Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft
File:                     9AFXH04P6PgNV80CfNnuFdc4jyQ.mft (raw, json)
Hash identifier:          BgIcnlERUlPKrdXetvJlKSN+l/rlmfNE+Vjl4lUsXsQ=
Subject key identifier:   54:4E:44:85:70:36:39:16:CE:06:81:9F:52:62:3D:3A:38:F3:18:13
Authority key identifier: F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24
Certificate issuer:       /CN=A91EA54A/serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24
Certificate serial:       0175
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft
Manifest number:          016C
Signing time:             Wed 19 Aug 2026 05:29:32 +0000
Manifest this update:     Wed 19 Aug 2026 05:29:32 +0000
Manifest next update:     Wed 26 Aug 2026 05:29:32 +0000
Files and hashes:         1: 9AFXH04P6PgNV80CfNnuFdc4jyQ.crl (hash: eAW5ANvJQzudf/zW09x9hfGTAYkPcb+cLKNFtRMceAY=)
                          2: 8D52A23871A611EF8F5B9755C4F9AE02.roa (hash: of9gDmyx98htPYcM2lAvW1XGnxUh1bmJa4MFK/pfI3I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:29:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA54A, serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24
        Validity
            Not Before: Aug 19 05:29:32 2026 GMT
            Not After : Aug 26 05:29:32 2026 GMT
        Subject: CN=6a853f3c-928b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9f:04:eb:97:12:cf:fa:14:70:3c:9d:45:4b:
                    53:eb:e0:b6:fb:e8:ff:45:63:ea:13:58:ae:9d:4f:
                    1d:bd:e4:b2:0d:94:2d:5c:b8:c5:ae:07:6d:41:08:
                    33:7e:3d:3f:8d:de:9e:21:c2:55:df:70:08:da:81:
                    f1:c9:0a:8d:72:a1:40:ba:f4:d9:d9:42:33:fb:f1:
                    4e:36:65:48:b7:51:02:33:80:ac:d3:67:00:08:23:
                    3f:4b:99:6c:3a:81:7b:19:e3:12:f7:38:6d:42:75:
                    b8:b8:3a:51:90:f5:a6:30:3c:8b:7b:04:62:97:87:
                    b6:85:46:b4:bf:08:f3:28:fe:db:f4:0f:73:b4:5c:
                    9e:d2:85:52:6b:9a:20:f2:5c:8e:03:29:67:6e:8c:
                    89:27:6a:48:51:bb:58:27:46:f3:06:e0:af:c7:cf:
                    fb:b8:8f:98:f0:64:5d:81:e0:f9:11:95:35:d0:a8:
                    a0:89:1d:48:b5:e6:53:03:6f:b1:35:7f:03:d4:90:
                    c6:05:e1:c1:7d:c1:8a:6c:26:64:9b:8f:58:9e:6e:
                    b3:7b:88:ff:3e:8e:e4:8d:c8:32:c8:87:d6:7f:90:
                    90:8f:99:30:9d:a5:2e:1c:a0:4d:88:eb:9d:93:67:
                    6e:95:eb:a2:c8:51:9e:ac:11:c1:40:bf:9c:85:bf:
                    7a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4E:44:85:70:36:39:16:CE:06:81:9F:52:62:3D:3A:38:F3:18:13
            X509v3 Authority Key Identifier:
                keyid:F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:20:89:9e:67:f2:54:ad:ca:b6:66:b5:7b:10:8b:d6:a8:5a:
         2c:ac:92:02:3d:b0:af:8f:71:b9:7c:7f:6d:5e:9f:9e:14:a2:
         93:17:d9:11:5d:5c:6c:7d:63:85:c1:ae:dd:f8:e5:ac:14:03:
         99:49:60:7a:64:54:cf:73:a4:1e:f0:fd:6d:c4:37:19:aa:85:
         8a:f3:49:1c:f8:d5:25:58:de:33:09:24:c1:03:0d:07:26:fb:
         08:e0:96:58:37:6a:59:5f:8f:b2:18:7d:cc:89:72:4a:56:2d:
         31:03:1a:81:e5:02:e1:6a:03:c2:66:66:78:8a:11:0a:c8:8f:
         89:19:84:17:45:2b:bf:17:6b:71:87:f0:44:1d:d3:9e:58:9b:
         9b:2a:8b:47:27:08:39:14:a5:f6:13:a0:b4:9f:80:2e:95:0b:
         1c:08:56:2f:3f:b4:74:68:b7:4c:9e:8a:54:f3:15:61:a0:18:
         b0:db:4a:53:2f:88:79:48:1a:1f:9a:bf:9d:11:1f:a0:f9:c8:
         aa:a4:c3:9b:2b:a4:40:37:6e:74:47:64:fe:54:b7:1f:f6:9f:
         46:23:9b:48:fb:da:af:d5:75:cb:de:b8:6e:4d:92:da:c0:4b:
         98:8b:21:92:42:59:5f:c5:31:f6:0b:65:bb:f0:b0:e4:51:15:
         15:61:5c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:45 2026 by rpki-client