Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft
File:                     29rQCQF9kd-0ONcNG41NNIYvBo4.mft (raw, json)
Hash identifier:          nY+rJsi3X4NvOlMZsi7IaE+euYdm4QZJUyqjyQM5Gvw=
Subject key identifier:   DB:15:37:05:0C:E8:47:A3:D6:1A:25:9F:34:35:67:8E:1D:3D:04:2B
Authority key identifier: DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E
Certificate issuer:       /CN=A91F223F/serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E
Certificate serial:       020B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft
Manifest number:          0204
Signing time:             Wed 19 Aug 2026 03:43:34 +0000
Manifest this update:     Wed 19 Aug 2026 03:43:33 +0000
Manifest next update:     Wed 26 Aug 2026 03:43:33 +0000
Files and hashes:         1: 29rQCQF9kd-0ONcNG41NNIYvBo4.crl (hash: IlkPU3UAbEyYQswgU0aY0zcvfIxoyOUCm5I3iDsC3y8=)
                          2: 63E8E1AA8CAA11EE8B20D86EC4F9AE02.roa (hash: EVuru3xNSy6RQB88Xo1MqJkQivcU8HP38W4mpX0e8UU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl
                          rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 523 (0x20b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F223F, serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E
        Validity
            Not Before: Aug 19 03:43:33 2026 GMT
            Not After : Aug 26 03:43:33 2026 GMT
        Subject: CN=6a852666-9906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ae:19:76:0b:84:af:a7:34:54:6e:18:23:49:
                    fb:11:c9:19:c8:79:3a:eb:89:f4:52:68:af:04:a5:
                    45:bb:04:7e:d3:16:4e:71:7b:89:cb:ff:03:a3:79:
                    54:a0:1f:a3:bb:04:87:35:04:60:c6:02:cc:f2:e4:
                    95:19:19:44:05:eb:59:7e:3a:8c:ed:28:f8:ad:82:
                    91:53:5c:06:a7:fe:eb:0c:c3:ac:c8:15:62:db:73:
                    30:dd:3e:8b:54:c8:a7:b6:64:68:c1:cc:80:09:8f:
                    f3:91:9f:72:fd:3b:df:91:f8:1d:80:68:79:15:8d:
                    d2:d8:dc:bb:0e:cd:5f:37:64:c7:f8:9d:c0:eb:41:
                    e2:5b:d3:74:b3:d2:aa:e3:90:8d:b8:8d:9f:ed:06:
                    51:80:4f:b4:3f:ff:23:09:6e:0d:8a:a4:9f:e4:8a:
                    73:04:e8:6b:2e:d5:f0:bd:b4:b6:a2:16:d2:71:fa:
                    cb:ad:c7:30:81:09:c2:c5:ad:4a:ed:97:55:31:b5:
                    2d:44:94:f8:f7:aa:0f:6b:b8:db:09:22:3f:df:e2:
                    bd:3b:a8:bb:6e:94:b8:ae:ef:96:d0:3b:d6:74:99:
                    79:49:5e:e7:55:d2:9c:50:b1:79:85:b5:75:ca:a7:
                    4d:0f:cb:09:9f:46:0a:2c:3d:3d:eb:f9:65:41:f2:
                    91:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:15:37:05:0C:E8:47:A3:D6:1A:25:9F:34:35:67:8E:1D:3D:04:2B
            X509v3 Authority Key Identifier:
                keyid:DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:be:5d:cf:08:1d:7a:6f:98:57:2d:0b:79:fe:d3:2d:b6:02:
         f1:6f:8d:24:1b:fb:52:81:33:d8:d4:f0:39:12:85:d2:82:4a:
         a0:fa:37:ea:c9:e9:2d:0b:65:ad:48:ea:a7:9b:5f:52:fe:c0:
         10:24:e0:55:30:1f:f6:be:ab:23:98:f1:41:1a:e7:ff:e0:2a:
         05:3a:57:5f:d9:26:a6:09:c4:83:3c:18:f6:f1:f7:68:0d:cf:
         34:9d:4f:34:0b:e5:e9:e8:23:87:e2:ec:3d:fa:68:e8:ec:5b:
         8e:9c:ac:60:2f:9e:db:46:af:eb:4b:55:fb:fd:e8:5e:f6:7b:
         07:40:6d:9d:0a:87:fa:ae:65:4a:db:f1:60:ab:20:f5:b5:6f:
         cb:53:55:62:04:9d:99:7c:cd:c4:8e:be:b1:5b:30:7b:03:ea:
         b5:e4:4a:39:a2:9d:ba:1a:c9:e2:c7:9d:de:84:1c:af:82:8f:
         c6:6a:85:eb:61:80:11:1e:a4:9f:e4:3b:ab:d2:89:9b:4c:65:
         d9:00:17:fa:d1:3e:4b:3e:7a:93:05:a1:e2:31:7a:a1:17:61:
         ac:56:16:cb:3d:1b:d4:93:d3:e9:bc:64:9a:e7:7a:4e:59:96:
         b4:d9:56:17:38:56:98:84:4c:b0:56:b8:92:33:52:c8:18:77:
         12:6f:b9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:49 2026 by rpki-client