Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/5Iv1L7wvU90weLyUo7utCjEm88U.mft
File:                     5Iv1L7wvU90weLyUo7utCjEm88U.mft (raw, json)
Hash identifier:          bW1PgJGWzK66MOvAJZlOni6Ma4g8/4hGmboc7lShkBw=
Subject key identifier:   02:F6:BF:77:FF:EF:CA:17:4B:4A:84:98:72:D7:36:02:EC:E6:DF:13
Authority key identifier: E4:8B:F5:2F:BC:2F:53:DD:30:78:BC:94:A3:BB:AD:0A:31:26:F3:C5
Certificate issuer:       /CN=A91EBA90/serialNumber=E48BF52FBC2F53DD3078BC94A3BBAD0A3126F3C5
Certificate serial:       18
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5Iv1L7wvU90weLyUo7utCjEm88U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/5Iv1L7wvU90weLyUo7utCjEm88U.mft
Manifest number:          16
Signing time:             Tue 25 Aug 2026 08:55:41 +0000
Manifest this update:     Tue 25 Aug 2026 08:55:41 +0000
Manifest next update:     Tue 01 Sep 2026 08:55:41 +0000
Files and hashes:         1: 5Iv1L7wvU90weLyUo7utCjEm88U.crl (hash: bU3UuVezM5W/Yv053mECZb5pD0x+F7U18Zr2WZCGpXA=)
                          2: DE76C686889611F1B93BA8C46911F970.roa (hash: qJE6TO8uJYgLahM06vJS4Wmd4X/FNEwPw6/9LFb1+gE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/5Iv1L7wvU90weLyUo7utCjEm88U.crl
                          rsync://rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/5Iv1L7wvU90weLyUo7utCjEm88U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5Iv1L7wvU90weLyUo7utCjEm88U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 08:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBA90, serialNumber=E48BF52FBC2F53DD3078BC94A3BBAD0A3126F3C5
        Validity
            Not Before: Aug 25 08:55:41 2026 GMT
            Not After : Sep  1 08:55:41 2026 GMT
        Subject: CN=6a8d588d-ef6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:88:b1:03:29:a8:e5:d5:4e:95:74:88:65:cc:
                    72:38:98:ef:c7:24:46:4e:ca:80:34:1f:ab:1d:39:
                    c9:5c:22:67:0f:15:79:16:33:eb:f1:df:6a:f6:3d:
                    6c:b0:44:4b:b8:5d:54:a6:27:57:1c:b9:e7:a4:36:
                    10:a8:dc:26:19:f3:40:60:8d:ff:ec:30:af:12:7c:
                    58:5c:3d:f3:31:6e:ae:36:66:59:4d:7c:96:af:0f:
                    bf:bb:06:3f:09:b1:fa:10:d0:7e:eb:6f:58:54:04:
                    46:93:0b:00:a6:0c:ef:c9:c8:24:11:0c:f2:2d:07:
                    33:e0:10:2e:5b:79:60:ac:08:d3:ac:ba:a5:8f:35:
                    50:36:c0:96:b6:45:c4:52:ca:c6:91:88:25:00:92:
                    d8:2a:ca:26:b0:a3:e0:2a:91:16:cb:a4:4f:0e:5d:
                    a6:a4:02:91:5e:e0:5e:a7:78:ad:5c:5d:32:68:29:
                    fe:be:64:95:09:5a:ed:2f:55:13:f6:10:92:2f:f3:
                    5f:5a:28:b2:55:63:6e:98:ad:66:17:f5:e1:ce:cf:
                    9c:06:8f:08:dc:c5:f0:8b:f0:82:80:72:5a:01:97:
                    66:bb:c7:92:e3:9c:83:13:7d:b4:98:40:b4:2a:24:
                    00:67:1c:80:17:0a:42:31:9a:20:7e:33:ac:5f:2a:
                    15:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F6:BF:77:FF:EF:CA:17:4B:4A:84:98:72:D7:36:02:EC:E6:DF:13
            X509v3 Authority Key Identifier:
                keyid:E4:8B:F5:2F:BC:2F:53:DD:30:78:BC:94:A3:BB:AD:0A:31:26:F3:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/5Iv1L7wvU90weLyUo7utCjEm88U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5Iv1L7wvU90weLyUo7utCjEm88U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/5Iv1L7wvU90weLyUo7utCjEm88U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b9:20:7d:1d:12:9b:95:14:95:8c:a8:3a:36:6a:2f:e8:d1:
         bf:11:b8:e5:f7:68:4d:c2:2c:b7:12:64:86:17:af:7d:00:3f:
         74:8f:02:dd:45:e5:2e:25:92:d4:4b:6e:63:ff:b1:72:88:df:
         45:97:62:7e:8a:5a:bb:5c:17:4a:10:cf:cf:38:08:22:79:1c:
         b2:63:da:6b:80:31:52:03:64:8b:ee:8d:df:f9:db:c9:bd:97:
         1d:53:06:91:d0:26:b4:73:50:e4:0e:a8:cb:a0:9b:ad:b8:6c:
         c9:70:77:86:60:a2:75:11:39:61:90:6e:f2:44:95:d3:de:4b:
         67:61:e9:7e:01:41:aa:23:f4:50:11:94:f7:cc:41:4f:a6:9e:
         3b:d3:d4:7b:5f:80:66:25:9a:c2:18:b0:40:de:37:6d:9b:0a:
         3f:63:b8:8d:8e:6d:4a:62:62:ca:d7:1d:56:48:dd:41:16:48:
         01:bc:dc:a8:38:48:d1:a8:15:da:ae:a2:73:ad:df:a6:2d:0d:
         12:ef:7f:8c:40:97:e0:79:f0:b4:10:98:b6:8e:42:38:d2:b7:
         08:5f:52:14:55:13:c6:2d:4f:8a:db:a0:c2:c5:5a:0f:04:43:
         30:d5:7d:68:a8:3b:20:3e:d5:97:c6:0f:fe:47:15:4a:44:a0:
         d6:d2:94:f3
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
QkE5MDExMC8GA1UEBRMoRTQ4QkY1MkZCQzJGNTNERDMwNzhCQzk0QTNCQkFEMEEz
MTI2RjNDNTAeFw0yNjA4MjUwODU1NDFaFw0yNjA5MDEwODU1NDFaMBgxFjAUBgNV
BAMTDTZhOGQ1ODhkLWVmNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4iLEDKajl1U6VdIhlzHI4mO/HJEZOyoA0H6sdOclcImcPFXkWM+vx32r2PWyw
REu4XVSmJ1ccueekNhCo3CYZ80Bgjf/sMK8SfFhcPfMxbq42ZllNfJavD7+7Bj8J
sfoQ0H7rb1hUBEaTCwCmDO/JyCQRDPItBzPgEC5beWCsCNOsuqWPNVA2wJa2RcRS
ysaRiCUAktgqyiawo+AqkRbLpE8OXaakApFe4F6neK1cXTJoKf6+ZJUJWu0vVRP2
EJIv819aKLJVY26YrWYX9eHOz5wGjwjcxfCL8IKAcloBl2a7x5LjnIMTfbSYQLQq
JABnHIAXCkIxmiB+M6xfKhUVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUAva/d//v
yhdLSoSYctc2Auzm3xMwHwYDVR0jBBgwFoAU5Iv1L7wvU90weLyUo7utCjEm88Uw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQTkwL0EyMjg2M0RDODU5
MDExRjFBQjZDQTE5MjkxQTMwRkJDLzVJdjFMN3d2VTkwd2VMeVVvN3V0Q2pFbTg4
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvNUl2MUw3d3ZVOTB3ZUx5VW83dXRDakVtODhVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC
QTkwL0EyMjg2M0RDODU5MDExRjFBQjZDQTE5MjkxQTMwRkJDLzVJdjFMN3d2VTkw
d2VMeVVvN3V0Q2pFbTg4VS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBPuSB9HRKblRSVjKg6Nmov6NG/Ebjl92hNwiy3EmSGF699AD90jwLdReUuJZLU
S25j/7FyiN9Fl2J+ilq7XBdKEM/POAgieRyyY9prgDFSA2SL7o3f+dvJvZcdUwaR
0Ca0c1DkDqjLoJutuGzJcHeGYKJ1ETlhkG7yRJXT3ktnYel+AUGqI/RQEZT3zEFP
pp4709R7X4BmJZrCGLBA3jdtmwo/Y7iNjm1KYmLK1x1WSN1BFkgBvNyoOEjRqBXa
rqJzrd+mLQ0S73+MQJfgefC0EJi2jkI40rcIX1IUVRPGLU+K26DCxVoPBEMw1X1o
qDsgPtWXxg/+RxVKRKDW0pTz
-----END CERTIFICATE-----
Generated at Wed Aug 26 22:31:37 2026 by rpki-client