Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft
File:                     P9UxYCV9sBsu4O8BPB4tQusaKI0.mft (raw, json)
Hash identifier:          rqnLssHo3GwNK5mxlE8uis84CUtuThoNQwOwFlvk2UU=
Subject key identifier:   E1:7B:48:D2:F8:27:B6:8C:9F:EF:0D:73:4E:6C:00:0A:B8:7F:C7:94
Authority key identifier: 3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D
Certificate issuer:       /CN=A911D51C/serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D
Certificate serial:       05DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft
Manifest number:          05D6
Signing time:             Tue 18 Aug 2026 23:22:11 +0000
Manifest this update:     Tue 18 Aug 2026 23:22:11 +0000
Manifest next update:     Tue 25 Aug 2026 23:22:11 +0000
Files and hashes:         1: P9UxYCV9sBsu4O8BPB4tQusaKI0.crl (hash: UCjeJxNzK2fv6DE/XrFsUhrTXlhAUnGGQEt2C88pm1M=)
                          2: A7493DA6145611ECAA3B5769C4F9AE02.roa (hash: 9No5R6QsEqMvq6ApWij+X8OuZMaVXyEFFrhes/cBm9k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl
                          rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 23:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1501 (0x5dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D51C, serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D
        Validity
            Not Before: Aug 18 23:22:11 2026 GMT
            Not After : Aug 25 23:22:11 2026 GMT
        Subject: CN=6a84e923-b9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c2:c2:41:4e:a8:ad:1c:09:83:5c:bf:3e:86:
                    08:80:53:30:c7:d4:50:ad:32:39:fb:56:8e:d2:c6:
                    d4:34:f9:07:f0:47:ac:cc:8a:87:66:cc:48:3a:e7:
                    e5:28:d1:a4:f2:a0:18:e2:39:41:77:76:9d:91:65:
                    24:30:9e:7b:63:ff:7f:59:5e:8c:9f:b6:5e:a2:f7:
                    82:4d:46:e2:d3:02:fc:3c:b1:10:09:3e:71:41:b5:
                    05:cf:43:02:c9:49:9a:10:50:af:93:a3:5b:0c:e4:
                    50:7e:c4:5a:74:30:f5:a0:a9:1d:a0:ae:57:6d:2a:
                    44:45:48:0d:70:c3:b0:27:d5:f8:2e:7e:c7:36:11:
                    31:4e:5e:7d:69:26:98:82:90:42:37:a0:11:30:47:
                    eb:78:20:77:2d:06:0f:4c:04:fd:42:1f:a1:91:3a:
                    cf:3a:7d:a6:96:11:80:a5:f4:df:82:98:ae:ae:dd:
                    91:46:0a:c6:55:bd:12:7f:e3:4e:fc:6b:05:bc:9e:
                    dc:0d:11:a6:3b:7c:1e:29:43:75:fd:75:40:d4:3e:
                    25:14:db:fa:73:a1:87:0e:fa:a9:8f:00:90:50:bc:
                    14:b8:cf:15:c3:93:0c:22:d9:96:57:f5:f1:dd:df:
                    08:fe:ae:d7:ce:d1:01:db:3a:10:a0:08:1b:47:ca:
                    1d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7B:48:D2:F8:27:B6:8C:9F:EF:0D:73:4E:6C:00:0A:B8:7F:C7:94
            X509v3 Authority Key Identifier:
                keyid:3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:fa:7e:4d:b3:2f:8d:b2:5f:56:dd:7e:50:22:ae:91:f4:c0:
         a3:f9:bb:b3:0d:dd:53:13:5a:20:e8:72:8e:49:7d:97:09:06:
         f3:39:a6:ab:e3:41:49:0a:71:18:c8:fd:2b:92:75:fb:d2:dd:
         0c:00:ed:0a:21:1a:36:42:f8:d0:86:c8:95:ca:a5:79:bf:5c:
         70:45:2a:70:45:95:df:f3:f1:88:6c:57:c1:22:11:1c:db:84:
         14:27:c0:a3:77:6c:0c:c3:3d:f9:66:2c:73:2b:e7:3d:b5:a3:
         bc:79:83:50:43:39:21:a8:5b:b1:28:3e:a6:4e:cc:c2:de:a5:
         fa:66:0f:02:3a:51:ba:f9:b1:87:48:67:53:c3:36:1b:14:0a:
         22:9b:ab:fb:9e:9d:64:b9:d7:3c:da:b5:1d:5b:a4:d1:f6:e7:
         b3:d4:91:b2:aa:2e:ad:2f:4e:9b:e5:a0:09:3b:d1:16:83:7e:
         22:10:79:49:10:72:56:15:a7:65:e0:1d:91:16:18:bd:02:ab:
         b9:d5:e9:24:57:bd:c5:d6:b5:24:a3:c5:5a:89:f3:e5:6d:0b:
         f9:36:c9:be:f8:27:1c:d5:81:49:a9:00:3b:c4:2b:54:08:ea:
         27:67:d6:e7:11:99:9a:55:b4:82:62:8a:f8:de:de:e7:2c:a4:
         1f:b1:1b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:48:16 2026 by rpki-client