Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft
File:                     B7JffmXLYnEIsNlMGPf1edM0eBg.mft (raw, json)
Hash identifier:          mMpUazKHoxG4NnggbkiSMxsi1Th56dY+3nbCExDvlnM=
Subject key identifier:   34:9C:0B:6F:53:4E:2D:6B:EB:CA:EE:AD:2B:18:5F:1A:33:7C:49:A5
Authority key identifier: 07:B2:5F:7E:65:CB:62:71:08:B0:D9:4C:18:F7:F5:79:D3:34:78:18
Certificate issuer:       /CN=A911CB05/serialNumber=07B25F7E65CB627108B0D94C18F7F579D3347818
Certificate serial:       0159
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft
Manifest number:          0159
Signing time:             Wed 19 Aug 2026 05:41:14 +0000
Manifest this update:     Wed 19 Aug 2026 05:41:13 +0000
Manifest next update:     Wed 26 Aug 2026 05:41:13 +0000
Files and hashes:         1: B7JffmXLYnEIsNlMGPf1edM0eBg.crl (hash: H4CCcSbd1yW1sJRSsy8rdVIXZjsHblDqBBT9IomcTnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.crl
                          rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:41:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CB05, serialNumber=07B25F7E65CB627108B0D94C18F7F579D3347818
        Validity
            Not Before: Aug 19 05:41:13 2026 GMT
            Not After : Aug 26 05:41:13 2026 GMT
        Subject: CN=6a8541fa-aa79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d1:01:16:f1:78:da:9b:d3:aa:99:5f:88:0b:
                    8f:83:98:f0:a0:7c:a6:63:d8:e3:19:3f:f6:23:61:
                    ad:19:13:80:a4:8f:12:79:8b:51:3f:d6:23:24:f6:
                    16:bd:2d:51:dc:0d:07:a3:8e:cc:87:3e:36:0e:f3:
                    50:3c:bb:bf:b9:6c:8d:d2:a5:ec:f5:27:e5:0e:81:
                    7a:d6:d4:ae:27:d0:b4:a1:a6:cb:6c:c2:b3:8e:5d:
                    68:40:f5:08:b1:5f:34:17:61:84:38:f4:61:e3:70:
                    c2:49:e5:51:c5:24:4c:fd:66:c5:4d:5d:84:83:38:
                    0d:05:50:b0:bf:55:ac:9f:af:0c:d3:ad:d0:4d:84:
                    af:ae:ce:b2:0e:49:1a:77:9a:84:2d:f2:79:09:a5:
                    e5:70:8b:52:74:77:c0:6f:aa:75:79:f1:f4:8a:18:
                    01:cf:5e:19:65:31:45:9e:9f:d3:4c:cb:b9:db:11:
                    3c:f0:04:7a:82:9d:a9:c0:d0:2a:7c:63:cf:cd:f4:
                    a0:3a:d4:d1:43:a3:b6:dc:03:d5:3f:40:05:3a:e5:
                    66:7f:eb:27:a9:19:1d:9c:31:43:14:e9:bc:9e:e6:
                    3b:94:7c:32:75:52:d2:aa:0f:e4:1f:2e:1c:b1:8c:
                    55:c9:fe:65:a1:bc:4d:36:9a:23:11:06:c9:38:d5:
                    56:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9C:0B:6F:53:4E:2D:6B:EB:CA:EE:AD:2B:18:5F:1A:33:7C:49:A5
            X509v3 Authority Key Identifier:
                keyid:07:B2:5F:7E:65:CB:62:71:08:B0:D9:4C:18:F7:F5:79:D3:34:78:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:a4:42:97:a0:da:59:e1:75:30:39:7c:96:7a:9b:c1:8e:7e:
         8a:22:c6:ba:18:be:02:4f:43:0b:4d:d1:b7:68:dc:f9:bb:01:
         87:9c:44:f2:22:a5:c0:58:ec:e9:78:ce:3f:51:97:9e:da:6e:
         cb:be:b8:a6:9c:2c:9f:9c:f4:3f:e3:df:97:e1:d7:fe:13:e5:
         20:4f:03:b8:26:93:8a:5b:af:79:2f:67:e9:fb:01:20:3f:b1:
         16:bd:01:45:a4:bf:75:ed:ab:2e:b9:62:4c:e9:59:4b:89:bf:
         d1:f0:ba:26:36:e1:8c:21:13:1c:92:61:a8:da:b7:12:a7:ed:
         43:61:55:bc:f8:85:61:e8:07:c7:48:87:b0:45:56:61:9a:b3:
         17:31:7c:1c:1d:f9:57:a7:a8:de:8f:6a:6a:eb:4c:c6:62:8b:
         e5:15:3e:58:ae:89:ad:e7:f8:ec:2e:4c:67:2e:5c:94:34:ea:
         c0:27:77:bf:0e:76:e5:7b:91:d8:b2:e2:eb:67:8e:26:b8:e3:
         19:f3:64:9a:34:82:08:77:43:eb:98:dc:66:57:f9:9d:fe:81:
         0c:e7:11:82:4f:e0:a8:0e:d1:a5:7b:1c:46:c0:9f:ac:96:89:
         1c:f8:9b:74:36:68:5d:24:a7:22:3c:d4:81:ae:c0:10:fa:4d:
         60:24:35:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:58 2026 by rpki-client