Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft
File:                     dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft (raw, json)
Hash identifier:          MVLB5JdfIG9FpHVqE6vXdlPYAqco5Z15Y1sWNb6is5E=
Subject key identifier:   D5:CE:B8:79:2A:5E:91:CE:42:48:56:C1:36:C7:50:6D:3E:A1:E4:4E
Authority key identifier: 75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED
Certificate issuer:       /CN=A91E85C5/serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED
Certificate serial:       04F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft
Manifest number:          04D0
Signing time:             Wed 19 Aug 2026 00:09:34 +0000
Manifest this update:     Wed 19 Aug 2026 00:09:33 +0000
Manifest next update:     Wed 26 Aug 2026 00:09:33 +0000
Files and hashes:         1: dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl (hash: GJM0BBmiI0UaQ10f+/a50eU7MQPaQr+m5B61r11uP+0=)
                          2: 14AD3D427E9D11EC914D4A6DC4F9AE02.roa (hash: acqTZFyzsES/Jw8lzPnjdR3O1fOEuCWSbHFZnsAZDc8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl
                          rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1269 (0x4f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E85C5, serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED
        Validity
            Not Before: Aug 19 00:09:33 2026 GMT
            Not After : Aug 26 00:09:33 2026 GMT
        Subject: CN=6a84f43e-fb46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b3:9b:75:99:f5:86:b7:b1:83:05:a6:e5:4c:
                    d1:04:8d:39:13:ee:90:1e:6b:fe:8a:1c:97:a7:ce:
                    7a:45:b9:15:5f:7f:91:45:72:ad:7c:6d:f9:b0:80:
                    21:4c:10:27:5c:39:b5:2c:4a:79:f9:6a:51:4c:14:
                    91:9d:f9:5d:fc:bc:10:5f:7b:77:e6:c3:dd:95:05:
                    47:67:2c:fc:19:2a:16:3b:84:9e:2d:17:de:9b:d4:
                    47:e6:3e:3c:52:6b:73:8f:fb:b9:69:f2:82:b4:c8:
                    aa:4d:50:7b:ef:cb:b9:88:a1:e9:50:91:cf:61:ee:
                    46:b1:88:7e:a6:87:55:a6:ce:25:bb:11:62:99:12:
                    2a:ca:5b:62:34:0a:2f:4c:6b:72:59:f1:46:6e:66:
                    71:7e:74:5b:7f:f9:f8:45:56:57:dc:37:03:96:d2:
                    97:d5:36:65:2d:ca:c6:50:0c:97:63:3a:19:c0:79:
                    37:8c:24:03:78:b2:62:11:fd:71:cb:93:b9:fc:a4:
                    b7:9d:8d:3e:c6:bf:3b:f7:60:c9:e7:27:87:14:b0:
                    ce:06:a3:e9:bd:bc:44:98:bf:60:61:83:44:68:64:
                    8d:28:b2:42:4e:b9:8e:2e:6b:32:f3:03:93:3a:a9:
                    72:f3:c2:6c:75:1a:91:b3:71:cd:5c:8c:ab:c4:5b:
                    7a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CE:B8:79:2A:5E:91:CE:42:48:56:C1:36:C7:50:6D:3E:A1:E4:4E
            X509v3 Authority Key Identifier:
                keyid:75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:c8:b4:f5:75:bb:fc:bf:26:ac:12:ea:e1:e0:3b:34:3c:01:
         6a:b9:3b:b0:94:75:7e:cf:07:3c:84:d2:de:cb:7f:5c:4f:8d:
         08:6d:5c:74:71:1f:28:98:af:b8:07:83:d6:57:9e:cf:2a:54:
         64:10:05:d9:fa:76:48:1e:f4:30:9f:dc:62:00:8b:b8:04:31:
         07:5a:04:f9:ad:73:70:f1:f7:e7:9a:cd:a8:57:5a:48:13:a2:
         2f:8a:ba:83:37:d9:73:66:00:65:1d:13:76:36:68:ec:35:df:
         47:54:9c:5f:10:01:06:89:e3:5f:c9:ce:17:86:6e:a6:fe:5c:
         7d:0a:71:9f:0a:83:cd:3e:e5:c4:11:a8:cc:e6:a9:47:b4:cb:
         bd:7c:51:76:53:96:0c:dc:87:6f:24:21:ed:09:43:0b:9a:f1:
         09:4c:7c:c7:e6:e9:d7:ea:20:15:14:cb:a9:e2:ab:bb:a1:c7:
         d7:b9:e9:dd:8b:87:4a:0c:c7:fb:a2:88:3f:25:1d:4b:56:9a:
         38:80:6b:2e:ac:af:9f:10:01:a5:51:1c:a9:e1:be:9d:d3:09:
         fa:f3:37:8e:db:5b:41:a5:df:02:29:7b:78:be:86:a9:57:e1:
         11:d1:d8:d9:7b:35:8f:c6:45:c6:52:5f:bf:4a:07:86:a7:b2:
         4d:c4:dd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:24 2026 by rpki-client