Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
File:                     Y19XnOBVlw4BocO3dQIcjj4ieIc.mft (raw, json)
Hash identifier:          h5c3EkReRVGA0OdRZOTJKQWDMLzJnbL2OX732XMF5Ic=
Subject key identifier:   66:B0:07:D5:98:B1:6A:39:F8:02:5A:B4:15:82:A9:9B:76:67:58:F8
Authority key identifier: 63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87
Certificate issuer:       /CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887
Certificate serial:       0EED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
Manifest number:          0EE1
Signing time:             Tue 18 Aug 2026 17:52:59 +0000
Manifest this update:     Tue 18 Aug 2026 17:52:58 +0000
Manifest next update:     Tue 25 Aug 2026 17:52:58 +0000
Files and hashes:         1: Y19XnOBVlw4BocO3dQIcjj4ieIc.crl (hash: WxItH/Dwfp3h6C/sTZKBysnW3gQeaNqs1L3+Qzxu6qg=)
                          2: 1E018994AEBF11E993F33C65C4F9AE02.roa (hash: UPi+EXP3M++eU/SlCZMA1QlfPjsM5dTJBEKasdPEKHs=)
                          3: BA55D63C415311F1A8AAFB3BCA833773.roa (hash: 5c6lk8zZg9JDdCtbr0MwnxF7u7fQcm0RumOai6GNeD4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl
                          rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 17:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3821 (0xeed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4294, serialNumber=635F579CE055970E01A1C3B775021C8E3E227887
        Validity
            Not Before: Aug 18 17:52:58 2026 GMT
            Not After : Aug 25 17:52:58 2026 GMT
        Subject: CN=6a849bfb-7aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2e:59:31:ad:8b:c9:bc:1b:89:71:9c:bc:90:
                    1d:36:2f:80:9c:19:21:6b:bf:cd:10:c9:37:24:d8:
                    1c:79:2e:9b:84:29:ef:16:1e:ee:6f:3b:a3:10:ea:
                    56:d8:46:08:88:cd:80:35:80:e9:20:23:c4:97:94:
                    70:fe:25:fa:a8:2e:44:06:4a:e1:a2:76:59:a3:b6:
                    aa:79:83:2d:b5:2b:23:dd:3b:89:ec:22:8f:bb:59:
                    a5:5b:de:6a:87:fd:02:c7:81:c7:62:3a:81:66:18:
                    06:bc:df:00:14:d6:9c:f7:38:db:90:d1:01:e5:a7:
                    8c:e9:7f:fe:2e:aa:ce:74:c9:20:8e:7c:89:c8:47:
                    62:5e:ea:6e:29:aa:a5:17:2f:47:6f:8f:51:eb:9a:
                    f7:1c:7f:66:45:64:7a:bf:e0:9a:83:2a:8a:60:cc:
                    fb:04:b9:5a:8c:96:7b:f2:c6:46:69:b7:6f:68:72:
                    bd:da:8a:7b:aa:11:dd:4e:3e:02:0c:8a:1e:f4:8b:
                    d7:19:17:da:7e:d5:63:87:af:86:11:26:56:ba:31:
                    ec:62:4a:56:7e:eb:da:b4:ca:2a:fe:83:5a:48:06:
                    4c:f5:36:2b:45:18:8a:1d:b7:5e:e0:68:1c:1f:a4:
                    d1:96:28:b5:38:42:3b:f1:d3:3e:fb:81:6b:f9:75:
                    0e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B0:07:D5:98:B1:6A:39:F8:02:5A:B4:15:82:A9:9B:76:67:58:F8
            X509v3 Authority Key Identifier:
                keyid:63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:95:4e:29:98:31:00:db:17:44:96:f5:9c:50:28:77:5d:71:
         74:f0:45:9b:6b:da:c2:40:59:7d:9d:d3:16:72:0b:f4:58:69:
         7f:fb:cf:5c:13:dc:48:b9:77:e0:4f:43:43:59:af:a3:ae:54:
         2e:95:d9:56:0d:e8:93:36:e7:86:a0:e1:9c:5f:ee:71:1c:1e:
         66:a2:91:27:b5:b3:19:36:53:55:f1:be:d3:98:08:73:f5:b9:
         de:52:ad:79:c6:e9:ce:d0:c8:e8:0f:0f:8a:83:04:38:95:24:
         7e:17:1c:3a:32:86:d6:6a:c6:eb:46:30:f6:83:f2:17:a7:3f:
         c6:e1:f6:82:3c:a7:ab:f1:9d:bd:9d:3d:5d:6e:99:74:59:fe:
         d5:9d:b9:77:4d:94:19:37:90:0c:7a:9a:8e:3e:09:42:2a:92:
         33:f3:89:a4:3f:70:ef:d5:e2:da:59:b2:74:ed:11:f1:73:e1:
         da:ad:cf:92:94:cf:bc:6a:7e:80:de:f8:b2:00:9d:34:05:21:
         0f:45:a4:2d:13:6a:8e:06:bd:53:ee:17:43:bf:4c:e5:81:1d:
         fa:18:42:0a:52:0d:4c:6f:26:4b:f7:6b:e5:00:f2:b4:a2:5e:
         11:3c:68:72:b5:e7:d7:76:1d:a8:d4:89:f7:bb:76:7b:c8:fe:
         54:76:0b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:17 2026 by rpki-client