Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft
File:                     hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft (raw, json)
Hash identifier:          fgB1V+e643Dsy+43kAAikHj2ckgmRLSV4wWbog3o0EI=
Subject key identifier:   D4:15:CE:63:F9:FE:47:F5:83:49:6B:51:0A:36:8F:97:5F:E5:7E:9A
Authority key identifier: 85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF
Certificate issuer:       /CN=A911C9E8/serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF
Certificate serial:       022B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft
Manifest number:          0225
Signing time:             Wed 19 Aug 2026 03:21:33 +0000
Manifest this update:     Wed 19 Aug 2026 03:21:32 +0000
Manifest next update:     Wed 26 Aug 2026 03:21:32 +0000
Files and hashes:         1: hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl (hash: 818cvmcqt4Jjus8VhWe/t2TDE2Hd0IvM47yPy3DeGMw=)
                          2: E39F4ED65C2411EEB54C4F43C4F9AE02.roa (hash: pkyGN44AS4SLdJe1nEC0cgptqJqFo9Jz+8yVjeVwyog=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl
                          rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C9E8, serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF
        Validity
            Not Before: Aug 19 03:21:32 2026 GMT
            Not After : Aug 26 03:21:32 2026 GMT
        Subject: CN=6a85213d-667a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:17:73:cf:76:dc:84:c7:4c:f3:4b:d1:97:99:
                    9c:1e:6b:97:04:e1:70:42:23:77:f6:eb:39:f9:0e:
                    5a:2f:d4:ea:f3:60:57:41:8e:fa:63:ba:ab:a3:a5:
                    3b:f3:ef:fa:c4:3d:bf:b4:e0:12:e6:43:42:3f:a7:
                    56:5c:93:ac:9b:53:e3:29:81:01:48:2b:f9:1a:61:
                    d0:39:f6:eb:0e:25:2d:55:6c:55:4e:5d:96:e5:e3:
                    ab:f9:5d:2c:b3:d1:37:28:e5:db:4e:60:11:ff:c2:
                    f8:a2:d3:95:65:73:f5:0a:d5:7d:86:b7:c8:9d:3f:
                    b7:e8:4d:a1:fb:21:19:4e:d6:79:d3:d7:6a:eb:69:
                    98:0e:79:90:2c:92:71:70:1a:e9:91:58:45:e6:cd:
                    1c:2b:5f:ae:fd:f0:2c:37:c3:14:c9:dc:9d:b4:54:
                    ab:de:94:2b:2e:ba:9b:c6:d7:fb:39:50:e9:ea:28:
                    ea:e0:69:48:7a:a7:b4:3c:bd:53:66:73:2b:31:eb:
                    68:f2:e7:b2:06:8e:5c:c3:d1:0d:68:23:6a:7f:33:
                    c6:18:af:a8:12:4a:dd:e3:d8:ef:f1:04:c9:c8:c1:
                    b2:37:a6:cd:42:29:76:6b:e6:a9:e8:82:65:55:fe:
                    a0:cf:be:3a:8f:b8:cb:22:c5:b3:0b:c3:ea:1a:0b:
                    cf:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:15:CE:63:F9:FE:47:F5:83:49:6B:51:0A:36:8F:97:5F:E5:7E:9A
            X509v3 Authority Key Identifier:
                keyid:85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:90:42:4b:99:ec:c4:08:fa:82:67:35:52:f0:06:bf:ea:a3:
         40:2c:1f:f8:e7:06:70:5e:65:20:b5:f0:17:dd:78:16:aa:77:
         24:3c:8b:1f:3c:06:7a:a4:72:26:86:e0:bd:11:3f:0e:61:8b:
         a1:cf:80:1d:89:63:c2:74:04:61:78:ac:a8:1d:6e:41:bf:a1:
         e7:24:dd:9b:86:f8:94:96:63:7b:aa:d3:e4:fc:e4:2a:11:67:
         ac:cb:d4:a7:15:94:48:5b:b3:a0:40:9c:af:cb:0a:18:f0:1b:
         66:ac:d9:dd:f0:08:bf:34:b1:84:fe:d6:01:0c:b5:a5:ca:bf:
         a0:4d:dc:b1:9a:f3:c7:13:85:f1:5b:55:0f:c1:72:de:09:5a:
         28:15:fa:84:06:e4:2d:e3:7b:55:03:95:d7:26:54:86:62:3e:
         31:15:94:fa:33:c6:63:ab:70:2b:13:66:07:b5:0d:56:19:b8:
         ad:a4:45:12:fa:1a:1a:42:45:71:a7:90:b2:da:1c:30:b4:79:
         9a:31:7f:2d:8d:d1:1c:c1:18:fa:04:c9:a8:ef:ae:8e:89:a2:
         5b:26:4a:1c:29:9c:c7:16:25:b0:9f:30:f7:1e:59:2b:3c:bc:
         77:80:2a:d9:63:09:77:83:8e:80:fc:cf:c4:a5:48:d7:ac:31:
         66:23:0c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:27:46 2026 by rpki-client