Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
File:                     mFpmWpz7T1ygDsqL_rgGML9PSBY.mft (raw, json)
Hash identifier:          iY15CW9WmcGyuQUsMgdOY8s3JW+gHKbu/mmAaiNkwxI=
Subject key identifier:   F8:77:A9:6E:62:44:65:E5:C6:E8:FF:CD:F5:83:C9:9D:3F:D8:FF:52
Authority key identifier: 98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16
Certificate issuer:       /CN=A91E6D5D/serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816
Certificate serial:       261F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
Manifest number:          A2DD
Signing time:             Tue 18 Aug 2026 14:31:49 +0000
Manifest this update:     Tue 18 Aug 2026 14:31:48 +0000
Manifest next update:     Tue 25 Aug 2026 14:31:48 +0000
Files and hashes:         1: mFpmWpz7T1ygDsqL_rgGML9PSBY.crl (hash: zG9U53NtfBoa4fFCAXVx7jgqgD4+vYkgzia6IQTjlw8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl
                          rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 14:31:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9759 (0x261f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6D5D, serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816
        Validity
            Not Before: Aug 18 14:31:48 2026 GMT
            Not After : Aug 25 14:31:48 2026 GMT
        Subject: CN=6a846cd5-2bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a0:b8:99:2c:5f:cb:88:ee:b2:75:d9:ba:71:
                    f0:4b:13:69:23:26:32:ec:37:dd:b2:84:bc:ba:62:
                    79:af:06:15:68:01:ea:2b:e1:b8:d2:47:b6:c8:1a:
                    18:b0:f6:b1:4d:63:66:1b:85:be:04:99:12:04:39:
                    25:51:7a:bc:99:a1:1f:cd:27:53:0d:48:e8:5f:18:
                    0d:8e:9d:86:6b:ae:8e:4c:ae:4d:59:93:f8:2b:25:
                    d2:38:6b:4b:0c:34:85:81:c4:ff:49:c2:89:63:84:
                    a5:ac:7a:0c:fd:ea:c9:9e:fc:3b:aa:37:bd:b5:9a:
                    83:5d:b9:12:8a:78:54:be:07:3b:33:ec:44:53:a0:
                    9e:6b:fd:23:89:7e:93:e3:08:a8:16:bf:43:68:d2:
                    f6:0f:99:3a:01:0a:ee:5b:4b:20:c5:cb:6b:aa:72:
                    1d:3c:6f:81:5e:94:39:4c:11:a5:a2:7e:71:0c:56:
                    f8:b9:0c:3d:7d:f4:df:b5:9a:5c:10:a1:bb:9c:8c:
                    35:45:2f:55:cf:d9:cd:33:13:68:47:65:2b:1c:17:
                    b3:93:da:5c:1c:e1:e3:29:82:6f:7c:2f:dd:fe:87:
                    5f:5b:a9:31:1b:fa:66:dc:6c:4e:99:a8:46:b9:ee:
                    dc:84:b0:cd:9d:33:13:52:3c:dd:f1:f9:d1:8b:60:
                    29:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:77:A9:6E:62:44:65:E5:C6:E8:FF:CD:F5:83:C9:9D:3F:D8:FF:52
            X509v3 Authority Key Identifier:
                keyid:98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ef:89:de:a0:54:9c:f0:97:de:06:15:94:d6:cd:65:6f:c0:74:
         8e:6f:f9:ac:d0:c5:c8:c9:3d:92:de:5c:09:f4:dc:56:46:14:
         a0:59:5b:ba:9e:00:21:d0:a9:b2:e4:63:4e:e9:3e:cf:9d:e5:
         a2:41:fd:12:e0:31:c3:64:77:b3:ff:c3:da:6d:31:94:91:13:
         d2:ab:0f:19:bb:97:72:af:96:ee:e8:d0:f2:3c:92:77:8c:e9:
         cc:28:82:f5:40:57:dd:6d:64:06:3a:ed:17:70:a6:b4:46:5b:
         33:0c:35:13:8b:bc:e0:f5:e1:bb:ae:2e:1c:b9:17:90:6f:e0:
         f5:8e:2e:f3:1d:3b:af:4a:c1:d2:71:1b:46:6a:51:68:d1:b1:
         66:12:b8:9d:c6:fb:81:40:cd:47:11:04:03:1c:fb:19:a1:eb:
         6d:2d:22:88:88:07:3f:ae:cf:0f:db:2c:55:7b:69:38:16:37:
         f9:70:c9:1c:39:dc:f4:c2:7c:fa:d0:87:49:8c:c2:20:e7:fe:
         76:8b:14:1e:c0:a7:47:c2:fe:1b:19:ff:47:f8:d4:0b:d5:98:
         3b:5d:14:fe:a8:8a:2f:6a:ab:e4:04:86:61:6a:40:ea:27:12:
         c6:2f:1b:f7:66:49:df:74:23:bc:a2:86:ca:b5:ab:8c:3d:94:
         12:61:cf:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:18 2026 by rpki-client