Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft
File:                     _d0zZyPk_yht6VYjX0y7nlvItHs.mft (raw, json)
Hash identifier:          WLVBCBw2LyjAjGOJhrp/EgLxaayCefgZCLq0eir79TA=
Subject key identifier:   D2:DF:9F:F5:57:45:E0:33:F8:1F:CD:8B:37:82:35:5B:8E:E4:C5:14
Authority key identifier: FD:DD:33:67:23:E4:FF:28:6D:E9:56:23:5F:4C:BB:9E:5B:C8:B4:7B
Certificate issuer:       /CN=A911EA03/serialNumber=FDDD336723E4FF286DE956235F4CBB9E5BC8B47B
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_d0zZyPk_yht6VYjX0y7nlvItHs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft
Manifest number:          53
Signing time:             Sun 23 Aug 2026 07:56:49 +0000
Manifest this update:     Sun 23 Aug 2026 07:56:48 +0000
Manifest next update:     Sun 30 Aug 2026 07:56:48 +0000
Files and hashes:         1: _d0zZyPk_yht6VYjX0y7nlvItHs.crl (hash: pqTAEgYno32h3gxd/YC1SY9Nso50ywwA1lL4co5Ec7I=)
                          2: 2789337224DD11F19E4B5BF6AD833773.roa (hash: PQr+ebVrtCzdXKAWNzsRyzxT+aGxBF4TMLTLw4pn3Sg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.crl
                          rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_d0zZyPk_yht6VYjX0y7nlvItHs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Aug 2026 07:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EA03, serialNumber=FDDD336723E4FF286DE956235F4CBB9E5BC8B47B
        Validity
            Not Before: Aug 23 07:56:48 2026 GMT
            Not After : Aug 30 07:56:48 2026 GMT
        Subject: CN=6a8aa7c1-4064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:48:2d:7f:83:d4:fe:32:46:7d:e1:5c:23:82:
                    96:65:3b:22:cf:80:71:72:e5:ed:b9:30:95:55:bf:
                    5d:cf:4c:b9:3c:2e:64:4a:77:f1:ba:df:7e:09:ad:
                    cb:01:be:08:d2:a2:bb:d9:df:0d:6a:2e:55:65:73:
                    41:b7:47:a7:7f:70:6b:ef:56:63:fe:55:e8:2b:76:
                    66:87:14:71:3c:fe:41:c2:8b:12:54:03:5b:37:c2:
                    a2:a8:47:fd:d0:a7:ff:c5:4b:84:6a:92:3e:a9:f8:
                    02:9d:42:7e:42:c4:5a:42:da:0f:d3:f5:85:22:9b:
                    48:e2:a8:30:fc:92:6f:b3:0c:73:49:46:f4:d2:83:
                    bc:b3:d9:f6:7d:64:92:9a:c6:ee:e1:6f:32:15:fb:
                    91:6f:0c:df:7e:b5:46:95:28:37:ca:da:c7:9a:3e:
                    a7:4f:b6:af:70:33:d4:33:6f:1e:10:bc:a2:23:f8:
                    1e:33:a7:d0:17:4c:8d:51:59:d2:9e:57:9a:4c:42:
                    ee:6d:33:f1:8e:9b:34:1a:21:2d:d8:21:89:fa:dc:
                    0b:7e:37:f3:f3:49:c2:d4:e6:74:01:1e:ca:36:07:
                    05:0b:95:b9:da:8f:20:14:81:1b:2f:85:77:7a:28:
                    00:1b:f7:c4:78:e1:56:38:30:e1:fc:d5:bc:c5:38:
                    8e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DF:9F:F5:57:45:E0:33:F8:1F:CD:8B:37:82:35:5B:8E:E4:C5:14
            X509v3 Authority Key Identifier:
                keyid:FD:DD:33:67:23:E4:FF:28:6D:E9:56:23:5F:4C:BB:9E:5B:C8:B4:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_d0zZyPk_yht6VYjX0y7nlvItHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:5d:4f:80:ad:92:0b:01:90:15:b7:de:cf:a1:26:9f:93:cf:
         3c:ae:5d:2d:e9:75:89:0b:1c:c2:de:6c:b8:01:cd:79:c2:c1:
         82:be:0d:2f:45:73:4e:fe:15:e1:2b:b4:37:fa:a0:be:0b:a7:
         01:df:13:55:ec:38:e4:92:6d:b1:b5:14:4f:0c:5f:ac:ad:d0:
         4c:b5:38:10:fd:13:59:be:fd:83:3f:a9:d0:26:59:32:be:41:
         00:52:83:ee:b0:2c:5f:c0:c2:0a:e2:db:d2:14:6c:68:43:89:
         2e:94:09:d0:ba:28:97:bd:4e:e8:79:fd:ef:0b:52:e7:71:49:
         53:22:41:4b:2f:d1:ef:f4:49:32:75:d9:db:89:a7:e6:fb:00:
         37:3f:db:2a:21:44:12:51:74:e4:78:09:28:a3:86:2b:ba:25:
         44:d5:ae:d6:22:87:a1:16:a1:99:71:b2:50:89:eb:63:13:61:
         da:20:8b:64:43:8f:93:07:18:b5:5c:a6:44:8f:2b:ee:3e:b8:
         e0:09:2a:93:4d:bc:72:6d:ba:c2:38:5c:75:a1:13:45:fc:8d:
         1c:90:28:0c:9d:f5:4a:d3:5e:3f:7f:c1:d1:c0:dd:cb:e6:4d:
         a2:61:c1:e8:e7:4d:32:5d:16:f5:75:0d:0e:bf:1b:b9:ca:0e:
         1c:45:86:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 22:16:58 2026 by rpki-client