Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft
File:                     aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft (raw, json)
Hash identifier:          Lc1IbXRiChorTehrGi84zeshbh+UejkydSEk9+m/Li0=
Subject key identifier:   B3:7F:A5:2C:CA:11:2F:7D:BA:42:BB:7A:28:AB:F6:C2:6E:CC:B2:0C
Authority key identifier: 69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34
Certificate issuer:       /CN=A91FCF44/serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34
Certificate serial:       019B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft
Manifest number:          018C
Signing time:             Wed 19 Aug 2026 05:20:20 +0000
Manifest this update:     Wed 19 Aug 2026 05:20:19 +0000
Manifest next update:     Wed 26 Aug 2026 05:20:19 +0000
Files and hashes:         1: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl (hash: D5VwCgF1MGhcufyKsXVIIM+xkkg+L2IZEHfmPK6oSak=)
                          2: B2A0074EAD4F11EF93ECF282C4F9AE02.roa (hash: zIk6J0N0742RdEvubg3AlZvYEvOIg7avsvcbwF9cq9g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:20:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCF44, serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34
        Validity
            Not Before: Aug 19 05:20:19 2026 GMT
            Not After : Aug 26 05:20:19 2026 GMT
        Subject: CN=6a853d14-e0fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:09:31:d3:98:3e:2f:17:0e:02:e7:b6:92:c2:
                    7f:17:03:bd:55:bf:2a:35:1c:10:68:81:29:73:87:
                    3c:6c:5e:ba:79:fa:cc:93:ef:9c:a3:31:3f:92:60:
                    e4:96:5f:9c:a7:22:60:50:10:aa:92:ee:e5:62:e7:
                    b5:49:fe:76:98:8d:32:b4:fc:2e:2d:c5:ea:45:15:
                    d4:75:5f:39:ff:ad:76:1a:55:8c:7f:08:55:d9:38:
                    18:be:75:7c:9b:d0:18:73:ae:fa:4f:fe:bf:54:83:
                    e1:cc:d5:08:c1:1c:5d:68:b1:a9:f4:20:cd:6a:a9:
                    c4:eb:76:ce:a6:14:34:a5:0d:51:d8:95:99:89:3c:
                    81:38:99:6a:6b:4e:a8:e3:11:65:21:8d:f9:e9:8f:
                    de:53:2b:77:81:8f:f4:f6:3e:e4:f7:a0:80:d7:8b:
                    59:10:aa:80:33:55:09:a9:b6:3c:e8:76:5d:10:27:
                    5a:e2:54:02:79:38:36:6b:e9:28:13:08:9b:1d:98:
                    81:af:b3:1f:a4:cf:ed:0b:dd:78:21:07:19:c0:ee:
                    69:66:ce:4d:99:04:66:6b:c7:1d:ca:db:bf:a1:5c:
                    2e:35:d9:ba:7c:9c:58:f5:e1:64:90:9c:38:41:1e:
                    32:a0:4c:73:2e:e9:2a:14:0f:36:ee:70:7c:f7:a0:
                    72:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7F:A5:2C:CA:11:2F:7D:BA:42:BB:7A:28:AB:F6:C2:6E:CC:B2:0C
            X509v3 Authority Key Identifier:
                keyid:69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:1e:e7:c7:47:1b:71:48:65:82:17:f7:f6:01:9b:d2:35:75:
         50:af:59:3e:55:9d:a4:8a:27:02:b3:ce:4f:ce:ef:cc:03:51:
         43:7a:ed:ef:4c:d0:3b:46:eb:47:9c:51:8d:8a:8f:f2:21:6a:
         0e:31:93:f8:44:da:34:5a:b4:0e:32:5e:e4:3c:78:97:7c:6a:
         dd:37:43:10:70:87:d9:b4:eb:aa:64:88:18:bd:7b:16:25:a3:
         62:f2:46:f7:03:c5:31:9d:2c:be:dd:fa:b1:d2:65:39:cb:8e:
         e0:c9:e0:bd:0e:ec:e8:16:3f:65:bc:25:be:37:e7:94:d1:50:
         a2:b2:f1:47:ab:2b:76:f9:83:62:72:e8:1d:4f:21:5a:37:86:
         d7:f0:5e:60:d9:66:57:b0:86:bf:83:67:d3:ec:91:10:46:01:
         0e:e2:fc:46:53:b3:8f:be:2f:55:44:e7:8c:a3:c2:09:8f:a6:
         67:2c:cc:e7:d6:89:a0:32:23:43:40:93:00:36:ca:e1:cf:14:
         1e:4b:27:64:84:4a:ac:b2:f2:e3:7e:d0:f9:31:3b:e0:fa:88:
         57:a8:ac:32:15:bc:df:64:ca:12:25:09:bb:6e:5d:bf:22:27:
         3a:15:5a:27:3f:03:a2:68:42:9d:87:b5:30:8d:ff:fb:83:15:
         41:66:36:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:47:05 2026 by rpki-client