Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft
File:                     S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft (raw, json)
Hash identifier:          4Jb1T0+bx2xHWmbSntQGNfu4El/3QYRLeYBsc0XU5Xo=
Subject key identifier:   E5:19:28:7C:17:B0:B1:26:E9:98:5F:FD:8D:E1:35:5F:5A:CC:08:70
Authority key identifier: 4B:85:67:FB:38:7B:FD:74:07:6B:50:97:70:01:32:C7:AC:86:E6:20
Certificate issuer:       /CN=A91ECC52/serialNumber=4B8567FB387BFD74076B5097700132C7AC86E620
Certificate serial:       086E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft
Manifest number:          0866
Signing time:             Wed 26 Aug 2026 20:46:24 +0000
Manifest this update:     Wed 26 Aug 2026 20:46:24 +0000
Manifest next update:     Wed 02 Sep 2026 20:46:24 +0000
Files and hashes:         1: S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl (hash: wPNC3HBJuUDKipOLog/FX0UGS22+/Y5NaiZ+xX6kvD8=)
                          2: 65D706B213FA11EB92A6FE61C4F9AE02.roa (hash: uOMbohBjqYkrJACqTf93OXW7s4M6jLEwG//Jh6twRk0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl
                          rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 20:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2158 (0x86e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ECC52, serialNumber=4B8567FB387BFD74076B5097700132C7AC86E620
        Validity
            Not Before: Aug 26 20:46:24 2026 GMT
            Not After : Sep  2 20:46:24 2026 GMT
        Subject: CN=6a8f50a0-4347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3c:76:5b:88:9e:30:ed:f4:b8:33:c8:d9:f7:
                    46:86:40:1a:31:48:39:22:12:c2:b2:74:7f:5e:e1:
                    59:e8:e2:0b:a3:17:a3:ad:1d:7b:9e:27:88:8a:dd:
                    b3:55:1e:8e:e2:3c:0d:d5:97:3d:28:a5:9d:57:df:
                    6a:2d:44:78:54:ea:34:a3:44:a6:0e:d3:9e:d2:bf:
                    9f:2b:3e:c8:23:9b:a0:ff:e0:0a:2f:8e:50:63:02:
                    e1:0c:e3:47:7b:71:02:35:45:03:cf:2a:a7:29:42:
                    f0:52:42:68:fd:9e:f4:d9:5d:34:5a:e1:cc:40:d0:
                    15:18:82:f9:f9:2f:ce:3c:9c:45:cf:c6:99:af:52:
                    ed:46:5c:ad:28:16:c3:f4:5c:c6:01:67:84:71:f1:
                    dd:ea:83:92:e2:ad:77:c3:34:c4:e9:8e:f8:57:fa:
                    e3:e6:cd:75:bb:05:33:7a:ab:f3:e1:3c:bf:be:3e:
                    af:ea:df:5b:94:04:70:fe:78:d4:39:d6:9c:e2:d6:
                    a6:80:b2:7c:a6:b1:de:a1:0f:d3:16:49:52:fc:1e:
                    95:de:79:c2:50:bd:b7:63:d8:a3:c1:1f:bf:59:9c:
                    35:2a:f1:a9:93:00:2c:a5:4b:f2:a6:a2:d9:47:d7:
                    73:17:36:fb:ed:b4:75:c1:0e:ab:ff:d5:52:d3:ec:
                    10:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:19:28:7C:17:B0:B1:26:E9:98:5F:FD:8D:E1:35:5F:5A:CC:08:70
            X509v3 Authority Key Identifier:
                keyid:4B:85:67:FB:38:7B:FD:74:07:6B:50:97:70:01:32:C7:AC:86:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:5f:a7:f9:50:45:12:a5:36:cb:73:1c:59:8a:b5:76:25:91:
         07:5f:02:2a:15:3b:4d:37:94:e5:1c:70:3d:15:ca:e1:d4:ab:
         25:65:71:59:19:6c:40:0a:91:22:6d:f5:ff:3a:56:9b:62:67:
         68:37:07:12:d8:45:b7:a2:39:5f:2a:e2:3e:a0:79:d0:39:6a:
         08:e6:ba:b7:3a:1c:63:64:b7:96:00:e8:92:10:87:31:ae:79:
         b1:88:c4:14:ee:4b:d3:29:02:89:c9:d1:9f:3e:fa:f2:e1:b1:
         41:ea:37:e6:6b:37:1c:8f:f9:38:d7:c5:ff:af:dd:9b:ae:98:
         a5:81:df:a2:ac:81:d4:56:56:60:36:68:d4:de:3c:92:ff:cf:
         22:22:1b:bc:23:e3:f2:37:8b:f4:d4:0d:93:67:93:a3:8d:dd:
         e6:ce:3a:cc:38:66:23:b9:64:2e:d7:1d:80:5b:ef:2b:5d:7e:
         23:ac:17:80:93:bb:2c:7b:41:e3:ec:b8:39:5f:75:78:11:34:
         e9:b3:f9:4f:80:34:d2:c9:5a:6d:88:1d:4d:c3:98:89:82:12:
         33:29:18:8d:7e:71:42:68:ca:e3:e5:2f:8a:28:7d:4e:03:9e:
         ff:02:92:42:06:4c:11:3b:39:de:e0:e4:92:f7:08:90:b6:2f:
         7e:0f:e3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:36:49 2026 by rpki-client