Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139C18/1599EC24335111F1872729B5C6833773/DrxJg4xa-JUImQoidYOOwMFWsLc.mft
File:                     DrxJg4xa-JUImQoidYOOwMFWsLc.mft (raw, json)
Hash identifier:          qn50lhRkbAeOczFn/oL/JjE8RL2F17zOGq4hzthfwNE=
Subject key identifier:   AF:2E:55:45:48:98:B9:57:70:F4:16:78:94:05:33:0F:0A:D4:C6:C6
Authority key identifier: 0E:BC:49:83:8C:5A:F8:95:08:99:0A:22:75:83:8E:C0:C1:56:B0:B7
Certificate issuer:       /CN=A9139C18/serialNumber=0EBC49838C5AF89508990A2275838EC0C156B0B7
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DrxJg4xa-JUImQoidYOOwMFWsLc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139C18/1599EC24335111F1872729B5C6833773/DrxJg4xa-JUImQoidYOOwMFWsLc.mft
Manifest number:          48
Signing time:             Wed 19 Aug 2026 09:09:25 +0000
Manifest this update:     Wed 19 Aug 2026 09:09:25 +0000
Manifest next update:     Wed 26 Aug 2026 09:09:25 +0000
Files and hashes:         1: DrxJg4xa-JUImQoidYOOwMFWsLc.crl (hash: 8lQbVktRBn9n3Rb513cihRstTee7dm4YBvG+MWTbVuw=)
                          2: 87952B92341211F181A039BCC7833773.roa (hash: jihd2+gV5EBFkgpYBoUkD4cr1iajWa+KP7BF8vtY6VA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139C18/1599EC24335111F1872729B5C6833773/DrxJg4xa-JUImQoidYOOwMFWsLc.crl
                          rsync://rpki.apnic.net/member_repository/A9139C18/1599EC24335111F1872729B5C6833773/DrxJg4xa-JUImQoidYOOwMFWsLc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DrxJg4xa-JUImQoidYOOwMFWsLc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:09:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139C18, serialNumber=0EBC49838C5AF89508990A2275838EC0C156B0B7
        Validity
            Not Before: Aug 19 09:09:25 2026 GMT
            Not After : Aug 26 09:09:25 2026 GMT
        Subject: CN=6a8572c5-6ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:58:e3:cc:32:cc:32:c3:05:48:db:fa:95:51:
                    ea:09:99:9e:12:e7:ed:f2:ef:8e:6d:3a:07:4e:7e:
                    7f:bf:2a:d1:21:c6:e0:5b:55:84:ea:3c:a6:80:b8:
                    97:9e:86:c5:87:ed:97:6e:5d:b2:55:9b:91:c7:69:
                    75:94:14:c5:ed:41:f7:b5:bb:24:b9:55:a8:f5:e9:
                    30:f0:76:61:98:12:d7:a4:41:77:a3:85:9e:d5:42:
                    64:7d:33:c9:87:67:5f:61:c4:78:3f:3d:fd:c9:e7:
                    f1:6d:c4:c0:e3:f5:d8:b5:ef:44:60:6e:03:40:da:
                    bb:23:30:86:e1:87:1c:f0:5e:a2:96:dc:33:7c:ce:
                    d2:9e:b6:58:29:ec:f9:68:9a:91:0d:19:1a:a5:d7:
                    0c:a7:78:3b:66:26:96:01:d1:6c:48:ac:f1:da:1b:
                    d4:63:c4:4f:3b:a3:35:12:7c:e5:75:ab:bc:94:47:
                    0c:fb:f2:69:5d:dc:29:51:13:bc:82:b8:2e:0b:c7:
                    37:f7:80:18:a4:84:2a:da:b2:e3:47:8f:69:1a:bf:
                    2c:13:57:9c:f2:16:38:8b:37:02:93:e9:94:0f:7a:
                    d8:a7:7d:99:e3:62:e6:9d:98:6f:23:1b:73:40:0b:
                    2b:a1:14:c8:b5:4b:c9:14:50:74:f7:da:6f:47:84:
                    6a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:2E:55:45:48:98:B9:57:70:F4:16:78:94:05:33:0F:0A:D4:C6:C6
            X509v3 Authority Key Identifier:
                keyid:0E:BC:49:83:8C:5A:F8:95:08:99:0A:22:75:83:8E:C0:C1:56:B0:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139C18/1599EC24335111F1872729B5C6833773/DrxJg4xa-JUImQoidYOOwMFWsLc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DrxJg4xa-JUImQoidYOOwMFWsLc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139C18/1599EC24335111F1872729B5C6833773/DrxJg4xa-JUImQoidYOOwMFWsLc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:54:75:49:56:f8:e9:9e:b3:19:4b:9a:6b:1d:a7:48:7f:1a:
         f6:b3:de:c0:76:af:3f:68:14:07:0c:0e:14:c6:ac:d6:f2:13:
         82:e6:7c:ed:c7:f7:51:2a:c0:49:f1:78:62:ec:18:6e:5c:6c:
         de:f2:a3:8d:93:43:3b:06:89:bc:ce:b8:b8:7d:3c:e8:c6:08:
         62:9f:10:90:0a:e3:2b:08:a9:e3:a4:07:e9:ab:7b:be:58:e5:
         4a:bf:ed:1c:30:ae:12:0c:9c:5d:0b:28:d0:4a:46:19:72:e5:
         19:a3:cd:3c:d9:fc:70:ae:ab:30:3c:26:9b:ec:34:8e:5c:0b:
         6b:2f:a8:47:5e:aa:9d:8d:96:32:9e:17:46:c4:69:2d:4e:c2:
         41:66:29:ab:6a:d4:07:d3:57:2a:ff:a5:08:ec:d0:25:33:68:
         9d:5f:ec:02:10:3e:c7:98:a6:24:9c:f8:ba:90:e3:45:fc:dd:
         bb:9c:10:1f:5f:70:2f:02:ee:af:8e:a3:5e:d7:7e:79:71:9c:
         cf:29:89:4f:b5:79:42:cb:4d:bd:24:7d:b8:74:ad:3e:fd:7c:
         1c:4c:fb:f9:d4:fa:63:f6:de:94:92:d7:5d:e2:bc:1b:23:4b:
         c8:1c:df:b5:13:20:0e:d2:0b:a5:b3:65:17:43:18:c0:9e:69:
         e9:d7:e7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:04:03 2026 by rpki-client