Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
File:                     kCSWwSsdqlhOQrNDNM8XIBI2snw.mft (raw, json)
Hash identifier:          dZ6jr5Gsyua4Nqbn6nzp5LJZqbH7hVoKsonxagfunFc=
Subject key identifier:   A2:E4:3F:B0:38:F3:EB:5A:C0:5F:E4:4C:17:65:91:D4:65:C0:4D:5A
Authority key identifier: 90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C
Certificate issuer:       /CN=A912346E/serialNumber=902496C12B1DAA584E42B34334CF17201236B27C
Certificate serial:       0709
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
Manifest number:          0700
Signing time:             Tue 18 Aug 2026 22:30:22 +0000
Manifest this update:     Tue 18 Aug 2026 22:30:21 +0000
Manifest next update:     Tue 25 Aug 2026 22:30:21 +0000
Files and hashes:         1: kCSWwSsdqlhOQrNDNM8XIBI2snw.crl (hash: QQIrHmRUCtwvpuE7UKz92ma9J0Wv1rhQEW4Mej+yHFU=)
                          2: 5E54C4BEA06411EBB6AFCD55C4F9AE02.roa (hash: WescIqZtu/oV5qzJVivLhqT6NCVSMsUZrdry8jKlBBI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl
                          rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 22:30:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1801 (0x709)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912346E, serialNumber=902496C12B1DAA584E42B34334CF17201236B27C
        Validity
            Not Before: Aug 18 22:30:21 2026 GMT
            Not After : Aug 25 22:30:21 2026 GMT
        Subject: CN=6a84dcfe-debe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:4b:a1:91:00:c9:8b:7a:bd:21:08:69:3c:f1:
                    d4:cf:d2:e8:08:a9:5e:ad:79:0d:5e:c3:7b:af:3d:
                    bf:29:7d:dc:ee:a1:42:9d:ba:5e:02:a9:26:ff:44:
                    e0:02:16:56:77:ec:e6:6e:cc:e3:f0:76:5e:59:d4:
                    fe:7a:fb:47:6a:66:5b:5f:82:7e:25:17:b1:a1:b0:
                    be:77:6c:06:a7:8c:e9:72:cb:1f:c6:93:ce:2c:a6:
                    c1:46:66:9b:21:d7:5e:3a:b9:83:60:30:27:0b:a7:
                    6d:7a:85:b2:9e:0a:8a:95:ae:1d:51:cf:be:b4:04:
                    83:19:f5:57:0e:fa:ac:9a:06:aa:2d:e5:80:7a:86:
                    47:cb:dd:5e:e5:16:2c:46:bf:a2:e1:e0:67:12:ef:
                    3d:23:ab:07:bb:15:3a:e5:52:f0:bb:d4:59:ac:c7:
                    f8:99:d3:44:0c:5e:ee:a9:b9:92:de:b5:a2:13:53:
                    3f:c0:a8:71:65:c5:07:d0:d2:9b:2f:b6:ac:d5:59:
                    64:bf:2a:47:6a:ea:ea:fd:e6:a8:40:e3:58:5c:dc:
                    5b:d9:62:57:74:0e:bc:28:c8:f1:9c:bb:ec:3c:28:
                    5d:d3:f9:db:a1:eb:d7:51:22:d8:6a:49:df:68:cb:
                    81:7e:c2:9a:2c:38:aa:a9:23:57:05:0b:2a:90:93:
                    ad:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E4:3F:B0:38:F3:EB:5A:C0:5F:E4:4C:17:65:91:D4:65:C0:4D:5A
            X509v3 Authority Key Identifier:
                keyid:90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:2d:54:a9:dc:1a:6d:e5:62:3c:0d:c6:8b:9a:f7:e1:7e:f0:
         b0:ca:48:9f:78:58:e8:16:de:92:24:ee:62:c7:32:2c:2d:9c:
         f9:eb:ca:2e:6f:3a:61:e4:58:6a:f7:c0:cc:8d:b8:48:86:b3:
         98:06:00:e5:90:e1:0b:bc:7e:ce:2e:8e:af:bc:da:f9:f7:fc:
         ce:0f:58:fc:44:24:80:66:77:43:c7:12:b8:d3:85:3f:d8:c3:
         3c:1e:22:ea:ab:f2:a3:b6:31:1b:59:22:68:42:31:40:31:0f:
         b2:99:aa:8b:3f:6e:27:d6:0f:ea:61:c9:ce:6f:87:b0:4c:e0:
         18:80:23:64:d8:e3:f1:b9:38:8d:bb:a5:f1:7f:33:6f:ff:f7:
         a1:9f:62:27:eb:3b:08:8d:16:6b:39:f2:ca:d4:29:ef:68:ba:
         50:fa:29:8c:bc:4e:8e:1b:22:55:5a:80:3b:10:9a:49:fd:92:
         38:ab:2b:80:8a:03:2d:d7:9a:af:6f:29:a5:92:05:44:4d:b3:
         34:e8:a1:01:ef:95:ec:3b:35:dd:a2:2b:65:94:ef:3e:2c:b0:
         8d:aa:7e:b1:53:01:88:87:89:08:90:b8:5f:56:97:2c:4b:1f:
         6c:2e:b7:ea:ef:51:61:88:f4:ca:41:c0:03:3c:6d:aa:aa:6b:
         92:ca:5c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:10 2026 by rpki-client