Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft
File:                     thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft (raw, json)
Hash identifier:          79k8DRXteaLQXNzlFb9EwqvzNsNHTIdyzLfjrfnSSA0=
Subject key identifier:   A2:3B:0F:F6:F5:5E:BA:AE:53:1B:BE:01:4F:89:5C:AD:66:71:93:C7
Authority key identifier: B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95
Certificate issuer:       /CN=A9118B32/serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995
Certificate serial:       048B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft
Manifest number:          0483
Signing time:             Wed 19 Aug 2026 00:24:42 +0000
Manifest this update:     Wed 19 Aug 2026 00:24:41 +0000
Manifest next update:     Wed 26 Aug 2026 00:24:41 +0000
Files and hashes:         1: thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl (hash: A+XfQnHcMpKcPb7hCAb2xIBVGHzHFqElCthUBsOGNBY=)
                          2: 0F291AFE9D2811EC83448E6FC4F9AE02.roa (hash: u6yx2TVGgoUMskQa1Rs/+SjZrQbYdcLPC2mmciXAt68=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl
                          rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:24:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1163 (0x48b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118B32, serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995
        Validity
            Not Before: Aug 19 00:24:41 2026 GMT
            Not After : Aug 26 00:24:41 2026 GMT
        Subject: CN=6a84f7c9-e9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:76:ee:be:f0:cb:01:d3:81:ed:0a:e8:0d:d6:
                    df:ed:99:e5:0b:25:08:1a:d3:3f:58:62:99:af:fe:
                    31:2d:91:30:35:b3:50:dd:66:b0:b4:0a:70:58:6d:
                    e7:23:79:72:99:e7:5e:e0:eb:37:87:06:43:d9:b3:
                    d2:0b:65:3f:08:c9:89:c9:18:b5:9e:1a:4b:a1:be:
                    26:7d:2b:72:34:69:0c:25:ca:1e:53:e7:e8:aa:84:
                    f3:ab:0b:1e:cd:0d:10:57:58:94:50:76:3d:1b:6a:
                    9e:59:26:0e:9d:f8:4f:fb:b0:ed:4b:9a:3e:d3:26:
                    d8:78:41:3a:b4:cf:d1:d0:f6:52:27:43:c5:04:db:
                    51:5b:0d:f5:af:67:94:f8:00:2b:0b:f7:b3:09:9c:
                    e0:64:fc:2b:fb:64:f1:59:8a:fe:5b:4d:66:a7:0e:
                    50:7d:dc:5c:09:1c:6f:96:f5:9a:7c:4d:bc:cc:5c:
                    5e:c7:e9:04:f1:c6:81:06:fa:b1:8b:fc:a2:83:fd:
                    e4:58:78:1d:5f:6e:93:ce:bc:6e:35:76:3e:b5:b6:
                    20:ae:76:9b:a8:53:6a:19:19:fa:10:6c:39:f2:b2:
                    df:26:03:6c:50:4d:83:42:c2:e1:50:a4:67:e6:fe:
                    4c:07:75:65:c9:63:82:28:98:75:d2:27:67:ac:da:
                    9c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3B:0F:F6:F5:5E:BA:AE:53:1B:BE:01:4F:89:5C:AD:66:71:93:C7
            X509v3 Authority Key Identifier:
                keyid:B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d4:81:ba:d3:78:25:25:eb:6a:ae:db:3a:60:69:11:0f:91:
         d2:71:b0:11:c3:1a:d5:60:c4:9e:c9:d4:7e:53:24:20:6f:16:
         39:92:93:6b:4a:66:86:5b:43:2d:fe:c3:38:08:82:13:27:5b:
         d5:2d:0f:dc:6b:d5:70:7c:e9:b2:cd:16:5f:7b:94:e8:c6:d4:
         d6:a1:35:64:77:85:79:a4:c4:ca:38:70:c4:58:ac:56:3c:41:
         e6:d8:d6:9b:5b:a2:a2:15:01:7b:a8:cf:a0:22:fb:c7:89:c6:
         f1:77:83:19:44:e3:a8:58:73:c1:da:c7:f8:15:c8:ee:d6:1b:
         12:5d:cf:1f:c1:30:b6:0b:52:cc:d1:df:1e:2e:2a:b1:cd:37:
         f1:d9:be:51:f6:a4:93:7e:dc:2f:dd:9f:e0:1b:30:e7:b6:85:
         41:ea:7a:88:2d:c4:db:d7:ae:46:18:e6:48:68:36:50:f6:bc:
         7a:99:f5:d9:b9:cb:c1:1f:30:37:9a:69:af:c7:8a:3f:37:a0:
         da:29:48:9d:7a:b4:e9:7c:ff:df:8f:01:d2:6a:b0:bc:db:b4:
         30:9f:44:3e:c3:e6:57:fd:7b:35:43:1b:6b:7a:00:30:e0:bb:
         a7:6b:38:2f:34:4c:4c:69:5e:3e:90:0f:23:86:b5:b7:94:66:
         70:41:44:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:49:18 2026 by rpki-client