Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112762/5156C54C3CA311F1A2F83546AB833773/KozvQUIwYkfgXyYUwTFpXx7uChM.mft
File:                     KozvQUIwYkfgXyYUwTFpXx7uChM.mft (raw, json)
Hash identifier:          mppHb0Z7TQQHxrM7dloXhm72qlvSpfERYedO9m5P82s=
Subject key identifier:   F7:85:7B:42:5E:4E:61:C1:F5:2C:00:31:FD:F1:A7:A1:7E:44:C4:89
Authority key identifier: 2A:8C:EF:41:42:30:62:47:E0:5F:26:14:C1:31:69:5F:1E:EE:0A:13
Certificate issuer:       /CN=A9112762/serialNumber=2A8CEF4142306247E05F2614C131695F1EEE0A13
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KozvQUIwYkfgXyYUwTFpXx7uChM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112762/5156C54C3CA311F1A2F83546AB833773/KozvQUIwYkfgXyYUwTFpXx7uChM.mft
Manifest number:          3E
Signing time:             Wed 19 Aug 2026 09:11:50 +0000
Manifest this update:     Wed 19 Aug 2026 09:11:50 +0000
Manifest next update:     Wed 26 Aug 2026 09:11:50 +0000
Files and hashes:         1: KozvQUIwYkfgXyYUwTFpXx7uChM.crl (hash: cU6PzHCjJ4K6YEDLSPI4UOM0wo04K4jmxLo01w742gg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112762/5156C54C3CA311F1A2F83546AB833773/KozvQUIwYkfgXyYUwTFpXx7uChM.crl
                          rsync://rpki.apnic.net/member_repository/A9112762/5156C54C3CA311F1A2F83546AB833773/KozvQUIwYkfgXyYUwTFpXx7uChM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KozvQUIwYkfgXyYUwTFpXx7uChM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112762, serialNumber=2A8CEF4142306247E05F2614C131695F1EEE0A13
        Validity
            Not Before: Aug 19 09:11:50 2026 GMT
            Not After : Aug 26 09:11:50 2026 GMT
        Subject: CN=6a857356-aca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c1:52:9e:59:4b:41:2a:52:7b:72:f0:03:db:
                    ed:10:cb:70:c9:62:5a:58:39:a3:de:93:fd:bb:1c:
                    68:22:93:2e:5d:84:0f:ad:d3:06:a0:cb:c8:e4:ca:
                    3e:0b:c0:5a:ca:e5:bc:41:f6:82:a9:e1:33:60:aa:
                    30:8b:83:30:7f:f8:5a:7a:e2:10:da:6e:db:ad:99:
                    6f:90:18:9a:32:59:65:9c:1f:da:1e:3a:8c:53:c1:
                    ba:d6:e4:81:43:14:9c:ac:39:cc:b1:3f:69:aa:33:
                    bc:9e:38:e3:ce:7a:c7:bc:ab:0f:26:12:d4:8b:cd:
                    ba:a6:35:c0:5e:62:35:4e:af:32:a8:7f:70:29:4f:
                    50:93:d0:32:4f:59:8f:c4:ec:9c:dd:95:22:42:e5:
                    41:1c:3c:e8:31:cf:68:08:36:0a:46:d9:c2:c1:e3:
                    14:ce:b6:52:25:17:fe:d4:68:83:df:7d:02:52:a2:
                    71:02:5c:cb:39:73:71:8e:b0:0e:95:6a:d8:e9:d6:
                    91:b2:a0:d3:42:51:d9:f1:c0:44:da:f4:54:cc:32:
                    94:70:b0:30:0a:b4:d5:d1:bc:b0:f3:81:4c:af:1e:
                    12:b3:7f:11:f1:4f:59:1d:f3:c0:55:99:21:13:6a:
                    d9:80:45:c3:65:19:5b:92:59:df:ec:43:6c:fb:fe:
                    ed:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:85:7B:42:5E:4E:61:C1:F5:2C:00:31:FD:F1:A7:A1:7E:44:C4:89
            X509v3 Authority Key Identifier:
                keyid:2A:8C:EF:41:42:30:62:47:E0:5F:26:14:C1:31:69:5F:1E:EE:0A:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112762/5156C54C3CA311F1A2F83546AB833773/KozvQUIwYkfgXyYUwTFpXx7uChM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KozvQUIwYkfgXyYUwTFpXx7uChM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112762/5156C54C3CA311F1A2F83546AB833773/KozvQUIwYkfgXyYUwTFpXx7uChM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f4:9b:94:d6:e8:41:76:ba:8c:fb:d3:08:11:59:5f:de:08:
         0d:73:23:e3:46:ea:40:9a:22:80:ba:21:01:5d:79:57:e8:ce:
         f6:c4:5a:12:41:2e:e1:58:24:5c:a9:c2:a2:2c:bb:ea:23:64:
         80:39:a3:5e:f5:02:fd:c9:76:30:08:e4:13:50:87:3f:e7:d7:
         82:fa:5f:c9:4e:44:cd:42:ae:ce:6c:0f:9c:13:7f:c9:84:2f:
         99:01:d5:95:83:f5:5e:2d:3a:ff:66:1c:f7:80:b4:55:db:66:
         91:7a:21:64:55:55:79:37:6b:8a:91:0f:60:d2:1a:8e:bd:0a:
         dc:8f:a9:e2:40:64:cb:dc:05:d7:db:31:75:de:37:9c:bf:bc:
         1d:16:05:29:01:f6:68:12:e9:a6:0d:4d:6a:c9:65:aa:75:5b:
         54:e2:bf:8a:3d:ef:05:1d:71:63:7a:59:3c:ba:f2:b2:3e:83:
         7f:af:15:67:67:7e:ca:2f:da:08:3a:4f:6d:2d:6c:bb:e4:87:
         12:24:3c:e2:91:7f:6c:38:74:fa:41:5d:55:0b:c5:9b:10:c0:
         00:9a:d9:7c:04:d9:a6:82:d5:7b:e9:1d:39:c1:e9:7b:37:81:
         4b:de:13:0e:90:a0:ef:ea:9b:b1:87:62:5a:19:bc:d8:f2:35:
         5b:87:59:59
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
Mjc2MjExMC8GA1UEBRMoMkE4Q0VGNDE0MjMwNjI0N0UwNUYyNjE0QzEzMTY5NUYx
RUVFMEExMzAeFw0yNjA4MTkwOTExNTBaFw0yNjA4MjYwOTExNTBaMBgxFjAUBgNV
BAMTDTZhODU3MzU2LWFjYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCLwVKeWUtBKlJ7cvAD2+0Qy3DJYlpYOaPek/27HGgiky5dhA+t0wagy8jkyj4L
wFrK5bxB9oKp4TNgqjCLgzB/+Fp64hDabtutmW+QGJoyWWWcH9oeOoxTwbrW5IFD
FJysOcyxP2mqM7yeOOPOese8qw8mEtSLzbqmNcBeYjVOrzKof3ApT1CT0DJPWY/E
7JzdlSJC5UEcPOgxz2gINgpG2cLB4xTOtlIlF/7UaIPffQJSonECXMs5c3GOsA6V
atjp1pGyoNNCUdnxwETa9FTMMpRwsDAKtNXRvLDzgUyvHhKzfxHxT1kd88BVmSET
atmARcNlGVuSWd/sQ2z7/u3tAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU94V7Ql5O
YcH1LAAx/fGnoX5ExIkwHwYDVR0jBBgwFoAUKozvQUIwYkfgXyYUwTFpXx7uChMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyNzYyLzUxNTZDNTRDM0NB
MzExRjFBMkY4MzU0NkFCODMzNzczL0tvenZRVUl3WWtmZ1h5WVV3VEZwWHg3dUNo
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvS296dlFVSXdZa2ZnWHlZVXdURnBYeDd1Q2hNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy
NzYyLzUxNTZDNTRDM0NBMzExRjFBMkY4MzU0NkFCODMzNzczL0tvenZRVUl3WWtm
Z1h5WVV3VEZwWHg3dUNoTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB29JuU1uhBdrqM+9MIEVlf3ggNcyPjRupAmiKAuiEBXXlX6M72xFoSQS7hWCRc
qcKiLLvqI2SAOaNe9QL9yXYwCOQTUIc/59eC+l/JTkTNQq7ObA+cE3/JhC+ZAdWV
g/VeLTr/Zhz3gLRV22aReiFkVVV5N2uKkQ9g0hqOvQrcj6niQGTL3AXX2zF13jec
v7wdFgUpAfZoEummDU1qyWWqdVtU4r+KPe8FHXFjelk8uvKyPoN/rxVnZ37KL9oI
Ok9tLWy75IcSJDzikX9sOHT6QV1VC8WbEMAAmtl8BNmmgtV76R05wel7N4FL3hMO
kKDv6puxh2JaGbzY8jVbh1lZ
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:07 2026 by rpki-client