Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft
File:                     1383l1I1q95fSYn78_6TjVJ8GUg.mft (raw, json)
Hash identifier:          qOZ3qSn8sargia81zBEqLzi/cA8yA9GE548oY27r65A=
Subject key identifier:   27:E8:A9:07:5F:B1:AC:14:BA:86:CE:05:47:D9:32:A6:14:34:3B:47
Authority key identifier: D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48
Certificate issuer:       /CN=A91F8336/serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948
Certificate serial:       12A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft
Manifest number:          1285
Signing time:             Tue 18 Aug 2026 17:16:48 +0000
Manifest this update:     Tue 18 Aug 2026 17:16:48 +0000
Manifest next update:     Tue 25 Aug 2026 17:16:48 +0000
Files and hashes:         1: 1383l1I1q95fSYn78_6TjVJ8GUg.crl (hash: vk4TxWNynHLnFVEe3Glj6MfdZKcNkoAE3inUCrsDVOI=)
                          2: 4AE6CFF8B25211EBA977EE09C4F9AE02.roa (hash: x14FGM59KBAJVApiuTvfAAn5zOSyd0j7HZF03bpVJMs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl
                          rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 17:16:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4770 (0x12a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8336, serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948
        Validity
            Not Before: Aug 18 17:16:48 2026 GMT
            Not After : Aug 25 17:16:48 2026 GMT
        Subject: CN=6a849380-1aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:49:c8:9a:fe:3d:58:00:ae:cb:86:49:2a:84:
                    e7:ad:49:a1:33:11:75:c4:0a:b3:92:18:da:d2:a6:
                    e7:cd:ed:97:1e:b5:c8:b0:a5:5b:4a:a3:15:b0:6e:
                    66:45:66:af:d5:8a:ae:dc:8d:46:41:01:7f:22:5d:
                    f5:16:1f:82:d3:30:70:bf:82:ed:20:45:8c:69:29:
                    22:38:b2:df:74:45:21:b9:37:c8:15:1a:31:60:44:
                    65:f0:fd:26:56:61:97:e9:7c:2e:01:e8:8b:57:30:
                    cd:b7:50:f7:64:b3:48:97:07:d9:6d:2e:08:36:1d:
                    b4:42:ab:7e:f7:26:86:74:8f:be:a1:be:99:d2:1c:
                    02:2d:37:ae:2b:1f:80:bd:6d:c4:17:1b:1d:ce:bc:
                    37:4e:e1:cb:40:4b:12:e4:0f:5c:d3:c9:48:15:da:
                    e2:76:ec:b3:5c:ca:40:75:f4:bb:39:02:24:37:eb:
                    e1:7a:c0:ca:6e:28:24:b2:1a:cf:0e:21:03:fd:a1:
                    f4:5d:63:48:c3:ad:94:37:b9:0f:66:5e:50:97:f8:
                    e1:98:81:ec:4a:3b:0b:12:fb:d0:04:17:d8:be:7a:
                    47:6b:28:90:37:57:1d:b5:d3:1a:6b:1e:a9:c3:f6:
                    34:93:eb:37:81:98:78:0b:66:ae:85:a7:a2:98:db:
                    22:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E8:A9:07:5F:B1:AC:14:BA:86:CE:05:47:D9:32:A6:14:34:3B:47
            X509v3 Authority Key Identifier:
                keyid:D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:80:10:06:76:b1:98:7a:ba:b4:01:c6:bb:26:83:55:11:14:
         07:2e:b4:1e:97:95:b0:7a:27:de:06:d6:9e:78:bc:cb:be:b8:
         25:d8:26:4e:f3:9f:ce:1e:13:a6:98:58:89:bc:b3:7b:bf:e7:
         09:20:d7:f6:36:ad:fa:3b:b7:87:d3:a6:14:5b:41:7a:46:d6:
         ca:2e:be:76:b8:11:3a:0d:fa:52:19:fd:ba:77:a1:37:41:83:
         4b:36:9b:67:85:8f:a2:99:e4:32:ff:87:86:cc:e9:7f:e8:5e:
         5d:67:bb:84:bc:5f:32:42:ae:3c:ae:ba:6f:35:06:e9:86:b2:
         14:7f:3c:dd:f1:e4:58:fd:96:75:20:7b:91:0c:5c:1e:82:49:
         9c:78:e6:f0:fd:16:bd:40:91:eb:fb:9d:78:31:fb:e9:74:c6:
         d7:48:9a:2e:ae:2a:c2:48:50:3a:a9:5e:9f:7e:da:19:36:b8:
         65:c6:6c:fb:89:22:bb:bc:69:df:9f:91:1a:d5:8c:4b:9c:de:
         6f:16:98:b8:11:3f:3b:b8:2b:ff:1d:3c:97:6c:59:8c:46:24:
         dd:4b:a3:ca:5a:fc:56:7d:d1:34:fe:d7:a8:6b:c5:32:83:ed:
         87:a5:d0:74:7d:fc:c7:00:ef:e2:9e:bf:5a:9a:10:d5:c8:86:
         ac:e4:a8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:38 2026 by rpki-client