Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.mft
File:                     pGlL5HxPO8lIBdSjZqAHxpBwUS4.mft (raw, json)
Hash identifier:          SfHPoZ8sKB4KoiCxECxeU76x9RTemP1SUyQmlswTsoY=
Subject key identifier:   23:45:CF:B4:CB:25:F5:52:E3:74:12:C8:6C:72:09:24:DB:12:5B:CD
Authority key identifier: A4:69:4B:E4:7C:4F:3B:C9:48:05:D4:A3:66:A0:07:C6:90:70:51:2E
Certificate issuer:       /CN=A9131EDD/serialNumber=A4694BE47C4F3BC94805D4A366A007C69070512E
Certificate serial:       076B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGlL5HxPO8lIBdSjZqAHxpBwUS4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.mft
Manifest number:          075E
Signing time:             Tue 18 Aug 2026 22:02:26 +0000
Manifest this update:     Tue 18 Aug 2026 22:02:26 +0000
Manifest next update:     Tue 25 Aug 2026 22:02:26 +0000
Files and hashes:         1: pGlL5HxPO8lIBdSjZqAHxpBwUS4.crl (hash: 1DwW+pTLJnn55mmHeZy/VrG8XT93TFQ06iCfak44gnc=)
                          2: E84DCBC422D211EDAF1F924EC4F9AE02.roa (hash: pwlC3i6Dw77h4VjdOciKa1OoCdf0YqgEjmXujNfwxJs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.crl
                          rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGlL5HxPO8lIBdSjZqAHxpBwUS4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 22:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1899 (0x76b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131EDD, serialNumber=A4694BE47C4F3BC94805D4A366A007C69070512E
        Validity
            Not Before: Aug 18 22:02:26 2026 GMT
            Not After : Aug 25 22:02:26 2026 GMT
        Subject: CN=6a84d672-147b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:46:1c:e0:53:53:9b:1e:02:3d:08:36:4d:ac:
                    4f:b3:65:d5:78:73:27:69:dd:a6:76:99:37:ea:14:
                    cc:90:9f:48:27:e5:8d:21:26:df:1f:dc:f0:b3:ed:
                    0e:b8:7d:c6:25:26:42:ed:ff:1c:d7:80:d4:e9:57:
                    fd:53:a2:20:1e:9d:99:b1:53:f5:35:f8:5e:7a:18:
                    9f:77:25:e8:95:23:a6:7d:e6:c2:48:41:ac:a3:2a:
                    64:31:d6:f7:ca:bb:4a:b1:bf:ee:0a:53:82:7a:de:
                    28:8c:a6:3c:a1:d1:34:d0:26:37:0c:4a:1d:9e:7c:
                    9b:e9:d6:4e:a4:a8:44:31:36:bc:7d:8b:df:fd:7e:
                    d7:e3:8f:68:84:0b:43:ff:b6:0f:38:e9:39:dd:e2:
                    3c:bd:a2:49:ad:08:b3:12:22:89:bb:7c:5d:c6:32:
                    89:f1:35:0a:e5:39:52:70:00:ff:76:10:45:35:17:
                    05:21:a2:bb:43:1d:80:2c:4f:be:7b:1e:16:4a:3e:
                    1c:8b:94:1b:10:84:f2:c7:d6:7a:8d:90:9a:77:1e:
                    4c:c8:29:63:7d:cc:20:46:fa:5c:cf:01:20:20:95:
                    fc:3d:09:a4:65:f0:7b:22:3f:7d:7d:14:74:68:8c:
                    d3:b1:77:8f:ca:d9:ba:c1:19:bb:cf:1e:75:4f:44:
                    5f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:45:CF:B4:CB:25:F5:52:E3:74:12:C8:6C:72:09:24:DB:12:5B:CD
            X509v3 Authority Key Identifier:
                keyid:A4:69:4B:E4:7C:4F:3B:C9:48:05:D4:A3:66:A0:07:C6:90:70:51:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGlL5HxPO8lIBdSjZqAHxpBwUS4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:2f:7d:82:c6:58:e2:0a:73:fd:63:6f:e9:2b:8c:b3:66:61:
         d4:cf:09:65:be:a6:d0:df:1f:2b:98:b4:71:2e:be:a2:11:a3:
         51:59:85:a7:bc:1f:cc:91:db:d0:32:04:f5:bf:89:37:23:36:
         90:af:ff:6b:ea:19:8a:c9:e1:3e:b6:30:cd:94:15:ca:ae:f1:
         61:49:c3:33:60:63:84:ed:05:c6:06:44:f8:4c:74:45:b9:11:
         3f:4e:c4:d4:66:bb:81:f8:2c:97:42:d8:77:a0:2d:64:d6:79:
         fd:14:f7:8a:cb:d7:22:b2:b7:38:fd:81:ef:f7:8d:63:fa:23:
         62:19:0b:8b:a9:67:ea:7c:85:2b:81:a9:4b:a8:1c:a4:59:b9:
         ec:32:55:ad:d3:c8:25:66:b2:47:cf:ab:9f:28:1a:59:2f:0f:
         e1:3c:62:a7:f6:61:26:c9:88:b4:a9:53:e8:2a:1b:6a:fb:f1:
         f4:d3:81:4a:00:b4:10:cb:b2:47:cd:4b:23:17:a1:09:c3:f4:
         b6:97:92:63:e0:88:5c:df:a3:f8:b7:93:8c:68:c5:c3:cc:af:
         7e:bb:5d:ac:0c:08:56:65:e1:18:67:2d:c4:31:f4:ce:94:14:
         32:f5:2a:db:65:3e:ee:37:1d:30:5f:b0:93:41:dd:98:20:53:
         dd:bd:37:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:08 2026 by rpki-client