Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
File:                     cL0eSV4lCyLieYKWlpeFotd9c38.mft (raw, json)
Hash identifier:          b+bBdJjmWBt5tFvaPN99ZseeGFWQUCv8EHvNBzFxcY8=
Subject key identifier:   2A:91:7E:D0:16:96:C7:0C:4D:A2:62:6F:41:97:4C:61:16:B5:6E:6F
Authority key identifier: 70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F
Certificate issuer:       /CN=A91EE1C4/serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
Certificate serial:       0837
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
Manifest number:          081F
Signing time:             Thu 20 Aug 2026 21:04:46 +0000
Manifest this update:     Thu 20 Aug 2026 21:04:45 +0000
Manifest next update:     Thu 27 Aug 2026 21:04:45 +0000
Files and hashes:         1: cL0eSV4lCyLieYKWlpeFotd9c38.crl (hash: 0xdKDQTGzOQWUvKit2C8mmK6c6Vyo9mYYZ/5MBAK1W4=)
                          2: AEFB1B262FB111EB89A04D37C4F9AE02.roa (hash: tT41B0xJ+RDXXvQx3CB/Ui5y+1aA7lb07rB6KtZUBJc=)
                          3: D8EA255C2FBC11EB8E017F5CC4F9AE02.roa (hash: Rlc9tIFJ76w9w+Q182kiW0dYBgbYcuIIgNLuRF6VH4A=)
                          4: D992CDCE2FBC11EB8E017F5CC4F9AE02.roa (hash: 9LuZa38M86RpuIBtOyu8RxTzdNFpAwgeI57izlLPJgA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl
                          rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2103 (0x837)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE1C4, serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
        Validity
            Not Before: Aug 20 21:04:45 2026 GMT
            Not After : Aug 27 21:04:45 2026 GMT
        Subject: CN=6a876bed-eb01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c2:7a:47:c9:8d:3f:a4:7f:49:8e:15:d4:7a:
                    5f:19:8b:8c:a5:e2:6e:83:f5:15:38:f5:0c:f4:5f:
                    5b:a3:da:31:cc:41:93:5e:e1:89:29:49:aa:fc:a0:
                    d2:c1:60:a6:e9:68:6d:2b:30:72:ff:eb:1d:ce:61:
                    35:a0:a3:b9:5f:55:d0:e3:24:bf:61:8b:21:d9:50:
                    18:02:40:09:5c:0d:69:95:87:c2:de:5c:a0:61:6f:
                    99:50:56:e3:3f:b8:41:3e:3f:2d:49:de:b1:4b:83:
                    45:6e:f0:fd:e7:d8:00:1c:8d:8c:83:01:2b:69:8d:
                    38:c9:c1:cd:7c:ca:da:31:20:34:2c:74:56:4c:4b:
                    b6:f0:79:0d:d8:b0:bd:6f:70:15:54:9e:ba:fe:fd:
                    18:0b:e6:54:b7:df:e3:6e:22:2e:a9:36:19:3d:90:
                    66:88:c5:86:d2:2d:76:25:2b:4a:2b:3a:26:e0:03:
                    36:a0:90:be:b9:eb:77:49:27:74:c8:5b:85:de:3f:
                    f1:31:d3:f1:c6:18:c6:85:ba:ca:24:83:65:41:2a:
                    49:74:e9:c8:71:5f:9d:56:60:d7:14:4a:0f:53:2e:
                    5b:4b:93:0c:21:11:2d:e7:f6:23:14:02:77:ff:47:
                    fd:4d:00:89:0d:d1:d2:67:89:2d:10:24:e3:41:62:
                    7b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:91:7E:D0:16:96:C7:0C:4D:A2:62:6F:41:97:4C:61:16:B5:6E:6F
            X509v3 Authority Key Identifier:
                keyid:70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:40:fc:9a:02:b1:1b:dd:69:07:e4:e3:35:52:19:6b:74:e1:
         84:6e:df:35:8d:54:7c:99:9e:4e:76:10:7e:ff:9c:09:c7:3b:
         8d:bb:fa:88:f9:45:94:a7:9c:76:fe:a9:91:24:9f:36:54:3a:
         93:29:cc:22:e4:96:94:10:34:24:97:67:da:ce:a7:28:7d:d9:
         b0:67:18:29:2d:62:15:7c:4a:d5:43:bf:ee:d8:26:00:11:7c:
         71:6d:97:93:8d:f3:26:fc:65:af:94:a0:cb:ae:8b:7e:62:5c:
         74:92:fd:8a:4a:31:ba:8b:f6:13:45:e5:b5:87:17:0a:a3:81:
         80:4e:09:d0:ff:20:17:09:b7:a7:cb:60:10:ac:1f:01:f5:73:
         94:a4:67:7b:fa:4d:a0:67:13:26:5b:cc:c5:fa:b6:7c:11:f0:
         2a:2d:4f:13:e7:a8:eb:c4:95:f5:2e:7b:7f:8a:5e:1c:ea:50:
         d4:a2:8e:e3:15:d4:f3:d3:97:dd:a8:a8:91:04:06:b7:94:37:
         6b:0c:af:af:c8:ee:aa:c0:d0:1c:76:b7:8f:00:56:cb:66:72:
         25:9f:30:f9:53:12:2d:9f:3b:04:cc:dc:55:7c:c1:d7:c1:03:
         d1:1e:7c:e6:9b:fe:c4:b1:51:af:96:a1:86:e0:04:9e:ec:98:
         c0:55:99:f6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUUxQzQxMTAvBgNVBAUTKDcwQkQxRTQ5NUUyNTBCMjJFMjc5ODI5Njk2OTc4NUEy
RDc3RDczN0YwHhcNMjYwODIwMjEwNDQ1WhcNMjYwODI3MjEwNDQ1WjAYMRYwFAYD
VQQDEw02YTg3NmJlZC1lYjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5cJ6R8mNP6R/SY4V1HpfGYuMpeJug/UVOPUM9F9bo9oxzEGTXuGJKUmq/KDS
wWCm6WhtKzBy/+sdzmE1oKO5X1XQ4yS/YYsh2VAYAkAJXA1plYfC3lygYW+ZUFbj
P7hBPj8tSd6xS4NFbvD959gAHI2MgwEraY04ycHNfMraMSA0LHRWTEu28HkN2LC9
b3AVVJ66/v0YC+ZUt9/jbiIuqTYZPZBmiMWG0i12JStKKzom4AM2oJC+uet3SSd0
yFuF3j/xMdPxxhjGhbrKJINlQSpJdOnIcV+dVmDXFEoPUy5bS5MMIREt5/YjFAJ3
/0f9TQCJDdHSZ4ktECTjQWJ7ZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCqRftAW
lscMTaJib0GXTGEWtW5vMB8GA1UdIwQYMBaAFHC9HkleJQsi4nmClpaXhaLXfXN/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTFDNC9GQzY3MkI3MjJG
QUYxMUVCOTQxNTVGMzNDNEY5QUUwMi9jTDBlU1Y0bEN5TGllWUtXbHBlRm90ZDlj
MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NMMGVTVjRsQ3lMaWVZS1dscGVGb3RkOWMzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RTFDNC9GQzY3MkI3MjJGQUYxMUVCOTQxNTVGMzNDNEY5QUUwMi9jTDBlU1Y0bEN5
TGllWUtXbHBlRm90ZDljMzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADkD8mgKxG91pB+TjNVIZa3ThhG7fNY1UfJmeTnYQfv+cCcc7jbv6iPlFlKec
dv6pkSSfNlQ6kynMIuSWlBA0JJdn2s6nKH3ZsGcYKS1iFXxK1UO/7tgmABF8cW2X
k43zJvxlr5Sgy66LfmJcdJL9ikoxuov2E0XltYcXCqOBgE4J0P8gFwm3p8tgEKwf
AfVzlKRne/pNoGcTJlvMxfq2fBHwKi1PE+eo68SV9S57f4peHOpQ1KKO4xXU89OX
3aiokQQGt5Q3awyvr8juqsDQHHa3jwBWy2ZyJZ8w+VMSLZ87BMzcVXzB18ED0R58
5pv+xLFRr5ahhuAEnuyYwFWZ9g==
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:02:55 2026 by rpki-client