Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
File:                     yQm9soTk3whHdmDWgrfLP1lIMeM.mft (raw, json)
Hash identifier:          kOthAv4pw4+t05qKvf0Cy0tYTGb8b1pcJOt9Cxxxsvw=
Subject key identifier:   48:65:F7:F5:7C:76:A3:86:EC:6B:FD:AF:D6:D4:E4:2E:F0:A7:55:23
Authority key identifier: C9:09:BD:B2:84:E4:DF:08:47:76:60:D6:82:B7:CB:3F:59:48:31:E3
Certificate issuer:       /CN=A912BD25/serialNumber=C909BDB284E4DF08477660D682B7CB3F594831E3
Certificate serial:       0CE7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
Manifest number:          0CDB
Signing time:             Tue 18 Aug 2026 18:42:53 +0000
Manifest this update:     Tue 18 Aug 2026 18:42:53 +0000
Manifest next update:     Tue 25 Aug 2026 18:42:53 +0000
Files and hashes:         1: yQm9soTk3whHdmDWgrfLP1lIMeM.crl (hash: GPtjTx7nMp7Z8sW3yhZyxHE77sdOvUTmMQvhL8wnntY=)
                          2: CF3378E272DB11ED8483E95DC4F9AE02.roa (hash: k4o/xpl05MWpxfINsWsD9ge7BlRuKXGB+2xC5Rxqzp0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.crl
                          rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:42:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3303 (0xce7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BD25, serialNumber=C909BDB284E4DF08477660D682B7CB3F594831E3
        Validity
            Not Before: Aug 18 18:42:53 2026 GMT
            Not After : Aug 25 18:42:53 2026 GMT
        Subject: CN=6a84a7ad-ce0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e1:f9:0a:47:97:b0:84:5f:38:b1:74:08:89:
                    cd:b6:06:74:6e:e0:35:f5:7c:74:0b:aa:62:7e:61:
                    da:86:84:3d:64:00:7d:f5:79:1c:e9:7b:70:83:a4:
                    c0:d3:99:e3:d1:cd:8b:41:d3:aa:38:92:76:a0:40:
                    79:ee:89:df:f1:89:ce:b0:e8:85:7a:c9:f6:4b:50:
                    12:d7:cf:06:b7:ba:f8:dd:c2:9d:da:f2:5d:96:30:
                    7e:9d:aa:6b:34:60:cd:2f:e4:c7:b7:76:a8:20:a9:
                    43:fc:23:5d:1e:39:ba:70:a2:60:cf:ac:59:b6:bc:
                    ce:46:78:d8:0d:49:49:39:71:f2:c1:76:81:c0:21:
                    72:f8:ee:97:e2:fa:cb:39:60:59:24:e0:72:7e:3d:
                    93:b5:a9:69:22:36:7a:09:49:9e:4c:3a:3a:04:e5:
                    a1:9e:0f:9c:28:18:0c:53:77:96:97:93:47:01:de:
                    ac:6c:ba:07:05:09:c5:45:8b:5f:a2:a8:c4:89:d6:
                    3b:07:e0:26:ab:41:2e:a4:13:b0:ea:5b:64:c6:db:
                    9a:02:b5:22:aa:49:15:4a:13:6d:02:b4:90:8c:f9:
                    d5:55:80:70:0c:25:96:0a:49:fb:26:bc:de:b9:d0:
                    5e:1f:92:4e:fe:44:ad:fd:58:4d:ad:4f:12:f1:8d:
                    1b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:65:F7:F5:7C:76:A3:86:EC:6B:FD:AF:D6:D4:E4:2E:F0:A7:55:23
            X509v3 Authority Key Identifier:
                keyid:C9:09:BD:B2:84:E4:DF:08:47:76:60:D6:82:B7:CB:3F:59:48:31:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:8d:e3:36:54:41:f3:b5:df:aa:dc:7f:81:27:2d:45:18:cb:
         41:3d:f9:3f:80:1d:34:17:f8:2d:ec:b3:e2:30:ef:29:7d:c1:
         58:29:a8:9f:1a:43:ef:81:ee:63:76:0c:7f:13:88:e0:71:18:
         6b:c5:ca:f1:66:15:94:4b:44:71:b1:7a:55:f1:29:dd:0a:e4:
         9a:b5:1c:c7:8c:f5:2a:98:7b:34:b6:ed:d2:92:82:3f:0d:6e:
         e7:51:af:77:f6:2c:0f:7c:4c:93:15:5f:95:42:2b:90:8b:8d:
         21:43:99:2d:25:3c:6d:7a:29:93:61:9d:31:93:bd:2d:bb:88:
         18:63:2d:1b:84:26:79:0e:54:a9:00:fe:63:c2:8d:92:99:0c:
         6e:97:54:9f:10:b3:b7:07:c3:78:86:77:91:4f:52:98:64:06:
         62:6a:17:0f:10:79:46:b3:a0:3f:62:fd:6f:de:dc:be:2c:3c:
         83:76:ef:88:18:9d:08:11:30:8a:35:aa:7c:85:19:4a:b3:a9:
         b7:da:15:f8:8e:f8:3e:1e:61:97:e6:40:aa:32:a0:9e:63:dc:
         bd:a1:9b:bc:6e:8f:58:f3:a8:9a:5f:ef:02:e7:5c:ee:ec:3f:
         cd:16:7f:ae:cc:de:f7:42:72:98:1d:d4:a2:db:2d:de:af:a9:
         5f:fc:d5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:48:16 2026 by rpki-client