Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft
File:                     zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft (raw, json)
Hash identifier:          WuWelOmlEeQSKaMJaNWdOpaxS7vRaidm/7t33p65d+8=
Subject key identifier:   F9:1D:E7:FA:C7:BA:1B:9A:7F:10:4E:E9:55:8B:B5:8C:CA:35:6A:9E
Authority key identifier: CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4
Certificate issuer:       /CN=A912BE4E/serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4
Certificate serial:       0686
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft
Manifest number:          0685
Signing time:             Tue 18 Aug 2026 22:51:45 +0000
Manifest this update:     Tue 18 Aug 2026 22:51:45 +0000
Manifest next update:     Tue 25 Aug 2026 22:51:45 +0000
Files and hashes:         1: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl (hash: upxxm/BacoC8GbzROKM3JZh7vNqJsoTEGlW325BSBaQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl
                          rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 22:51:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1670 (0x686)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BE4E, serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4
        Validity
            Not Before: Aug 18 22:51:45 2026 GMT
            Not After : Aug 25 22:51:45 2026 GMT
        Subject: CN=6a84e201-6d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:05:00:d6:34:01:ea:a4:89:30:80:2d:e5:b1:
                    09:48:1f:fb:f5:d0:82:b7:09:93:34:97:c6:04:a5:
                    10:7a:a8:8d:26:e0:3c:70:ab:b7:5e:3a:b3:fa:cc:
                    24:0e:f5:de:59:89:4d:0d:c8:a1:be:c7:d8:3d:ea:
                    0c:b3:39:f2:cd:9b:7e:29:d3:d3:3f:30:02:bf:61:
                    2a:ec:23:04:d0:a8:63:f9:a9:53:6e:68:d5:bb:ca:
                    5e:c8:50:76:1c:36:67:23:a2:48:93:14:97:d5:dd:
                    a0:77:3a:d0:59:72:6d:d3:a6:9e:c6:2e:10:cf:f4:
                    12:b5:0e:7f:9f:49:88:d7:aa:f1:21:3e:9b:59:fc:
                    cf:08:8d:dd:8a:e9:bb:e0:cb:0a:0f:5f:78:74:c3:
                    37:36:28:dc:45:7d:01:74:97:68:48:01:70:a9:40:
                    dd:12:34:9b:b6:da:a9:74:5d:95:26:2c:68:e5:ab:
                    83:d6:59:ee:8b:85:ff:df:3f:e9:c1:4d:e6:b5:d1:
                    54:20:eb:72:b4:63:a6:7e:f4:03:fc:20:1a:28:8f:
                    57:e2:c0:ed:57:b0:a2:30:c4:3b:13:a6:f1:26:6d:
                    db:ed:38:74:0a:c0:90:58:63:c1:4b:f4:2b:eb:49:
                    ab:91:bb:f2:02:cb:55:6c:06:19:99:a6:83:51:45:
                    77:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1D:E7:FA:C7:BA:1B:9A:7F:10:4E:E9:55:8B:B5:8C:CA:35:6A:9E
            X509v3 Authority Key Identifier:
                keyid:CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:5a:68:b6:74:e0:c6:bf:e0:e2:a1:7a:0e:ac:77:a8:0d:43:
         4e:46:ad:e7:12:16:41:64:44:91:69:26:2e:4d:8a:4e:96:95:
         75:8a:40:70:a0:51:f7:6f:50:d4:85:9e:d5:b3:bc:3a:04:14:
         3c:ad:2d:ee:fe:72:c0:e3:78:d7:f8:5e:af:b6:b9:4b:72:e3:
         3c:75:fe:17:30:f8:bb:3c:4a:3c:a2:96:6d:43:e6:38:54:69:
         3b:b0:d3:35:d8:a4:14:4d:d9:7d:83:69:43:fc:58:4c:27:f6:
         a4:07:d3:49:3a:1c:03:cc:4f:32:2f:51:80:12:d2:ed:23:3b:
         7a:09:76:ce:45:8b:0a:59:18:5a:a9:4e:c0:4e:73:3b:15:58:
         8d:22:0a:6b:3e:68:44:b0:b4:84:f6:a4:34:5b:83:d8:1b:a2:
         43:9e:20:a7:d5:55:4b:a2:14:9c:eb:3b:9e:7b:cf:10:72:16:
         87:99:84:cc:c2:00:b8:55:96:0d:f7:a7:62:4e:02:8f:42:f6:
         18:74:ff:bb:a4:80:e1:24:89:dc:96:d0:a7:93:bc:61:6b:0c:
         10:75:b4:e5:99:cd:32:ee:ab:3d:23:35:3a:11:63:9f:38:35:
         0b:2e:39:41:fb:28:4f:92:1a:ce:4e:e7:3f:f3:fd:ee:42:5a:
         d4:4a:82:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:03 2026 by rpki-client