Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
File:                     u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft (raw, json)
Hash identifier:          1zASLLuHS33Ws99rre+oEl5cfVNzEONdt4C/UA+L4Wc=
Subject key identifier:   F1:8F:1C:DB:8B:22:32:DF:1B:B9:E4:54:A4:F2:5D:29:D5:B1:EF:EE
Authority key identifier: BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31
Certificate issuer:       /CN=A91F75E9/serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931
Certificate serial:       08C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
Manifest number:          08AF
Signing time:             Tue 18 Aug 2026 20:55:28 +0000
Manifest this update:     Tue 18 Aug 2026 20:55:27 +0000
Manifest next update:     Tue 25 Aug 2026 20:55:27 +0000
Files and hashes:         1: u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl (hash: 5n8MdxLdW7BilrcKvmQo+gUWTSvlDdYK7NjyRRIH/N0=)
                          2: B3A2D41A071211F0B9531F0DC4F9AE02.roa (hash: 99jEiPZckviVtuXJZrsVhVTNS0+5/ramRtJfm1GkHO0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl
                          rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2240 (0x8c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F75E9, serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931
        Validity
            Not Before: Aug 18 20:55:27 2026 GMT
            Not After : Aug 25 20:55:27 2026 GMT
        Subject: CN=6a84c6bf-f2c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:04:60:10:a3:3e:12:c5:db:60:c0:b5:06:01:
                    3e:31:9e:7a:26:ae:9b:3e:02:39:b6:0c:9e:1b:85:
                    6f:8b:a9:52:d6:5a:8b:2a:97:67:2f:fd:c1:a1:4f:
                    de:7b:b3:aa:76:6f:92:41:c7:39:3a:bd:fd:d0:88:
                    ca:b8:c4:38:0e:ce:9d:a9:e9:40:19:01:0c:ed:b9:
                    e5:57:0e:7b:9f:dd:18:0e:12:20:4a:0a:65:c3:a6:
                    de:93:9d:d6:c9:15:2d:16:e4:1f:06:ab:1c:18:6b:
                    0f:7b:73:18:5d:65:6e:f3:0e:f3:a9:50:39:30:94:
                    68:23:f8:b9:65:1b:ba:c8:c6:b5:a4:7c:26:06:1d:
                    4f:51:ed:ce:63:19:2a:53:18:e8:c2:e3:19:2f:43:
                    8f:b3:52:ff:a3:63:33:63:d3:e6:71:15:76:42:f0:
                    ad:b6:19:a4:53:13:fd:26:81:b9:a1:f3:ac:bf:8b:
                    ba:a9:33:fd:e2:21:51:1e:60:5a:0b:c3:83:29:a8:
                    a5:68:4c:f7:40:c2:36:68:c8:05:db:ff:ac:cb:50:
                    a4:68:65:10:8b:ac:60:a2:c3:61:ba:c3:1a:96:8c:
                    35:de:70:29:4e:cb:34:3e:27:2c:6a:9c:d1:61:ed:
                    67:3b:ce:3d:6e:1b:98:94:69:94:89:86:b1:8c:24:
                    62:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:8F:1C:DB:8B:22:32:DF:1B:B9:E4:54:A4:F2:5D:29:D5:B1:EF:EE
            X509v3 Authority Key Identifier:
                keyid:BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:1f:ca:ab:77:11:f9:12:1d:2e:61:90:43:1b:84:80:9d:ad:
         3f:3f:bf:61:02:2d:e8:76:84:b9:5e:e6:5a:ed:c5:59:43:f8:
         1b:a2:5f:90:c7:9c:bb:99:6f:f2:18:c8:f3:cf:53:b3:22:2d:
         12:1b:0b:72:10:83:65:e4:be:b4:c9:e0:8c:11:ec:f4:6f:e7:
         e2:41:0d:51:ba:a2:e3:83:ab:c7:a4:14:e5:67:e6:9f:07:eb:
         57:2d:f3:7b:82:87:5f:f9:ad:ef:fe:84:13:7a:26:d0:72:4b:
         12:43:d3:3e:c6:64:5d:e4:4b:ee:a5:ab:13:31:69:ac:36:11:
         1c:25:70:62:bb:6b:ee:1b:79:a7:0c:d7:7e:89:f1:38:2a:f9:
         4e:2c:69:22:b5:b5:ec:0c:c4:41:5e:e2:40:55:df:40:0d:90:
         48:c5:99:e1:ea:c7:a2:97:e5:15:a6:93:50:d1:4d:f5:f0:e7:
         29:c0:68:1d:02:14:7c:46:fc:47:53:02:ec:75:5b:df:a8:74:
         d4:df:cf:c6:63:88:84:5e:bf:1b:68:1f:42:8a:44:eb:f9:c3:
         4a:d3:b3:d3:a0:f9:de:97:53:e5:c9:04:c8:40:6d:a5:8c:d9:
         a6:60:6a:21:14:a3:41:87:3a:08:97:83:9d:3f:f0:b9:f5:d3:
         e7:e0:4e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:00 2026 by rpki-client