Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft
File:                     _fz0IvXEZi3h5GQ6JxwEax4hxK0.mft (raw, json)
Hash identifier:          3zf+ZMktc5kAd82QST8rmytanip1J6xBQZe+ci7hn1A=
Subject key identifier:   B4:3C:36:9D:8E:39:D1:1F:BC:0B:6E:6C:09:81:27:1F:B1:B2:97:9C
Authority key identifier: FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD
Certificate issuer:       /CN=A9125A95/serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD
Certificate serial:       051D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft
Manifest number:          0516
Signing time:             Tue 18 Aug 2026 23:59:19 +0000
Manifest this update:     Tue 18 Aug 2026 23:59:19 +0000
Manifest next update:     Tue 25 Aug 2026 23:59:19 +0000
Files and hashes:         1: _fz0IvXEZi3h5GQ6JxwEax4hxK0.crl (hash: zeFXIREssJae6M/NUHCnFZOpp9TUfXYlgs4Wwy8XwlY=)
                          2: AF506F14630811EC97879243C4F9AE02.roa (hash: 957JN3cduwRqZhBkt9zySk9smfI+Ua9et4xDRT3DRKs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl
                          rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 23:59:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1309 (0x51d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125A95, serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD
        Validity
            Not Before: Aug 18 23:59:19 2026 GMT
            Not After : Aug 25 23:59:19 2026 GMT
        Subject: CN=6a84f1d7-7ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:75:2c:4e:9f:43:66:99:46:06:f0:49:50:7f:
                    f0:2b:7b:e3:85:e7:29:b4:84:ad:e7:b8:1a:0d:41:
                    65:7a:a2:7f:bc:48:80:67:52:d2:cf:86:82:af:25:
                    ef:c5:df:90:31:e5:69:3a:24:42:2c:d0:cc:e1:05:
                    0b:8d:9e:87:cb:cd:26:f5:b8:63:6e:e4:0e:b5:ff:
                    19:a0:39:7c:48:65:16:5c:04:c2:c5:c7:8d:1b:e6:
                    71:23:03:da:bd:cd:01:0b:58:26:6e:e9:28:75:b9:
                    4f:4e:36:89:4c:c3:6b:ab:93:37:a7:a8:4c:91:44:
                    16:18:b4:26:84:15:4d:60:92:d5:6f:b9:37:57:ae:
                    23:8d:12:97:31:91:37:41:11:f2:e1:d5:d1:38:7a:
                    91:f7:e5:59:72:6d:17:71:23:a0:0e:76:2b:e7:37:
                    24:0e:d5:97:68:5d:ed:7f:c7:33:4e:b5:e8:00:7c:
                    32:26:96:b6:94:24:ce:d2:aa:98:f4:3a:5d:d8:b7:
                    1e:b9:ea:8f:d1:12:70:3d:3e:91:34:58:c9:87:26:
                    37:e0:53:b5:57:f5:de:49:65:b3:38:78:66:38:eb:
                    1b:76:ee:c3:8b:e1:62:63:af:4e:9f:b6:5f:4b:4b:
                    3e:23:23:ef:d7:e3:e6:da:9b:01:08:e4:21:b6:47:
                    c3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3C:36:9D:8E:39:D1:1F:BC:0B:6E:6C:09:81:27:1F:B1:B2:97:9C
            X509v3 Authority Key Identifier:
                keyid:FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:92:38:9f:58:0c:6a:6a:07:55:4f:b1:18:6d:49:1e:62:7c:
         99:fc:0f:4b:e3:ed:f3:12:83:ea:14:35:5e:d6:15:ba:c0:0a:
         9c:ef:f5:46:26:0f:26:88:f5:4a:ab:2d:ff:05:d8:70:0a:68:
         2d:42:4a:8e:0d:be:9d:ec:e4:0d:d0:a7:bd:27:33:9a:29:e3:
         3d:b6:7d:e6:a9:d5:86:1f:29:77:c8:44:d3:5c:6b:c9:bb:50:
         38:56:d1:3d:6a:a1:a4:b6:ee:cd:b9:09:ea:30:33:69:ff:09:
         f0:3f:03:06:3f:dc:e1:e5:a3:c7:11:ee:22:7c:eb:43:58:48:
         e4:e5:08:67:bc:c2:d6:d7:ef:88:41:bd:ef:61:16:04:22:4b:
         25:3d:dc:6c:17:44:ab:8e:e4:f1:3a:cb:0b:9e:96:5d:2c:af:
         d7:2e:78:c3:93:4b:a9:fc:69:63:f9:da:4f:00:8e:a9:b7:37:
         82:73:a6:a0:6f:de:c4:f5:43:f2:cb:82:28:c5:13:a7:33:8c:
         d8:be:0b:35:8b:9b:d9:ec:8d:8b:31:1a:22:09:f0:49:dd:33:
         86:4f:39:8a:43:50:2e:3a:6f:6a:d3:c2:2e:d7:bb:2a:b8:20:
         e7:38:5f:37:83:78:d0:3a:9e:0b:ed:03:cc:a9:b9:d4:a0:0e:
         26:38:8f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:11 2026 by rpki-client