Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
File:                     N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft (raw, json)
Hash identifier:          BjKRRmm//eWW0NisL1RiznPJWl+sTn7Qkc0MJ2es6ck=
Subject key identifier:   6B:21:09:7C:C5:C1:9F:B6:51:5B:5F:FB:3B:1E:B0:9F:8D:13:4B:66
Authority key identifier: 37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB
Certificate issuer:       /CN=A91F3256/serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
Manifest number:          82
Signing time:             Sat 15 Aug 2026 07:50:51 +0000
Manifest this update:     Sat 15 Aug 2026 07:50:50 +0000
Manifest next update:     Sat 22 Aug 2026 07:50:50 +0000
Files and hashes:         1: N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl (hash: kpzU60D+YFMkLrrX711iv0Eu81VM0ag5qbFiiuRAUSU=)
                          2: BED8B2621D1B11F1B6F055AB103D8C67.roa (hash: TZiFnlQe5aFCTw3TXlx3VBuv8nDQSF0KBsx60QraJQ8=)
                          3: 33EB881ED9A011F08EC1CA9167D3641D.roa (hash: PsNugEmxb0VqmOUe342oKhYJR77dyuxdQVuRbBuOR54=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl
                          rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Aug 2026 02:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3256, serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB
        Validity
            Not Before: Aug 15 07:50:50 2026 GMT
            Not After : Aug 22 07:50:50 2026 GMT
        Subject: CN=6a801a5b-ca19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:35:07:e5:ca:25:c1:c0:b0:ae:6b:23:a4:b7:
                    32:ab:11:95:02:95:66:eb:49:ef:5b:03:23:fa:d7:
                    a6:e0:8e:be:e8:3f:cd:ec:f2:5d:9a:ee:1c:23:a1:
                    db:c5:5a:50:6b:4e:59:a3:db:78:c9:b3:e3:9c:7c:
                    55:37:7a:2c:02:9b:06:38:bb:fc:59:04:4b:fe:e1:
                    80:ba:28:e2:85:e5:8a:c6:58:c8:e4:1e:43:46:7c:
                    50:58:66:63:7c:9d:f7:6f:20:01:55:19:fb:c8:68:
                    cb:ff:97:a8:2e:2f:17:36:9a:c3:c8:28:7f:d9:db:
                    5a:98:d3:aa:a0:d8:b6:c7:3a:cd:5f:b3:a6:41:3a:
                    1c:5b:64:fa:48:ff:85:0d:09:c2:e7:20:4e:34:51:
                    c3:07:aa:22:81:37:0e:5c:0f:95:14:e6:f5:24:9a:
                    c3:54:79:0d:84:20:1c:3d:ba:e9:16:5e:50:01:2d:
                    eb:6c:c6:ff:3d:21:26:c7:b6:38:9a:21:99:51:42:
                    1a:2d:ad:3f:ee:1b:15:62:d7:d1:fe:05:06:e1:1b:
                    fd:7f:90:10:fe:b0:89:b8:45:4a:d3:0e:4e:8e:ae:
                    c2:ec:db:b4:c0:21:d7:15:ae:3e:06:ff:25:ce:da:
                    ae:80:4a:6f:c4:ae:18:71:18:a3:4b:b8:2f:c1:53:
                    f8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:21:09:7C:C5:C1:9F:B6:51:5B:5F:FB:3B:1E:B0:9F:8D:13:4B:66
            X509v3 Authority Key Identifier:
                keyid:37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e6:f3:d1:1e:27:d3:27:33:b5:c9:c8:75:ec:20:93:5a:83:
         c1:85:59:a2:4a:e8:45:e2:3a:02:fe:3b:e3:ac:69:52:ec:78:
         b9:0b:32:2a:6d:2b:ef:50:49:9d:7f:f1:e7:bc:77:ac:18:67:
         9c:5f:4d:a5:1f:2a:f2:13:fa:44:9a:04:c5:b1:13:d8:f7:58:
         a7:1d:bb:5b:24:99:ac:4d:c6:f3:c9:7b:06:d3:e7:4c:93:8a:
         62:0b:53:97:1c:46:27:06:88:1d:bb:cb:de:b4:71:a3:20:66:
         4f:eb:55:87:9f:f8:b8:38:91:4c:89:b4:64:d7:b1:3b:06:ed:
         46:ae:1e:1c:9e:46:11:3b:18:fb:83:5d:91:95:d8:10:e1:7b:
         53:fe:4d:55:0b:1b:53:86:29:45:bf:50:1f:3e:95:2b:55:20:
         dd:2a:a3:3e:9d:89:96:6a:91:cc:60:50:80:cc:72:20:83:59:
         20:6e:9d:b4:38:a0:f2:23:45:07:d3:9f:4c:19:68:b7:53:80:
         18:cc:f1:96:95:15:64:74:44:5f:e8:e8:51:2b:18:2b:09:07:
         1a:56:18:89:1a:bc:fd:88:05:3a:00:36:ac:19:d3:82:df:5b:
         d8:4d:70:ae:aa:b7:50:e3:32:8a:14:3c:5d:da:26:dc:f7:4e:
         55:7f:e3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 13:06:16 2026 by rpki-client