Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
File:                     K1N18tBgdUbVH2UR9hvEoYl0_eI.mft (raw, json)
Hash identifier:          aNiCBE3kqpFcSOzzjGiFMvpoQFikSxSxMvI5YJYCDdk=
Subject key identifier:   57:1D:23:B0:9D:9C:54:28:46:81:EF:02:00:59:04:38:39:D2:15:21
Authority key identifier: 2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2
Certificate issuer:       /CN=A91EF19E/serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2
Certificate serial:       35AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
Manifest number:          3597
Signing time:             Thu 20 Aug 2026 14:23:48 +0000
Manifest this update:     Thu 20 Aug 2026 14:23:47 +0000
Manifest next update:     Thu 27 Aug 2026 14:23:47 +0000
Files and hashes:         1: K1N18tBgdUbVH2UR9hvEoYl0_eI.crl (hash: 9ObIklrj19g8DFbV+O1MtPi9gUpDLpPq0Uw31CacaYo=)
                          2: FACC58F855C411E9A0FEF781C4F9AE02.roa (hash: FneWbJ04EWBnNB9hcGYxNXW+7dDU9U/j/uBXyZbLddM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl
                          rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13739 (0x35ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF19E, serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2
        Validity
            Not Before: Aug 20 14:23:47 2026 GMT
            Not After : Aug 27 14:23:47 2026 GMT
        Subject: CN=6a870df3-7331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5f:42:21:44:13:3d:7c:6b:26:57:cf:07:be:
                    78:e1:4a:ee:43:8f:10:72:98:71:56:7f:d5:67:93:
                    96:4e:1e:d8:22:d7:32:62:47:cf:5f:1a:ef:77:57:
                    63:7a:42:c6:ef:8d:e5:b7:b0:24:40:12:0c:6e:71:
                    e6:9c:f0:1f:0e:80:62:04:44:77:2e:a7:e8:a2:8f:
                    8e:30:d8:97:4d:c0:05:e4:b8:89:18:d6:19:5a:51:
                    bc:c0:32:dd:5e:eb:23:c6:9e:bd:9b:06:f5:e9:48:
                    98:38:18:7a:8d:1e:e9:b0:10:76:ca:b0:40:ef:ad:
                    e4:7e:45:e0:0b:1e:5a:fc:7b:75:51:49:4f:b0:d9:
                    7c:b1:af:6a:0d:b3:5e:96:c4:24:13:19:45:86:3c:
                    cd:64:fe:2a:ea:0e:d7:5a:48:d1:4a:4e:d1:45:95:
                    22:0a:53:23:ec:5d:83:28:dd:ce:64:13:bc:d3:61:
                    63:77:4f:7c:98:70:c0:ea:00:f0:dc:f1:db:13:d7:
                    83:51:bc:64:17:93:06:a7:7d:a4:89:5c:f2:6d:aa:
                    da:c4:82:21:17:71:5c:14:e5:98:2d:0e:19:c9:87:
                    24:4c:ff:1b:ca:b2:2d:db:e9:90:ca:86:d2:cf:d4:
                    7a:70:00:e0:fd:94:d0:b5:d9:6c:90:d2:6d:52:f5:
                    fe:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1D:23:B0:9D:9C:54:28:46:81:EF:02:00:59:04:38:39:D2:15:21
            X509v3 Authority Key Identifier:
                keyid:2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:1b:5a:2f:9c:eb:78:97:41:ed:2d:93:29:8a:d0:1d:dd:10:
         1a:6a:a0:d7:ce:0d:42:2c:e8:74:c2:0e:64:44:3a:fb:f7:4d:
         62:f1:14:ad:fa:a1:34:cd:fb:e4:9e:b0:e3:1a:cd:a2:0a:7a:
         eb:50:0b:30:08:4a:d1:87:5f:17:29:6d:ab:a6:3b:62:92:c2:
         97:9c:c7:d1:ac:d0:c0:24:80:94:a4:9d:8c:39:4e:dc:ad:74:
         fa:ea:b3:72:05:45:47:ba:14:46:8a:39:32:de:ef:9f:d7:aa:
         6b:da:8e:7c:30:36:e6:30:cb:94:d4:e3:c0:14:7e:85:00:d6:
         d0:6c:ef:0a:dd:45:e9:b0:2b:da:fe:2c:79:f6:93:c3:f3:94:
         db:73:ec:89:25:12:e0:7e:c0:6c:91:ba:ce:07:6b:f5:f1:b0:
         fc:6e:95:8e:fd:ae:4f:02:b9:28:1c:26:7b:8d:91:d2:66:bf:
         20:f3:fb:4d:32:f3:02:a8:17:23:3a:12:ac:03:21:c3:20:86:
         be:75:5c:9f:e8:cd:58:bb:d3:13:49:48:1b:f6:6d:78:f5:cc:
         4a:01:b2:80:e8:45:bf:a3:54:5d:87:a3:ac:2c:d7:38:2c:13:
         ab:c0:d5:2a:da:24:74:d9:52:62:b1:d8:7b:a8:d6:de:c8:54:
         93:7e:35:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:50:40 2026 by rpki-client