Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
File:                     sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft (raw, json)
Hash identifier:          iJyijZDOO/B7lKY8lQY6Z8/FY8VD3990ZN0R+n6oFG4=
Subject key identifier:   A6:2F:A3:98:DD:DF:13:50:67:B7:7A:31:CA:C0:00:2F:DD:3F:29:E8
Authority key identifier: B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9
Certificate issuer:       /CN=A91374BB/serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9
Certificate serial:       0228
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
Manifest number:          0222
Signing time:             Wed 19 Aug 2026 03:22:32 +0000
Manifest this update:     Wed 19 Aug 2026 03:22:31 +0000
Manifest next update:     Wed 26 Aug 2026 03:22:31 +0000
Files and hashes:         1: sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl (hash: 0IVww4nRya0FRosRZho64wjNO+Rvt8zgzDO+XuassHk=)
                          2: E7DBE2945B6A11EE8C05CA59C4F9AE02.roa (hash: EOojy2+JzC+p+QaVV3QkjR8Q0Zfn9YjNT084DP1KFTs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl
                          rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552 (0x228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91374BB, serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9
        Validity
            Not Before: Aug 19 03:22:31 2026 GMT
            Not After : Aug 26 03:22:31 2026 GMT
        Subject: CN=6a852178-56c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5f:15:32:41:63:1d:af:4b:0e:13:8e:31:d3:
                    46:85:7b:4c:5a:ba:a5:6e:8b:5c:a8:c9:1e:a6:8a:
                    c7:df:1c:0c:ef:06:93:bc:e2:6f:03:bd:ae:db:97:
                    00:de:79:68:2a:70:62:96:bf:28:e1:f7:04:a1:5a:
                    94:3f:2b:33:dd:45:16:26:d6:f3:7c:03:19:86:40:
                    50:a6:24:41:87:07:58:00:04:45:d3:39:87:60:73:
                    33:53:15:d3:66:97:81:67:34:40:c3:c6:0f:ff:96:
                    59:96:0b:55:67:b8:59:99:5f:99:57:d2:aa:ab:dc:
                    f8:45:a7:fd:e9:67:57:53:db:87:5e:bd:32:f3:22:
                    1b:63:48:b4:95:ea:f6:3b:4f:ad:00:53:a3:8c:f0:
                    b5:48:34:b4:8b:05:bc:5b:92:6a:37:5e:7e:85:a3:
                    d4:fb:f4:4a:f3:af:dd:d9:ab:1f:a9:98:72:c1:39:
                    2d:c9:1b:ae:73:89:5d:c8:f0:cd:fa:90:89:5c:08:
                    e1:07:0b:1a:f2:2a:bb:66:b8:af:b9:f1:03:43:d7:
                    3d:dd:e2:01:4c:d4:fe:d4:29:37:7b:1c:87:71:38:
                    45:53:9f:9d:d5:f9:5f:6c:44:46:07:33:93:bb:e4:
                    3e:72:a2:fc:ae:93:15:a8:da:64:57:9a:e2:01:5c:
                    8a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2F:A3:98:DD:DF:13:50:67:B7:7A:31:CA:C0:00:2F:DD:3F:29:E8
            X509v3 Authority Key Identifier:
                keyid:B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:42:e0:06:41:99:de:cc:f3:87:ad:6f:35:42:d2:18:12:99:
         92:47:4b:59:e8:00:8d:ad:f4:2d:93:61:74:8c:ea:d9:59:ee:
         9f:43:34:92:d5:df:d8:a5:00:da:40:6a:f0:a3:6a:f3:47:9d:
         fc:7a:b2:96:73:85:4a:9d:b6:b6:45:81:01:94:9c:6a:18:df:
         51:e1:78:07:c7:c1:6b:d8:b6:a3:63:bc:a1:75:c1:f9:45:96:
         fa:f0:9d:50:3a:1c:09:78:3f:ee:cf:23:90:eb:bc:1e:d9:0d:
         af:a2:f5:5c:ed:a1:d1:6b:2d:63:e2:92:af:f0:15:e5:64:ff:
         12:b0:b2:68:9c:26:e3:1c:98:a2:ce:fa:24:a4:4f:0d:31:9c:
         00:91:46:e4:35:b7:e9:1e:62:fd:74:4c:28:94:c1:ef:6a:2e:
         36:85:d8:12:9e:a5:de:92:e8:5c:87:af:71:06:94:5a:85:c8:
         99:15:3b:10:9d:00:96:7c:69:57:a8:9d:3c:80:48:64:a3:e0:
         e0:25:51:69:39:0e:b9:4e:32:d8:b5:5e:6f:bd:ab:db:cb:ed:
         6c:70:6a:d6:03:0c:a1:bc:54:10:d4:09:42:7a:42:e5:ff:b6:
         e3:ab:c6:f1:6e:cc:60:00:ae:66:e3:51:8f:3a:04:9d:fb:a4:
         6a:76:0d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:55:27 2026 by rpki-client