Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
File:                     nhW8ueM67e2saArIyYFuEVkFyiw.mft (raw, json)
Hash identifier:          NrThYrB2MApfk0O6UKOGr91A454P767CmCDt4gwUou4=
Subject key identifier:   D7:30:61:EE:72:57:B8:13:E9:3D:4E:75:09:4C:CE:79:C1:E6:E8:CB
Authority key identifier: 9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C
Certificate issuer:       /CN=A91F9B3A/serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C
Certificate serial:       17CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
Manifest number:          17BE
Signing time:             Tue 18 Aug 2026 16:43:06 +0000
Manifest this update:     Tue 18 Aug 2026 16:43:06 +0000
Manifest next update:     Tue 25 Aug 2026 16:43:06 +0000
Files and hashes:         1: nhW8ueM67e2saArIyYFuEVkFyiw.crl (hash: +VCTq9lPn4o98ky2xIjPPUDbUXB+6fPIGP0zOr7laxs=)
                          2: 7A7A6AC6234311EA90D15227C4F9AE02.roa (hash: pOUuDNhh+S+06YvmHHO2sLszLURz3ht9lYFbPAGfK8E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl
                          rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 16:43:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6094 (0x17ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9B3A, serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C
        Validity
            Not Before: Aug 18 16:43:06 2026 GMT
            Not After : Aug 25 16:43:06 2026 GMT
        Subject: CN=6a848b9a-2d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ff:7a:e2:7d:fc:02:d0:10:9c:26:1e:5f:7e:
                    60:0e:62:1b:2d:8e:6e:6d:97:34:58:2d:ac:90:f1:
                    d6:6b:cc:15:01:ca:44:24:85:c2:09:21:4b:9e:e7:
                    d0:b0:d8:3c:c3:7a:d5:69:4d:d0:f8:32:ff:74:ab:
                    fb:ad:68:45:95:75:eb:50:d5:d0:16:20:cc:b2:3f:
                    10:7e:6e:ee:a2:4e:b5:e6:87:ef:4d:79:b8:c0:06:
                    dd:6b:a7:cb:4c:eb:40:24:5a:eb:f8:29:7a:42:4c:
                    f6:73:4c:53:95:1a:ee:2d:4c:ff:51:4f:f8:b2:f8:
                    45:e9:46:90:17:c1:bb:2b:a4:24:8c:4e:1a:79:fd:
                    85:74:b9:99:12:76:13:07:3f:bd:4a:3d:9f:75:98:
                    57:b5:27:80:c5:f7:cf:07:52:b8:32:24:ef:ef:ca:
                    e5:c4:62:2b:10:81:2a:6f:e3:71:a6:55:bb:df:fd:
                    44:70:35:3f:da:93:23:1a:3f:f8:c8:ca:1e:d4:4b:
                    b5:4d:e8:b6:77:35:c6:06:28:e4:c6:cf:07:f7:30:
                    c5:27:1e:cd:da:15:7a:19:1c:29:cc:1c:a5:4d:04:
                    f2:a1:99:37:3c:cf:57:ff:b1:37:fa:ed:c1:a0:1b:
                    ff:71:76:1b:f7:4b:c5:6d:b7:74:9f:39:61:4f:a2:
                    62:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:30:61:EE:72:57:B8:13:E9:3D:4E:75:09:4C:CE:79:C1:E6:E8:CB
            X509v3 Authority Key Identifier:
                keyid:9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:d5:36:be:e5:41:a5:ed:71:f5:31:1a:0a:03:96:71:91:12:
         d7:48:92:d6:f4:b2:ae:8f:a3:9d:00:0d:1c:a1:96:e7:37:db:
         d6:16:30:6e:af:a6:de:69:15:d9:7e:0e:f2:ca:79:28:be:94:
         25:ea:d4:c7:d1:89:78:0a:12:ba:7b:00:be:ca:2e:7a:1a:21:
         51:3a:7a:45:d1:45:44:98:de:b2:67:3f:64:10:d3:e3:58:70:
         19:e7:db:f1:5e:53:4d:e1:16:9a:3f:b2:55:cf:35:03:fc:f3:
         93:64:70:3d:2a:2c:b4:5b:19:6f:90:5d:cd:10:22:a0:28:a3:
         67:e6:ed:e4:04:56:b5:e0:cc:7e:79:c6:dd:6c:ec:0d:7d:b0:
         cd:0a:6f:00:0f:79:bc:cf:21:6c:89:a2:26:ba:09:57:73:21:
         f5:51:07:de:12:5b:df:bf:c2:76:fe:d6:b4:43:99:0b:ad:6e:
         12:b0:e0:77:63:c7:2a:33:d4:95:b4:ec:5f:c5:b5:79:2b:b9:
         b1:11:d8:62:e9:0c:57:cb:25:af:4a:c5:02:cb:64:72:c1:45:
         92:85:93:14:1c:e9:64:5c:d4:99:18:9e:8d:0f:6b:dc:b0:40:
         04:dd:9d:ce:d0:c1:07:65:7c:48:a2:9c:15:a3:83:37:2e:21:
         f4:1a:db:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:32 2026 by rpki-client