Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft
File:                     cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft (raw, json)
Hash identifier:          eK2wCueujK9Dmk3+bSDA/byZ8WtrKnbEAa/OUzaQo/0=
Subject key identifier:   BC:E2:39:68:C8:7B:10:B7:6F:75:5A:B6:E5:32:07:30:21:6B:2B:24
Authority key identifier: 72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92
Certificate issuer:       /CN=A9126356/serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492
Certificate serial:       11F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft
Manifest number:          11ED
Signing time:             Tue 18 Aug 2026 17:21:15 +0000
Manifest this update:     Tue 18 Aug 2026 17:21:14 +0000
Manifest next update:     Tue 25 Aug 2026 17:21:14 +0000
Files and hashes:         1: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl (hash: WrI5FA8QyrWahlQw2ssrk9oZM6BD9ZXZgYbCgK0Q8/Y=)
                          2: FBD6D2BE158711E9881C4D1FC4F9AE02.roa (hash: STeyXyMTSYyvRcahtnut8o6/l8sNSI++3Wnn1BDQDwg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl
                          rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 17:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4601 (0x11f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126356, serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492
        Validity
            Not Before: Aug 18 17:21:14 2026 GMT
            Not After : Aug 25 17:21:14 2026 GMT
        Subject: CN=6a84948b-44b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:38:c0:a3:35:69:d2:37:91:11:d3:3f:79:d3:
                    13:fc:4e:20:96:50:3b:77:7c:0e:1e:6a:63:64:4a:
                    e1:b4:64:2f:df:d4:89:84:19:b9:a3:42:95:c8:94:
                    31:af:0e:d7:1e:29:93:26:71:f9:17:dc:70:c7:c8:
                    ee:7e:73:b5:b6:cc:c8:cc:ca:78:fc:e7:e7:97:33:
                    6b:18:6b:d8:f6:b1:61:a0:55:cb:e7:89:28:e8:4f:
                    0d:70:05:79:4e:ee:1f:10:7c:1e:59:c8:95:77:b3:
                    94:60:68:d8:7a:a5:c8:4d:6b:ea:14:54:c2:8e:25:
                    d3:c5:c6:56:a5:71:4a:cd:ec:ee:d1:98:20:3a:b3:
                    ba:00:ae:50:5b:49:15:5d:ed:75:7f:9c:58:17:ab:
                    b6:b8:d4:8e:6f:5a:2f:9a:32:fa:d3:61:f8:de:5a:
                    19:0b:80:61:5b:62:12:2b:b8:82:d2:f1:e0:80:2a:
                    63:76:a5:2a:ec:c7:4e:73:7b:ae:1f:ce:ef:90:c4:
                    a1:ff:31:64:4c:1d:d8:04:c0:6d:ff:14:01:90:08:
                    e1:8f:ba:68:86:63:33:5c:52:25:88:d4:f9:87:92:
                    29:8b:27:9f:e0:86:20:fd:cc:14:a9:61:e9:f6:75:
                    4d:aa:11:76:30:91:c4:d9:65:fe:73:f4:57:24:fc:
                    bd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E2:39:68:C8:7B:10:B7:6F:75:5A:B6:E5:32:07:30:21:6B:2B:24
            X509v3 Authority Key Identifier:
                keyid:72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:73:42:0b:92:f8:7f:5e:5e:d9:69:28:df:b3:ed:25:fe:c7:
         26:e9:e9:55:f0:96:ef:b2:50:57:3a:de:28:ad:21:31:f4:90:
         32:1b:d9:e0:43:e0:24:a3:10:9f:f3:74:db:8f:d1:a6:4f:88:
         0b:95:b1:45:28:2b:76:73:4b:1e:1e:07:8b:2a:31:b7:e1:d2:
         95:9c:e7:0c:7a:82:12:ea:d6:2f:dd:96:28:0d:ba:f4:7a:06:
         f0:2a:a6:6c:03:9e:4d:cc:8e:c2:ec:ae:1e:11:b3:51:90:ab:
         f8:a2:34:53:5d:86:b3:ee:6c:0b:36:9c:6a:56:f5:f4:6c:af:
         1b:98:16:b1:5e:c9:3d:32:56:b1:fe:49:76:78:ba:a1:a0:a7:
         ce:3d:d1:6a:01:54:ba:00:21:ea:c6:96:c1:7f:3d:54:4c:f9:
         4e:e2:fb:68:b2:7d:de:64:68:66:99:57:0a:0b:01:cb:e8:75:
         20:c3:fc:fa:61:04:55:15:22:e4:93:df:2e:61:b2:ed:74:a0:
         6a:2c:bc:e6:8e:d0:94:f7:8e:6f:32:7a:70:07:a5:fd:88:55:
         a8:0c:83:7f:0e:02:61:78:79:b8:01:b8:a7:e5:37:a9:ea:9c:
         75:fa:e9:c5:08:31:3c:d8:3c:10:df:a5:90:fc:ff:2a:b0:7d:
         2f:d8:47:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:58 2026 by rpki-client