Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft
File:                     pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft (raw, json)
Hash identifier:          XHmMZ+IiUT8C86njBgiqa9DZc/ElvyTAn6+JJY/yKxo=
Subject key identifier:   40:32:54:80:D9:31:C7:D1:7A:55:6C:F0:D0:5B:59:4A:43:56:EA:2A
Authority key identifier: A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90
Certificate issuer:       /CN=A9138506/serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990
Certificate serial:       06BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft
Manifest number:          06BA
Signing time:             Tue 18 Aug 2026 22:39:33 +0000
Manifest this update:     Tue 18 Aug 2026 22:39:32 +0000
Manifest next update:     Tue 25 Aug 2026 22:39:32 +0000
Files and hashes:         1: pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl (hash: QXUsjLEzp1j8L1fsJK4LAhTmt4AVfjmTTAzrtzs12Kc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl
                          rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 22:39:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1722 (0x6ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138506, serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990
        Validity
            Not Before: Aug 18 22:39:32 2026 GMT
            Not After : Aug 25 22:39:32 2026 GMT
        Subject: CN=6a84df24-f834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:48:f9:a2:8f:2f:39:a9:e9:ad:3c:9e:e2:67:
                    a2:be:75:e7:4d:7e:3c:17:b5:21:8c:77:7b:65:a5:
                    fa:ec:6e:7b:70:90:be:7b:95:ac:75:7e:a8:d6:cb:
                    ba:ad:f8:f0:68:ba:f6:fb:33:fa:60:9a:25:cc:ea:
                    8f:b9:09:21:c6:ba:10:ad:d0:3f:a3:fe:b2:53:0e:
                    27:95:72:ea:3c:1a:a6:bc:b5:00:61:b5:2f:82:f7:
                    84:03:44:76:7b:ad:8b:3f:64:ee:f4:c1:bb:e8:38:
                    98:fd:7e:e5:57:4b:70:9e:a8:da:9b:c9:2a:e9:53:
                    f3:f8:f7:e3:0e:48:35:d1:15:68:1c:8e:b0:12:55:
                    5a:f7:1f:47:c2:da:43:15:d2:a2:cd:2e:95:64:6a:
                    81:c0:a9:f4:7c:4a:e8:65:f8:99:1d:30:d1:b1:71:
                    93:6e:0f:71:9d:55:0b:60:e3:c8:a4:e5:0b:57:0b:
                    fc:d1:9e:e8:f3:01:41:8d:53:2c:85:d7:0a:91:35:
                    0f:65:ba:9f:97:0a:87:7e:0b:48:32:dc:e8:ce:be:
                    67:6a:b2:36:61:ec:b5:89:40:d7:c7:69:96:0d:80:
                    11:79:ff:2a:d5:da:6f:cf:ae:08:aa:2f:5f:b7:1b:
                    7f:2d:df:ca:b2:a9:0f:3c:f3:ca:4e:17:ec:48:5a:
                    74:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:32:54:80:D9:31:C7:D1:7A:55:6C:F0:D0:5B:59:4A:43:56:EA:2A
            X509v3 Authority Key Identifier:
                keyid:A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:b8:55:dd:b3:26:71:d3:ce:5e:4c:0a:d4:46:82:6e:58:c2:
         c4:39:04:22:13:c5:29:64:d5:7a:61:cf:f8:b1:16:60:cb:eb:
         ee:76:ea:0f:be:5e:9c:ed:4c:11:ba:5b:ff:39:41:f5:7d:62:
         19:49:08:86:f2:87:3e:38:83:ac:44:ce:75:31:35:ec:62:03:
         de:c8:62:47:9e:60:97:f6:57:ce:74:ea:a8:81:b3:ff:a7:46:
         39:40:a4:2d:3f:5b:5e:44:74:a6:9d:1a:69:bb:62:ed:b2:f9:
         08:94:be:7c:3a:ea:b8:07:9c:c0:81:9c:92:c1:da:2d:77:98:
         f9:a9:58:b0:3f:e9:49:c2:91:79:65:3c:6f:31:35:4a:88:2c:
         e5:a6:75:db:92:c0:6a:6d:d5:9f:8a:26:8d:be:1d:e8:f4:4c:
         a5:50:f0:e7:c4:d3:61:cc:0b:a9:39:b5:82:98:c0:3d:8d:6d:
         4a:a5:bc:bc:e6:83:5a:e0:80:5e:68:d2:c5:1e:8b:bc:14:9e:
         15:08:87:ea:f0:0f:cc:a2:e5:1d:87:84:8c:15:b6:79:92:12:
         9f:c3:95:e1:be:12:d0:ba:9c:ed:18:9e:2e:e1:9e:68:5c:22:
         7c:e5:ff:c8:d5:7c:52:a5:60:f8:c0:c4:35:8d:25:7a:2a:4a:
         b6:21:a0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:46 2026 by rpki-client