Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.mft
File:                     _xOUBaa6BoyBp0rTX-yUkYJp2OE.mft (raw, json)
Hash identifier:          JsJAfO0HueYMtuDub6sF5M+mBUPUSd4GnMPTbcXzG+Y=
Subject key identifier:   C6:34:73:29:BB:1A:D0:06:EE:B7:99:0F:32:6B:36:BD:B6:44:59:7A
Authority key identifier: FF:13:94:05:A6:BA:06:8C:81:A7:4A:D3:5F:EC:94:91:82:69:D8:E1
Certificate issuer:       /CN=A9139D67/serialNumber=FF139405A6BA068C81A74AD35FEC94918269D8E1
Certificate serial:       0E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_xOUBaa6BoyBp0rTX-yUkYJp2OE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.mft
Manifest number:          0D
Signing time:             Wed 19 Aug 2026 09:52:13 +0000
Manifest this update:     Wed 19 Aug 2026 09:52:12 +0000
Manifest next update:     Wed 26 Aug 2026 09:52:12 +0000
Files and hashes:         1: _xOUBaa6BoyBp0rTX-yUkYJp2OE.crl (hash: xusAS9hxJXYG7pUQaw2gSqTaaxNRgvUF9Sks6s4C4FI=)
                          2: FC3ECAC88BC111F190F2EAA86C11F970.roa (hash: 4889GaDsygj/hBcnFh0j5KUrF53rJ0JxKKaFI2ZWHR4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.crl
                          rsync://rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_xOUBaa6BoyBp0rTX-yUkYJp2OE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:52:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139D67, serialNumber=FF139405A6BA068C81A74AD35FEC94918269D8E1
        Validity
            Not Before: Aug 19 09:52:12 2026 GMT
            Not After : Aug 26 09:52:12 2026 GMT
        Subject: CN=6a857ccd-4435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:74:72:47:5f:6a:1f:5b:76:8f:5c:f3:33:ca:
                    d2:b0:0d:b6:bb:f3:e2:a3:2f:e4:6c:9b:79:d9:e3:
                    ce:b6:ab:f9:d4:b6:b6:2e:99:35:e5:18:1d:d6:d8:
                    57:9a:4c:7b:4c:57:fd:df:57:07:62:2e:9e:38:96:
                    c9:6a:65:1d:f5:75:d6:be:08:4f:1c:18:7b:31:79:
                    40:51:e9:4b:73:92:cf:0c:34:5e:3e:6b:75:70:60:
                    03:9a:23:08:b3:90:23:c1:41:79:20:3d:61:55:2a:
                    6c:73:1d:64:1f:ec:bc:c8:a5:07:25:28:bc:9a:76:
                    45:b2:90:e6:b4:c7:dd:41:df:f0:f2:6b:2a:11:b3:
                    2e:ff:1e:a6:7f:0f:ed:0f:04:cc:b5:3a:7f:0a:6f:
                    98:d6:02:d5:c5:c1:a0:84:df:54:37:4c:e0:b1:96:
                    26:21:e8:85:fc:3f:b4:c4:23:d0:fa:13:8f:84:03:
                    11:94:5f:8b:1c:c5:a9:0f:0e:74:0a:95:84:1b:9e:
                    06:62:9f:89:91:c7:d8:ff:55:69:33:ad:5e:f3:20:
                    01:87:97:70:5a:02:d8:ac:03:69:99:c3:7b:1d:af:
                    21:97:1b:0f:94:52:6b:10:df:5f:76:f0:41:68:db:
                    ea:b3:ea:17:8f:0b:43:f3:b5:77:31:4b:6d:14:ee:
                    7b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:34:73:29:BB:1A:D0:06:EE:B7:99:0F:32:6B:36:BD:B6:44:59:7A
            X509v3 Authority Key Identifier:
                keyid:FF:13:94:05:A6:BA:06:8C:81:A7:4A:D3:5F:EC:94:91:82:69:D8:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_xOUBaa6BoyBp0rTX-yUkYJp2OE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139D67/924509668BC111F1A5204D886C11F970/_xOUBaa6BoyBp0rTX-yUkYJp2OE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:7b:94:89:08:36:50:75:28:61:d3:62:b5:8b:28:7a:75:f8:
         c2:21:3c:b8:a3:58:da:46:12:b0:24:97:9a:1e:ad:84:6b:91:
         75:73:32:be:a0:d7:8d:c3:7a:72:3c:bd:0c:5b:06:70:dd:39:
         45:1f:61:5a:d6:47:61:07:bb:37:d4:7c:6f:6a:eb:5f:45:25:
         b4:19:72:95:47:a6:31:ae:31:14:1d:4f:83:d1:e9:3e:01:8a:
         28:98:30:cd:1a:4a:48:f0:b0:11:f2:a5:de:6b:af:95:1f:09:
         aa:34:e4:67:ab:fb:ad:f1:e8:7e:a2:18:f4:fe:99:fd:a8:ae:
         b1:05:b0:a1:db:f7:9c:fe:de:93:a0:6d:1c:f0:da:2f:51:54:
         90:44:5d:cd:96:94:45:4e:92:f4:c0:b0:9a:3f:d4:95:b4:3d:
         db:02:ad:ad:98:78:29:e2:cf:86:93:08:29:24:fc:7f:a1:9f:
         45:d8:3d:bc:09:3e:b7:ea:db:cc:8c:65:0c:a5:f8:33:cf:eb:
         28:69:11:5c:a8:33:88:0e:88:b6:0f:ee:bb:91:ae:39:26:6c:
         b6:85:41:1a:86:8e:6e:ae:e4:6a:97:bd:bf:c9:23:f4:b7:fb:
         6e:0a:d8:1e:6d:3a:98:33:bf:c3:3d:e1:c5:e9:7f:91:73:ca:
         ef:a2:f1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:59:56 2026 by rpki-client