Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft
File:                     3oPHbNtE9PeURxkgK-OvqIPTSU0.mft (raw, json)
Hash identifier:          yW+uB0j9TKynG8dVeBEanMEYeZ7Mjl+FwbPpyXdn/XM=
Subject key identifier:   99:CF:DC:BC:C1:D7:37:5E:8B:26:15:63:6A:CD:EE:7F:2C:6A:58:3D
Authority key identifier: DE:83:C7:6C:DB:44:F4:F7:94:47:19:20:2B:E3:AF:A8:83:D3:49:4D
Certificate issuer:       /CN=A91EAE28/serialNumber=DE83C76CDB44F4F7944719202BE3AFA883D3494D
Certificate serial:       88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft
Manifest number:          85
Signing time:             Wed 19 Aug 2026 08:24:59 +0000
Manifest this update:     Wed 19 Aug 2026 08:24:59 +0000
Manifest next update:     Wed 26 Aug 2026 08:24:59 +0000
Files and hashes:         1: 3oPHbNtE9PeURxkgK-OvqIPTSU0.crl (hash: E5O4UqRJquVgm8t9Hr1dayGOD1f8atQ4AVyzv2T58k8=)
                          2: E9CC4952DBB711F09A595FAD4E641951.roa (hash: wYT2EQO9tWff1SLhMXGfdomgltEhqCKkHfWiewZBsdE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 08:24:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE28, serialNumber=DE83C76CDB44F4F7944719202BE3AFA883D3494D
        Validity
            Not Before: Aug 19 08:24:59 2026 GMT
            Not After : Aug 26 08:24:59 2026 GMT
        Subject: CN=6a85685b-027a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:59:2f:6e:49:89:b7:f0:54:2d:b7:97:c4:fa:
                    5d:a0:1d:38:df:ca:50:f4:66:90:04:0f:7f:59:3e:
                    e4:c9:8e:e7:1c:ce:1d:a9:1b:0f:c5:83:55:de:f2:
                    17:29:77:37:03:31:d6:a0:2e:f9:fd:55:77:cc:47:
                    b4:e7:d8:7f:f8:3a:5f:90:52:2d:f2:f4:88:1a:fe:
                    e2:39:83:16:6a:6b:e2:55:10:a3:90:26:f7:5a:d9:
                    cf:aa:d1:f1:13:b0:17:93:bf:6a:ae:d3:af:c5:8a:
                    33:b9:76:96:2e:84:ed:e3:55:b4:59:8a:7f:c9:7c:
                    35:57:04:42:71:be:6c:96:9d:c9:b6:7a:e5:47:f9:
                    eb:15:5a:36:66:f6:e4:8e:b7:77:3d:d0:0e:1e:1c:
                    68:be:22:2a:4b:7c:69:4e:5e:7c:54:23:d8:b5:52:
                    de:c8:47:bc:51:40:c3:fd:7d:22:c6:a5:a6:1a:80:
                    0c:fd:5b:e6:79:de:0b:81:35:16:a7:ce:04:2a:1d:
                    9d:00:0f:47:72:93:cf:2a:46:48:f0:7d:13:ae:2e:
                    e7:57:6e:d5:43:be:52:08:f2:11:9f:9c:55:4f:66:
                    f9:61:42:53:6c:dc:30:30:7e:f8:1c:a6:b4:d1:90:
                    be:21:76:f3:b9:a4:64:62:c7:9f:8b:37:60:8f:08:
                    89:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CF:DC:BC:C1:D7:37:5E:8B:26:15:63:6A:CD:EE:7F:2C:6A:58:3D
            X509v3 Authority Key Identifier:
                keyid:DE:83:C7:6C:DB:44:F4:F7:94:47:19:20:2B:E3:AF:A8:83:D3:49:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:f5:d0:59:b1:10:03:ab:74:fc:56:f2:d6:fa:2c:53:50:4c:
         5a:1f:e8:eb:5c:c8:5a:2d:ec:99:f7:ef:d1:9f:03:91:d0:bd:
         ee:59:69:b5:27:00:04:3c:cf:27:e2:ab:53:d4:cb:25:3e:33:
         16:56:37:f6:57:61:ed:3e:5a:a9:9d:ee:2f:71:1f:3c:26:b0:
         be:eb:c1:6b:e6:7f:09:d1:81:21:ad:e7:79:9f:43:03:dd:bc:
         9a:eb:34:8a:8b:82:72:b9:a3:78:41:2a:c8:f5:30:ee:28:30:
         c6:51:8b:d6:4c:61:b7:b5:45:e2:2a:83:86:10:c9:56:cb:25:
         8d:f7:ab:fd:e0:63:54:5e:b8:5e:c2:1f:da:39:22:88:91:fa:
         b1:fe:c3:e7:65:db:66:1e:c5:f6:16:97:4f:22:c9:d9:95:63:
         69:41:aa:4c:28:18:1c:50:b7:26:f9:27:f9:fc:50:99:f5:c1:
         76:d1:dd:6d:45:6d:c2:05:1c:65:a9:01:df:1a:22:7a:f1:81:
         25:92:96:bf:a0:9d:37:47:0d:51:6e:38:8a:3b:9b:d7:2c:63:
         c4:66:ee:60:8c:44:d2:de:00:30:b6:2e:4a:c7:af:e2:de:60:
         24:3c:a4:c9:44:f1:ca:8f:45:86:7a:ef:d3:d2:9e:9f:a8:3b:
         ed:ec:1b:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFFMjgxMTAvBgNVBAUTKERFODNDNzZDREI0NEY0Rjc5NDQ3MTkyMDJCRTNBRkE4
ODNEMzQ5NEQwHhcNMjYwODE5MDgyNDU5WhcNMjYwODI2MDgyNDU5WjAYMRYwFAYD
VQQDEw02YTg1Njg1Yi0wMjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp1kvbkmJt/BULbeXxPpdoB0438pQ9GaQBA9/WT7kyY7nHM4dqRsPxYNV3vIX
KXc3AzHWoC75/VV3zEe059h/+DpfkFIt8vSIGv7iOYMWamviVRCjkCb3WtnPqtHx
E7AXk79qrtOvxYozuXaWLoTt41W0WYp/yXw1VwRCcb5slp3JtnrlR/nrFVo2Zvbk
jrd3PdAOHhxoviIqS3xpTl58VCPYtVLeyEe8UUDD/X0ixqWmGoAM/Vvmed4LgTUW
p84EKh2dAA9HcpPPKkZI8H0Tri7nV27VQ75SCPIRn5xVT2b5YUJTbNwwMH74HKa0
0ZC+IXbzuaRkYsefizdgjwiJnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJnP3LzB
1zdeiyYVY2rN7n8salg9MB8GA1UdIwQYMBaAFN6Dx2zbRPT3lEcZICvjr6iD00lN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUyOC80NzYwNkVCNERC
QjcxMUYwQTBERjkwRjA0RDY0MTk1MS8zb1BIYk50RTlQZVVSeGtnSy1PdnFJUFRT
VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNvUEhiTnRFOVBlVVJ4a2dLLU92cUlQVFNVMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QUUyOC80NzYwNkVCNERCQjcxMUYwQTBERjkwRjA0RDY0MTk1MS8zb1BIYk50RTlQ
ZVVSeGtnSy1PdnFJUFRTVTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXvXQWbEQA6t0/Fby1vosU1BMWh/o61zIWi3smffv0Z8DkdC97llptScABDzP
J+KrU9TLJT4zFlY39ldh7T5aqZ3uL3EfPCawvuvBa+Z/CdGBIa3neZ9DA928mus0
iouCcrmjeEEqyPUw7igwxlGL1kxht7VF4iqDhhDJVssljfer/eBjVF64XsIf2jki
iJH6sf7D52XbZh7F9haXTyLJ2ZVjaUGqTCgYHFC3Jvkn+fxQmfXBdtHdbUVtwgUc
ZakB3xoievGBJZKWv6CdN0cNUW44ijub1yxjxGbuYIxE0t4AMLYuSsev4t5gJDyk
yUTxyo9Fhnrv09Ken6g77ewb7A==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:44 2026 by rpki-client