Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft
File:                     aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft (raw, json)
Hash identifier:          f4A6Sh70YzSNkGsjdMOndYbG+VYMrxeXW3eMnlaAOqE=
Subject key identifier:   5B:7F:80:62:C2:22:72:5F:D4:2D:13:9D:BE:85:F9:3F:A1:8A:90:3D
Authority key identifier: 69:48:58:B9:2B:CA:7C:08:76:5B:C6:BB:C1:83:92:3E:B5:71:1F:81
Certificate issuer:       /CN=A913A748/serialNumber=694858B92BCA7C08765BC6BBC183923EB5711F81
Certificate serial:       01AE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft
Manifest number:          019A
Signing time:             Fri 11 Sep 2026 04:22:53 +0000
Manifest this update:     Fri 11 Sep 2026 04:22:53 +0000
Manifest next update:     Fri 18 Sep 2026 04:22:53 +0000
Files and hashes:         1: aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl (hash: eJv/CcmbQ6R1/eXPB4NNW6sN7G8EpLux2/KxMrly4iI=)
                          2: 1B86A7CCE2CA11EFAA007D32C4F9AE02.roa (hash: 1vEZv+7+qYLHn55ib9kkDfWTdYO4S/WHs8pgEEuMR50=)
                          3: F31A7084E2C911EFADAB3C32C4F9AE02.roa (hash: fBHBvvGuITbl2EPW/eI7OV1xjnMqLdmN+KlBI/l5dCs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl
                          rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 04:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430 (0x1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A748, serialNumber=694858B92BCA7C08765BC6BBC183923EB5711F81
        Validity
            Not Before: Sep 11 04:22:53 2026 GMT
            Not After : Sep 18 04:22:53 2026 GMT
        Subject: CN=6aa3821d-03c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5c:fc:21:ec:b0:77:e6:2d:92:93:c0:99:90:
                    5c:12:35:70:ea:7b:81:29:8f:9a:40:c3:d0:5b:83:
                    6a:90:3f:33:0a:46:05:cb:72:05:2f:3b:56:a0:e8:
                    d8:7c:77:4e:c2:74:7f:3c:34:0a:58:d3:9c:ef:37:
                    0d:e0:4d:e7:ec:3b:bf:ac:d1:3a:42:ec:50:fe:2d:
                    91:da:73:dd:b9:85:03:81:cd:9c:91:a5:16:f9:2e:
                    5b:d6:c0:b7:c9:96:a1:e9:eb:73:91:4e:1c:f6:db:
                    95:2b:8f:52:04:5f:a4:fa:72:ed:3c:26:69:5b:64:
                    fd:a0:92:b2:bd:d3:02:d8:70:0f:ff:48:c8:16:5c:
                    40:0d:ae:74:cd:eb:b3:35:2a:72:1a:0c:df:db:f2:
                    7e:01:c9:14:2d:79:05:d3:2b:88:79:d4:9b:dc:55:
                    47:04:ca:91:8c:08:01:9c:eb:17:a8:6c:9c:2e:7d:
                    64:c7:24:53:56:3c:0f:30:a4:4a:97:ec:75:a9:7a:
                    f0:d3:4a:ad:e6:7e:56:f1:f8:e9:0c:b0:b1:f0:92:
                    63:82:c5:e8:65:52:94:bf:18:7b:1a:a5:e3:97:38:
                    8f:e9:ae:04:a1:2a:79:ef:12:2d:23:01:4e:cd:f9:
                    2e:80:9e:66:69:2c:5c:4c:ee:22:27:58:30:89:33:
                    db:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7F:80:62:C2:22:72:5F:D4:2D:13:9D:BE:85:F9:3F:A1:8A:90:3D
            X509v3 Authority Key Identifier:
                keyid:69:48:58:B9:2B:CA:7C:08:76:5B:C6:BB:C1:83:92:3E:B5:71:1F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:24:81:fc:bd:ff:7f:de:8b:b4:35:f0:40:f7:5b:56:9e:c4:
         c8:de:6e:58:63:36:6e:21:90:6b:ba:91:c5:1f:73:f0:64:3f:
         6a:e6:1b:d0:76:22:ca:3e:a1:ca:e1:6e:cc:bf:69:40:b7:5e:
         84:48:7f:67:30:2d:b7:f7:74:d5:2c:a8:f0:51:85:cb:f6:f8:
         fd:f1:fa:ff:89:cb:cb:f4:87:0d:0a:93:f6:39:9b:bd:c0:da:
         a0:7f:08:39:df:ba:a3:58:70:30:c3:09:ca:3a:0c:d8:5f:52:
         5b:a7:5b:49:51:df:35:36:39:25:1a:e6:45:ac:cf:20:be:9d:
         7c:bf:7d:bd:2f:db:f7:81:3c:83:59:b3:f3:0b:2c:23:4a:f9:
         9f:c3:d9:76:ef:94:9a:f9:46:1e:16:8f:1a:2c:17:e3:a9:66:
         4f:d9:a9:4a:5d:01:22:b4:59:26:27:51:d1:8a:3c:11:e9:49:
         f1:86:79:46:5d:7f:7b:3b:61:1d:52:b4:aa:b7:c0:d6:6d:58:
         16:2d:31:90:1a:89:ab:ce:46:72:7d:e5:3c:f1:e6:b6:11:43:
         82:ec:c3:c7:91:ef:40:95:bb:bf:6c:93:f0:3a:3b:61:99:11:
         93:40:bc:ea:cc:0c:76:1c:e6:ca:c2:eb:6d:b7:46:58:bc:34:
         41:61:74:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:25:39 2026 by rpki-client