Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
File:                     Zye49DPvL-CAhCxu6KbMPcJEYm8.mft (raw, json)
Hash identifier:          GAVa+8an0P8uqAY2yrMDbUZJa6ddz2+VbHujiC1Z42I=
Subject key identifier:   FD:93:F8:93:A3:A8:13:2D:97:8A:10:04:90:A2:D8:57:CF:DE:05:EB
Authority key identifier: 67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F
Certificate issuer:       /CN=A91E4023/serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F
Certificate serial:       0D5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
Manifest number:          0D46
Signing time:             Wed 26 Aug 2026 18:02:32 +0000
Manifest this update:     Wed 26 Aug 2026 18:02:31 +0000
Manifest next update:     Wed 02 Sep 2026 18:02:31 +0000
Files and hashes:         1: Zye49DPvL-CAhCxu6KbMPcJEYm8.crl (hash: RaopXym1PTbfUdhxnZRcToIrOCx0D9IW3leCby8LL2w=)
                          2: E0BC0B4C011411EAAB0EF153C4F9AE02.roa (hash: hGCYtCOIvO4umfp83BHr43BYp8vvO8LHfZyo0x1hdrM=)
                          3: E14507F8011411EAAB0EF153C4F9AE02.roa (hash: qiDkvBGA0vQoRNYuuefBl5X6My9S37pGkNHkOEYdfqI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl
                          rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 18:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3421 (0xd5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4023, serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F
        Validity
            Not Before: Aug 26 18:02:31 2026 GMT
            Not After : Sep  2 18:02:31 2026 GMT
        Subject: CN=6a8f2a38-64a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:05:6d:e7:8a:77:5a:05:31:af:21:0f:2a:8d:
                    bc:4f:5e:c8:83:a3:c6:8b:9e:4b:00:27:fb:ed:94:
                    fe:cb:00:72:d9:43:27:97:4d:c9:32:fb:af:91:ef:
                    cc:14:7e:29:04:c7:4f:04:f0:74:62:23:18:0a:a4:
                    7b:17:7f:96:4c:42:f4:03:c8:60:62:db:b2:52:3a:
                    d4:8b:7e:16:5d:21:04:11:16:d8:a4:2f:35:c7:94:
                    a5:3f:20:5d:60:aa:f0:a1:3f:cb:70:74:71:cf:8f:
                    0b:94:d8:72:77:0a:c9:2a:7b:a3:d2:06:61:90:52:
                    15:34:52:67:f0:c2:41:78:f5:7d:95:33:9a:69:54:
                    b8:50:06:1a:c2:62:60:46:d1:8b:2a:56:9c:7c:8b:
                    2c:50:44:fe:79:d7:77:ee:b3:9d:b2:a5:9a:e2:1e:
                    13:0f:45:8c:d2:3a:18:10:46:7c:dc:13:d7:8e:53:
                    15:1b:10:00:ad:5b:93:47:86:92:53:77:a7:36:21:
                    ea:03:49:42:16:17:14:ca:f7:c6:fb:66:e6:b0:b8:
                    b8:3e:76:86:93:37:9b:24:48:07:ac:39:0e:54:08:
                    60:9a:a1:3a:fa:ac:50:aa:42:a6:12:47:9a:01:56:
                    22:6a:1e:7a:13:8c:1a:db:7e:1e:94:71:ad:79:7c:
                    68:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:93:F8:93:A3:A8:13:2D:97:8A:10:04:90:A2:D8:57:CF:DE:05:EB
            X509v3 Authority Key Identifier:
                keyid:67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:b6:ec:63:f5:ef:8f:b1:5f:74:e1:c4:28:21:d2:99:c5:16:
         fa:2d:6a:91:83:79:29:2d:c8:43:0e:ef:36:cf:b4:80:ca:35:
         ed:25:b9:21:4d:ae:d4:f9:29:b7:aa:73:46:2d:79:0d:60:03:
         72:83:57:66:02:42:e1:0a:96:c6:53:79:7c:be:0c:4c:3b:d4:
         94:b5:fe:20:8b:30:af:4e:88:10:cc:a4:7e:6b:79:3c:de:40:
         f8:71:7b:1a:49:62:64:86:0f:cc:ff:6a:00:ea:25:94:a6:1c:
         de:6a:5f:dd:61:30:6b:d9:76:7c:bf:1d:85:be:4d:03:ac:6f:
         ce:84:49:56:8d:cb:bf:dc:bd:20:21:04:41:3a:1a:bd:b1:4b:
         66:58:98:92:ea:66:99:1c:4b:2c:b7:77:09:63:1c:53:55:73:
         69:41:5e:3d:e9:5c:87:b2:0f:97:fa:ed:3d:85:7a:71:d3:4d:
         75:13:64:ac:56:80:80:05:44:bb:b2:8e:f0:c9:ff:e1:f3:09:
         fe:07:d7:51:25:9b:3d:7f:05:fa:42:d0:e1:a5:7d:be:df:60:
         19:50:dd:d7:01:a1:fd:ab:5a:93:4a:f4:3a:b6:e5:af:e0:df:
         1d:ae:74:73:9d:ab:53:09:69:90:52:d7:42:1c:2e:40:55:95:
         4c:0e:9f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:46:40 2026 by rpki-client