Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft
File:                     4ISfBUORggKxeEROX_IviZ-eMg4.mft (raw, json)
Hash identifier:          j/oLv2+VlyKwTy6l2YeHo1XDt/Ma2HYIrFXi1hzydjg=
Subject key identifier:   E5:F1:C8:FF:7E:45:13:87:24:C8:4F:94:D9:78:61:E8:8D:08:02:B2
Authority key identifier: E0:84:9F:05:43:91:82:02:B1:78:44:4E:5F:F2:2F:89:9F:9E:32:0E
Certificate issuer:       /CN=A91F7DBA/serialNumber=E0849F0543918202B178444E5FF22F899F9E320E
Certificate serial:       05AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft
Manifest number:          05A0
Signing time:             Tue 18 Aug 2026 23:31:38 +0000
Manifest this update:     Tue 18 Aug 2026 23:31:38 +0000
Manifest next update:     Tue 25 Aug 2026 23:31:38 +0000
Files and hashes:         1: 4ISfBUORggKxeEROX_IviZ-eMg4.crl (hash: QIKzXg5egeo4nUlM7zqWEzVPYcfPhMbZsAq2xcjtVwM=)
                          2: 145F8B6434D211EEA9BD8F64C4F9AE02.roa (hash: GjQyrBrtjLGGx1Z0J/WzD76UJKpZKFLKZW1IsmAIl18=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.crl
                          rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 23:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1452 (0x5ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7DBA, serialNumber=E0849F0543918202B178444E5FF22F899F9E320E
        Validity
            Not Before: Aug 18 23:31:38 2026 GMT
            Not After : Aug 25 23:31:38 2026 GMT
        Subject: CN=6a84eb5a-140e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2d:4e:cc:b2:7f:c9:fe:03:83:60:33:69:4a:
                    b0:ba:33:26:10:f4:e3:01:5b:3c:50:11:d4:5b:b0:
                    73:ee:42:1b:7c:aa:38:a0:53:32:42:39:7d:af:bf:
                    28:a9:bd:87:20:b3:ad:bb:28:e8:fd:93:26:fd:84:
                    37:a4:b1:82:f2:bf:63:3d:4a:73:d2:72:33:d0:35:
                    67:48:92:66:90:7e:b9:e9:aa:dd:9f:55:10:eb:b7:
                    c7:17:71:05:6e:de:ad:3f:e4:a0:8a:02:d8:e2:e5:
                    aa:79:60:65:16:75:72:78:9f:ca:a2:53:4b:21:68:
                    a4:94:33:f4:a7:be:99:47:2f:00:e4:96:61:a1:86:
                    52:09:05:4e:5b:30:05:cc:c5:33:a7:61:f2:35:11:
                    35:93:b6:c5:c0:e8:8e:98:bd:83:0a:2c:e4:ea:16:
                    05:0b:f4:65:1b:ec:03:db:4f:8f:ae:bb:71:59:a4:
                    1a:c7:9f:5d:1d:ce:b7:81:c0:b6:eb:d7:85:c7:a0:
                    2e:51:8f:51:d2:aa:d5:8a:7a:1e:e7:fc:08:c4:09:
                    07:5f:c7:cb:42:26:8e:05:35:71:62:27:2d:2c:2c:
                    f7:01:2d:e9:4d:a1:ee:ed:30:5f:57:eb:06:00:8d:
                    ff:df:c4:10:44:79:07:59:ac:56:d8:8c:db:09:92:
                    e0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F1:C8:FF:7E:45:13:87:24:C8:4F:94:D9:78:61:E8:8D:08:02:B2
            X509v3 Authority Key Identifier:
                keyid:E0:84:9F:05:43:91:82:02:B1:78:44:4E:5F:F2:2F:89:9F:9E:32:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:2c:96:ef:7b:43:73:d0:96:e5:df:b4:2c:51:3e:30:50:98:
         6b:ff:c5:ff:16:3d:0e:88:8b:59:f2:1c:e3:6e:7a:31:e1:4d:
         c6:4e:8b:d8:83:87:d8:ac:86:c9:48:48:33:62:4a:98:19:4e:
         06:9a:1d:4f:58:23:25:f4:67:74:97:8e:54:ee:26:1a:20:bf:
         fe:24:25:f4:5b:74:9c:35:83:d0:b3:0c:1c:c2:76:15:b8:5a:
         fe:ff:83:09:b3:63:7f:d2:b4:56:c2:88:13:95:64:fc:84:76:
         05:5f:53:e7:96:63:12:1e:6a:24:c7:22:78:8a:fb:d6:73:26:
         3c:fb:50:57:05:9a:bb:95:44:2e:80:30:61:23:56:0f:33:c6:
         45:e9:e3:4c:f5:18:87:00:a2:5f:f7:c1:65:e8:67:e6:7c:a0:
         4c:a1:6c:36:e5:62:ba:cd:29:9f:e4:06:cc:ef:bf:00:fa:e9:
         31:51:76:37:0f:84:be:3f:6f:13:2b:43:7d:1b:05:74:bb:30:
         55:6e:fa:47:df:ba:a1:f5:13:49:60:b9:b2:c0:b0:00:6c:37:
         41:a4:be:e4:ec:49:eb:0f:2b:92:cb:e3:9d:92:92:a4:aa:b1:
         a2:a5:25:5a:ec:00:d1:b3:04:4d:9a:0a:75:3f:cc:d1:d1:91:
         e5:97:c7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:47:02 2026 by rpki-client