Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft
File:                     aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft (raw, json)
Hash identifier:          n9Dh8IJYc91jPAmGjqrBbu+MCOxJoOWOtopoF8PIflc=
Subject key identifier:   72:E8:FA:BA:86:33:2D:E4:C2:AB:40:92:DD:67:47:D4:0F:5E:61:09
Authority key identifier: 68:A4:FC:81:2D:01:91:36:3E:1C:4A:13:09:9F:53:B0:27:37:65:79
Certificate issuer:       /CN=A91CE216/serialNumber=68A4FC812D0191363E1C4A13099F53B027376579
Certificate serial:       089A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft
Manifest number:          088E
Signing time:             Sun 26 Jul 2026 21:16:20 +0000
Manifest this update:     Sun 26 Jul 2026 21:16:19 +0000
Manifest next update:     Sun 02 Aug 2026 21:16:19 +0000
Files and hashes:         1: aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.crl (hash: wROh/zHqv5JQ6UYnvi2QTgFDIPct585FvL/U5bUoNig=)
                          2: 7F2355F2FE2A11EA8A51B85AC4F9AE02.roa (hash: pEoVeSKvZWCj0YeLOAFbn4+nyrnm4dpfDhs+6j8mLhc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.crl
                          rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 21:16:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2202 (0x89a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE216, serialNumber=68A4FC812D0191363E1C4A13099F53B027376579
        Validity
            Not Before: Jul 26 21:16:19 2026 GMT
            Not After : Aug  2 21:16:19 2026 GMT
        Subject: CN=6a667924-566c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:df:73:48:09:05:2b:6e:fc:26:24:ae:bc:8d:
                    c3:a2:d8:6a:b6:57:af:41:ab:4c:8b:5e:07:95:7b:
                    91:32:b2:33:da:50:20:ad:92:0d:62:6f:b5:08:7a:
                    51:a5:10:b8:79:2d:54:60:8f:fc:ab:cf:00:21:f6:
                    42:4a:50:2a:08:97:7f:43:b8:45:2d:c8:d7:db:37:
                    f7:0c:8f:56:eb:d1:c8:cf:af:53:a2:7e:29:7d:cc:
                    11:9f:e8:ad:97:a9:c2:2c:7f:c5:70:5b:0b:e2:75:
                    87:9b:59:41:ca:1d:54:71:69:2f:70:68:d5:f2:f9:
                    ad:66:09:40:70:ff:77:9c:27:3e:31:30:19:7b:d4:
                    a9:01:04:d4:01:80:6b:02:ac:52:fb:40:e1:52:c9:
                    86:76:20:da:a3:01:d1:11:f5:d6:4d:6a:91:a8:99:
                    a6:56:e2:26:8e:ec:ae:6f:bd:b5:a3:ec:6c:a2:24:
                    00:71:6e:03:8a:a4:90:28:22:f5:96:cb:d9:d1:17:
                    67:79:de:9c:92:69:c2:0a:17:47:e9:c6:93:92:49:
                    f9:3b:d5:7e:91:29:b3:a1:17:d3:8b:4a:ff:92:ae:
                    83:eb:ce:d4:b9:a0:c8:e9:83:ed:ec:6e:a7:16:29:
                    1b:54:e4:b8:82:fa:4e:41:a2:4b:b7:a6:53:01:37:
                    17:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E8:FA:BA:86:33:2D:E4:C2:AB:40:92:DD:67:47:D4:0F:5E:61:09
            X509v3 Authority Key Identifier:
                keyid:68:A4:FC:81:2D:01:91:36:3E:1C:4A:13:09:9F:53:B0:27:37:65:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:39:2b:4f:e7:ac:fa:56:48:46:9c:58:ee:cb:34:f5:22:5f:
         28:8b:55:7f:a8:30:06:cd:1f:2c:d8:d2:0d:55:33:eb:74:07:
         5d:b9:1b:2f:18:54:f1:ea:d8:d7:94:13:0e:71:04:85:df:6b:
         06:90:3d:03:d9:77:1f:9c:30:2c:ce:c8:e4:c2:bf:7c:ec:b8:
         9a:a7:72:d4:95:b2:0e:af:49:b5:38:ec:31:04:53:66:12:e5:
         7d:6d:5a:3d:ac:a9:09:28:6e:1f:65:9d:fa:68:91:86:ee:83:
         ee:35:2a:3a:a8:72:8b:30:bf:87:26:1a:6e:b5:dd:4c:b1:fc:
         b0:b4:cf:0f:ce:65:c2:e2:60:e9:60:14:a1:cb:79:b0:ef:28:
         ec:6c:70:ca:39:85:e3:f4:8b:cf:2e:28:6e:e3:f8:3d:3f:b0:
         2d:80:5e:2c:5c:34:30:ba:3b:4f:09:2f:1d:35:ba:13:0e:0f:
         a2:8a:28:51:75:b7:9b:21:a1:1a:1d:03:1e:11:6c:64:f4:b9:
         e3:91:6c:9e:21:8b:dd:56:5d:6d:07:99:e6:69:57:1b:f4:33:
         b5:24:d9:8d:00:cb:e0:2f:fc:ca:22:fc:51:d2:24:71:c1:f1:
         0d:cd:fd:2d:70:f1:b4:5e:cb:f7:71:42:84:01:71:3f:45:4c:
         eb:49:90:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:23:09 2026 by rpki-client