Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft
File:                     8YaDAEWuVIbpCXNDfanSB6VmhpE.mft (raw, json)
Hash identifier:          +v+XpON4yPx5aJc1NouJV9l72WOmvFgbaoRfq+OnnSc=
Subject key identifier:   0F:5A:EC:72:F8:48:79:79:41:46:00:A6:C1:D6:EF:1E:5C:0B:C1:90
Authority key identifier: F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91
Certificate issuer:       /CN=A91F5AAA/serialNumber=F186830045AE5486E90973437DA9D207A5668691
Certificate serial:       32D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft
Manifest number:          32D3
Signing time:             Tue 18 Aug 2026 15:28:12 +0000
Manifest this update:     Tue 18 Aug 2026 15:28:12 +0000
Manifest next update:     Tue 25 Aug 2026 15:28:12 +0000
Files and hashes:         1: 8YaDAEWuVIbpCXNDfanSB6VmhpE.crl (hash: Z808CpHSzFDlJzQW6uLMwktP4ilK9D22wIKa/EVVjiQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl
                          rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 15:28:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13011 (0x32d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5AAA, serialNumber=F186830045AE5486E90973437DA9D207A5668691
        Validity
            Not Before: Aug 18 15:28:12 2026 GMT
            Not After : Aug 25 15:28:12 2026 GMT
        Subject: CN=6a847a0c-c565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f7:ff:6a:c6:24:3d:2b:70:bd:47:21:0d:44:
                    55:87:84:b6:fa:75:f4:59:a6:35:19:45:bb:8c:f1:
                    46:9f:39:8e:0d:84:02:7a:aa:f4:b2:87:fe:b9:d0:
                    3c:93:c7:ea:7b:b4:fe:91:ef:64:19:8b:20:0d:36:
                    25:ec:5b:0b:ab:5f:e8:b6:14:f9:97:51:9f:3d:fe:
                    29:d0:af:ca:82:8e:0f:f9:db:02:d7:e3:7f:71:64:
                    b9:5f:01:1b:6a:4c:f6:1d:cd:2b:d0:b2:0a:8f:af:
                    e9:af:23:55:b0:8f:de:61:6a:60:0c:d0:bc:09:2e:
                    d1:ed:eb:1c:ad:61:72:c2:56:93:cc:f5:72:d3:bd:
                    80:bd:26:23:90:ef:d3:ed:a8:2d:6f:f0:a2:1c:da:
                    df:fd:f4:f6:bd:c7:7d:9b:48:b1:09:8e:b5:58:4f:
                    9a:19:d3:c2:07:16:44:66:03:bb:af:7d:6a:26:e8:
                    84:eb:60:8e:30:1e:af:92:59:62:6f:b7:ff:44:d0:
                    a5:78:e7:34:5e:a2:7a:cf:75:93:36:6e:4c:9b:9f:
                    42:c2:aa:7d:d7:02:86:0f:18:f3:b2:14:81:39:20:
                    a5:19:3f:8d:ce:9d:b1:f2:74:5a:f1:87:b7:14:b4:
                    ee:25:6b:62:e4:4f:f8:60:ea:48:5a:ad:37:e3:ff:
                    b5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5A:EC:72:F8:48:79:79:41:46:00:A6:C1:D6:EF:1E:5C:0B:C1:90
            X509v3 Authority Key Identifier:
                keyid:F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:cf:90:08:c5:0e:11:9c:cb:a2:81:63:e3:34:e4:2f:8a:e0:
         47:a8:a0:bb:66:fc:a4:9a:74:1a:14:da:05:af:02:0f:1b:92:
         98:30:80:56:4f:95:85:de:75:a6:24:a4:cf:49:aa:b4:36:fe:
         4d:6f:f8:05:e6:cc:12:2a:e4:de:81:9d:f8:81:80:a2:a2:09:
         b2:09:49:ad:b1:1c:a9:be:fc:fc:74:f4:de:c8:e9:ac:e2:d5:
         d1:06:bf:82:16:a1:9d:13:5a:31:de:0b:92:ab:9a:e7:0e:6c:
         18:d1:59:12:10:cb:d1:eb:86:e7:9e:74:09:86:4a:14:a3:45:
         5e:60:e3:3a:ca:5d:75:0d:58:81:97:68:a4:3c:96:36:aa:14:
         19:e5:e3:7a:5e:40:83:f8:ea:fc:f3:59:b1:dd:e8:d7:57:35:
         9e:1a:73:e2:ba:d6:0b:ed:b7:34:7a:3c:dd:55:2e:c6:19:e1:
         1b:0b:8e:84:01:b1:61:0b:fe:77:1a:48:85:24:cb:a1:69:09:
         ac:7a:5a:7d:c8:22:ff:81:8e:e5:1c:42:c8:27:3b:8d:08:96:
         eb:e2:18:dc:20:66:0b:02:84:81:ca:b7:00:64:8e:ce:ed:eb:
         2c:51:fa:bb:9f:90:f9:c7:0d:9d:ed:43:d6:53:71:7b:ba:53:
         2a:97:04:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:38 2026 by rpki-client