Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
File:                     at4O10LYxa-hMzuQNYwGs_6HaIM.mft (raw, json)
Hash identifier:          zlQUNduJXH1LOEEEOd4UO5ofdbBmoJIyJ+oIYSA6AJU=
Subject key identifier:   85:95:D2:21:F0:46:B5:A0:E3:7F:B4:74:39:FF:22:CD:32:41:6B:ED
Authority key identifier: 6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83
Certificate issuer:       /CN=A911C356/serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883
Certificate serial:       0809
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
Manifest number:          07F6
Signing time:             Wed 26 Aug 2026 21:11:40 +0000
Manifest this update:     Wed 26 Aug 2026 21:11:39 +0000
Manifest next update:     Wed 02 Sep 2026 21:11:39 +0000
Files and hashes:         1: at4O10LYxa-hMzuQNYwGs_6HaIM.crl (hash: Ic6QZsb4pzFcBrppihsUWpH0WZJ9AIGQxyrq55XNV3Y=)
                          2: 68894B22402811EB91B49250C4F9AE02.roa (hash: liLPy91xdDc1pdMOxAhLDDGEhSWylfhoV6UNE1PovoQ=)
                          3: 86BED34677F011EB9E69B472C4F9AE02.roa (hash: z+ZRB0bBSa8oaRsVRAkD/aqR3zkYjW0hmksq+X5D7QA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl
                          rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 21:11:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2057 (0x809)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C356, serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883
        Validity
            Not Before: Aug 26 21:11:39 2026 GMT
            Not After : Sep  2 21:11:39 2026 GMT
        Subject: CN=6a8f568b-510e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:57:c8:cc:4f:9e:a1:15:d8:99:e9:44:8a:84:
                    56:84:88:1d:22:c2:67:8b:8f:3d:26:98:f4:67:c7:
                    e5:7d:70:5d:82:33:fc:b4:5b:84:5b:e2:4f:b4:57:
                    d4:85:d4:31:ef:b9:bd:8b:35:33:69:b5:ca:23:4e:
                    10:be:68:f5:13:9a:ff:fd:4d:50:12:03:10:6d:b8:
                    21:45:2f:3f:df:3f:7d:b3:2a:69:b9:08:68:03:d1:
                    42:fb:52:df:d9:a6:f5:a9:0c:81:94:49:07:71:71:
                    18:79:d0:5c:5e:e6:2e:37:ca:9e:dc:2a:bb:97:64:
                    cb:a6:bf:44:19:95:f0:ee:3a:26:1f:63:06:7f:24:
                    c7:61:fb:46:07:20:b6:f7:ca:db:62:9f:53:1f:89:
                    a8:dd:25:87:68:34:96:7d:53:8e:7b:b1:bc:b0:08:
                    2a:d0:aa:b9:5b:81:c7:ed:c3:fd:bc:d2:83:a6:43:
                    cf:c4:6c:28:14:4a:ae:31:43:e9:56:35:2b:bd:53:
                    1c:2e:47:13:70:34:77:c7:a8:44:af:0b:68:e6:79:
                    f3:2d:6b:54:9e:aa:2f:7b:b6:d0:ea:3d:83:2e:94:
                    8e:63:c6:23:2f:43:4f:9d:d7:e0:d6:8e:a9:78:99:
                    66:7b:44:06:e6:50:23:eb:53:b5:12:c8:6c:68:ed:
                    c2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:95:D2:21:F0:46:B5:A0:E3:7F:B4:74:39:FF:22:CD:32:41:6B:ED
            X509v3 Authority Key Identifier:
                keyid:6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:8d:b9:04:16:67:dc:f6:2b:58:c8:c2:27:44:99:96:c9:cb:
         7b:59:0e:80:c5:8b:45:72:72:2c:c8:bd:f2:07:14:21:45:c8:
         9f:53:d4:d6:a9:ff:cd:3d:d3:c1:fb:7b:88:5c:a4:0a:d3:ad:
         68:a4:9b:bc:93:71:5d:41:4f:05:d3:84:f1:cb:39:b7:4e:c2:
         af:21:1c:1e:1f:8a:c3:d3:5f:a1:07:33:64:e9:c5:2b:08:68:
         16:19:01:10:2d:12:64:48:22:39:3c:1e:43:6c:1d:2b:5d:fc:
         29:ee:3f:be:27:2b:d7:01:1c:24:8d:52:f2:42:1f:0d:78:4b:
         5a:00:e8:75:43:fa:c8:73:c7:ce:7e:fe:41:5f:ac:69:38:47:
         dc:eb:48:bb:7b:82:6c:f9:f5:5b:69:06:01:0c:22:f4:29:64:
         f0:6e:f5:0d:0b:b3:e7:0f:7c:b8:69:1b:72:d2:74:a0:1e:ac:
         5f:3b:7b:83:2e:7d:b7:af:78:11:e6:a1:11:f9:5d:e6:f3:0b:
         f3:f0:7b:9c:35:71:bb:1c:f3:8b:27:60:17:16:ad:a6:ac:a8:
         48:7d:ee:ad:80:e3:74:20:c0:c6:45:6c:ab:98:03:62:c6:17:
         7a:d9:e3:66:e8:03:23:8a:60:5a:bb:df:e7:6d:1c:58:4a:3f:
         2e:05:69:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 14:14:46 2026 by rpki-client