Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft
File:                     G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft (raw, json)
Hash identifier:          ppfq/N+8I0x/QzL8VvFtXHCvcQtY10dqfFe9sMtLcyE=
Subject key identifier:   BA:2A:7F:DA:A6:B2:A6:13:CA:6D:51:74:DC:CC:4E:75:29:5A:6C:71
Authority key identifier: 1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90
Certificate issuer:       /CN=A9110A69/serialNumber=1B6E3292C835654E491492E5584CF993F05BD990
Certificate serial:       0CA2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft
Manifest number:          0C99
Signing time:             Tue 18 Aug 2026 18:52:23 +0000
Manifest this update:     Tue 18 Aug 2026 18:52:22 +0000
Manifest next update:     Tue 25 Aug 2026 18:52:22 +0000
Files and hashes:         1: G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl (hash: zy6Q2ao+EqrdbzADct47N8m4z93993Wwed+6nTKbmfA=)
                          2: 1407117C216311EA90D74C52C4F9AE02.roa (hash: rmYnuMOnsWqJ1EMxIYJ3/6l6BUhvQSL5XzWmFrIJCBU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl
                          rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:52:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3234 (0xca2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110A69, serialNumber=1B6E3292C835654E491492E5584CF993F05BD990
        Validity
            Not Before: Aug 18 18:52:22 2026 GMT
            Not After : Aug 25 18:52:22 2026 GMT
        Subject: CN=6a84a9e7-0486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:93:c6:91:1b:fb:39:db:37:e4:8f:02:42:03:
                    29:46:59:44:b8:27:cf:2d:88:33:2f:02:97:d6:77:
                    82:1a:82:79:6c:6e:52:3b:2f:1a:86:4b:8c:0d:19:
                    ba:61:fe:ea:e5:d2:50:14:37:7d:e9:42:0a:b3:33:
                    9f:b3:d3:8e:11:81:54:f7:5d:8e:ff:ec:e9:a7:df:
                    38:eb:06:c6:6e:80:bc:57:da:b4:f2:f2:94:53:5a:
                    93:2b:4a:dc:9d:c1:f3:0e:b4:c8:83:27:aa:2d:6d:
                    0c:9f:94:36:0b:56:2d:2e:57:c7:90:23:05:3c:75:
                    58:0d:03:80:00:99:91:c5:cc:99:60:cf:16:bc:05:
                    26:a6:98:93:53:9a:20:d2:48:c5:3a:44:8e:22:10:
                    2a:67:b2:39:ab:12:01:44:16:c4:59:f0:b5:91:e8:
                    45:a0:0f:a5:01:17:9d:8a:2d:8f:f8:12:8a:c4:f9:
                    ed:17:83:f3:58:ed:34:83:c2:6c:1f:6d:cc:77:4b:
                    81:ad:71:ff:73:74:24:e2:90:a8:f8:76:1b:bd:08:
                    98:00:d1:1b:91:87:9c:99:f1:4f:6c:df:67:b7:fb:
                    3f:4a:c5:6a:69:2e:df:59:d5:5d:62:c0:d6:7b:5f:
                    43:b5:e4:ac:57:35:fd:ad:17:10:f1:dd:8a:02:a0:
                    93:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2A:7F:DA:A6:B2:A6:13:CA:6D:51:74:DC:CC:4E:75:29:5A:6C:71
            X509v3 Authority Key Identifier:
                keyid:1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:d6:1f:6c:18:4f:2b:50:d7:7d:d0:02:9d:4b:24:b5:21:19:
         ed:4b:e3:1c:1e:00:95:0f:7b:78:a6:9f:a8:08:ef:bb:7c:77:
         7c:53:60:1a:d2:ea:8e:d3:24:99:6b:ff:d4:33:8e:eb:20:17:
         cb:ca:43:cf:4b:2e:f4:0c:d6:99:3f:34:de:8e:d3:6c:d8:a9:
         d7:3e:3b:9c:1d:68:20:54:0d:8b:19:f8:e8:75:3a:44:a1:c5:
         40:a5:9e:a9:22:48:0f:88:04:f8:ff:5a:0d:51:63:0a:42:99:
         f5:72:26:d2:7f:13:b6:77:97:55:87:e1:d9:33:e1:4a:fc:4c:
         b9:21:ac:f6:9e:0c:47:01:bc:93:fe:79:74:4f:82:c1:e8:1b:
         3a:80:2a:44:cc:45:60:9c:1b:e1:7f:3a:d5:2c:3a:06:9b:c7:
         9f:b8:8c:14:1c:82:69:f9:61:1c:a1:bc:9f:7a:7f:82:d3:cd:
         b3:bf:97:3b:19:cc:46:0d:16:61:19:a2:7e:ab:3e:22:d4:f3:
         32:3c:cc:59:b6:8b:ac:3d:3a:a6:1a:73:dd:83:80:98:31:c8:
         b5:c6:88:fc:d9:26:dd:1d:2c:88:62:22:75:08:46:be:5e:38:
         9b:e1:67:dc:93:9b:d8:df:8b:57:85:26:c4:63:90:2d:7d:9d:
         d6:db:04:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:02 2026 by rpki-client