Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft
File:                     cri4zRAwexYyTYeYJ98ypKqNaqE.mft (raw, json)
Hash identifier:          tD0sCClEILOXSIzUcBSwze++WTcTCSVyTAfXilH6Tpo=
Subject key identifier:   B4:87:63:DB:A8:09:9A:48:69:F9:54:C6:A8:58:30:09:B4:96:4A:BF
Authority key identifier: 72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1
Certificate issuer:       /CN=A91FF19B/serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1
Certificate serial:       051D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft
Manifest number:          0510
Signing time:             Wed 19 Aug 2026 00:01:46 +0000
Manifest this update:     Wed 19 Aug 2026 00:01:46 +0000
Manifest next update:     Wed 26 Aug 2026 00:01:46 +0000
Files and hashes:         1: cri4zRAwexYyTYeYJ98ypKqNaqE.crl (hash: /Sba//hSN2yg0i/dLN3QkYxO7w86yb+ILBASomh5TLM=)
                          2: 0C023160C4C911EE9278E261C4F9AE02.roa (hash: Bqm0LBQ1QxgmzQ67GzN6T9VVJw3twyV0J98hBbifjyw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl
                          rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1309 (0x51d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF19B, serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1
        Validity
            Not Before: Aug 19 00:01:46 2026 GMT
            Not After : Aug 26 00:01:46 2026 GMT
        Subject: CN=6a84f26a-0290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d9:e8:6d:69:06:54:61:a0:35:eb:b0:2a:43:
                    e7:55:df:a8:aa:95:e2:d3:99:be:81:64:c5:c1:82:
                    04:86:59:f1:df:dd:8f:f1:4d:96:56:04:d9:05:d1:
                    cc:26:cc:f9:cc:28:b0:ca:d1:f6:ae:5d:0d:4c:67:
                    b5:80:5a:cd:b1:94:57:f3:21:97:58:14:30:ce:f1:
                    aa:3d:61:f8:df:2a:65:6a:5a:f8:dc:b5:94:50:26:
                    dc:54:89:78:f0:c4:0d:84:b9:2d:09:7c:13:f6:56:
                    f8:18:18:3e:1e:a7:9e:a0:25:b6:61:eb:e1:cb:57:
                    54:6c:02:77:62:8e:49:f2:87:44:cc:91:75:08:50:
                    40:e2:a8:07:a9:41:b0:73:a3:02:3b:5d:84:5d:c6:
                    63:36:12:8a:d4:ea:12:44:9e:2a:a8:63:44:62:68:
                    28:0e:c6:be:2a:a8:b1:ca:33:8c:2e:8b:cf:07:54:
                    a4:0e:0f:ac:c2:92:2c:37:d1:79:55:9e:99:c2:c6:
                    70:18:7a:42:1f:8f:c0:15:12:4a:89:19:0b:17:12:
                    cd:65:13:9d:79:c5:4d:91:28:c6:1b:62:26:df:d3:
                    6d:e3:87:f3:7c:da:8d:ea:9b:f3:0d:9f:9f:35:0c:
                    24:54:d4:ad:43:3b:1e:24:4a:b3:05:e0:b2:ae:c0:
                    50:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:87:63:DB:A8:09:9A:48:69:F9:54:C6:A8:58:30:09:B4:96:4A:BF
            X509v3 Authority Key Identifier:
                keyid:72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:08:3e:35:b6:8b:77:fd:c5:7a:70:19:a6:f9:3c:82:74:2a:
         71:f5:d4:e5:31:50:2c:51:89:a1:97:8a:bf:6f:ad:75:ae:b3:
         df:eb:12:78:c7:9c:df:45:84:d3:c5:cb:33:c5:bc:dd:86:cf:
         4c:60:b8:42:28:66:1a:00:7a:7e:f4:55:65:95:86:cd:27:3b:
         0b:a7:f8:40:69:12:25:1a:81:1e:51:e0:4b:5a:f5:1c:dd:dc:
         39:d8:ad:af:ae:96:f7:0e:d7:f8:b3:89:d0:20:63:69:c0:43:
         d8:67:b2:55:2c:5c:25:4e:df:35:71:0c:ad:4c:e9:e0:b5:3b:
         cb:75:77:39:61:f2:31:b3:66:a4:b9:6e:30:b2:e6:38:a3:0f:
         ab:99:82:2e:ed:e6:f5:43:50:51:4d:f1:61:54:fd:a6:ed:84:
         be:38:eb:6d:07:01:6b:df:42:29:2e:d1:b7:3d:d8:a0:d2:b9:
         df:b6:ad:24:97:42:04:f1:1f:b8:8d:86:fa:e5:7f:18:bc:08:
         b7:0c:23:4a:77:43:3b:8e:1b:bb:9d:b5:6e:81:b9:dc:0a:22:
         d0:05:ed:5a:dd:b2:9b:3a:e2:bb:d9:48:3b:ce:ee:72:82:0f:
         c0:27:77:22:13:52:38:bd:76:e3:40:01:08:49:d7:73:62:51:
         ed:3b:0f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:58 2026 by rpki-client