Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft
File:                     aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft (raw, json)
Hash identifier:          6aJb16mIn4tG91aT+QAaP+LpQ7E47xqdO2QhCNJBCbA=
Subject key identifier:   D4:39:D9:8E:62:AF:9E:DB:53:93:BA:C7:0E:D4:72:AC:86:CA:03:B4
Authority key identifier: 68:7F:BA:20:E2:F7:89:17:E0:FB:03:B9:12:B8:C8:56:37:C5:37:3D
Certificate issuer:       /CN=A913B243/serialNumber=687FBA20E2F78917E0FB03B912B8C85637C5373D
Certificate serial:       99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aH-6IOL3iRfg-wO5ErjIVjfFNz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft
Manifest number:          96
Signing time:             Wed 19 Aug 2026 08:05:17 +0000
Manifest this update:     Wed 19 Aug 2026 08:05:17 +0000
Manifest next update:     Wed 26 Aug 2026 08:05:17 +0000
Files and hashes:         1: aH-6IOL3iRfg-wO5ErjIVjfFNz0.crl (hash: gce5STP1HWjQ6SLpVehNU4An2GTMX77z0wsubwUkoZE=)
                          2: F800618EBBA511F0B0EA597FC4F9AE02.roa (hash: SKL3oSLnK/OGS9FsL+y9x7HH2AFOMsHaA5PqrntVpi4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.crl
                          rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aH-6IOL3iRfg-wO5ErjIVjfFNz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 08:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B243, serialNumber=687FBA20E2F78917E0FB03B912B8C85637C5373D
        Validity
            Not Before: Aug 19 08:05:17 2026 GMT
            Not After : Aug 26 08:05:17 2026 GMT
        Subject: CN=6a8563bd-cc30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:77:26:1c:40:69:5f:d2:e5:34:5d:3e:91:67:
                    d0:2e:1f:33:01:cc:a9:d7:72:80:b1:8a:de:79:51:
                    98:32:48:8f:26:a0:0e:2c:3c:2e:51:b6:db:09:cc:
                    e8:15:68:3f:07:56:7f:77:ae:5b:3f:ef:2d:b0:56:
                    34:10:d4:cd:a0:e8:9e:5b:aa:4b:03:06:e9:38:3b:
                    95:f2:21:f7:36:e9:64:9f:24:aa:e6:72:83:8f:bd:
                    b7:b9:ab:42:a6:d6:9d:72:e4:80:e8:ac:45:c2:ab:
                    52:e5:72:5a:e3:13:20:6d:06:c3:d9:1f:79:4e:67:
                    cd:19:37:ee:2b:3f:e7:3d:65:03:29:a3:4e:33:83:
                    e1:30:0e:34:00:d6:64:bf:4a:d7:d5:af:bd:3e:44:
                    21:65:f0:78:38:05:5b:ba:2c:76:c4:fc:3d:c0:79:
                    ab:4f:ca:be:77:a3:9a:71:a4:bc:ac:d1:20:71:30:
                    da:86:84:c8:89:9c:c9:f9:78:5b:7e:3e:85:ed:c1:
                    98:9a:e6:25:2d:cc:a3:5e:88:2b:4f:20:1f:43:aa:
                    6c:71:30:a6:b9:f6:5c:20:78:64:69:8f:f4:3c:db:
                    10:e1:9a:aa:be:e0:ef:00:a5:76:41:3d:d1:40:02:
                    85:55:a1:56:2c:a4:4e:7f:51:8c:5b:e9:41:96:8f:
                    11:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:39:D9:8E:62:AF:9E:DB:53:93:BA:C7:0E:D4:72:AC:86:CA:03:B4
            X509v3 Authority Key Identifier:
                keyid:68:7F:BA:20:E2:F7:89:17:E0:FB:03:B9:12:B8:C8:56:37:C5:37:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aH-6IOL3iRfg-wO5ErjIVjfFNz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:d2:d0:20:9d:ef:32:31:49:71:23:8e:c1:80:cc:18:e0:e5:
         a3:3e:bb:d9:bf:42:26:98:39:fe:a6:2a:82:62:a8:ad:49:1e:
         e1:81:9b:29:31:b9:e7:88:ea:10:0d:d6:1a:fa:fb:5d:b5:b6:
         bd:42:2e:60:44:87:a3:a5:72:b2:71:c6:56:02:cf:60:df:bf:
         00:78:5f:78:93:89:da:51:3f:2f:52:dc:61:3e:83:9c:63:26:
         f4:0e:27:3f:84:ff:42:65:9e:33:1c:0f:82:c0:48:97:e2:7e:
         e0:ca:33:9f:bc:f5:e9:f3:26:12:e7:57:22:1b:6e:27:95:fb:
         eb:71:76:d8:6b:c1:18:50:f9:ed:0f:2e:e4:e9:9b:7b:6b:e0:
         e6:ff:3c:0a:e9:0a:a3:cf:7a:88:d3:bd:45:1f:d8:3d:04:52:
         67:33:b9:3b:18:6e:0b:a8:65:12:74:11:13:77:1b:01:b2:56:
         11:80:af:48:99:e1:2f:50:b4:f3:8d:13:51:f4:e3:3c:a1:fa:
         71:3b:9e:02:f2:c8:ce:af:e4:e6:98:fd:c2:eb:d4:b0:55:ca:
         26:63:47:63:d1:f7:72:2e:b9:19:c2:d0:da:68:5f:ff:16:7c:
         5b:21:d0:df:5e:f6:88:55:1c:eb:48:f7:11:e4:a0:51:5f:8f:
         63:49:9a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:47:00 2026 by rpki-client