Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
File:                     aFlbmOTCezC6ozHOqscmF2fLkus.mft (raw, json)
Hash identifier:          Ltd4HOngTpZ2WabmjlF4Xma5lkk+xIRfum4Uoy0gqcY=
Subject key identifier:   29:01:C0:C5:23:B9:8D:ED:F0:9B:10:BB:92:80:02:99:02:FC:30:3B
Authority key identifier: 68:59:5B:98:E4:C2:7B:30:BA:A3:31:CE:AA:C7:26:17:67:CB:92:EB
Certificate issuer:       /CN=A9119AE2/serialNumber=68595B98E4C27B30BAA331CEAAC7261767CB92EB
Certificate serial:       0750
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
Manifest number:          073E
Signing time:             Tue 18 Aug 2026 22:14:03 +0000
Manifest this update:     Tue 18 Aug 2026 22:14:03 +0000
Manifest next update:     Tue 25 Aug 2026 22:14:03 +0000
Files and hashes:         1: aFlbmOTCezC6ozHOqscmF2fLkus.crl (hash: O/+BqYzfXUl7DD2zNLhK4sYtMw/3aIFv6EqfYsU7fTU=)
                          2: 8D20F290411811ECA0929516C4F9AE02.roa (hash: lTuyJowUFMLOryc9O4taTNUF2BOa8A0yjVaiNstsNbo=)
                          3: 8D23BDE287C611EB8C8DDB70C4F9AE02.roa (hash: SmluGT3rSA2/F6vzSy9ujUd/VTUfXc20Bw3w5gO2FCs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.crl
                          rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 22:14:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1872 (0x750)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119AE2, serialNumber=68595B98E4C27B30BAA331CEAAC7261767CB92EB
        Validity
            Not Before: Aug 18 22:14:03 2026 GMT
            Not After : Aug 25 22:14:03 2026 GMT
        Subject: CN=6a84d92b-4817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c3:fb:a5:a8:a8:e2:24:cf:f2:d9:c5:23:9e:
                    4c:5d:f0:af:fd:46:09:ea:fc:9c:2a:24:d2:3b:ee:
                    b9:3d:ff:c1:2f:a8:52:08:5d:2b:c3:64:d7:57:c3:
                    d1:f5:91:d2:f9:60:9d:b1:c1:bf:51:a9:3c:9b:cd:
                    46:41:f4:05:d9:0f:00:77:71:d1:0b:1b:b2:09:60:
                    a9:14:ca:6e:b8:67:0a:89:be:21:7d:34:5d:4f:06:
                    76:85:05:63:c0:4d:fb:63:1c:d1:a1:6e:c8:3a:3b:
                    29:be:1f:44:6d:6b:a0:00:0b:7c:3a:0b:82:7b:24:
                    34:5d:a8:40:7c:89:2f:9e:97:ab:f4:0f:03:ac:7e:
                    c2:7a:e8:2a:07:c8:5e:4a:5a:03:3a:0b:90:96:40:
                    6b:e2:66:b1:99:16:e3:36:6e:c7:4d:a1:47:7e:c3:
                    4b:3e:29:bd:18:31:4a:4d:90:b0:ca:66:ad:2d:8f:
                    f8:15:95:08:f3:97:ff:fc:be:22:80:ea:79:e3:8f:
                    13:df:49:6c:50:61:0e:b4:77:cb:45:46:97:08:a9:
                    b1:47:31:6e:a1:75:6c:fe:38:c8:19:ef:33:bc:da:
                    ab:77:3e:85:f1:6f:9a:31:d4:0a:54:1e:c3:07:67:
                    61:a9:82:97:9a:3d:9a:d3:9e:d3:2d:b7:49:92:20:
                    85:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:01:C0:C5:23:B9:8D:ED:F0:9B:10:BB:92:80:02:99:02:FC:30:3B
            X509v3 Authority Key Identifier:
                keyid:68:59:5B:98:E4:C2:7B:30:BA:A3:31:CE:AA:C7:26:17:67:CB:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:f6:34:ff:64:17:49:01:34:93:f4:47:df:36:43:d7:85:03:
         84:51:8e:42:79:6e:61:25:45:46:bf:f1:16:a6:d7:df:d2:19:
         88:25:f7:e3:fe:da:a1:8e:86:4b:7c:75:9b:c4:0a:81:a5:c2:
         67:19:76:75:b5:2b:a2:40:88:cc:f6:14:45:a3:fc:22:7e:97:
         a7:3a:09:0f:de:5a:65:08:21:28:ac:5a:d2:fb:96:2f:ec:ff:
         ee:33:0d:ce:ca:41:65:a1:fe:bb:06:eb:1c:5a:ae:ff:38:a0:
         45:4f:22:11:55:cd:69:6e:de:2c:0d:8b:4a:81:3f:a8:0d:6d:
         95:74:f8:7b:8f:ab:09:c4:f0:b2:15:28:07:10:3f:fa:8e:75:
         53:33:4c:60:ea:fd:60:c9:d7:d9:85:89:67:97:0d:c0:56:fe:
         f8:59:9b:07:ac:a4:07:73:db:37:31:a8:a8:5d:25:b2:e7:e5:
         2f:69:c4:08:71:f0:7b:c3:a5:40:2d:81:bb:fc:9a:ac:ff:ab:
         9c:58:f0:64:bb:51:6c:34:cb:d5:8d:50:89:cc:31:75:f7:f6:
         d5:05:26:ec:14:4b:72:14:39:29:81:ef:b7:87:15:53:ad:df:
         d4:41:ce:61:b1:ae:0b:37:2f:f9:e3:3a:2a:3f:ff:97:f7:12:
         db:e3:f1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:43:47 2026 by rpki-client