Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft
File:                     F7t0v8FLOUo_7aIb2MhcQePFu_E.mft (raw, json)
Hash identifier:          La9u5jX3g0I+BuI62672bxQ3dMfoEMlTSBU1NDmxnkI=
Subject key identifier:   F5:A8:76:D6:F4:9D:39:FA:BF:54:73:76:09:74:6E:E8:DC:8F:2E:72
Authority key identifier: 17:BB:74:BF:C1:4B:39:4A:3F:ED:A2:1B:D8:C8:5C:41:E3:C5:BB:F1
Certificate issuer:       /CN=A912BFC5/serialNumber=17BB74BFC14B394A3FEDA21BD8C85C41E3C5BBF1
Certificate serial:       3570
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft
Manifest number:          3570
Signing time:             Tue 18 Aug 2026 14:16:48 +0000
Manifest this update:     Tue 18 Aug 2026 14:16:47 +0000
Manifest next update:     Tue 25 Aug 2026 14:16:47 +0000
Files and hashes:         1: F7t0v8FLOUo_7aIb2MhcQePFu_E.crl (hash: dreW5jY944Cx5/UnE8AG1fz5DPka2WC8dj/MxBkpUfs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.crl
                          rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 14:16:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13680 (0x3570)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BFC5, serialNumber=17BB74BFC14B394A3FEDA21BD8C85C41E3C5BBF1
        Validity
            Not Before: Aug 18 14:16:47 2026 GMT
            Not After : Aug 25 14:16:47 2026 GMT
        Subject: CN=6a846950-e37f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a2:dc:42:85:cb:0b:76:e8:35:6c:56:fb:bf:
                    85:10:33:3e:1f:c6:38:76:aa:9c:4d:ef:5e:40:57:
                    44:cd:56:58:00:95:71:51:19:5b:9f:39:8e:3d:41:
                    e8:26:b3:a9:00:4b:dc:c3:c5:93:2f:3c:bb:bf:05:
                    23:38:7a:ad:9c:6e:49:f9:0b:43:0e:3a:45:8b:d1:
                    3b:19:20:0a:fe:32:fd:54:e1:a3:bf:d8:17:6b:8f:
                    05:b8:8a:9a:95:5d:09:de:a9:38:63:aa:44:a1:87:
                    c5:d9:05:57:56:0f:56:cc:fe:85:b5:d8:11:cc:79:
                    ac:22:d0:d6:b1:a8:b9:1e:13:49:33:35:34:4a:70:
                    34:f0:06:8a:50:53:fe:d4:b6:25:31:64:a6:9f:b7:
                    c0:b5:af:d0:5b:5e:c9:1f:fe:eb:7b:e5:fe:57:76:
                    40:6c:41:89:0f:dd:d6:e6:4e:ed:9a:e5:f7:ce:d8:
                    2d:7e:5d:e6:0b:43:58:7f:71:4d:28:b3:fc:37:c4:
                    cc:1c:9b:6b:23:1c:e7:31:86:9e:c2:33:35:7a:4d:
                    ee:d6:82:03:66:54:c6:56:6a:2f:f6:7c:e5:7d:e1:
                    84:87:3b:6f:a4:0d:87:27:7b:8f:9b:c7:9d:fd:5d:
                    5d:2b:a2:21:9b:ca:5c:22:9a:8d:dc:ae:8c:71:c3:
                    56:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A8:76:D6:F4:9D:39:FA:BF:54:73:76:09:74:6E:E8:DC:8F:2E:72
            X509v3 Authority Key Identifier:
                keyid:17:BB:74:BF:C1:4B:39:4A:3F:ED:A2:1B:D8:C8:5C:41:E3:C5:BB:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:0c:b8:b1:64:03:9b:96:92:19:23:4f:36:1e:84:a8:a9:7e:
         12:69:ba:7a:f4:08:1b:3c:1f:23:88:04:bf:3b:d0:b5:7d:bd:
         fa:33:08:8a:6f:54:cb:95:28:ce:b5:53:fd:ac:3c:d3:26:2b:
         84:0f:c6:43:61:53:60:81:52:c1:94:c7:30:63:48:cd:2b:f1:
         0a:96:07:22:84:bf:c6:aa:67:eb:f8:e5:f1:d5:40:41:21:93:
         db:7e:3c:ea:0c:9a:73:92:86:b2:90:ec:22:f3:8c:f6:28:e7:
         69:b8:ed:e4:8b:41:73:30:53:2b:1f:5e:b4:de:d7:f9:c0:3a:
         6a:3f:a2:ba:07:ad:83:46:8f:85:1c:75:20:16:bd:be:1f:b3:
         2e:1d:8a:1a:56:e9:b4:38:bd:d9:90:fb:1b:e5:f1:6d:0d:c5:
         4c:62:6c:f8:1a:ae:e9:d4:22:6c:99:d9:be:07:9f:e6:67:8f:
         53:a2:c7:14:95:41:99:32:31:b9:0e:b1:1e:00:0a:0a:10:69:
         3e:27:72:bc:7f:46:e8:23:67:95:83:9f:cd:3f:0f:00:69:b7:
         0e:0d:d0:8f:73:40:8f:56:02:74:5e:1d:3c:97:f9:1d:9a:a8:
         9c:93:db:6d:0d:97:0f:66:5d:13:6a:cd:52:6c:a0:0d:40:d4:
         a9:ae:c6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:47:49 2026 by rpki-client