Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft
File:                     _0Md-OE71_7FHntTUHtFOan5ZWY.mft (raw, json)
Hash identifier:          rquW4rCjt7JF9/bq73VKdzajrzvhwNQ+f+pVSuWix3g=
Subject key identifier:   9A:F8:A4:7C:B5:7A:81:9C:B5:3F:F0:CD:8D:F0:CD:B1:22:85:6B:2C
Authority key identifier: FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66
Certificate issuer:       /CN=A91E6C4E/serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566
Certificate serial:       21F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft
Manifest number:          21E4
Signing time:             Tue 18 Aug 2026 15:59:31 +0000
Manifest this update:     Tue 18 Aug 2026 15:59:30 +0000
Manifest next update:     Tue 25 Aug 2026 15:59:30 +0000
Files and hashes:         1: _0Md-OE71_7FHntTUHtFOan5ZWY.crl (hash: 1tsPNwVcqfuSUydUmOmzCfJGyR378p/fuEXOp55VKhE=)
                          2: 5F0B20081CBF11EAA5FCAC86C4F9AE02.roa (hash: h5Pjnbs6tYIgU2xEGeVFnaHiDWrTR38hutsH6p/eIKo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl
                          rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 15:59:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8691 (0x21f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6C4E, serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566
        Validity
            Not Before: Aug 18 15:59:30 2026 GMT
            Not After : Aug 25 15:59:30 2026 GMT
        Subject: CN=6a848162-1013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:84:7d:2a:70:27:f8:72:e7:f7:12:16:57:0e:
                    c4:e7:e0:cc:ab:bb:dd:9e:9d:0c:6a:f3:44:91:17:
                    ff:fd:35:5f:db:b0:e4:0f:8b:c4:31:fe:d2:88:f4:
                    0e:ed:f1:3d:d0:03:f7:e6:c1:5c:64:f1:fb:cd:32:
                    b2:cb:c5:63:0b:36:97:e2:b0:e3:57:6b:d1:59:60:
                    ab:28:fd:e1:8c:81:83:06:89:0b:af:84:30:25:70:
                    c1:05:e3:79:67:4b:3b:d6:bd:5b:aa:6d:46:c3:2c:
                    46:f0:f5:f3:2c:2e:f5:73:cc:98:27:fb:ed:65:dc:
                    b5:9b:90:b3:18:24:ec:1c:c8:4c:3a:05:93:f7:e1:
                    f6:25:77:21:5e:6c:41:8f:99:ae:87:e3:14:e9:bf:
                    86:0f:d1:b8:e4:30:5e:b7:ac:cf:4e:5a:75:0a:4e:
                    fd:21:21:58:a6:57:82:bc:ed:2c:e0:ae:3c:f5:a7:
                    07:75:2f:ef:77:49:db:03:e5:9f:c1:66:13:21:fc:
                    cf:af:dc:38:3b:6b:3d:2d:a5:02:dc:15:b4:cd:7a:
                    32:8a:87:fd:f9:7d:35:84:b4:17:c2:b5:5c:ae:7d:
                    6a:a5:b2:24:ac:81:a4:62:17:85:36:35:d6:22:98:
                    5d:a4:92:9d:1b:aa:3b:fe:42:af:e2:c1:24:5b:af:
                    22:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F8:A4:7C:B5:7A:81:9C:B5:3F:F0:CD:8D:F0:CD:B1:22:85:6B:2C
            X509v3 Authority Key Identifier:
                keyid:FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:07:1a:b5:af:b6:d2:41:67:1c:ad:66:a4:97:20:c6:00:dc:
         9a:0c:2b:2d:4b:ae:8c:23:27:cc:48:0c:6d:9c:f9:2d:2d:3f:
         53:a0:80:9b:02:3a:6b:6d:a0:59:07:e8:18:a1:16:95:5e:57:
         a0:0c:2b:de:7a:70:77:66:51:ac:8a:3b:4c:e4:1b:62:03:5b:
         c4:a2:68:8f:f4:d9:8e:95:19:aa:71:a1:eb:4e:1d:30:6a:aa:
         24:28:15:75:46:7c:77:b2:0d:6b:8a:96:99:e3:13:e5:f8:27:
         49:e5:e6:de:3e:e6:5c:23:f9:4b:fc:dd:10:6f:62:a8:de:0c:
         88:31:0a:ad:c8:3a:23:f7:53:85:74:2c:ba:ba:a9:20:62:42:
         eb:db:7a:f8:bd:9d:55:22:85:d4:72:1f:b2:e5:2d:b2:b2:c1:
         ce:95:cc:d7:b7:2a:b8:b6:42:09:fe:73:93:b1:d1:fc:0b:aa:
         93:6d:95:07:25:d3:cc:3e:fb:f6:f1:8e:cd:ab:7a:dc:6b:9e:
         0f:51:02:22:09:ac:7e:5b:a4:14:1a:a1:92:e7:a1:b8:b6:df:
         82:93:b0:e5:73:7b:c7:42:7f:87:d2:90:61:04:1c:03:2f:bb:
         59:7b:b3:f4:75:a2:2f:2a:13:bd:7b:f4:a9:3d:8e:ed:68:36:
         07:51:31:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:30 2026 by rpki-client