Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
File:                     CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft (raw, json)
Hash identifier:          iKBlrVPYoziKnDVRSpPc8jvBmPViXSSpzBf+Bl3cGrI=
Subject key identifier:   72:11:C9:AC:06:BC:68:C1:21:69:CD:FA:7A:11:58:62:49:8E:A9:E8
Authority key identifier: 09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77
Certificate issuer:       /CN=A913806E/serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477
Certificate serial:       089B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
Manifest number:          0891
Signing time:             Tue 18 Aug 2026 20:59:02 +0000
Manifest this update:     Tue 18 Aug 2026 20:59:02 +0000
Manifest next update:     Tue 25 Aug 2026 20:59:02 +0000
Files and hashes:         1: CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl (hash: Slr5p/WqWsReEa9negv8MmTVy57Q1Re3ujApWfL0zBg=)
                          2: 1AC2369A010911ECB732340DC4F9AE02.roa (hash: 1d5DWa9kmJ4w10WbuE7/Yrtfavj9f+ay8eq6OsazIQw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl
                          rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2203 (0x89b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913806E, serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477
        Validity
            Not Before: Aug 18 20:59:02 2026 GMT
            Not After : Aug 25 20:59:02 2026 GMT
        Subject: CN=6a84c796-9c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:83:97:9a:25:b0:90:32:a3:21:0c:98:33:db:
                    10:f0:d2:30:38:ec:7c:7f:f2:80:cb:0a:6c:c6:70:
                    6c:77:57:a8:6c:22:11:68:47:bf:a5:94:6d:21:23:
                    06:00:18:ca:83:91:f5:15:e0:b0:ec:e7:57:dd:0e:
                    72:c8:82:b6:a5:b8:de:ca:e6:e0:2c:56:2f:da:3d:
                    f9:cd:ff:73:a0:a8:49:41:36:6f:fc:f0:f3:98:1e:
                    c5:ef:5e:78:7f:20:25:67:3b:f0:04:18:6f:c2:2f:
                    96:ab:eb:9e:5a:1e:70:3b:2f:80:84:31:2d:18:6c:
                    e8:2f:86:90:a2:c9:f9:a4:70:1a:36:d8:e9:64:24:
                    46:16:3a:51:41:b2:73:9e:f4:a7:5f:9b:9a:e1:3c:
                    40:91:84:6e:49:8f:01:e9:08:b9:1d:3f:9a:9e:a4:
                    5d:b8:45:eb:10:0e:e2:a4:63:d1:6d:b4:a5:4d:8b:
                    c3:18:4d:ff:95:09:7f:f4:01:55:07:e4:f3:23:49:
                    d2:57:7e:7a:d3:da:b7:c1:bc:73:91:09:ef:24:e1:
                    e8:64:2c:67:9a:ae:b5:fd:08:68:d5:d8:0f:64:fb:
                    b2:91:2e:e8:ab:81:56:dd:c8:8d:8e:ea:b4:1a:30:
                    c0:85:2a:ca:6b:f1:b4:cf:8e:77:02:5f:83:1e:0b:
                    36:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:11:C9:AC:06:BC:68:C1:21:69:CD:FA:7A:11:58:62:49:8E:A9:E8
            X509v3 Authority Key Identifier:
                keyid:09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:0e:33:74:f3:f1:b9:ae:da:dd:f2:fa:36:41:b8:8d:cd:26:
         30:96:78:af:f2:92:0e:f3:de:54:97:2e:29:41:91:64:0a:f0:
         71:99:4e:38:fc:0a:c7:b3:f6:77:b7:aa:68:35:30:b9:67:d2:
         fa:21:98:9f:33:10:d2:18:29:39:d1:b1:9d:8a:1b:e7:20:3b:
         30:2e:26:6e:e8:96:54:d3:08:11:50:08:82:4c:4f:9c:b5:22:
         ad:17:a8:c5:b7:f5:b3:b0:d4:1e:cb:ca:a0:18:db:1c:a4:6e:
         3a:a9:d4:70:9d:9c:ac:84:7a:ca:0a:c9:95:f2:a8:f9:32:de:
         35:7e:a4:92:9e:15:2b:ff:5b:b9:bf:22:f5:fb:37:4d:c4:db:
         60:de:38:ac:9f:77:48:d7:bf:f3:0a:34:72:b8:94:9a:6a:fe:
         30:2b:6f:af:38:39:80:37:ce:bf:ff:26:d8:2c:78:08:7b:e0:
         42:a6:25:b1:41:5d:7d:a6:bc:c7:bc:5c:12:db:e8:6a:5a:40:
         d4:8d:31:28:c4:c5:e8:e1:0f:30:9e:aa:0c:05:25:9c:99:c7:
         9d:75:14:4e:e5:7a:46:2c:fc:8d:f8:25:c4:70:0b:95:a8:4c:
         91:35:2d:1c:12:08:30:b1:63:6c:dc:85:ae:d1:b8:2f:73:29:
         b1:50:30:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:29 2026 by rpki-client