Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft
File:                     RCHzqdfkHW9Ht4b90-eojeQrB7k.mft (raw, json)
Hash identifier:          F56Qn++ju39JB2COpIUn1Jx7iGUfU85WYYJJXodmN84=
Subject key identifier:   61:97:03:B3:B8:2C:E9:BA:C0:8B:AB:2A:E0:85:99:CB:B5:F5:40:65
Authority key identifier: 44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9
Certificate issuer:       /CN=A913442A/serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9
Certificate serial:       0396
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft
Manifest number:          038E
Signing time:             Wed 19 Aug 2026 01:05:44 +0000
Manifest this update:     Wed 19 Aug 2026 01:05:43 +0000
Manifest next update:     Wed 26 Aug 2026 01:05:43 +0000
Files and hashes:         1: RCHzqdfkHW9Ht4b90-eojeQrB7k.crl (hash: yrekOp7mFpR804X+mTTMqfa2RBZuUfz1/Vemt8/+Ojo=)
                          2: 0F9DB8E0FC3D11ECAD619C35C4F9AE02.roa (hash: TSieMoGszG5SUgYORyTn0egsepHHBxgsWfXoIbA2Trg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl
                          rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 918 (0x396)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913442A, serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9
        Validity
            Not Before: Aug 19 01:05:43 2026 GMT
            Not After : Aug 26 01:05:43 2026 GMT
        Subject: CN=6a850168-ebb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:aa:3d:40:c9:bb:83:8e:b4:1e:75:07:7b:f6:
                    7e:71:e0:9a:72:79:75:c1:bf:8a:57:5c:8c:40:97:
                    cd:59:92:51:9e:42:aa:ff:9d:35:79:5e:e5:37:5a:
                    19:cb:b0:05:4a:f3:a6:47:09:32:67:10:19:56:ba:
                    2b:1a:14:ca:9a:ca:f6:1a:fb:99:d3:27:57:9b:7c:
                    9c:e3:4e:69:8c:4f:81:e0:ca:3d:8d:b1:00:cc:74:
                    eb:83:61:ac:b7:86:0b:f0:11:3e:cc:37:12:67:b7:
                    e9:86:8e:94:3c:32:f6:5b:bc:82:fc:32:c8:27:ce:
                    8c:5a:22:95:88:e7:f4:2a:2b:34:98:1b:66:1a:0a:
                    08:a5:ef:05:31:0a:07:8d:b9:e0:18:35:15:e4:fe:
                    eb:dc:54:6d:1c:f8:d2:d0:29:0e:50:de:68:bf:12:
                    0e:6e:83:ff:81:0d:05:e0:64:5b:55:98:28:90:79:
                    9c:41:68:f3:03:cc:1e:66:8e:7b:4f:ef:48:ed:f5:
                    13:a2:9d:a2:8e:e5:e9:ed:93:0f:ad:5b:c4:d1:df:
                    bc:58:e8:c2:a2:8d:1f:7a:23:ca:bb:96:b0:26:86:
                    77:6b:39:ea:a9:c1:a1:90:7a:fb:f7:72:ea:09:76:
                    b1:c1:f3:b0:d7:7b:43:cb:75:e3:f2:1a:30:e7:60:
                    1b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:97:03:B3:B8:2C:E9:BA:C0:8B:AB:2A:E0:85:99:CB:B5:F5:40:65
            X509v3 Authority Key Identifier:
                keyid:44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:43:70:53:a1:1a:b3:6a:c2:7c:3d:24:c3:d0:3f:eb:0c:02:
         60:c9:67:c5:cf:0e:e5:bc:13:4a:a3:69:60:96:fd:3d:ba:7f:
         28:8d:80:7f:46:64:bb:20:ce:75:e9:33:f6:0a:ba:76:ab:66:
         86:e1:02:cd:9f:52:5c:28:f4:7f:24:80:f9:01:81:e2:69:97:
         0b:b2:e3:10:05:b5:1f:1c:4e:9b:b9:eb:72:8d:f7:ef:e9:7d:
         49:e6:84:5f:d8:16:f4:85:d2:7d:ee:70:de:a8:ba:36:e7:01:
         8d:af:1c:08:6c:b3:e2:51:7e:00:e9:72:24:6c:df:ae:80:f9:
         fc:49:2f:18:a5:26:8c:9f:85:98:51:fe:39:1a:6e:9e:b3:9f:
         85:7b:b5:b5:04:83:6a:a9:5b:53:4e:7e:68:37:4c:43:29:34:
         d5:49:dd:4c:ad:2d:41:d2:f0:ef:bc:d1:de:00:c9:e7:b6:ad:
         db:73:72:41:96:50:b5:e0:2a:e5:54:b1:ab:34:43:fc:29:63:
         ca:4b:a5:c1:76:5f:f6:8d:bb:ef:a9:6f:cd:b4:42:e6:49:2b:
         a1:b2:51:44:18:30:c6:a1:2b:48:3e:fc:b6:ca:bc:85:6a:07:
         0e:b6:65:8f:f9:3d:44:83:5a:4b:f6:4e:bf:df:0c:b7:e1:59:
         6a:ee:36:dc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQ0MkExMTAvBgNVBAUTKDQ0MjFGM0E5RDdFNDFENkY0N0I3ODZGREQzRTdBODhE
RTQyQjA3QjkwHhcNMjYwODE5MDEwNTQzWhcNMjYwODI2MDEwNTQzWjAYMRYwFAYD
VQQDEw02YTg1MDE2OC1lYmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj6o9QMm7g460HnUHe/Z+ceCacnl1wb+KV1yMQJfNWZJRnkKq/501eV7lN1oZ
y7AFSvOmRwkyZxAZVrorGhTKmsr2GvuZ0ydXm3yc405pjE+B4Mo9jbEAzHTrg2Gs
t4YL8BE+zDcSZ7fpho6UPDL2W7yC/DLIJ86MWiKViOf0Kis0mBtmGgoIpe8FMQoH
jbngGDUV5P7r3FRtHPjS0CkOUN5ovxIOboP/gQ0F4GRbVZgokHmcQWjzA8weZo57
T+9I7fUTop2ijuXp7ZMPrVvE0d+8WOjCoo0feiPKu5awJoZ3aznqqcGhkHr793Lq
CXaxwfOw13tDy3Xj8how52Ab/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGGXA7O4
LOm6wIurKuCFmcu19UBlMB8GA1UdIwQYMBaAFEQh86nX5B1vR7eG/dPnqI3kKwe5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDQyQS9BQjRFNTI0NEZD
MzkxMUVDOTVDODEzODdDNEY5QUUwMi9SQ0h6cWRma0hXOUh0NGI5MC1lb2plUXJC
N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JDSHpxZGZrSFc5SHQ0YjkwLWVvamVRckI3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDQyQS9BQjRFNTI0NEZDMzkxMUVDOTVDODEzODdDNEY5QUUwMi9SQ0h6cWRma0hX
OUh0NGI5MC1lb2plUXJCN2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb0NwU6Eas2rCfD0kw9A/6wwCYMlnxc8O5bwTSqNpYJb9Pbp/KI2Af0ZkuyDO
dekz9gq6dqtmhuECzZ9SXCj0fySA+QGB4mmXC7LjEAW1HxxOm7nrco337+l9SeaE
X9gW9IXSfe5w3qi6NucBja8cCGyz4lF+AOlyJGzfroD5/EkvGKUmjJ+FmFH+ORpu
nrOfhXu1tQSDaqlbU05+aDdMQyk01UndTK0tQdLw77zR3gDJ57at23NyQZZQteAq
5VSxqzRD/CljykulwXZf9o2776lvzbRC5kkrobJRRBgwxqErSD78tsq8hWoHDrZl
j/k9RINaS/ZOv98Mt+FZau423A==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:24 2026 by rpki-client