Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
File:                     1bScAI9ih18VJth200lAoJsOnW0.mft (raw, json)
Hash identifier:          SgwQhDw2Hezm0Ff8yxY63109alZkTeGUGgGbXtMYDWM=
Subject key identifier:   36:27:11:E8:0A:05:2C:E6:AE:8F:67:35:32:1A:C8:08:D8:0B:A3:C9
Authority key identifier: D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D
Certificate issuer:       /CN=A91FB434/serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D
Certificate serial:       163B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
Manifest number:          1623
Signing time:             Thu 20 Aug 2026 16:40:49 +0000
Manifest this update:     Thu 20 Aug 2026 16:40:48 +0000
Manifest next update:     Thu 27 Aug 2026 16:40:48 +0000
Files and hashes:         1: 1bScAI9ih18VJth200lAoJsOnW0.crl (hash: YjjTTxc7gTTHxccZwHTQGxrz4qT0VQWkBE06rxebCqc=)
                          2: EB843B92329A11EE89CD8544C4F9AE02.roa (hash: CLUWcZt+49NeH6K62G6A+1bRGb2EpGeJVNtijAJKCTI=)
                          3: EC796D6C42D411E88EC29742C4F9AE02.roa (hash: /XKpZWxHQtpMnU+ZHwwN48hOrY+K7y+jnl3ND5plgMo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl
                          rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5691 (0x163b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB434, serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D
        Validity
            Not Before: Aug 20 16:40:48 2026 GMT
            Not After : Aug 27 16:40:48 2026 GMT
        Subject: CN=6a872e11-fd5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3b:43:c9:28:76:62:97:29:15:c5:2a:60:ea:
                    b5:7e:36:6b:32:95:0f:81:dc:53:3f:e7:7e:ab:e3:
                    36:b6:8e:cb:a2:6a:0b:5b:85:2a:fe:b0:6b:a0:50:
                    bf:83:ac:a8:d2:d9:95:dd:c1:e6:a3:95:99:d7:25:
                    30:b8:fa:d9:8d:f7:56:11:af:03:f9:fc:d9:30:f2:
                    8b:c8:c3:ed:47:2e:b8:1a:60:a4:f8:04:c7:cd:1c:
                    5c:64:f9:ba:20:41:cc:e8:fa:c1:41:a9:21:54:42:
                    03:df:ce:57:bb:bb:e0:4f:5e:8f:2d:6a:c2:e3:e3:
                    e3:47:21:a6:9f:31:a9:18:71:67:c4:26:07:ed:97:
                    ab:8a:19:ab:63:ce:dc:5c:a7:20:04:62:b2:18:1b:
                    42:6e:74:a3:2a:94:06:b2:bf:15:16:67:68:12:95:
                    57:9a:e8:6d:07:44:da:5d:bc:6d:17:c9:0b:6d:19:
                    74:41:c4:3e:48:ec:90:eb:04:0d:ad:e4:2b:54:41:
                    82:3a:43:68:08:8e:b9:3b:ba:8f:36:1b:94:b6:82:
                    c9:6b:0d:00:d6:64:b5:61:82:5b:8a:ae:d4:97:fa:
                    f9:b9:f8:08:9c:fb:95:33:75:77:9d:52:49:1d:f3:
                    33:3c:5d:74:15:90:b4:6f:18:5e:ac:ad:d8:b7:b0:
                    6d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:27:11:E8:0A:05:2C:E6:AE:8F:67:35:32:1A:C8:08:D8:0B:A3:C9
            X509v3 Authority Key Identifier:
                keyid:D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:a6:bc:b1:0a:9b:fd:62:f1:1a:c7:b6:48:f9:9e:8d:2c:ca:
         7a:5a:84:c9:27:9d:7d:8e:11:7e:f0:1f:30:c4:00:bf:e4:e2:
         e0:1a:ca:10:97:2f:70:6a:80:9e:a9:36:0a:d3:be:49:f7:80:
         ad:0d:66:47:18:6f:b3:c9:fc:16:87:a3:7b:7a:4b:86:36:26:
         7b:88:17:d9:fa:2f:82:28:56:2a:d3:b3:0d:4c:7f:06:f3:1a:
         95:7f:e6:08:14:7d:ba:9c:85:e5:4a:54:ba:be:33:73:fc:32:
         eb:9c:e8:35:62:f2:c0:4d:bb:a0:e6:e7:e3:42:d4:0d:34:a6:
         d2:4c:2c:be:1a:e0:be:1a:37:8a:75:d0:f6:a3:8c:1e:04:d2:
         0c:35:e1:5c:05:d6:4c:b1:6b:ba:36:ed:8f:11:3d:28:1d:7a:
         3f:32:ee:db:b7:4c:d6:4c:0c:ac:27:23:39:2e:9f:c2:b5:1a:
         15:25:f7:a5:b7:0d:61:14:e4:1b:18:36:c5:64:ab:1e:9c:5c:
         c6:2a:b0:4e:30:8f:79:80:63:94:fc:16:cf:0b:aa:c4:58:3a:
         5e:b0:6d:47:2a:46:36:58:2e:d4:43:62:e6:5b:34:f1:13:bb:
         5d:91:07:4f:99:ba:88:66:93:c3:42:dc:3b:ba:e2:de:1c:50:
         a5:5d:29:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:48:04 2026 by rpki-client