Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
File:                     30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft (raw, json)
Hash identifier:          QHg+EnRQ8rhsqW2/05zyQpDnvWCTQB0gbcKSnFzTYK0=
Subject key identifier:   BD:87:8C:D7:AF:27:3E:A2:BA:84:C1:AA:0F:15:A0:7A:3B:96:5A:06
Authority key identifier: DF:40:69:F2:46:E9:FE:A9:7B:0A:BE:3A:5F:EC:77:8E:53:93:17:93
Certificate issuer:       /CN=A9118479/serialNumber=DF4069F246E9FEA97B0ABE3A5FEC778E53931793
Certificate serial:       3570
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
Manifest number:          3570
Signing time:             Tue 18 Aug 2026 15:02:29 +0000
Manifest this update:     Tue 18 Aug 2026 15:02:28 +0000
Manifest next update:     Tue 25 Aug 2026 15:02:28 +0000
Files and hashes:         1: 30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl (hash: lbfTQCF4OxIauV/Uay6Jor5Cpz1LoyjKWsYpx/NWj2s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl
                          rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 15:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13680 (0x3570)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118479, serialNumber=DF4069F246E9FEA97B0ABE3A5FEC778E53931793
        Validity
            Not Before: Aug 18 15:02:28 2026 GMT
            Not After : Aug 25 15:02:28 2026 GMT
        Subject: CN=6a847405-3f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4d:16:4d:10:66:06:ac:be:80:00:16:b6:d6:
                    68:e4:e5:69:d1:35:c3:29:a3:3f:43:6a:a4:06:78:
                    04:ad:35:e1:1c:a7:ee:e7:fa:49:96:00:95:3c:b9:
                    74:2d:17:85:5c:3f:51:18:6d:2a:4e:93:f9:2d:48:
                    37:7d:10:9f:44:72:39:80:f5:70:d9:a1:65:6b:33:
                    be:d6:08:27:01:bc:15:16:86:50:68:0c:32:1a:4e:
                    db:bf:d3:d9:19:68:3a:92:8c:2d:1e:0f:a0:d9:f1:
                    d7:ff:20:a8:95:f2:d3:1e:02:e0:8d:c1:61:7f:2d:
                    49:68:ce:c5:63:72:94:0b:98:a5:7e:41:8f:8c:38:
                    0a:b1:46:d4:a5:24:ae:c7:b9:39:76:ce:75:55:ca:
                    fc:6b:91:74:9a:16:fb:d1:b0:73:56:c7:d0:0f:bb:
                    45:2e:b9:27:a4:af:80:fb:af:d2:bb:c2:25:f6:4a:
                    e1:1d:c5:0c:2b:eb:b1:25:b0:ea:20:8f:e1:4a:29:
                    4a:8d:42:7a:07:ca:f8:01:03:ca:d4:6b:6c:6e:4e:
                    d7:a3:81:ed:f3:63:7b:f8:27:d4:94:f3:ba:1f:82:
                    53:2b:fe:c8:78:ff:42:a9:74:8b:b9:01:58:f7:5e:
                    dc:5d:91:8e:a6:92:b2:e6:b8:6e:be:85:45:0b:65:
                    eb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:87:8C:D7:AF:27:3E:A2:BA:84:C1:AA:0F:15:A0:7A:3B:96:5A:06
            X509v3 Authority Key Identifier:
                keyid:DF:40:69:F2:46:E9:FE:A9:7B:0A:BE:3A:5F:EC:77:8E:53:93:17:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:92:7e:0a:9e:72:c1:6e:7d:6f:92:98:08:f6:80:87:68:f6:
         f0:73:fc:9c:a1:12:9e:b9:89:9a:d7:d0:0b:b6:ac:ac:9f:3e:
         ca:6a:d2:08:33:e3:e1:88:4b:58:44:49:f5:e6:dc:cf:b6:81:
         5f:48:1a:d9:b5:0e:9b:42:f4:7a:b1:ca:4e:71:e3:c1:f4:0f:
         69:4d:06:cf:24:66:59:5b:4c:fc:00:7a:7e:6c:a0:4b:0d:b3:
         97:53:fb:a8:3c:48:2d:45:ad:f8:60:61:14:af:91:e0:f3:e7:
         1f:d0:42:a9:30:21:fb:b7:3d:06:e2:93:49:a8:df:b8:e4:a1:
         ea:f2:bc:69:23:47:e2:33:d6:8f:03:16:1e:bd:17:c6:83:c2:
         31:5d:75:be:bf:ed:71:bb:b3:72:ce:91:85:4c:70:cf:f5:cc:
         82:bd:6c:29:c0:28:63:60:53:a3:b3:97:0c:b8:e7:69:58:5c:
         77:ac:21:d4:22:be:64:ee:e2:ed:71:9e:c2:72:c7:1c:11:c4:
         83:5d:c2:d5:ea:3b:42:ce:5d:ad:6a:e2:f7:e6:b7:bf:5b:55:
         a7:61:90:26:a3:c7:3d:e1:4d:b5:87:1e:92:57:69:cc:55:a0:
         6c:f5:56:94:ca:f9:44:ff:c2:0d:91:b2:3d:c7:7c:46:ee:63:
         84:74:78:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:56 2026 by rpki-client