Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft
File:                     c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft (raw, json)
Hash identifier:          KiruiKKAadeceNfmoNJo7CdRpLuInrtDopUK6E+x6Cs=
Subject key identifier:   20:3F:57:65:27:37:7B:D9:13:4B:E9:9A:0D:69:82:D2:0E:D2:D3:C4
Authority key identifier: 73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03
Certificate issuer:       /CN=A911C3BB/serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403
Certificate serial:       029C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft
Manifest number:          0295
Signing time:             Wed 19 Aug 2026 02:13:57 +0000
Manifest this update:     Wed 19 Aug 2026 02:13:56 +0000
Manifest next update:     Wed 26 Aug 2026 02:13:56 +0000
Files and hashes:         1: c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl (hash: uAf1tb5Tqjp5E+mK60XRgG4wL2MyE5EO4mtk2rqYlH4=)
                          2: CB2788CAAB4C11EDB3DC7336C4F9AE02.roa (hash: GbmFJbbelNZSeQtz3x+IHWFg+LPNIaQa4LtKPhQUg28=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl
                          rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:13:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 668 (0x29c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C3BB, serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403
        Validity
            Not Before: Aug 19 02:13:56 2026 GMT
            Not After : Aug 26 02:13:56 2026 GMT
        Subject: CN=6a851165-7824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:29:a1:f9:06:42:4d:51:d8:08:ae:0d:75:b9:
                    58:de:f6:e4:2d:67:c7:96:53:9b:1d:00:cc:89:ce:
                    6a:ca:d8:17:4f:83:cf:19:33:59:f9:63:e1:d9:4d:
                    ff:84:f7:23:35:89:d4:9b:d6:2b:a7:03:06:11:db:
                    58:f8:af:1a:fd:f4:29:c3:8d:d9:b3:f8:e1:3e:a3:
                    88:3d:d8:45:5d:c6:ee:de:8f:39:3a:83:6d:f5:9d:
                    c1:59:0b:65:92:99:f8:e3:64:52:4d:e1:d8:53:30:
                    f3:0e:3e:fa:e4:91:a9:16:41:15:23:84:e8:56:35:
                    76:97:d5:3a:cb:d3:82:d6:7f:96:8e:da:04:88:eb:
                    f0:ec:d1:bd:d8:4c:8b:26:e4:d6:a1:74:62:4c:42:
                    05:4a:02:87:cf:53:42:89:30:d6:24:75:e7:5a:d9:
                    c3:3d:7a:54:bd:78:79:b2:78:ed:5e:17:84:31:dc:
                    75:aa:62:2b:57:c0:f7:17:70:88:24:e5:2a:3c:b9:
                    bc:3e:91:64:ed:2a:44:31:33:b4:29:43:07:b6:97:
                    a6:43:06:5c:d6:66:21:79:39:50:e9:cc:24:0e:8a:
                    99:43:f0:a6:55:59:3d:49:cf:76:d7:30:c9:3e:16:
                    b4:2d:e6:44:36:23:d5:ae:19:f9:6c:85:5d:be:f4:
                    80:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3F:57:65:27:37:7B:D9:13:4B:E9:9A:0D:69:82:D2:0E:D2:D3:C4
            X509v3 Authority Key Identifier:
                keyid:73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:55:81:15:ac:a2:12:5c:1a:5d:b1:01:06:13:7b:10:bc:01:
         bc:3f:42:0c:ca:5f:49:27:c4:9e:df:a3:78:73:79:d2:51:64:
         62:c5:22:75:cc:a6:5c:0e:a0:67:c2:6e:7c:5a:0d:19:22:d0:
         56:7c:13:4d:21:0f:55:0c:21:fb:ce:70:59:ad:4a:f3:1d:ce:
         d3:36:ad:7e:b9:80:25:15:2e:64:e2:bb:ee:a4:ed:e7:6f:e2:
         20:70:cf:b7:93:fd:fd:04:f6:d7:c5:f5:cd:88:21:8a:f7:52:
         21:c4:35:9e:b6:cf:ce:8e:d4:5b:e3:71:45:00:ae:e6:12:78:
         e9:a1:79:74:c3:e1:69:f7:19:ac:1c:54:be:d3:cd:0a:f3:db:
         b3:c8:0f:9e:6e:32:c5:b3:26:b5:31:be:77:ba:55:3e:9b:06:
         15:14:41:14:64:ce:44:c7:04:12:a5:d8:f8:53:08:ea:ed:10:
         c2:c6:e8:9a:7e:2a:47:0a:72:5d:a1:2c:82:84:7e:a4:7e:60:
         a7:f5:22:83:34:2a:76:a1:29:73:08:d0:ec:ee:2d:dc:98:c5:
         1b:30:3c:13:e9:78:cd:ef:c8:55:2c:06:6b:30:bc:22:01:87:
         77:bd:eb:fa:f0:1b:1b:e1:76:fe:e6:b8:22:c2:99:cc:03:9a:
         05:5f:3b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:53 2026 by rpki-client