Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft
File:                     sCOWweSXbcJLufJA9c5Vbtgn-is.mft (raw, json)
Hash identifier:          IeAw7z0kasCggYsly2z5qtQavWSnwlz9AtlIJlXj45A=
Subject key identifier:   72:10:4D:7F:82:C3:17:FA:EC:67:B9:0F:8C:A0:3A:D5:D1:8F:45:71
Authority key identifier: B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B
Certificate issuer:       /CN=A91124CD/serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B
Certificate serial:       01CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft
Manifest number:          01C8
Signing time:             Wed 19 Aug 2026 04:21:55 +0000
Manifest this update:     Wed 19 Aug 2026 04:21:54 +0000
Manifest next update:     Wed 26 Aug 2026 04:21:54 +0000
Files and hashes:         1: sCOWweSXbcJLufJA9c5Vbtgn-is.crl (hash: cSLu0VXdLqViR5RTMJFlUezfdYdSAHriraMvlzByA/Y=)
                          2: CC6220C0E02E11EEBA9D291AC4F9AE02.roa (hash: XGT7f3N6d7VyR5B4Z12+X5V0xJRoN3FoBvQSpbBJPeI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl
                          rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 04:21:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462 (0x1ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91124CD, serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B
        Validity
            Not Before: Aug 19 04:21:54 2026 GMT
            Not After : Aug 26 04:21:54 2026 GMT
        Subject: CN=6a852f63-03a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:24:57:2c:18:bf:c1:56:a6:64:92:4c:af:63:
                    d1:53:f3:0f:f2:b9:00:52:79:4d:ee:8f:53:88:2e:
                    53:4d:0e:9f:14:be:cf:a7:56:aa:94:43:6a:b1:be:
                    da:dd:8e:f7:ce:4b:db:2d:a3:34:a6:43:63:33:0a:
                    23:35:16:64:75:ca:41:66:2b:cf:94:d1:6c:06:70:
                    d6:fe:96:6f:77:a6:65:fe:80:49:33:12:76:6f:e0:
                    45:3b:fc:81:98:e4:db:25:41:54:76:ac:27:97:cd:
                    89:60:dd:af:7e:b3:2a:6c:90:91:5a:0d:aa:5b:c0:
                    dd:34:ba:f3:32:f5:96:df:2d:6a:03:7d:a7:c7:c5:
                    4c:97:26:07:a8:d8:46:74:40:b6:a8:72:ad:2e:98:
                    dd:39:88:23:ba:00:1e:6a:81:8d:5f:dd:51:78:aa:
                    0f:8a:e1:42:c6:20:7c:c4:dc:2f:41:49:ad:b5:d4:
                    41:2d:f7:5c:04:c5:13:19:5a:23:6c:a9:35:b3:43:
                    73:20:e7:2b:14:73:68:7b:cf:68:43:c5:79:16:a8:
                    6d:b6:80:21:ea:71:99:82:39:c7:1e:ee:5b:19:02:
                    78:f3:95:3a:e0:5c:46:f6:d2:2a:01:08:79:e1:7a:
                    21:3c:52:3c:64:3f:9e:f2:18:30:7e:97:5d:60:70:
                    92:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:10:4D:7F:82:C3:17:FA:EC:67:B9:0F:8C:A0:3A:D5:D1:8F:45:71
            X509v3 Authority Key Identifier:
                keyid:B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:74:1e:74:87:08:5d:b8:4b:93:b7:4b:b1:a2:52:34:5a:e7:
         b7:59:35:33:f9:ba:b1:9e:0b:fd:71:27:5e:13:84:d9:86:f0:
         e4:26:67:44:09:6a:7b:d8:15:b5:aa:3e:5c:42:af:ef:3d:bc:
         90:f0:af:05:7e:fb:ce:6e:fa:94:a4:83:5f:1e:60:f5:ee:7b:
         05:3a:c9:3b:c1:7d:46:3a:b8:32:86:3c:80:a7:c1:f8:d2:16:
         f8:26:37:72:93:ed:c4:78:ca:73:10:fc:14:47:b0:95:b3:4e:
         1b:48:4f:7f:7d:60:83:e3:39:b2:59:81:f8:a4:d6:d8:de:e6:
         7a:73:97:d5:d0:6c:eb:51:44:bd:0c:be:ea:28:68:1e:11:ef:
         5e:a7:ef:18:d7:93:db:ec:26:44:ae:b0:24:cc:de:9f:e3:dd:
         9f:53:9e:3f:1f:3a:6f:d1:b1:85:0d:2c:de:8e:1a:26:35:c1:
         5a:19:c3:cf:ee:be:fe:ff:4b:f5:d4:9a:8f:54:bb:20:5d:a6:
         9f:92:6c:65:db:06:4b:65:af:4b:a7:ac:8d:41:b6:4d:69:dc:
         e5:81:83:de:f2:46:71:2b:64:09:a1:3b:5e:3a:a2:ca:2d:f3:
         71:2e:3b:8f:16:85:fc:4c:50:8f:de:70:9d:52:37:1a:3d:2b:
         fc:3b:13:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:23 2026 by rpki-client