Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft
File:                     4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft (raw, json)
Hash identifier:          9ck/DjdehS8zAdh9Mq6OFxh4vqPP7I3RCdzfF1TGVlQ=
Subject key identifier:   45:BA:B2:F6:99:DE:9D:05:04:B7:7A:96:17:1F:F2:52:42:E4:D6:A5
Authority key identifier: E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4
Certificate issuer:       /CN=A9112DEF/serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4
Certificate serial:       0470
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft
Manifest number:          0456
Signing time:             Wed 19 Aug 2026 00:35:35 +0000
Manifest this update:     Wed 19 Aug 2026 00:35:34 +0000
Manifest next update:     Wed 26 Aug 2026 00:35:34 +0000
Files and hashes:         1: 4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl (hash: EpvBEUbHKo2b02R2NsiK7b+tZE8hvM2W8c2W3CnErAw=)
                          2: AF8F74D07A5B11EFAD45A522C4F9AE02.roa (hash: kMCRekxFbFuJDcKccokrFI3YyojReTpoxASwa7o9XAs=)
                          3: 9D5E76267A5B11EFAB107D22C4F9AE02.roa (hash: sXzFdcB2zs92es9/hGK2HcYanncZGMY7hAT9tfHHwG4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl
                          rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1136 (0x470)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112DEF, serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4
        Validity
            Not Before: Aug 19 00:35:34 2026 GMT
            Not After : Aug 26 00:35:34 2026 GMT
        Subject: CN=6a84fa57-5c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b5:ad:7f:2c:de:fe:bf:68:8a:e4:ab:da:a8:
                    80:e0:0e:a8:12:d6:34:64:09:85:4f:5a:06:af:d1:
                    09:99:d7:b5:7a:83:f4:7d:b7:ef:e6:16:ea:da:9a:
                    bd:1b:8b:72:d2:ed:c2:63:5c:2d:2b:bd:18:1c:03:
                    16:d3:e7:d3:19:fb:25:47:fb:5a:a7:fe:2d:b7:49:
                    8b:06:58:4e:a5:34:12:b5:15:47:0a:c7:dc:f6:f0:
                    79:4d:f7:4c:29:45:3c:eb:7f:b4:a1:ab:15:64:38:
                    88:2d:41:9d:38:42:ab:3a:9e:2a:88:7c:a9:a9:8c:
                    d7:64:2d:30:27:90:85:90:f9:99:2f:cb:7e:64:de:
                    5d:9e:2d:c7:cc:33:9f:20:8e:b8:64:4a:6f:e9:54:
                    c1:47:e6:75:12:f7:fe:de:0e:5e:29:2c:3b:c2:a5:
                    0e:df:ea:0d:c2:53:e4:3d:58:a5:cc:6d:71:42:20:
                    47:7a:c6:70:75:35:0d:84:93:76:e7:0b:d1:ea:45:
                    81:8d:1d:14:a9:88:3d:39:ac:57:8a:0a:e1:4e:19:
                    e5:a0:c7:c7:8d:e6:8f:01:87:04:eb:b8:9a:f2:6f:
                    38:35:58:e3:2d:e0:5a:8d:77:9f:55:7d:f0:72:d6:
                    72:dc:e8:bb:cc:e7:cd:31:d7:01:4a:d3:c4:d3:ef:
                    bf:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BA:B2:F6:99:DE:9D:05:04:B7:7A:96:17:1F:F2:52:42:E4:D6:A5
            X509v3 Authority Key Identifier:
                keyid:E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:5e:9e:65:81:af:cc:2e:99:b9:1f:f2:8d:10:4c:4a:8a:92:
         9d:07:26:7f:aa:b9:c3:1b:59:8a:29:63:c8:98:2c:e3:79:7f:
         78:a8:c9:3a:4f:50:4e:2c:5e:73:1c:7b:42:66:fc:0e:bd:3b:
         05:b8:9d:f6:20:db:c4:65:db:fc:f3:05:d5:3c:ca:59:3f:49:
         5a:22:b2:d9:d1:d0:e5:45:2d:4e:13:f7:80:b2:81:33:10:60:
         99:35:50:82:cd:21:83:99:6c:8b:52:b2:ce:26:1e:e1:9a:88:
         a3:a7:99:4a:45:ce:c7:db:bb:43:9b:fb:99:5a:5b:2a:ad:25:
         9b:4b:2f:2d:64:10:af:70:31:a6:0f:c5:ba:32:7e:eb:0b:af:
         39:d7:34:71:cd:dd:4e:15:07:be:24:a2:a2:5d:77:7a:c9:dc:
         61:be:b1:e2:72:be:04:d9:44:b9:55:7f:32:df:35:4c:a2:24:
         09:50:a9:c8:2d:0c:72:19:9c:8a:10:c0:a7:31:fe:59:f1:45:
         eb:7f:89:c9:4c:87:aa:31:84:04:4d:4f:e7:89:53:91:dc:74:
         73:95:47:d1:f7:24:31:6d:b1:d7:07:a4:f3:03:27:8f:84:59:
         18:d6:f0:38:59:b3:37:16:0f:e8:7f:66:eb:ce:ee:6f:11:96:
         fa:27:b2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:02 2026 by rpki-client