Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EE4C/09359614A1DD11F09C402513C4F9AE02/t1GY7LS1xujR5WWv-JQ_ivSvd_8.mft
File:                     t1GY7LS1xujR5WWv-JQ_ivSvd_8.mft (raw, json)
Hash identifier:          oJp3rtFgSIQEQQKULQikt4sufM2RhVb59sAiJHQQaxg=
Subject key identifier:   21:21:0E:1E:88:A3:F9:AB:07:E0:0C:1A:71:D9:75:A3:B9:71:73:68
Authority key identifier: B7:51:98:EC:B4:B5:C6:E8:D1:E5:65:AF:F8:94:3F:8A:F4:AF:77:FF
Certificate issuer:       /CN=A911EE4C/serialNumber=B75198ECB4B5C6E8D1E565AFF8943F8AF4AF77FF
Certificate serial:       A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1GY7LS1xujR5WWv-JQ_ivSvd_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EE4C/09359614A1DD11F09C402513C4F9AE02/t1GY7LS1xujR5WWv-JQ_ivSvd_8.mft
Manifest number:          A3
Signing time:             Wed 19 Aug 2026 07:53:19 +0000
Manifest this update:     Wed 19 Aug 2026 07:53:18 +0000
Manifest next update:     Wed 26 Aug 2026 07:53:18 +0000
Files and hashes:         1: t1GY7LS1xujR5WWv-JQ_ivSvd_8.crl (hash: HGDm4F/c1CrXDy2NhmNGXLWtGcArhxo7iMEYfaIWE+M=)
                          2: 8D06A40AA1DE11F0A041111BC4F9AE02.roa (hash: fb7vjI6fEfwwY0p+2/EzKhGdf5B5C8RSr7cMtgc+wOM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EE4C/09359614A1DD11F09C402513C4F9AE02/t1GY7LS1xujR5WWv-JQ_ivSvd_8.crl
                          rsync://rpki.apnic.net/member_repository/A911EE4C/09359614A1DD11F09C402513C4F9AE02/t1GY7LS1xujR5WWv-JQ_ivSvd_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1GY7LS1xujR5WWv-JQ_ivSvd_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 07:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EE4C, serialNumber=B75198ECB4B5C6E8D1E565AFF8943F8AF4AF77FF
        Validity
            Not Before: Aug 19 07:53:18 2026 GMT
            Not After : Aug 26 07:53:18 2026 GMT
        Subject: CN=6a8560ee-7b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:af:eb:8a:3a:8b:cc:18:c7:b0:fe:92:d7:35:
                    6b:b5:51:6b:2e:07:78:01:b6:f8:af:13:fd:7a:e1:
                    8c:ce:19:6f:31:d5:5c:12:8c:be:d5:d6:9f:28:d1:
                    a2:04:12:3f:4c:74:fb:b7:1b:de:3a:d0:96:26:2a:
                    73:19:5b:0a:3e:f3:f7:e0:fe:eb:1a:26:79:36:fe:
                    9b:88:b8:14:e0:8e:a0:1d:68:94:16:e9:9a:2f:58:
                    47:1b:69:2d:b0:14:de:21:7e:d8:8c:15:72:90:a0:
                    5f:2d:47:59:c6:c5:17:5e:13:17:58:f8:dd:63:e2:
                    b1:76:ec:26:3c:fc:cb:82:40:0d:6b:52:1d:b2:4b:
                    9e:15:30:1b:20:88:a5:cb:d7:34:1d:21:66:a9:19:
                    fa:25:9b:03:d3:3d:c1:fa:d9:55:55:2c:2b:40:39:
                    e4:d2:61:fa:c6:cb:fe:11:d1:07:ff:61:d6:3d:2e:
                    15:da:46:58:83:9e:57:7c:4c:82:5f:18:ed:07:a1:
                    cd:d4:20:25:15:c9:7c:26:ca:e2:46:84:2e:3b:1e:
                    0c:2d:26:39:c2:df:bc:e5:72:34:56:7c:1f:41:ab:
                    9c:21:c5:c9:0d:16:4d:4c:db:ab:3f:f3:ac:4a:8c:
                    86:e4:96:5b:45:2a:d4:2f:31:6a:3c:dc:3a:37:50:
                    ea:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:21:0E:1E:88:A3:F9:AB:07:E0:0C:1A:71:D9:75:A3:B9:71:73:68
            X509v3 Authority Key Identifier:
                keyid:B7:51:98:EC:B4:B5:C6:E8:D1:E5:65:AF:F8:94:3F:8A:F4:AF:77:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EE4C/09359614A1DD11F09C402513C4F9AE02/t1GY7LS1xujR5WWv-JQ_ivSvd_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1GY7LS1xujR5WWv-JQ_ivSvd_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EE4C/09359614A1DD11F09C402513C4F9AE02/t1GY7LS1xujR5WWv-JQ_ivSvd_8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:14:b9:a8:5c:ef:48:9d:16:ca:80:0c:c7:f8:9f:b0:3d:9c:
         da:83:51:01:3a:fa:89:70:f7:54:80:ad:e9:c6:8b:32:95:dc:
         42:9a:28:5a:22:51:1b:6c:b5:5d:5c:5b:5a:b7:f1:ed:59:96:
         1d:49:af:a3:59:46:25:b6:cd:76:d8:b9:73:f8:f0:1c:b2:d1:
         98:bf:7b:de:79:f9:cd:dc:25:5d:dd:be:a2:df:e4:24:97:6c:
         c6:a2:67:11:ca:9f:53:2f:e3:da:4d:0e:81:84:5b:67:f2:47:
         fa:40:65:f8:f7:13:64:09:55:7b:8b:78:a9:fc:0a:ca:bd:71:
         2e:bf:68:22:6b:91:4f:f0:91:d2:7f:e9:30:66:71:9e:de:2f:
         3e:e9:4e:bf:9a:89:83:27:09:d9:65:cb:cb:36:0e:bb:4c:28:
         6c:52:43:5c:a3:15:2d:9f:1d:14:03:c4:76:2d:55:53:1a:ad:
         d2:87:81:36:1b:fb:29:29:f3:c5:97:2f:00:f9:0b:55:60:f8:
         74:f9:e6:4f:6b:c1:b8:ce:59:94:e7:1f:37:01:41:24:1d:0c:
         5a:e9:00:c6:cd:47:53:b7:8a:36:72:65:ad:d5:9f:b8:ee:69:
         bc:d2:9c:a7:0a:45:4c:80:2c:ec:63:6b:94:03:7b:6b:cd:ea:
         af:f9:46:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUVFNEMxMTAvBgNVBAUTKEI3NTE5OEVDQjRCNUM2RThEMUU1NjVBRkY4OTQzRjhB
RjRBRjc3RkYwHhcNMjYwODE5MDc1MzE4WhcNMjYwODI2MDc1MzE4WjAYMRYwFAYD
VQQDEw02YTg1NjBlZS03Yjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtq/rijqLzBjHsP6S1zVrtVFrLgd4Abb4rxP9euGMzhlvMdVcEoy+1dafKNGi
BBI/THT7txveOtCWJipzGVsKPvP34P7rGiZ5Nv6biLgU4I6gHWiUFumaL1hHG2kt
sBTeIX7YjBVykKBfLUdZxsUXXhMXWPjdY+KxduwmPPzLgkANa1IdskueFTAbIIil
y9c0HSFmqRn6JZsD0z3B+tlVVSwrQDnk0mH6xsv+EdEH/2HWPS4V2kZYg55XfEyC
XxjtB6HN1CAlFcl8JsriRoQuOx4MLSY5wt+85XI0VnwfQaucIcXJDRZNTNurP/Os
SoyG5JZbRSrULzFqPNw6N1Dq6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCEhDh6I
o/mrB+AMGnHZdaO5cXNoMB8GA1UdIwQYMBaAFLdRmOy0tcbo0eVlr/iUP4r0r3f/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUU0Qy8wOTM1OTYxNEEx
REQxMUYwOUM0MDI1MTNDNEY5QUUwMi90MUdZN0xTMXh1alI1V1d2LUpRX2l2U3Zk
XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3QxR1k3TFMxeHVqUjVXV3YtSlFfaXZTdmRfOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RUU0Qy8wOTM1OTYxNEExREQxMUYwOUM0MDI1MTNDNEY5QUUwMi90MUdZN0xTMXh1
alI1V1d2LUpRX2l2U3ZkXzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXBS5qFzvSJ0WyoAMx/ifsD2c2oNRATr6iXD3VICt6caLMpXcQpooWiJRG2y1
XVxbWrfx7VmWHUmvo1lGJbbNdti5c/jwHLLRmL973nn5zdwlXd2+ot/kJJdsxqJn
EcqfUy/j2k0OgYRbZ/JH+kBl+PcTZAlVe4t4qfwKyr1xLr9oImuRT/CR0n/pMGZx
nt4vPulOv5qJgycJ2WXLyzYOu0wobFJDXKMVLZ8dFAPEdi1VUxqt0oeBNhv7KSnz
xZcvAPkLVWD4dPnmT2vBuM5ZlOcfNwFBJB0MWukAxs1HU7eKNnJlrdWfuO5pvNKc
pwpFTIAs7GNrlAN7a83qr/lGXw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:54 2026 by rpki-client