Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft
File:                     cFWB1AyVgaJlHlMlI42zvcs6fQU.mft (raw, json)
Hash identifier:          kFOyvXMqTdAk/pzYsQM090KeiYW+5CnxQd7XjzGLwIw=
Subject key identifier:   74:B6:27:C7:7B:64:EA:84:E9:53:EF:DC:56:E3:71:2A:08:5C:05:0F
Authority key identifier: 70:55:81:D4:0C:95:81:A2:65:1E:53:25:23:8D:B3:BD:CB:3A:7D:05
Certificate issuer:       /CN=A91E1D91/serialNumber=705581D40C9581A2651E5325238DB3BDCB3A7D05
Certificate serial:       0489
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft
Manifest number:          047D
Signing time:             Wed 19 Aug 2026 00:28:23 +0000
Manifest this update:     Wed 19 Aug 2026 00:28:22 +0000
Manifest next update:     Wed 26 Aug 2026 00:28:22 +0000
Files and hashes:         1: cFWB1AyVgaJlHlMlI42zvcs6fQU.crl (hash: 4tub+d1j1/yVfKifLu87c0qQzCS6SSQHCU3H6UUWcmE=)
                          2: 6CDC639EA04411EC8A7E5E2CC4F9AE02.roa (hash: boY95/F6jAr6/89pfz1ZqR8pyyfkr02tE223Jg5btWo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.crl
                          rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:28:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1161 (0x489)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1D91, serialNumber=705581D40C9581A2651E5325238DB3BDCB3A7D05
        Validity
            Not Before: Aug 19 00:28:22 2026 GMT
            Not After : Aug 26 00:28:22 2026 GMT
        Subject: CN=6a84f8a7-e23d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c0:dc:85:f3:0d:9f:db:9d:d0:9c:cf:8b:f3:
                    a6:c8:c2:f6:c6:22:23:cc:39:ab:61:9d:04:27:26:
                    8d:c5:6e:f2:e5:50:96:0a:dc:77:28:04:a0:b9:b1:
                    95:08:db:cf:70:b5:d7:25:28:5e:b9:1b:fb:b5:52:
                    0b:b5:f7:53:da:a8:df:0f:2e:61:7a:91:96:e5:52:
                    89:81:75:b2:98:8f:26:1f:a0:67:71:a8:f4:3a:25:
                    65:3d:80:90:c0:bd:77:02:72:c4:c2:8d:08:1a:18:
                    27:90:5d:4d:94:a2:20:24:0a:94:e8:8d:2e:81:40:
                    b4:91:be:0b:81:bb:39:b3:e6:46:09:8f:a9:6c:0d:
                    b3:10:f8:ae:9f:26:e9:9d:3a:03:5e:ca:fa:96:9a:
                    60:09:5d:e0:78:bc:98:d4:7d:ff:a8:37:7d:a7:2b:
                    45:c8:36:81:83:5e:db:02:d6:7b:5a:d1:d3:15:6f:
                    d9:01:5a:0a:d9:8b:a4:a2:45:2a:5c:01:87:68:9e:
                    7d:58:40:02:74:4b:34:96:9a:89:36:ce:82:33:0d:
                    a5:da:2f:05:56:eb:69:90:72:60:02:a8:52:ab:6e:
                    ee:fb:79:65:96:8f:8b:08:fb:3f:e1:78:fb:7f:c7:
                    99:ed:34:b5:de:41:7d:5a:70:9f:8d:97:db:c1:9e:
                    79:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B6:27:C7:7B:64:EA:84:E9:53:EF:DC:56:E3:71:2A:08:5C:05:0F
            X509v3 Authority Key Identifier:
                keyid:70:55:81:D4:0C:95:81:A2:65:1E:53:25:23:8D:B3:BD:CB:3A:7D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:75:02:22:f1:0c:de:88:d8:e7:c8:f2:ca:4a:6f:58:73:4f:
         2a:42:89:9a:40:ae:25:86:09:22:db:c4:7d:df:44:b0:95:94:
         c5:5c:66:c1:b9:8d:5c:00:73:51:e3:31:cc:96:9a:8c:f0:3b:
         f4:44:72:25:e1:44:37:76:27:2f:c2:53:00:77:20:b0:c9:42:
         4b:b9:3f:e3:de:fe:a4:78:10:95:42:10:5f:d7:58:47:d8:6f:
         97:57:1a:a5:a3:67:ec:3e:c1:bd:af:c0:8f:03:43:fa:5b:6d:
         95:dc:ab:7d:7d:3a:6f:5d:44:04:a5:f8:a2:26:59:ba:7a:43:
         74:bc:41:26:c7:c2:8b:e2:cc:51:a1:e3:cb:ac:77:3e:42:8b:
         8b:d1:6d:42:0b:ac:85:53:26:27:25:c4:38:33:46:5b:a5:cd:
         8b:c3:70:74:aa:55:e0:16:82:96:a8:0c:29:80:c0:c6:f7:53:
         ec:52:fb:b1:86:00:31:8e:5b:3b:81:31:1c:15:44:8e:3b:4e:
         2c:87:c4:52:e2:79:a8:a0:54:c2:c4:8e:aa:07:24:81:25:69:
         e3:ca:7d:36:2e:1e:7c:a2:b5:ee:6b:ee:6f:ff:67:5c:ed:f9:
         c7:c7:c3:2c:5d:a3:2f:a9:02:66:c5:7e:01:5a:2e:e7:c1:8c:
         0b:8c:22:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:53 2026 by rpki-client