Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft
File:                     K6PqbAvX8YRghmD5ogTlEYZaAN0.mft (raw, json)
Hash identifier:          3gNPl1jnb1ztt/jmljqva+rb/1jdf8HEccdayshKPmc=
Subject key identifier:   0E:57:74:85:4D:83:27:85:53:D0:0F:4F:AA:98:3D:02:F4:3E:FC:79
Authority key identifier: 2B:A3:EA:6C:0B:D7:F1:84:60:86:60:F9:A2:04:E5:11:86:5A:00:DD
Certificate issuer:       /CN=A91F1E8B/serialNumber=2BA3EA6C0BD7F184608660F9A204E511865A00DD
Certificate serial:       0A08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft
Manifest number:          09FF
Signing time:             Tue 18 Aug 2026 20:05:30 +0000
Manifest this update:     Tue 18 Aug 2026 20:05:29 +0000
Manifest next update:     Tue 25 Aug 2026 20:05:29 +0000
Files and hashes:         1: K6PqbAvX8YRghmD5ogTlEYZaAN0.crl (hash: qtq/GBF+9+SDSH10ABF3FLIyKTd0VnnSxVBElFrCkmM=)
                          2: 33F713A8A3CF11EAA31D8C20C4F9AE02.roa (hash: drREk/OAiw4nw+aB1RVjD5zbqv5hAnk1VMgyPcenfqM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.crl
                          rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:05:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2568 (0xa08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1E8B, serialNumber=2BA3EA6C0BD7F184608660F9A204E511865A00DD
        Validity
            Not Before: Aug 18 20:05:29 2026 GMT
            Not After : Aug 25 20:05:29 2026 GMT
        Subject: CN=6a84bb0a-a5bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:89:34:c8:b1:6b:ec:e9:2d:e7:2a:02:0f:05:
                    77:36:e0:89:c2:00:b7:12:39:30:7f:9d:4f:18:17:
                    f7:e4:b2:97:69:d3:c7:11:9e:ea:2f:89:6b:87:fd:
                    4e:21:36:76:81:ac:e9:29:b4:2a:34:1c:94:4d:1a:
                    82:4a:f5:85:78:90:4c:6f:7d:d5:41:40:b7:f6:e5:
                    b9:61:20:87:64:de:e9:ca:84:19:02:de:44:aa:bd:
                    6b:74:d5:1f:b8:b4:86:38:b7:cd:14:f8:7b:8d:fc:
                    63:71:65:b9:b4:bf:30:cf:6e:a4:08:ad:d9:c1:35:
                    3d:81:9e:d9:8e:19:b3:a1:39:c6:cc:4c:4b:7d:2d:
                    92:31:fe:f0:1c:20:da:42:54:7c:ff:cb:e7:89:8c:
                    89:07:5e:14:2a:92:1d:fd:03:e2:09:bf:69:42:0c:
                    ef:c0:ed:44:b3:6b:5b:65:6c:15:4a:16:86:11:a4:
                    2c:82:9d:42:8d:d0:08:26:28:b6:9d:40:9e:d4:48:
                    55:74:24:99:ee:a9:d7:f6:69:db:fb:ae:75:9b:f5:
                    e1:bc:a7:5f:24:a3:ab:7e:c8:cd:92:84:4c:07:c0:
                    05:3d:6b:06:27:12:61:9a:19:45:08:f1:fb:2b:b2:
                    61:0b:6d:02:4c:89:ff:ee:6e:6c:bb:08:06:14:3d:
                    56:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:57:74:85:4D:83:27:85:53:D0:0F:4F:AA:98:3D:02:F4:3E:FC:79
            X509v3 Authority Key Identifier:
                keyid:2B:A3:EA:6C:0B:D7:F1:84:60:86:60:F9:A2:04:E5:11:86:5A:00:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:46:c0:74:27:30:ab:15:06:ab:52:d4:53:df:ce:ae:ec:6e:
         4b:49:f7:98:13:1a:c6:7e:b8:bb:d7:c3:c0:f1:a3:3f:66:ef:
         56:e3:5d:0a:d5:e4:31:79:2a:05:63:e5:c6:57:22:f2:a5:d1:
         ac:eb:0a:23:b7:ab:96:23:3f:da:16:26:10:5e:10:6f:5d:d6:
         79:1d:49:a6:13:1d:26:80:d1:2a:6a:a5:f9:00:3e:98:e1:1f:
         40:38:53:12:6f:d3:ff:1d:d1:22:a3:c5:19:c2:b8:81:b4:c5:
         3d:fb:ef:c8:9f:d2:4b:9e:c4:82:ed:84:26:8f:d4:b2:7c:03:
         d2:59:3e:e3:a4:79:43:3e:79:0f:40:eb:82:6c:30:63:af:21:
         b1:b5:43:fd:dc:63:66:ec:e4:a6:f4:a0:7a:7c:6b:c9:62:67:
         19:23:10:2e:92:b4:ed:86:57:0f:75:e7:c0:e6:5d:e1:71:65:
         56:8f:d6:f7:5c:ff:3a:96:5d:be:6b:a7:e2:3a:51:16:a3:f0:
         1e:eb:ef:46:22:b5:c3:19:95:c7:0c:67:25:54:79:16:95:f5:
         c5:f5:c3:50:6b:2e:e8:cf:ca:ca:6b:96:7f:45:4d:e4:44:1d:
         d8:6d:97:07:a2:80:87:3a:af:7a:bd:50:a3:4d:34:22:8b:10:
         75:e2:d1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:05 2026 by rpki-client