Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft
File:                     CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft (raw, json)
Hash identifier:          HaChECzNk3PiZAV/ljTGPuP2ArdxRbqSZkrdXyJYTGE=
Subject key identifier:   64:31:80:AD:62:D7:52:22:0E:F3:E0:73:0A:D8:BA:FD:E5:49:A1:EC
Authority key identifier: 09:C7:D9:E7:F2:63:DB:0B:8B:82:01:E7:D2:93:CA:DE:CB:97:CF:8C
Certificate issuer:       /CN=A91EEA5F/serialNumber=09C7D9E7F263DB0B8B8201E7D293CADECB97CF8C
Certificate serial:       01AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft
Manifest number:          01A0
Signing time:             Wed 19 Aug 2026 04:50:40 +0000
Manifest this update:     Wed 19 Aug 2026 04:50:40 +0000
Manifest next update:     Wed 26 Aug 2026 04:50:40 +0000
Files and hashes:         1: CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl (hash: mDwh5ESdEjchBQMpdP2MnXih6JR+EHfGdOWjt/0TZIM=)
                          2: BE16D82423EC11EF8684D033C4F9AE02.roa (hash: 4/ZAS69VqXvvHrhqlkq0YkXgIDmue+Z0aUZMijygSF4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl
                          rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 04:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEA5F, serialNumber=09C7D9E7F263DB0B8B8201E7D293CADECB97CF8C
        Validity
            Not Before: Aug 19 04:50:40 2026 GMT
            Not After : Aug 26 04:50:40 2026 GMT
        Subject: CN=6a853620-3ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:97:17:3f:91:17:5a:e1:8e:92:09:8e:76:da:
                    eb:55:74:c9:b3:8b:fb:2e:0f:bc:e9:db:80:4d:b3:
                    ff:3a:91:ca:a4:40:a1:90:d3:9c:ce:39:5b:80:22:
                    b6:f7:51:32:46:5b:e6:40:f4:54:99:ac:99:af:23:
                    d6:24:dd:7a:93:46:9c:b5:01:c9:f7:ba:48:d6:15:
                    ad:ea:85:76:aa:83:ec:3a:61:a3:71:83:2f:63:70:
                    85:fc:09:10:58:dc:13:c0:77:12:fe:43:de:65:48:
                    5d:6a:82:6c:b4:a2:dd:ea:e4:3f:77:43:6e:1f:4a:
                    a2:a0:64:7a:12:c1:a2:c2:0b:4b:67:75:fb:b3:79:
                    b7:de:c4:c0:5e:42:45:3c:25:02:85:0f:58:fa:59:
                    ef:27:8b:b8:b7:ce:31:a7:c8:a6:95:2b:33:39:99:
                    ff:05:40:0e:d8:bb:0b:35:f5:69:4d:31:e9:10:87:
                    c4:fd:6b:77:1f:a4:62:7b:91:9b:ce:5c:04:72:88:
                    c9:01:4b:8d:18:86:84:a9:c1:9e:11:32:74:0f:76:
                    80:d1:83:c8:49:8a:f4:a1:39:67:1b:d7:f2:02:cf:
                    24:05:74:13:bb:bb:b5:5a:c3:ac:b4:e8:35:c1:06:
                    42:3f:96:5b:4d:30:43:f6:34:59:fd:63:10:60:b7:
                    23:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:31:80:AD:62:D7:52:22:0E:F3:E0:73:0A:D8:BA:FD:E5:49:A1:EC
            X509v3 Authority Key Identifier:
                keyid:09:C7:D9:E7:F2:63:DB:0B:8B:82:01:E7:D2:93:CA:DE:CB:97:CF:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:d0:78:04:07:c2:51:c3:6e:05:d9:e2:fa:18:6b:db:19:de:
         1f:3a:ac:4d:f6:36:7b:b3:d9:61:63:2d:2b:c2:ba:35:09:3e:
         7d:df:18:fd:13:b5:4a:93:89:ef:db:b4:a3:b1:bb:c7:bd:f9:
         bf:8c:f6:7b:45:98:72:fe:0f:0a:5c:53:92:38:21:c9:e3:98:
         c5:d9:b6:6e:f1:01:d3:ab:3f:2a:86:85:c1:72:79:14:f8:c6:
         d5:14:7f:3d:38:3e:85:68:15:e4:d7:cc:9e:a7:58:61:39:78:
         63:00:ef:2f:dd:6b:f6:1c:bf:86:44:bf:75:c0:7b:43:97:12:
         93:4f:33:35:9d:14:2b:e3:98:97:b7:24:13:2e:50:67:94:00:
         9d:55:5a:1d:2b:08:79:5c:41:45:63:60:08:82:cd:37:26:94:
         66:aa:b7:3f:35:11:5b:b0:74:24:84:f9:b1:74:d9:77:c2:d9:
         ec:fc:e3:08:c6:26:ea:3c:80:2e:f2:d5:98:66:0b:50:3b:87:
         34:8e:ad:4f:5e:1b:f0:ae:27:b6:ad:1e:3d:95:6b:e1:77:bd:
         67:03:68:bc:1c:7b:5b:66:be:f4:94:99:90:06:25:c2:da:4d:
         c2:95:46:07:ce:87:89:72:2d:d9:2c:4f:95:3b:b9:59:ed:91:
         a1:d8:de:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:31 2026 by rpki-client