Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
File:                     CZJdtntKud9gBue9K8HY7cjMfhk.mft (raw, json)
Hash identifier:          k+DE8V7BuYmJIcbeHF9L8W7NcozMJ7erMakG4cDBd7E=
Subject key identifier:   05:CC:9A:3C:61:9C:C4:6E:F5:A4:81:23:58:AF:B2:A6:7F:79:DD:C7
Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
Certificate issuer:       /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Certificate serial:       0C33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
Manifest number:          0C04
Signing time:             Tue 18 Aug 2026 19:09:57 +0000
Manifest this update:     Tue 18 Aug 2026 19:09:56 +0000
Manifest next update:     Tue 25 Aug 2026 19:09:56 +0000
Files and hashes:         1: CZJdtntKud9gBue9K8HY7cjMfhk.crl (hash: 997i0smSjRHyQMvePtIww3GtTl+Dt1NzrJbyGOzjxss=)
                          2: B23294C079DB11F191EADDAD63A30FBC.roa (hash: SFZvdt6UQ0ZxOBmTem6qPhZ0NzjnAbq88lfVuRLHYkM=)
                          3: C43C22501DEF11F1B60466D9163D8C67.roa (hash: xsIr4KFI9a9YHG0N66oMLWH8AurLcb1F9zQyd9fncF4=)
                          4: 6932258C2F1C11EDA3E29B09C4F9AE02.roa (hash: 53LWwpRVZrDTw/6Ogh5Ek7qxm98TR8hKYo+nI3Iokbw=)
                          5: CB926A64E58711F0B2CA0EBF446F56BC.roa (hash: 8Zv5MMAKEdi89aa0T4smQVaAo99bnl+ZMZOEdaQmF7Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
                          rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:09:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3123 (0xc33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
        Validity
            Not Before: Aug 18 19:09:56 2026 GMT
            Not After : Aug 25 19:09:56 2026 GMT
        Subject: CN=6a84ae05-a484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:13:fe:d8:7b:9c:88:89:8e:33:08:bf:3b:b2:
                    95:bd:69:23:e4:39:31:65:59:6a:61:7e:8b:8a:c5:
                    94:c9:ca:c7:16:6c:6c:1c:aa:48:61:af:e0:9e:5a:
                    3e:4b:55:72:56:0b:82:7f:7d:83:66:4c:73:13:87:
                    78:af:7d:e4:6a:7f:98:00:cd:55:b2:fc:a5:49:30:
                    56:2e:a1:b5:0d:46:49:c5:82:d9:7c:34:a6:90:07:
                    69:7b:ac:f3:ac:a8:27:08:4e:f5:9c:e8:48:6f:c6:
                    fa:d5:28:6b:b8:33:61:4e:c3:55:15:36:e6:41:b7:
                    dc:0c:f5:21:02:f3:3e:61:6b:c7:b5:a2:87:cb:fd:
                    d4:2d:cc:97:a4:d3:f4:95:2d:be:70:07:8a:ff:92:
                    04:95:1d:47:69:02:00:fb:0b:b4:58:a2:22:b7:81:
                    36:51:7d:74:ac:9a:2a:66:a8:ad:c9:3a:b7:05:4d:
                    ac:40:b7:49:40:79:a9:80:c7:ad:4b:cf:d4:3b:4e:
                    97:d7:25:56:40:5a:ff:66:ca:7d:78:3d:87:06:b5:
                    b8:83:a5:0a:89:94:55:d7:4e:fa:e3:66:25:de:27:
                    cd:35:c7:13:58:ea:9a:c5:29:bf:1b:28:b6:c6:5e:
                    e3:8d:0d:fd:c2:c9:e6:e6:84:81:f7:a3:b1:cb:8a:
                    62:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CC:9A:3C:61:9C:C4:6E:F5:A4:81:23:58:AF:B2:A6:7F:79:DD:C7
            X509v3 Authority Key Identifier:
                keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:1a:22:e7:33:91:d1:c5:df:72:bd:0d:ea:f3:35:c0:f5:bf:
         e2:fe:51:5b:65:4c:e4:a1:db:87:3e:fe:9c:65:e6:8b:41:04:
         12:52:bc:40:1b:42:4c:aa:e7:88:c9:33:bb:64:14:01:71:ec:
         1d:f5:2b:b5:d3:6b:ad:f6:77:9c:24:21:da:d7:6f:7b:23:5c:
         14:ce:63:19:b5:42:80:6c:5e:72:fb:1d:ed:51:5c:85:58:fc:
         74:e4:0c:fd:fa:94:6e:24:6a:dd:c5:dc:50:d6:25:15:d9:b1:
         08:4f:05:5d:4c:72:a1:b6:b1:df:29:48:ba:3d:85:2c:b9:2e:
         94:c1:be:fc:be:7c:3f:84:b7:ad:80:00:8b:bf:a4:3f:e0:02:
         2a:f2:75:0e:50:36:4d:b2:49:34:be:db:1a:3d:fb:4e:29:55:
         d0:8b:6c:70:e9:5d:17:7c:ef:d2:f3:43:00:b2:0a:04:2a:83:
         f6:4d:69:04:cd:51:85:61:a5:4f:db:6e:49:75:83:a8:cd:72:
         f5:b3:94:45:cb:db:05:42:55:6d:d1:00:4a:20:66:c3:d6:76:
         e0:e8:4e:c5:a1:fd:a2:12:98:e0:18:8f:b7:70:46:45:a2:0d:
         21:71:f4:dd:71:e9:a8:85:a1:ba:f5:84:4d:76:87:db:70:7c:
         39:b2:69:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:01:48 2026 by rpki-client