Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft
File:                     8EaQuwPg05YrSAjk0GyyajSQ5RY.mft (raw, json)
Hash identifier:          VFuuyphXBnjo4j9Ln9CRfdh1ehKhwlP9iVTEkU34MiU=
Subject key identifier:   71:C7:A0:50:2E:BD:EB:B9:B0:59:8F:0F:50:94:41:52:47:41:9E:2C
Authority key identifier: F0:46:90:BB:03:E0:D3:96:2B:48:08:E4:D0:6C:B2:6A:34:90:E5:16
Certificate issuer:       /CN=A91F1605/serialNumber=F04690BB03E0D3962B4808E4D06CB26A3490E516
Certificate serial:       0789
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft
Manifest number:          0781
Signing time:             Tue 18 Aug 2026 21:55:30 +0000
Manifest this update:     Tue 18 Aug 2026 21:55:29 +0000
Manifest next update:     Tue 25 Aug 2026 21:55:29 +0000
Files and hashes:         1: 8EaQuwPg05YrSAjk0GyyajSQ5RY.crl (hash: UWFdst78SjagpK7HQyTCOPzFnLiOhXfldbSZw6/47fY=)
                          2: 64237DC06C3611EBB6BA1A24C4F9AE02.roa (hash: nMkO+9vmimKW3Y3yHgm1KOVW1G1AUvQhOMK9F5Y0CIk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.crl
                          rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1929 (0x789)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1605, serialNumber=F04690BB03E0D3962B4808E4D06CB26A3490E516
        Validity
            Not Before: Aug 18 21:55:29 2026 GMT
            Not After : Aug 25 21:55:29 2026 GMT
        Subject: CN=6a84d4d2-f486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8b:1a:64:09:95:f3:9e:de:61:b0:7c:a1:f2:
                    3d:37:93:4a:1b:51:95:71:d1:b9:12:0b:2f:8f:2a:
                    ec:19:26:2c:d1:9f:37:1f:1c:81:fc:17:e0:99:3f:
                    19:63:da:b0:83:74:11:81:27:e8:ab:c1:1a:45:83:
                    06:5b:53:52:0e:c8:c2:a4:ad:1d:88:60:58:7a:46:
                    9c:67:99:a2:6a:7a:9b:be:2e:3e:96:0f:81:47:03:
                    81:40:47:c8:12:1f:a2:00:06:d0:25:97:1c:52:08:
                    0c:0d:f3:76:0d:8d:da:03:39:71:2a:e3:6a:7d:b1:
                    49:5a:c2:23:ee:c4:75:0a:4c:b3:b8:5d:20:ae:31:
                    16:52:05:a7:e7:2d:87:07:71:20:c6:33:94:24:32:
                    b7:b7:8e:e1:96:0c:de:16:dc:7f:a7:7c:c5:71:69:
                    1d:89:44:60:55:4d:df:c8:69:59:1a:e3:64:ed:69:
                    39:27:1c:1c:07:4c:82:a9:8b:bf:99:9e:ca:a3:1b:
                    e5:df:a3:02:67:58:60:dc:e0:9e:83:77:8f:5e:b0:
                    3b:0c:f0:34:6b:3d:fd:01:83:9b:e2:35:c7:79:a1:
                    a0:32:d4:19:28:c3:65:59:c9:74:58:4d:ca:17:12:
                    60:80:eb:10:47:f7:64:60:18:66:56:5a:73:48:56:
                    6b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C7:A0:50:2E:BD:EB:B9:B0:59:8F:0F:50:94:41:52:47:41:9E:2C
            X509v3 Authority Key Identifier:
                keyid:F0:46:90:BB:03:E0:D3:96:2B:48:08:E4:D0:6C:B2:6A:34:90:E5:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e1:21:d6:53:80:be:59:0a:10:51:61:88:56:ef:43:ad:09:
         d3:6b:2b:9a:02:c9:23:29:9e:5b:9f:04:ac:76:4a:cb:3b:22:
         58:4c:32:90:d9:34:32:13:d2:66:8a:87:ee:2f:df:e2:e3:28:
         b0:82:ff:c3:74:de:39:a3:af:5b:47:6b:1b:18:e9:1e:d8:df:
         bd:a9:ca:df:1a:61:e9:81:cb:dc:1a:a6:b9:99:51:a0:91:5b:
         94:02:f6:ec:aa:1a:9e:8d:df:0f:ce:7f:90:51:43:ff:d0:68:
         61:ac:19:56:24:28:0f:a9:bc:2a:5b:f4:54:15:05:d7:d9:82:
         2d:d0:bd:b8:11:be:ce:24:4a:8a:61:ea:da:47:1d:2e:74:a2:
         6c:84:8e:7e:87:9d:dc:62:2a:93:e2:77:a4:36:7d:59:36:16:
         b0:c5:a9:ab:71:ab:32:3c:13:f6:a7:e5:94:ce:44:bf:cc:e1:
         2c:91:f8:06:cf:c9:c7:9a:df:ec:7e:c6:05:3b:86:4d:df:d5:
         8c:27:3a:7f:d1:ae:e2:3a:e9:71:4a:a4:d7:d6:38:8a:a0:9b:
         82:ac:9e:fc:fa:a9:62:36:ba:b1:82:be:6d:5b:c3:4f:8f:96:
         e6:d1:c6:8f:eb:f6:2b:de:06:2d:3c:f4:94:29:92:f5:04:da:
         17:63:5e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:14 2026 by rpki-client