Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
File:                     b2WgySJgsa2iMYeym6w76trAVmE.mft (raw, json)
Hash identifier:          LdxWV/+kV+7GX0lSfTTu6bg4JQ/X2Z/cX3Cb3ipooyM=
Subject key identifier:   8E:B8:B4:E9:9C:31:E0:33:AC:7A:1A:D6:30:1C:0E:97:D5:C4:98:00
Authority key identifier: 6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61
Certificate issuer:       /CN=A91EA449/serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661
Certificate serial:       01CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
Manifest number:          01C1
Signing time:             Mon 31 Aug 2026 04:22:24 +0000
Manifest this update:     Mon 31 Aug 2026 04:22:23 +0000
Manifest next update:     Mon 07 Sep 2026 04:22:23 +0000
Files and hashes:         1: b2WgySJgsa2iMYeym6w76trAVmE.crl (hash: 6kwgd5Xs+1HYTl5NBJEp/RC5Jp4IVvSm4l5YG04iC0s=)
                          2: 9DE187FA2A8211F08575E277C4F9AE02.roa (hash: 4eeNf5jC2Mk+3sdc5Wmsh3IL+6DgzipfF5IlQKuRXx0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl
                          rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 04:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460 (0x1cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA449, serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661
        Validity
            Not Before: Aug 31 04:22:23 2026 GMT
            Not After : Sep  7 04:22:23 2026 GMT
        Subject: CN=6a950180-c9c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e4:a1:a8:fc:cb:08:9f:73:b0:24:d7:53:8d:
                    5c:02:06:93:42:c7:de:bc:8b:c5:be:4b:0a:aa:8f:
                    e4:fe:98:9f:4e:5f:8e:a2:4d:37:01:b9:1d:c2:0c:
                    9b:c3:b3:3f:5c:e8:63:8a:40:31:15:63:85:de:a4:
                    9e:93:14:de:cf:39:e3:a5:6f:51:d2:04:6d:35:49:
                    ab:d4:f8:4f:25:18:82:ac:ce:4b:20:23:d3:58:4e:
                    ed:2a:98:e7:50:45:c1:83:23:0b:76:1c:12:32:c6:
                    a7:e1:f8:37:aa:8e:c2:51:c3:9a:4f:c3:1c:e5:f9:
                    02:62:8b:eb:07:ef:d5:88:68:6e:7c:c4:2c:62:21:
                    27:9f:78:c0:43:b4:c0:77:d1:b9:ec:bb:7f:58:9f:
                    ac:55:ae:51:47:f4:21:16:70:16:0f:91:0e:32:55:
                    09:35:95:7b:3e:71:c3:0d:63:bc:5a:09:76:57:0a:
                    7e:6d:13:bf:f7:85:04:70:c0:29:79:40:24:56:53:
                    fb:de:c5:72:b2:6e:31:86:90:9e:2f:48:89:9c:33:
                    e8:69:ba:b4:20:bb:03:fe:66:fa:df:ff:ce:52:d5:
                    81:0c:10:63:ad:3f:50:46:db:68:f5:e4:2f:8f:3a:
                    a5:e6:44:ef:ad:2e:1b:d6:69:d2:a0:81:71:89:2a:
                    94:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B8:B4:E9:9C:31:E0:33:AC:7A:1A:D6:30:1C:0E:97:D5:C4:98:00
            X509v3 Authority Key Identifier:
                keyid:6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:84:ea:d2:61:7d:50:4c:cc:69:95:24:01:f0:4e:6c:71:d3:
         58:5f:a2:ea:6e:d3:be:6c:c0:ac:cf:66:c5:d0:6d:30:8f:04:
         83:09:85:8a:79:15:cb:20:a0:7c:56:bf:e6:17:49:b3:b0:d2:
         c1:b3:db:ae:bf:6e:56:eb:81:19:ca:1c:25:b0:5d:e7:82:02:
         09:ba:9f:1c:fe:c4:72:ba:10:15:67:26:d8:7e:2e:e9:ae:74:
         15:0b:69:65:b4:11:35:00:df:8f:01:51:c0:2c:9f:bb:5c:f0:
         56:fe:4e:5b:84:de:92:78:d3:e2:33:33:dd:47:31:b4:36:a6:
         e8:39:db:8a:c6:9a:fa:19:d9:51:88:b8:f9:a0:b3:f4:84:f9:
         05:5c:33:70:5e:e4:0a:8d:de:5d:32:b8:78:f4:4c:a5:68:b3:
         c5:91:35:4a:33:88:dd:4b:c0:8d:df:cd:36:37:ac:e0:86:9c:
         fa:7c:ee:b6:5f:57:fd:e3:9c:50:30:5c:30:40:d8:d4:af:bb:
         dd:6b:67:43:26:01:bc:4c:6f:cc:d5:86:eb:f6:bb:21:8d:5c:
         62:40:40:82:87:1c:b6:6f:f3:63:e3:61:e3:5b:8f:59:ca:ce:
         50:a4:73:33:64:14:19:75:57:ba:c0:b5:93:4a:b3:ff:c7:3d:
         82:dd:a5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:41:22 2026 by rpki-client