Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
File:                     O4dpDvQFVnODtvcv3TARYM6CHys.mft (raw, json)
Hash identifier:          iXhoS8c+BxW2itHksn+564igBb9P4hQZCQeL7XffzCI=
Subject key identifier:   52:2F:16:50:4B:CD:0B:11:D4:C5:67:10:93:8C:B8:AF:F8:76:69:76
Authority key identifier: 3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B
Certificate issuer:       /CN=A91F81AD/serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B
Certificate serial:       031A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
Manifest number:          030E
Signing time:             Fri 21 Aug 2026 00:59:58 +0000
Manifest this update:     Fri 21 Aug 2026 00:59:58 +0000
Manifest next update:     Fri 28 Aug 2026 00:59:58 +0000
Files and hashes:         1: O4dpDvQFVnODtvcv3TARYM6CHys.crl (hash: ejeNemxDKXWSt9mTfol+aOMdFBjCKcnJ+HDTZ75J054=)
                          2: F9424C6C80FA11ED9B35954DC4F9AE02.roa (hash: kA6NvISB8IT/6NkuxuF6Q7P9ApF1p1wHgdDAw6Jwa34=)
                          3: F86A2F7680FA11ED9B35954DC4F9AE02.roa (hash: 4SMwt+gACInnRK5OGYg5pUcdCWuk0YqF9HQ/Xt+IzcY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl
                          rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 28 Aug 2026 00:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 794 (0x31a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F81AD, serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B
        Validity
            Not Before: Aug 21 00:59:58 2026 GMT
            Not After : Aug 28 00:59:58 2026 GMT
        Subject: CN=6a87a30e-cde3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:aa:65:ac:19:08:1d:e6:43:93:33:3f:69:f8:
                    88:69:d2:e1:ff:a7:29:58:1e:e8:64:65:d0:2c:06:
                    90:fb:32:99:cb:c7:01:cc:1f:d9:06:df:73:aa:47:
                    6f:7f:be:73:e8:6f:3b:6c:1f:ca:72:08:95:9c:32:
                    b8:c3:2c:21:41:09:6f:7c:27:d8:4d:31:7e:18:2e:
                    ab:4a:4e:92:5e:c9:a0:bb:7a:c0:9e:a5:83:f4:a1:
                    51:ca:3f:5c:bc:3e:4c:b4:06:ee:ba:5c:dc:d7:69:
                    62:1b:d8:c3:55:0d:52:0f:8e:dc:6f:36:12:fd:f6:
                    0d:a7:3e:eb:a1:2f:fe:fb:46:a8:88:dd:4c:ab:55:
                    c8:c1:8b:8c:ff:41:d1:5b:2a:63:89:2a:00:38:06:
                    b8:e1:6a:e0:49:ee:1d:66:ee:90:3a:05:22:e4:32:
                    8d:f8:2b:c4:0b:29:7d:65:1c:d2:ae:26:fa:f4:b9:
                    a4:c8:3e:8c:44:d8:00:d8:9f:6d:a3:14:96:ce:fe:
                    54:1d:fb:3b:1c:65:fd:10:c7:8a:3b:dd:2f:d1:92:
                    53:a4:35:33:02:09:2d:d0:f6:b8:ee:cf:fa:5b:5e:
                    10:98:8d:41:f4:fa:cb:c4:9e:09:b4:40:bb:3c:59:
                    09:de:dd:c8:4e:74:6b:fa:63:35:70:4a:cc:66:ad:
                    72:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:2F:16:50:4B:CD:0B:11:D4:C5:67:10:93:8C:B8:AF:F8:76:69:76
            X509v3 Authority Key Identifier:
                keyid:3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:1a:0e:08:73:4f:18:18:c5:a3:ba:d6:2e:a5:d1:48:64:e7:
         3b:31:f3:47:83:28:f7:1e:c9:85:1c:94:de:9e:bd:d7:45:f8:
         4c:d7:d1:e8:2a:7a:d3:20:57:60:7d:d0:1f:3c:24:c8:5c:b5:
         db:ff:31:f5:df:ca:47:4c:04:79:42:78:61:b8:62:02:27:72:
         27:d8:e4:be:6a:5a:16:ab:1f:94:96:18:ac:ba:82:1a:13:43:
         6d:72:dc:5b:75:0d:23:5a:f8:15:1e:eb:22:1b:c5:01:e2:2b:
         30:f8:66:33:c6:8e:85:89:95:6e:d5:57:08:39:8c:d1:8a:b1:
         f9:fa:73:12:30:8f:0e:71:aa:4f:02:d9:c0:41:73:5f:3d:c7:
         b1:4d:56:9f:12:29:c8:c9:c3:f4:db:dd:26:a1:ec:5e:f0:68:
         47:e7:2d:23:82:d4:e6:af:e1:d7:d5:91:13:05:11:8c:f6:07:
         a7:83:62:4d:5f:c9:21:dc:59:84:50:e9:a2:70:df:b9:f2:23:
         ca:e4:5c:12:bc:c9:23:40:ae:88:47:c0:53:71:9d:ed:d5:ca:
         d2:90:48:89:ca:f7:aa:45:45:2c:05:47:13:bd:0e:49:23:80:
         be:2d:2d:42:39:d3:7b:9e:aa:5f:96:3b:06:a4:78:0e:1f:90:
         1c:bc:a1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:48:06 2026 by rpki-client