Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
File:                     A2aKIfDwHwaydP2IzJ4KboPVX4U.mft (raw, json)
Hash identifier:          WanF0/F3Bp9s3FePw781Kl2IXaltoVydbdxCA51yYqw=
Subject key identifier:   0E:D4:05:9E:8C:4E:02:21:52:B9:D1:4B:74:76:33:96:F3:64:62:09
Authority key identifier: 03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85
Certificate issuer:       /CN=A9141620/serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85
Certificate serial:       084A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
Manifest number:          083C
Signing time:             Fri 04 Sep 2026 20:55:48 +0000
Manifest this update:     Fri 04 Sep 2026 20:55:47 +0000
Manifest next update:     Fri 11 Sep 2026 20:55:47 +0000
Files and hashes:         1: A2aKIfDwHwaydP2IzJ4KboPVX4U.crl (hash: ZVKJlic6Jo+3WTtengtOEyQlUbfm65hHKB1vZWfhSgU=)
                          2: CE899F0A66C311F08BE17B42C4F9AE02.roa (hash: /8KsOuQDF6YCKq+9HViCWxyMxMdtmN7AwyTJXtJg/FU=)
                          3: 5DDE6BC2293E11EB9DFA3C72C4F9AE02.roa (hash: +AUVvwTT7ST+BeSrArm8ZmuI1OzsiyoIqJ3c0xzwnVs=)
                          4: 2C0DD994525511F0A544424DC4F9AE02.roa (hash: r04Ye74EEDh36FeBnIWb59XMMU9Mx+tkFNipeNmkuAg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl
                          rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 20:55:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2122 (0x84a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141620, serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85
        Validity
            Not Before: Sep  4 20:55:47 2026 GMT
            Not After : Sep 11 20:55:47 2026 GMT
        Subject: CN=6a9b3054-438e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f3:a5:8a:a2:2f:cd:65:4a:54:9c:3f:13:bc:
                    3d:e2:3e:09:5f:b7:c2:73:8f:2e:51:ce:13:b6:fd:
                    cf:7e:53:58:bb:e2:06:00:6f:76:e0:b9:19:df:ac:
                    a1:ee:97:d6:fd:8f:67:03:6e:81:ad:cc:d0:8c:77:
                    63:44:71:bb:00:5c:3a:db:ed:93:f6:0e:ef:87:e8:
                    9a:7e:e3:c6:05:45:61:41:75:03:2b:63:64:26:db:
                    47:c5:f6:37:fd:93:42:ce:4d:22:a6:53:a7:45:9d:
                    6c:f1:17:40:8c:a8:86:cf:e2:c2:50:87:24:53:08:
                    89:53:07:ff:c1:84:da:9b:0b:6b:0e:5a:4c:4e:15:
                    9a:9a:00:b6:b8:69:79:4c:16:bc:7f:0b:d3:ea:fb:
                    0d:b6:b5:df:61:f8:3a:0d:5e:cd:7a:15:3f:be:a8:
                    82:89:23:4f:d0:34:2b:08:25:5b:49:ad:da:ab:47:
                    cd:97:b3:a5:15:07:21:81:1f:bb:b7:92:99:39:6c:
                    00:e4:12:03:83:87:74:c4:57:a8:dc:88:8a:95:20:
                    40:1d:26:ec:30:d3:33:55:a8:39:c6:bc:35:15:67:
                    af:20:b9:85:91:dc:ad:18:f0:09:da:92:f3:fb:6c:
                    f5:99:84:b8:9c:ae:6f:c7:d5:d1:1c:13:0e:11:c0:
                    40:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D4:05:9E:8C:4E:02:21:52:B9:D1:4B:74:76:33:96:F3:64:62:09
            X509v3 Authority Key Identifier:
                keyid:03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:65:cb:61:76:d7:d3:2a:f5:ff:da:0a:50:ee:8a:51:69:dc:
         80:d3:a8:2e:7e:60:89:bf:58:a0:bc:8c:24:d1:45:4f:b9:e7:
         f1:58:9a:d4:7f:4a:cb:73:b7:91:6b:22:de:4b:3c:05:b1:b3:
         3a:be:41:30:53:36:0a:73:25:c1:00:31:9a:f0:05:8d:71:15:
         f0:ec:60:5d:6a:cd:04:f3:bb:52:dd:bf:d9:4c:54:67:27:ca:
         e8:fa:01:0f:95:7e:a7:60:3c:2f:cd:71:8b:c4:5d:e1:c2:2d:
         bc:84:c8:d9:6b:d6:7e:a7:28:a5:1c:26:00:85:fa:8b:6e:65:
         0a:6e:64:d0:4d:6d:81:91:87:80:98:ce:e0:2f:13:68:f2:8f:
         46:96:37:3e:d6:bc:dc:4b:a7:36:df:ce:86:ce:ca:83:2c:47:
         e0:17:87:81:6a:a6:4a:9f:15:ae:91:7d:5a:f4:36:98:16:54:
         ce:84:af:81:c6:87:8e:51:f8:df:60:b3:a4:8d:86:c3:9c:15:
         07:1d:78:09:e8:3c:9c:a6:2a:74:49:d6:46:eb:bc:76:1b:83:
         72:59:c7:29:fd:62:7f:26:08:93:2c:0d:f2:73:0e:2f:16:dd:
         f9:82:65:85:d3:3c:b6:19:cc:75:7b:c9:1c:33:05:35:48:d1:
         84:8b:0c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 13:38:00 2026 by rpki-client