QTVEMkNERkMwQTUzQTU5MkRBMUY4RkYyNzc1M0Ex
MjkzNDM3RjgwHhcNMjYwODE5MDgwOTQ1WhcNMjYwODI2MDgwOTQ1WjAYMRYwFAYD
VQQDEw02YTg1NjRjYS0zZDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA59jgczXZq4d64YWEyVTD5DOxyv2oqOKTClVMWxDw/PwAI8zmgpiCE3bLPy5J
qRi6n6SMytUN+TzGw+656rl1z/t267tNky6kvs7mPtyKUEjuAaY5F2+tVXkxr8SA
848arFfOBFyuZljkuVNrrxHHlTxFWaIB6cva7+wQKKULFX9vo0CeGXywDOldHBf5
Lo/cNSIMaFrB16nBFXLmYTPWoENPxwwMOMmix4kKt7wWycT10rGiUSSIYyv8khJi
sXHBHSO1MzTwEU7bdRNTWvulj3ROiWPHeEJw4Is1t8/x/Rdd+tzx1hwon32Vxe32
dKC2eMW2hBD0QZ0/NtW8fLfu2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLlw1i5P
ilWOJOJWK8iih69K3DyZMB8GA1UdIwQYMBaAFIel0s38ClOlktofj/J3U6EpNDf4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUJCMC81RDZCRjNEQ0M0
NzgxMUYwOTRCODUwMjVDNEY5QUUwMi9oNlhTemZ3S1U2V1MyaC1QOG5kVG9TazBO
X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2g2WFN6ZndLVTZXUzJoLVA4bmRUb1NrME5fZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MUJCMC81RDZCRjNEQ0M0NzgxMUYwOTRCODUwMjVDNEY5QUUwMi9oNlhTemZ3S1U2
V1MyaC1QOG5kVG9TazBOX2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWY/nuKW00tvJLULUbeaKmf9Dgy+YFXgMCMRRUjnaoc8E+vPLB7yfUtu7uF2k
ZiG/DxB4F5r9Cgzpo3KR3VS7T1Ol1vfDdNBLYXJNoUhXH38eQanobZkwxxN9xQNa
SeVdcEWB7WYtqT7YqqiCaAL3KFldwx96o4CIKf2Njj5ikEp6bUpSUzfv5pT0X8Ym
unq8qU7/GX+zfXLJvOxoJySD8fg0QTpuuD1fkyklAHQsdQPGXpZoPO5pOpG03mnF
/2JHLvdA5pjgJVSUeoafresFHCyrEZCQDTP1hsTUMCIEQrwbyFYa2VJ9yKydHMqI
GKU2XIT+yAtXKFP3H0J6MmkyRQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:42 2026 by rpki-client