Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
File:                     B3vNZjsOY7316bgJr3Gu8eWt9js.mft (raw, json)
Hash identifier:          WaD5iU8xN6yflIVSU8jMfbKfcD8YmLWDHUkr26u8njA=
Subject key identifier:   35:96:1C:7D:0C:EF:EC:82:15:42:2E:B3:4E:BF:2A:3C:75:41:05:A6
Authority key identifier: 07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B
Certificate issuer:       /CN=A9134309/serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
Certificate serial:       F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
Manifest number:          EA
Signing time:             Wed 19 Aug 2026 07:10:45 +0000
Manifest this update:     Wed 19 Aug 2026 07:10:45 +0000
Manifest next update:     Wed 26 Aug 2026 07:10:45 +0000
Files and hashes:         1: B3vNZjsOY7316bgJr3Gu8eWt9js.crl (hash: rDDzNvys4dVIxdxgKToJs95XHsjHIK4G+8P6uioROZs=)
                          2: 13CC532280EC11F0A973810CC4F9AE02.roa (hash: JqgQRdLeaIMLexLk5Sg27CS93/2/7D3KXGP9opjlvo0=)
                          3: 0322BF5A6D3411F0A208C05DC4F9AE02.roa (hash: S+CNDCXqBAPQY2/ZroCNVvDaAZiKggJqTG4IMa7VBfA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl
                          rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 07:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134309, serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
        Validity
            Not Before: Aug 19 07:10:45 2026 GMT
            Not After : Aug 26 07:10:45 2026 GMT
        Subject: CN=6a8556f5-1d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:7f:16:78:bb:c2:17:dc:73:8e:f5:77:03:32:
                    fe:96:62:ff:6d:44:a2:95:83:13:c5:04:84:af:06:
                    d1:ac:cf:0c:63:d4:f9:b9:84:fe:b3:87:ef:bd:c6:
                    f1:b2:c2:b0:e1:b9:a0:99:96:c6:32:21:fa:1e:be:
                    3a:d5:df:87:1a:18:b8:f8:66:9f:dc:c5:1b:53:35:
                    13:3b:d3:33:03:40:fb:4a:3b:36:1d:75:f6:54:1f:
                    98:e9:49:5a:21:5a:e2:df:7a:73:93:e8:03:db:87:
                    62:91:e4:62:a4:e8:fe:c5:38:bc:1a:56:08:6b:af:
                    cc:69:44:68:84:2a:a2:87:aa:c2:57:9c:49:5a:26:
                    60:43:e4:18:ae:ad:09:da:57:47:37:79:fa:56:21:
                    31:a3:a5:38:78:21:1e:d3:69:15:33:e3:70:7e:71:
                    3d:7b:f9:69:e7:ca:4c:6d:39:ed:94:a9:59:a2:9c:
                    8c:43:02:9e:2a:1c:8e:d9:70:2a:54:c3:d0:ec:82:
                    c9:14:bd:0c:01:62:64:f6:9f:36:3c:16:10:09:ae:
                    b1:c7:c2:d7:42:12:47:5e:fb:4c:db:ed:80:37:74:
                    b1:c3:bb:5f:f2:6f:52:0c:c1:53:63:55:e9:c2:2b:
                    25:3e:84:27:52:0f:b8:76:7d:b2:ce:b2:34:94:92:
                    8f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:96:1C:7D:0C:EF:EC:82:15:42:2E:B3:4E:BF:2A:3C:75:41:05:A6
            X509v3 Authority Key Identifier:
                keyid:07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:72:b2:c7:ff:51:fa:03:ae:c5:02:1a:e3:5b:5a:2f:6d:c0:
         c4:8b:97:ea:b0:4d:2b:a0:a7:e4:e7:4f:04:05:7d:c0:9a:f2:
         72:a6:b4:45:62:38:e3:63:f7:83:ff:cf:45:30:5e:ca:38:23:
         30:60:2a:6b:2b:c0:40:c9:31:49:bc:93:a4:45:95:98:ca:6e:
         e1:3c:02:28:9a:6b:67:96:cc:bf:26:ae:b8:0b:7d:77:79:59:
         c6:8d:19:07:2c:64:c8:12:eb:06:ad:84:df:c0:4c:f1:55:46:
         a0:6d:50:64:ee:52:11:02:74:b3:54:a1:10:fd:e8:9c:14:8a:
         50:b9:cf:64:5c:f2:d6:7d:d1:39:c4:77:7e:55:0d:a7:17:10:
         5a:2a:04:98:6b:f8:71:b4:89:f4:a0:9b:69:6b:0a:d5:87:49:
         48:60:0d:e0:9f:24:75:b2:a2:3e:6f:91:93:d6:a9:ba:4f:31:
         31:f4:88:7d:6b:80:ab:9b:d5:36:71:64:40:9a:ea:d6:68:95:
         62:37:a5:d0:80:af:1e:9b:da:97:27:23:74:8d:3f:41:88:b0:
         33:cb:5f:09:aa:10:38:ce:b5:3e:4a:aa:0c:e5:30:77:91:b6:
         66:44:f9:91:3b:5a:3f:8a:e0:af:94:3e:37:21:05:e9:ab:a9:
         d6:d0:16:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:00:04 2026 by rpki-client