Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
File:                     -xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft (raw, json)
Hash identifier:          Xxuksn4xSCQUUifNLp6VPI708wIWggjM+5KPz7RBIzU=
Subject key identifier:   E9:FF:DF:48:13:10:FB:97:F6:95:6A:60:C5:AD:DE:48:4F:3D:3C:47
Authority key identifier: FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51
Certificate issuer:       /CN=A912FF6F/serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451
Certificate serial:       0350
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
Manifest number:          034A
Signing time:             Wed 19 Aug 2026 01:20:47 +0000
Manifest this update:     Wed 19 Aug 2026 01:20:46 +0000
Manifest next update:     Wed 26 Aug 2026 01:20:46 +0000
Files and hashes:         1: -xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl (hash: N6bpGI26/H1QhpEHAy31xrhoiQtqNFXHA5sXRFWRpW8=)
                          2: 6D5014F2146F11EDB756F727C4F9AE02.roa (hash: TySZorzlUffDWiVydytqIF+kF8CT3lkkirsLcfRGKOM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl
                          rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 848 (0x350)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FF6F, serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451
        Validity
            Not Before: Aug 19 01:20:46 2026 GMT
            Not After : Aug 26 01:20:46 2026 GMT
        Subject: CN=6a8504ee-5420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d3:eb:fc:37:f0:a5:a2:a1:8f:43:9b:60:f2:
                    50:f0:1d:5c:b5:ad:cc:f3:a8:b2:dc:52:24:e5:26:
                    11:cf:ea:10:02:0c:3d:4b:c2:b8:fc:49:24:5c:00:
                    1f:90:94:31:cf:9a:ec:5b:a9:e0:bd:f0:79:17:e8:
                    b1:94:c2:7c:d6:9e:57:f0:7c:b5:2c:33:80:ae:92:
                    b0:0f:b1:10:39:a5:95:ab:00:ce:ed:3c:6f:b8:c8:
                    d8:c2:47:6c:dc:2b:5b:ae:38:86:c3:51:51:4e:83:
                    2f:20:b6:31:ef:6a:dc:65:cb:82:a3:80:ff:65:67:
                    ec:a7:e0:cf:be:92:d5:db:f2:26:26:5a:ea:5c:3f:
                    2d:df:e3:e8:1e:44:20:db:db:d4:3c:33:5e:00:ff:
                    a6:3d:f0:2f:e6:de:77:55:c9:23:8a:e9:f4:1e:5a:
                    b8:7d:84:ed:a4:f4:36:e0:41:1c:b3:f9:c4:0e:d0:
                    c0:2e:e6:1f:17:d8:39:73:01:c6:12:52:a4:c3:cb:
                    91:6c:b5:59:43:d7:81:1a:42:0d:2f:9c:6d:a6:61:
                    86:50:69:ea:5c:c0:4d:a4:ad:8a:b8:ec:a3:12:05:
                    9a:0a:2b:af:08:68:34:83:f3:70:f5:a2:ce:61:e5:
                    eb:55:87:4c:97:07:fb:24:0f:b5:4a:2c:55:99:bc:
                    77:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FF:DF:48:13:10:FB:97:F6:95:6A:60:C5:AD:DE:48:4F:3D:3C:47
            X509v3 Authority Key Identifier:
                keyid:FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:47:ab:ec:9d:38:fb:41:34:f3:95:08:75:57:3f:59:b2:e2:
         f2:f6:5b:5a:df:20:f8:48:56:47:68:ad:71:e5:35:f1:68:1a:
         cd:49:05:97:3d:53:7b:88:ea:ce:46:96:cc:c4:25:99:3e:96:
         9d:b7:a7:43:72:59:9c:d9:cc:85:6b:74:e6:53:16:e6:88:a2:
         09:53:51:da:97:76:ad:08:83:ab:5a:2b:b2:b8:ed:e1:1f:d3:
         09:f3:8c:3b:78:7b:51:77:20:80:af:fc:c3:49:59:c1:06:77:
         f0:08:3d:56:b4:bb:36:5c:5a:28:fc:0d:df:88:57:e2:4e:55:
         74:cd:cb:b4:7e:cb:23:ac:9b:f6:89:3d:fd:60:a2:45:10:6b:
         23:1e:7e:36:29:42:1e:a1:c1:50:2d:73:b7:18:00:02:ae:92:
         49:1d:72:17:0e:1d:0c:44:a3:98:e9:b7:56:f0:7e:84:6d:59:
         7d:24:7c:e2:6a:e5:ea:31:ba:10:bd:51:f5:4e:fb:43:f5:35:
         4a:41:fe:6e:3c:3c:b8:15:d3:b3:5e:ce:e6:bc:96:fa:b9:3b:
         d4:b4:d7:09:80:d0:7c:5c:20:90:ed:c6:6f:f5:ee:ab:64:bc:
         77:8e:8a:d9:89:4b:75:74:dd:fa:19:66:3d:41:5e:30:66:f2:
         24:3b:4c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:21 2026 by rpki-client