Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft
File:                     he6QOP_DVBq9-33Z7TPyquNy54w.mft (raw, json)
Hash identifier:          KDXMolRw2LeYT7vL7o8SYPY1D/+O8cSDCWDUGaucfHQ=
Subject key identifier:   5B:80:1E:32:E9:58:77:CD:82:88:39:DB:42:70:66:B0:C8:33:AF:E1
Authority key identifier: 85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C
Certificate issuer:       /CN=A91FF5E4/serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C
Certificate serial:       067C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft
Manifest number:          065F
Signing time:             Tue 18 Aug 2026 23:00:41 +0000
Manifest this update:     Tue 18 Aug 2026 23:00:41 +0000
Manifest next update:     Tue 25 Aug 2026 23:00:41 +0000
Files and hashes:         1: he6QOP_DVBq9-33Z7TPyquNy54w.crl (hash: h/eWNRIr6eMkgifCzQOCxv+c+RftXvCxma8BdloPOhU=)
                          2: 09182D38084E11EF89D29620C4F9AE02.roa (hash: SuNBYkbcHt/E/yDdSZbsjsp7zc+8rseF2Of8cM/fHb4=)
                          3: 7AFCC818E38611EB8BC17765C4F9AE02.roa (hash: 3Cr/pccyDDHFzNo5H8nu6zPrLpYVCpjD2Q93h8Zz6zQ=)
                          4: 07FBA006084E11EF89D29620C4F9AE02.roa (hash: WCC6UXi4R+1X1dVKcTmUaZE1whe9HYXD5VTHWuUKKDc=)
                          5: A6EF097068F911F092D77151C4F9AE02.roa (hash: 7IDRB+gCfRdMDyJ7PzWwJWumz+UxY0a58MybMwDHWJQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl
                          rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 23:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1660 (0x67c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF5E4, serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C
        Validity
            Not Before: Aug 18 23:00:41 2026 GMT
            Not After : Aug 25 23:00:41 2026 GMT
        Subject: CN=6a84e419-2149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b1:21:ba:38:ea:a8:13:33:4a:5c:a9:49:eb:
                    0f:80:7c:3c:75:ab:27:7a:9c:84:4f:95:58:72:f5:
                    eb:55:84:6b:1e:f2:b3:d4:8f:04:17:f3:06:79:ae:
                    27:9a:fe:e0:09:fa:b7:20:a4:e8:8e:6e:b2:10:f9:
                    d2:9e:b6:7c:dc:74:c8:d1:e1:80:67:ac:a4:a7:30:
                    6b:85:0f:f7:df:54:44:56:82:cb:5c:82:5d:da:6a:
                    53:c5:66:e7:de:91:15:9b:47:ed:d1:7c:2d:2c:83:
                    69:53:5d:95:a2:3a:01:c6:37:d5:d7:7f:9c:66:97:
                    77:b6:0f:74:03:2e:e9:69:1e:c7:b5:2f:5f:bc:60:
                    c3:b0:12:d5:7c:9a:c6:04:f2:94:fd:fa:c5:ed:4f:
                    8e:5d:3a:fb:01:34:81:7c:f7:3f:4a:a4:9a:c6:72:
                    b5:fb:f4:5a:cb:f0:80:0e:eb:7a:bb:b6:11:9c:e8:
                    18:55:58:b8:3f:89:ee:78:33:33:1a:9e:05:15:c2:
                    8d:13:f4:72:db:71:6f:fd:de:07:c3:0c:40:f7:24:
                    33:94:70:0b:64:e4:73:e4:37:e4:88:bd:9e:e3:f1:
                    cd:c0:e4:ee:f8:e8:31:e1:83:43:c2:c3:1b:2b:30:
                    9f:19:bb:cf:9a:a0:1b:47:62:b4:7d:81:49:3a:bc:
                    f9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:80:1E:32:E9:58:77:CD:82:88:39:DB:42:70:66:B0:C8:33:AF:E1
            X509v3 Authority Key Identifier:
                keyid:85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:fa:d8:d2:a6:e8:b9:f6:75:53:b9:02:a4:26:44:da:49:a5:
         9a:a3:e5:6d:a8:7e:63:1f:a9:52:64:67:b9:44:66:48:47:11:
         b9:0a:07:eb:e2:e2:da:e8:60:d2:f8:51:d8:d9:87:d8:fa:54:
         38:11:75:88:41:4d:77:e0:95:ad:3d:36:1c:a4:a4:8d:66:f5:
         67:b3:6a:8c:4e:49:4d:45:e5:c1:16:95:b5:33:4f:a5:71:0c:
         11:86:21:18:b5:d9:2f:17:c5:59:5d:97:ab:08:a5:fc:35:d6:
         3c:be:ab:46:13:99:4f:fb:1d:bf:ed:c5:11:de:04:cb:ee:b3:
         02:b4:3e:65:89:bd:1b:6d:05:bd:d2:aa:0a:61:bc:29:2e:ce:
         f9:ca:5b:41:38:27:56:ec:01:cf:d3:55:54:e9:04:09:80:15:
         f5:74:de:13:4f:d5:30:cc:16:da:32:1a:10:dc:10:e2:13:89:
         9f:75:56:7c:50:24:ed:94:1b:e1:ed:b3:db:b0:b8:56:d7:98:
         08:b9:e3:e5:b0:12:ce:09:51:4e:42:23:f0:d2:60:b6:31:54:
         14:dc:3f:c7:48:ce:09:d6:5f:52:7a:56:c4:00:1a:f2:60:25:
         dc:0a:63:d0:81:dc:1e:f4:84:8e:bc:da:34:2f:0e:ca:f8:15:
         8f:26:6a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:06 2026 by rpki-client