Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft
File:                     Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft (raw, json)
Hash identifier:          /+1mdbhtfVsxxX/jujfJh7aOUOsAl0EBZlPU3S8d/2U=
Subject key identifier:   74:14:B6:A2:07:D8:55:BB:D7:C3:C1:23:7A:7B:FE:D4:D8:43:1C:97
Authority key identifier: 29:AD:B3:9B:62:0E:AE:3C:B8:AF:CA:2C:A1:85:F5:C4:87:6F:D0:43
Certificate issuer:       /CN=A91FC985/serialNumber=29ADB39B620EAE3CB8AFCA2CA185F5C4876FD043
Certificate serial:       011C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft
Manifest number:          0118
Signing time:             Sun 23 Aug 2026 05:38:19 +0000
Manifest this update:     Sun 23 Aug 2026 05:38:19 +0000
Manifest next update:     Sun 30 Aug 2026 05:38:19 +0000
Files and hashes:         1: Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl (hash: 0D4pgSDCLE6z9BmGsjWgPtdTbeBQSbHlBZO7vKJCRKc=)
                          2: DA3E289CF5B811EFA1046714C4F9AE02.roa (hash: oaeasOGheSroKPV3LiPVQfpD09ef36G8xHY2SVCQJWs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl
                          rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC985, serialNumber=29ADB39B620EAE3CB8AFCA2CA185F5C4876FD043
        Validity
            Not Before: Aug 23 05:38:19 2026 GMT
            Not After : Aug 30 05:38:19 2026 GMT
        Subject: CN=6a8a874b-adb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7d:61:77:b1:2c:c4:c7:6e:e9:eb:cc:8f:63:
                    78:8b:da:91:ef:98:55:e0:60:76:2c:c0:ce:68:a9:
                    af:a1:c5:6f:95:89:b5:1e:15:d2:11:34:ff:3c:ef:
                    8b:e2:d1:86:e0:cd:e1:cd:95:6f:e2:dd:8e:66:f7:
                    5d:7a:bc:f5:9a:d2:8b:c3:ab:45:bd:ca:44:9c:1c:
                    fb:99:4e:55:b9:2d:0f:56:9d:63:f2:37:91:47:0e:
                    f9:61:ee:f2:b4:7e:85:5b:22:03:2b:ce:a7:8d:fb:
                    aa:4b:7e:cd:8b:c7:4d:01:cd:99:ba:30:f0:a4:56:
                    99:c3:74:11:88:6a:bd:08:3b:31:c5:0b:bc:f0:3e:
                    51:e8:74:a6:b4:a6:1a:de:7c:03:a4:a2:1b:75:a4:
                    5d:67:cb:c6:a8:b5:7e:d6:c3:b2:55:df:2e:9c:ff:
                    96:6a:e2:43:f7:ee:e0:89:55:9e:ec:63:27:d0:3b:
                    a9:9d:73:6e:c9:aa:4e:b5:11:5c:fe:91:9d:e0:df:
                    66:98:9a:c7:f6:4b:eb:a6:a2:1f:49:3e:c0:db:02:
                    43:fe:3b:d8:2c:d5:3e:0c:2b:ef:f2:b7:f5:42:62:
                    ed:5d:82:fe:c1:0d:b2:ad:63:84:4e:46:70:3c:12:
                    13:02:58:80:24:13:90:60:b0:5a:a7:d2:fc:b7:a3:
                    4b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:14:B6:A2:07:D8:55:BB:D7:C3:C1:23:7A:7B:FE:D4:D8:43:1C:97
            X509v3 Authority Key Identifier:
                keyid:29:AD:B3:9B:62:0E:AE:3C:B8:AF:CA:2C:A1:85:F5:C4:87:6F:D0:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:47:29:ab:6a:d5:44:a2:a9:db:80:5e:ae:b8:aa:86:c7:d7:
         75:58:10:85:d8:bd:7e:92:62:57:92:52:12:45:8a:54:f3:8b:
         0e:50:6d:c9:e7:03:b5:c1:6a:b8:e4:a8:1e:d5:75:c1:51:74:
         e7:b4:ac:86:75:2f:49:6a:d6:b2:9a:01:66:c4:66:41:8f:52:
         5c:c3:37:cd:ff:50:6e:ac:81:c3:3d:3c:65:81:e6:4f:2e:1a:
         47:ea:37:93:3f:a3:3b:9c:5f:09:86:9c:64:6a:58:30:9a:6a:
         86:a9:d7:fd:50:28:15:83:00:fc:58:cc:bb:23:6e:9f:e9:db:
         4e:cd:f6:3e:02:75:65:cf:e2:2f:41:eb:3f:a8:46:5f:0e:96:
         ff:3c:36:15:6c:22:88:d4:ac:23:ba:f9:c8:4b:28:68:0c:0a:
         0b:7c:3d:61:e1:86:e9:81:b8:8d:9d:f2:f3:c1:26:d0:62:51:
         3f:97:91:87:cb:9c:1c:95:52:7e:42:2f:ab:c3:0b:81:84:96:
         94:fd:15:62:30:2e:12:79:32:c1:53:23:08:ed:86:df:28:df:
         7e:24:f6:6f:63:3e:93:94:98:80:85:d8:85:82:f1:1f:fc:86:
         8e:d1:ac:3b:3c:0b:8b:4a:83:4f:44:fa:c2:aa:b4:19:93:2e:
         a3:cd:db:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 06:41:43 2026 by rpki-client