Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118A92/872E7EBE608C11F19AE295F36F47A888/pThhh8LmHJfmRGCcsqc3tTA4jXo.mft
File:                     pThhh8LmHJfmRGCcsqc3tTA4jXo.mft (raw, json)
Hash identifier:          e5J6IFOU+TvEG3Zv/UhHtbe6Z8LtozBYze3QXqJZ6zY=
Subject key identifier:   4B:4A:E6:A4:85:EC:37:75:75:25:58:EA:39:30:55:CC:A5:80:EE:6B
Authority key identifier: A5:38:61:87:C2:E6:1C:97:E6:44:60:9C:B2:A7:37:B5:30:38:8D:7A
Certificate issuer:       /CN=A9118A92/serialNumber=A5386187C2E61C97E644609CB2A737B530388D7A
Certificate serial:       2B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pThhh8LmHJfmRGCcsqc3tTA4jXo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118A92/872E7EBE608C11F19AE295F36F47A888/pThhh8LmHJfmRGCcsqc3tTA4jXo.mft
Manifest number:          29
Signing time:             Wed 19 Aug 2026 09:31:58 +0000
Manifest this update:     Wed 19 Aug 2026 09:31:58 +0000
Manifest next update:     Wed 26 Aug 2026 09:31:58 +0000
Files and hashes:         1: pThhh8LmHJfmRGCcsqc3tTA4jXo.crl (hash: kFv7VQEJn2YQZWCNXfqBWvbELcoxQ/odp8YMDGdnWfk=)
                          2: 15E32A7E624F11F19BDACA0A7F47A888.roa (hash: f+BLQcaOqMt4rYqZW7bp/2oqh0zJPb7OZ8Oeu/bHU0E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118A92/872E7EBE608C11F19AE295F36F47A888/pThhh8LmHJfmRGCcsqc3tTA4jXo.crl
                          rsync://rpki.apnic.net/member_repository/A9118A92/872E7EBE608C11F19AE295F36F47A888/pThhh8LmHJfmRGCcsqc3tTA4jXo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pThhh8LmHJfmRGCcsqc3tTA4jXo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118A92, serialNumber=A5386187C2E61C97E644609CB2A737B530388D7A
        Validity
            Not Before: Aug 19 09:31:58 2026 GMT
            Not After : Aug 26 09:31:58 2026 GMT
        Subject: CN=6a85780e-2373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3e:a3:d1:6b:04:6b:9c:fd:ab:c6:d7:b5:e0:
                    76:0e:bb:7d:0d:05:d3:92:54:e7:3f:85:23:1f:b7:
                    d2:7b:7b:2a:bc:da:eb:75:51:45:e1:3c:19:8c:db:
                    d2:2b:77:bd:61:cd:42:48:d3:f4:ae:ba:61:d8:be:
                    dc:fb:7b:86:40:a4:3b:4c:6f:47:0c:72:44:85:c5:
                    e3:e4:69:6a:6f:cc:af:44:5a:cf:bb:17:b8:fa:7a:
                    da:fc:d8:ad:f0:eb:39:d1:28:ea:00:62:86:0c:83:
                    db:8f:52:2a:4e:b4:03:31:df:4e:6a:92:72:43:35:
                    55:e2:af:86:57:bf:e6:8e:6d:26:e5:10:b6:5e:63:
                    f2:28:65:5d:3c:c4:f4:3c:d8:94:51:39:bf:34:f5:
                    5e:21:9b:18:db:16:00:ae:8e:c5:fe:8d:da:61:f0:
                    aa:81:29:9f:50:2a:03:32:6c:6b:cb:df:1b:42:35:
                    bd:60:7f:2f:59:de:36:7f:d5:e9:25:f9:72:27:e0:
                    b8:95:dd:db:cb:97:9e:5d:ee:78:8a:ed:2d:d9:34:
                    19:d5:d9:f3:7e:b2:b1:ce:b9:a3:86:70:2a:3e:a2:
                    d9:9a:35:ef:0f:3a:cf:ba:f7:36:e0:1c:f9:14:3b:
                    3c:6c:2f:84:46:93:67:4c:59:b4:f2:d8:54:21:24:
                    4e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4A:E6:A4:85:EC:37:75:75:25:58:EA:39:30:55:CC:A5:80:EE:6B
            X509v3 Authority Key Identifier:
                keyid:A5:38:61:87:C2:E6:1C:97:E6:44:60:9C:B2:A7:37:B5:30:38:8D:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118A92/872E7EBE608C11F19AE295F36F47A888/pThhh8LmHJfmRGCcsqc3tTA4jXo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pThhh8LmHJfmRGCcsqc3tTA4jXo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118A92/872E7EBE608C11F19AE295F36F47A888/pThhh8LmHJfmRGCcsqc3tTA4jXo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:ab:43:6d:ce:c4:46:7c:b2:a0:a3:07:7d:f7:84:67:63:f8:
         82:45:8d:bd:1e:d7:2c:d7:61:4e:18:5c:32:01:50:8c:62:7a:
         99:f2:5e:09:e8:4e:ef:b1:de:b5:c2:68:ce:cb:fb:3b:13:48:
         40:2f:60:fe:31:66:a8:ab:6e:3f:23:35:ce:e1:5d:91:90:fc:
         a9:f1:77:33:d7:6a:87:53:ec:db:4f:64:6c:b4:a4:15:be:29:
         4b:47:2d:c7:6b:80:18:1c:d7:53:76:3e:14:14:88:a5:cd:cb:
         c8:35:30:f5:6a:fa:64:65:a1:6b:02:81:8b:84:97:cb:f2:aa:
         dd:57:d3:6a:71:48:0a:03:24:16:7e:5d:7c:52:ad:29:09:c9:
         8a:20:59:84:73:6a:6d:4d:3c:69:2f:75:2c:82:3d:eb:b9:bc:
         3b:fd:b2:23:7a:e7:f8:9d:64:2a:35:71:d6:08:f0:eb:8e:1e:
         ab:fe:cd:6f:4f:91:bd:15:d0:5b:1a:f4:79:fa:34:38:9e:8e:
         25:21:ea:a7:dc:4a:29:65:e1:5f:3c:44:4d:8a:0e:ff:b6:9c:
         74:db:6b:99:55:80:e7:16:5c:dd:1e:01:1e:82:56:16:9f:32:
         ad:18:68:7a:6e:fa:db:dc:33:9b:b5:5d:3e:42:ab:ae:b6:3e:
         b3:7d:ce:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:04:31 2026 by rpki-client