Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.mft
File:                     rSHioIh9gBBYg2nxR4WWAoR3zb4.mft (raw, json)
Hash identifier:          Yaou1v8IpCz7ODt4q9Wy4XH4hnMeKvohjf092KQ4XPc=
Subject key identifier:   CF:CE:DC:07:D2:E3:E1:D5:50:89:72:F7:EA:A5:0E:BB:AD:42:80:43
Authority key identifier: AD:21:E2:A0:88:7D:80:10:58:83:69:F1:47:85:96:02:84:77:CD:BE
Certificate issuer:       /CN=A913344F/serialNumber=AD21E2A0887D8010588369F1478596028477CDBE
Certificate serial:       11B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHioIh9gBBYg2nxR4WWAoR3zb4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.mft
Manifest number:          11AA
Signing time:             Fri 04 Sep 2026 17:08:15 +0000
Manifest this update:     Fri 04 Sep 2026 17:08:14 +0000
Manifest next update:     Fri 11 Sep 2026 17:08:14 +0000
Files and hashes:         1: rSHioIh9gBBYg2nxR4WWAoR3zb4.crl (hash: 7BkuVP2gkfA3Uyv83BUUU6kSrhzg8nyCp2ZhG5FoRGA=)
                          2: 2CDBC1B0251111E997B74770C4F9AE02.roa (hash: /FP64PwMxeWgm0N8c4GVP/FLJobB8jyGVkFe2s5ljxI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.crl
                          rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHioIh9gBBYg2nxR4WWAoR3zb4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 17:08:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4533 (0x11b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913344F, serialNumber=AD21E2A0887D8010588369F1478596028477CDBE
        Validity
            Not Before: Sep  4 17:08:14 2026 GMT
            Not After : Sep 11 17:08:14 2026 GMT
        Subject: CN=6a9afaff-159b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:34:a3:bc:0e:e0:38:77:2d:58:46:66:2a:70:
                    c2:cc:59:0b:52:41:0f:e9:84:fa:8e:34:ca:a3:cc:
                    f2:27:03:2e:cb:ce:6b:0e:e2:d1:b7:6a:7b:8a:b0:
                    45:6a:36:9e:94:57:15:0b:e8:96:13:61:d4:f4:af:
                    9f:11:43:39:da:98:57:df:f9:3a:5f:56:e4:74:a1:
                    e7:2c:03:6a:79:55:65:4d:d6:58:67:8a:5b:2d:29:
                    12:39:db:20:6f:40:93:b2:d0:e5:a5:01:ad:39:c9:
                    0a:f1:d8:6a:db:aa:dd:b5:3e:e9:a9:4f:dc:b4:90:
                    e6:69:ca:64:37:03:df:c1:c8:d9:93:df:b0:bd:89:
                    af:fa:58:6c:02:e4:0b:e8:d7:ae:30:b7:23:41:e0:
                    53:54:3c:c9:7d:64:16:2c:e2:a4:5b:45:6c:27:8b:
                    4c:8e:43:6c:08:8a:3c:8e:54:6b:12:18:03:de:f3:
                    30:5b:57:74:9e:f8:cf:eb:6f:b0:13:6d:61:e7:bc:
                    fe:fc:20:b7:a5:2f:03:e9:95:39:b9:f4:43:43:c4:
                    13:b2:85:61:d9:44:a9:9f:19:e6:57:fb:38:2f:c6:
                    39:ab:df:d6:42:9d:7d:58:c4:aa:66:3b:4b:5f:8c:
                    0d:23:91:b0:48:9d:9f:85:11:41:e3:6f:90:68:41:
                    7f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CE:DC:07:D2:E3:E1:D5:50:89:72:F7:EA:A5:0E:BB:AD:42:80:43
            X509v3 Authority Key Identifier:
                keyid:AD:21:E2:A0:88:7D:80:10:58:83:69:F1:47:85:96:02:84:77:CD:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHioIh9gBBYg2nxR4WWAoR3zb4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:b3:94:4e:dd:c1:d6:f3:52:a2:1f:22:77:93:00:da:f6:a9:
         de:91:e9:6c:01:2b:80:66:da:c3:86:c5:3f:7c:ce:ed:6a:09:
         4a:4b:6b:d6:04:55:b6:af:3e:17:19:4f:08:f7:4f:48:0a:92:
         01:67:3f:86:80:bd:db:78:fb:fb:c0:f9:24:63:b0:30:49:2f:
         f8:d4:85:60:39:03:3d:15:fc:0f:fd:a7:02:ab:1f:62:44:9c:
         24:c1:c3:02:df:b6:0e:3b:d6:62:89:69:a0:c6:d0:84:62:0b:
         97:69:aa:f7:4f:e1:6f:ec:3b:1d:db:72:6a:fe:8d:b5:89:5b:
         72:19:6b:e2:ca:20:8d:c6:ed:5a:ac:02:77:99:89:40:5b:25:
         c7:d5:d0:b8:2f:35:73:eb:0d:5e:57:a8:13:ac:26:71:5e:1c:
         b6:38:7a:9a:e0:b9:5e:16:5b:81:c8:53:99:42:e5:e5:99:1c:
         e8:83:35:38:7f:45:3a:a3:69:f0:b0:a9:2b:8c:6e:58:c0:82:
         bc:e4:bf:14:36:0f:cf:13:06:3a:29:79:57:f1:74:59:4d:df:
         93:cc:9a:62:49:a2:da:89:63:0f:4d:e7:bf:74:da:65:34:a0:
         d4:5a:1f:23:ee:42:1e:58:d0:3a:2f:58:9b:fc:21:86:25:21:
         98:d0:80:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:26:03 2026 by rpki-client