Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft
File:                     Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft (raw, json)
Hash identifier:          v22mpNCzcmmBJYD3DeG4IW96qjXbXUqRx+8Sw/veAxE=
Subject key identifier:   4A:81:1A:A8:DB:02:21:57:32:BF:4D:0C:CA:25:89:27:76:C1:D1:92
Authority key identifier: 09:DE:19:67:E9:52:EE:8E:1B:2D:D6:0F:88:F6:3B:A2:60:57:53:EF
Certificate issuer:       /CN=A91E9D0C/serialNumber=09DE1967E952EE8E1B2DD60F88F63BA2605753EF
Certificate serial:       05D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft
Manifest number:          05CC
Signing time:             Tue 18 Aug 2026 23:24:18 +0000
Manifest this update:     Tue 18 Aug 2026 23:24:17 +0000
Manifest next update:     Tue 25 Aug 2026 23:24:17 +0000
Files and hashes:         1: Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl (hash: ppWh1lASO//fd1UtIGT8blQpPvsRzsshA8i8/lGGOac=)
                          2: 630BCB6E1A1D11EC99B84C20C4F9AE02.roa (hash: 7sdaRztYfffuMPbpIvWHbP2AaEjIDw99pX3bZR2f4wQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl
                          rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 23:24:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1493 (0x5d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9D0C, serialNumber=09DE1967E952EE8E1B2DD60F88F63BA2605753EF
        Validity
            Not Before: Aug 18 23:24:17 2026 GMT
            Not After : Aug 25 23:24:17 2026 GMT
        Subject: CN=6a84e9a2-74d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a9:b6:c7:90:3b:88:48:1c:30:44:30:28:dc:
                    17:ff:e2:97:a6:8d:73:5b:b8:88:49:97:92:8f:2e:
                    76:53:07:3e:99:23:63:d0:a7:f7:41:1d:4a:72:67:
                    78:45:3d:c4:77:ef:e5:fe:ae:f9:ca:a5:50:13:47:
                    eb:85:20:34:ff:d7:da:bb:72:75:bc:ec:99:6f:f8:
                    48:22:78:b4:f3:8d:0c:79:e4:ac:fe:c8:ee:23:3e:
                    04:1d:89:1f:ed:37:b5:52:d1:37:d1:7d:0c:92:c7:
                    d6:f3:89:c5:dd:6e:42:10:01:83:3a:d1:c7:2c:6f:
                    73:94:06:c1:51:90:04:71:d0:36:97:09:29:9a:9e:
                    66:f4:80:f0:2d:29:23:67:47:52:06:59:6f:e5:84:
                    d4:15:4a:9d:6e:5a:9a:7b:b2:75:e2:b2:57:b0:ab:
                    66:99:d0:d4:cd:b3:c3:45:61:91:ec:83:2f:05:36:
                    fa:07:11:6c:8f:98:36:9b:18:4e:72:2c:4e:3a:01:
                    b7:a0:f0:5b:92:67:cb:e5:0e:9a:48:09:66:c1:e9:
                    39:b1:92:92:28:eb:7b:7f:9f:5d:25:df:71:bc:ad:
                    28:7b:ba:69:2d:38:c6:9a:b7:7b:26:6e:df:f8:cf:
                    ba:dc:fc:fc:af:3d:09:e8:c3:f8:03:6d:3f:4a:65:
                    35:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:81:1A:A8:DB:02:21:57:32:BF:4D:0C:CA:25:89:27:76:C1:D1:92
            X509v3 Authority Key Identifier:
                keyid:09:DE:19:67:E9:52:EE:8E:1B:2D:D6:0F:88:F6:3B:A2:60:57:53:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:10:30:a9:af:3f:bf:5d:d6:87:98:1d:f3:c0:d6:74:0e:20:
         85:bd:14:41:1c:5a:fd:6e:c4:c6:b4:d8:cc:82:19:0d:01:66:
         0a:fe:5c:09:b8:5e:73:10:f4:1a:20:98:56:75:88:91:3a:9b:
         66:d3:cd:f0:28:48:6e:12:a0:f6:c6:3f:72:60:41:8b:43:6e:
         a4:31:a8:18:0f:49:b8:2c:18:ba:53:f1:f7:88:03:6f:d3:9c:
         05:e8:a9:f3:95:d5:24:c6:f2:7d:ac:cf:12:ae:09:0a:92:26:
         71:5f:c4:19:8d:4f:60:25:c2:10:96:aa:a4:99:4d:94:6b:12:
         fa:3a:05:74:09:38:ad:01:5e:4d:9d:43:00:42:de:da:78:27:
         71:65:8f:bf:a2:40:e3:9c:8c:cf:39:ef:aa:69:3a:7f:ce:00:
         f2:80:ad:e4:c1:ef:d6:12:47:88:60:5a:d1:1f:9c:72:89:a1:
         fc:b8:79:9c:d1:53:d3:4c:c0:2f:15:a0:2b:78:33:6b:8d:32:
         cf:7a:68:fb:2b:99:00:9b:f4:54:6e:b1:a6:96:f7:64:60:bf:
         a3:20:72:90:6b:38:02:08:8a:b0:39:bb:50:fa:f6:09:4b:79:
         25:e9:66:74:e9:fa:82:4e:c1:df:f7:24:f8:78:c2:f1:2b:69:
         5e:94:89:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTlEMEMxMTAvBgNVBAUTKDA5REUxOTY3RTk1MkVFOEUxQjJERDYwRjg4RjYzQkEy
NjA1NzUzRUYwHhcNMjYwODE4MjMyNDE3WhcNMjYwODI1MjMyNDE3WjAYMRYwFAYD
VQQDEw02YTg0ZTlhMi03NGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4Km2x5A7iEgcMEQwKNwX/+KXpo1zW7iISZeSjy52Uwc+mSNj0Kf3QR1Kcmd4
RT3Ed+/l/q75yqVQE0frhSA0/9fau3J1vOyZb/hIIni0840MeeSs/sjuIz4EHYkf
7Te1UtE30X0MksfW84nF3W5CEAGDOtHHLG9zlAbBUZAEcdA2lwkpmp5m9IDwLSkj
Z0dSBllv5YTUFUqdblqae7J14rJXsKtmmdDUzbPDRWGR7IMvBTb6BxFsj5g2mxhO
cixOOgG3oPBbkmfL5Q6aSAlmwek5sZKSKOt7f59dJd9xvK0oe7ppLTjGmrd7Jm7f
+M+63Pz8rz0J6MP4A20/SmU1AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEqBGqjb
AiFXMr9NDMoliSd2wdGSMB8GA1UdIwQYMBaAFAneGWfpUu6OGy3WD4j2O6JgV1Pv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUQwQy84MTRGNkQwNDFB
MUExMUVDOUQxQ0RGMUVDNEY5QUUwMi9DZDRaWi1sUzdvNGJMZFlQaVBZN29tQlhV
LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NkNFpaLWxTN280YkxkWVBpUFk3b21CWFUtOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OUQwQy84MTRGNkQwNDFBMUExMUVDOUQxQ0RGMUVDNEY5QUUwMi9DZDRaWi1sUzdv
NGJMZFlQaVBZN29tQlhVLTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATRAwqa8/v13Wh5gd88DWdA4ghb0UQRxa/W7ExrTYzIIZDQFmCv5cCbhecxD0
GiCYVnWIkTqbZtPN8ChIbhKg9sY/cmBBi0NupDGoGA9JuCwYulPx94gDb9OcBeip
85XVJMbyfazPEq4JCpImcV/EGY1PYCXCEJaqpJlNlGsS+joFdAk4rQFeTZ1DAELe
2ngncWWPv6JA45yMzznvqmk6f84A8oCt5MHv1hJHiGBa0R+ccomh/Lh5nNFT00zA
LxWgK3gza40yz3po+yuZAJv0VG6xppb3ZGC/oyBykGs4AgiKsDm7UPr2CUt5Jelm
dOn6gk7B3/ck+HjC8StpXpSJ1w==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:25 2026 by rpki-client