Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft
File:                     eHZtYCpA71cBQmhKcj6KNAxv84I.mft (raw, json)
Hash identifier:          aB1coU1tzpM30HhfFTzPSsVcJlSNcEYdzdN+3RSsujI=
Subject key identifier:   89:13:C4:D3:8F:5D:48:4C:30:2B:F2:6A:2F:6E:46:B2:E5:2C:5A:48
Authority key identifier: 78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82
Certificate issuer:       /CN=A912A70D/serialNumber=78766D602A40EF570142684A723E8A340C6FF382
Certificate serial:       052D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft
Manifest number:          0526
Signing time:             Mon 10 Aug 2026 23:10:17 +0000
Manifest this update:     Mon 10 Aug 2026 23:10:16 +0000
Manifest next update:     Mon 17 Aug 2026 23:10:16 +0000
Files and hashes:         1: eHZtYCpA71cBQmhKcj6KNAxv84I.crl (hash: P6TGj+UzSLj76AXGQiP+6E7QmluEqkndDac+clVp+lE=)
                          2: 90AE61AC595711EC8761C361C4F9AE02.roa (hash: IKkH75+WRK2fgAHZzJYi1Oy9QxIGYcWmXMPe96PnP4E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl
                          rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 17 Aug 2026 23:10:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1325 (0x52d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A70D, serialNumber=78766D602A40EF570142684A723E8A340C6FF382
        Validity
            Not Before: Aug 10 23:10:16 2026 GMT
            Not After : Aug 17 23:10:16 2026 GMT
        Subject: CN=6a7a5a58-d5a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5f:40:dd:6c:ad:c6:46:f3:bc:d2:b3:30:46:
                    10:ff:e8:19:32:6b:8a:e9:78:93:87:93:80:de:9d:
                    a1:fe:19:44:cc:27:d0:3b:f5:9e:0f:17:24:c3:60:
                    ba:79:e3:9c:36:ae:4a:e5:c4:28:41:fe:37:7c:21:
                    5c:4d:9b:0d:db:2e:01:1b:70:b8:52:a8:9a:da:7d:
                    70:3c:13:8f:6e:7b:ad:6c:4c:44:06:bf:c3:70:35:
                    6c:34:da:fe:73:d5:cc:0f:2b:aa:64:3a:3c:d6:e3:
                    4f:13:e5:e9:d3:d9:15:64:8a:ea:56:ab:d1:19:d6:
                    80:8e:94:97:33:e6:2e:3c:68:03:5e:9d:2b:99:24:
                    0f:e7:3c:86:7e:52:3c:04:aa:c4:69:ed:75:75:d0:
                    48:db:b3:6f:33:45:3c:d1:6f:81:df:d0:e8:58:56:
                    d1:0c:b3:e3:a3:9f:4b:73:98:35:a9:61:ce:61:9f:
                    13:54:39:56:eb:58:c9:83:8f:11:c7:ed:2e:3b:bc:
                    f7:cd:82:c7:fe:0f:1f:20:bb:60:65:d4:bc:75:6d:
                    3d:57:bc:66:b4:2f:c3:39:fe:c5:55:be:3f:ea:29:
                    ce:b3:4f:33:fc:26:29:cb:ff:01:69:25:7e:21:5b:
                    c0:5e:f4:0e:d8:28:2b:fb:f7:d7:d8:0b:64:2e:49:
                    c4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:13:C4:D3:8F:5D:48:4C:30:2B:F2:6A:2F:6E:46:B2:E5:2C:5A:48
            X509v3 Authority Key Identifier:
                keyid:78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:07:08:aa:f6:0e:40:18:28:1d:f1:0e:27:5e:a0:97:03:0f:
         05:e5:30:79:64:81:3f:f4:68:70:72:08:d8:97:e4:fb:ba:bb:
         70:72:c3:2e:e2:ec:34:35:cb:2e:ab:0b:01:10:8d:c6:59:c8:
         6a:c6:81:bc:55:33:0a:2c:4c:04:da:ef:9d:f0:52:f2:18:38:
         a7:dd:b8:69:b2:a9:98:c1:4c:cf:f5:6b:dd:9e:bf:b6:2d:96:
         ab:f2:b0:88:ab:95:4d:be:92:ef:ca:16:80:0c:b8:a0:f2:8f:
         7b:f3:af:d5:35:dd:00:d8:a9:b3:8d:38:63:ff:bc:a6:e7:1f:
         f1:40:2d:f1:03:6b:e3:27:58:49:f0:21:7a:74:39:39:9f:09:
         09:d5:fa:12:53:b5:5e:d8:47:93:34:cf:93:0a:1a:d8:c2:1f:
         fc:26:cc:b7:7d:83:00:7d:0f:05:d1:94:36:15:4d:8e:16:b1:
         5b:2d:8b:5c:de:90:e6:1b:d0:b8:a0:55:1e:05:dd:86:9f:ac:
         58:8e:5f:96:9d:b2:48:b7:b5:3e:4f:b6:a1:6b:d9:ce:cb:3a:
         d5:c8:01:34:dc:c1:3c:80:c0:31:68:70:3e:2c:c0:87:27:f4:
         33:9b:86:b7:91:45:37:4d:e4:93:c7:9c:48:b5:59:2e:50:bb:
         ef:e5:ab:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 07:21:06 2026 by rpki-client