Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft
File:                     H9I4pw6sem_8a5CrMM77dzkhb0o.mft (raw, json)
Hash identifier:          vjqSeY2lnRJ/8ZzHQ4+rQf7YZBGLWmEWAb9j2rZ2qIw=
Subject key identifier:   8A:86:A4:5A:49:D9:49:F7:79:B4:C5:A4:BD:70:78:50:5F:5E:8E:C9
Authority key identifier: 1F:D2:38:A7:0E:AC:7A:6F:FC:6B:90:AB:30:CE:FB:77:39:21:6F:4A
Certificate issuer:       /CN=A913DD09/serialNumber=1FD238A70EAC7A6FFC6B90AB30CEFB7739216F4A
Certificate serial:       D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft
Manifest number:          D0
Signing time:             Wed 19 Aug 2026 07:28:27 +0000
Manifest this update:     Wed 19 Aug 2026 07:28:27 +0000
Manifest next update:     Wed 26 Aug 2026 07:28:27 +0000
Files and hashes:         1: H9I4pw6sem_8a5CrMM77dzkhb0o.crl (hash: 8M75OJDjQhW+1c/G4YLlAfvsNgpmWbxHaEsZAiMFM6M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.crl
                          rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 07:28:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DD09, serialNumber=1FD238A70EAC7A6FFC6B90AB30CEFB7739216F4A
        Validity
            Not Before: Aug 19 07:28:27 2026 GMT
            Not After : Aug 26 07:28:27 2026 GMT
        Subject: CN=6a855b1b-f037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bb:cd:a1:8e:0a:5b:b0:4b:38:c2:99:17:04:
                    3c:de:02:7b:d6:52:a5:4f:25:3b:dc:27:03:ce:be:
                    7c:a1:9e:35:ac:c5:a9:c4:c8:bb:b0:a6:ee:a2:f5:
                    b5:52:61:58:0e:e4:29:ba:c9:7d:f9:97:d5:84:71:
                    3c:2b:b5:cf:ce:10:aa:35:91:95:d4:7b:70:1a:65:
                    2c:29:a0:3b:95:22:e1:23:51:40:bd:76:90:b5:dc:
                    e3:56:4b:fb:cd:36:ac:22:f1:55:26:14:28:da:b3:
                    f7:48:e7:e2:c6:96:b1:04:7f:0e:57:d6:c2:88:9b:
                    a2:1e:67:16:ae:46:d3:2a:7f:eb:16:db:8a:e8:7f:
                    29:d9:70:bc:18:84:eb:3c:f5:2d:fe:8a:db:87:c0:
                    c2:91:92:05:15:a3:50:8a:a0:f7:58:8a:9f:6c:e4:
                    d1:a1:27:7c:9f:1c:8c:c2:5c:11:11:ac:bc:f4:be:
                    b3:e5:d3:d2:99:72:74:75:3b:3c:61:54:83:0d:b1:
                    63:00:06:53:bd:59:b4:e4:92:54:72:24:6c:8a:0a:
                    c8:07:ca:ee:5d:32:2d:94:6a:33:84:46:0d:f0:2c:
                    fe:52:d6:ca:ac:d0:06:e8:a2:8c:ac:63:0f:71:c1:
                    4d:7d:b2:98:a6:ef:c3:01:c4:97:31:ee:e8:42:31:
                    7c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:86:A4:5A:49:D9:49:F7:79:B4:C5:A4:BD:70:78:50:5F:5E:8E:C9
            X509v3 Authority Key Identifier:
                keyid:1F:D2:38:A7:0E:AC:7A:6F:FC:6B:90:AB:30:CE:FB:77:39:21:6F:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ec:7f:74:33:31:dc:4e:4e:76:80:6b:0c:4c:74:4d:a2:57:
         bf:4a:ff:20:a6:f2:bd:89:c0:8d:29:b8:5c:ea:39:8b:5e:10:
         db:d8:b2:57:af:6b:e6:bc:f9:6f:8e:ef:7e:d4:2b:e5:3f:d3:
         fd:6d:da:df:3c:ed:ac:fa:95:31:6f:98:b0:bb:e0:9a:dd:47:
         e1:97:ad:12:b4:86:1e:82:61:8a:60:43:e1:ef:37:a1:4e:78:
         31:f8:a1:82:96:3c:c9:c3:26:95:50:2c:72:53:eb:cb:7a:42:
         0d:b1:e9:dc:b5:b8:b4:bc:e4:8b:49:d0:39:cd:d4:f1:75:a5:
         68:65:91:37:79:29:c5:e9:b4:a7:ae:45:22:09:5b:44:20:15:
         a4:e4:87:0f:e3:fb:d4:f4:d8:4d:3b:33:75:40:fc:1b:28:5a:
         6b:16:79:a7:e5:33:63:a1:48:42:20:a4:d8:21:a1:4d:3d:86:
         fd:85:a4:df:09:74:cf:2d:2f:97:6c:7d:02:2d:9e:9a:cb:55:
         d0:b6:06:da:a1:75:41:52:9a:e7:46:45:24:6a:db:cc:ed:c5:
         c5:fa:b4:0c:55:de:17:df:c1:0a:8d:aa:5d:b3:b9:c2:98:8e:
         04:4a:65:78:fa:fd:6c:59:32:96:e3:90:1a:aa:cb:44:5f:3d:
         5b:eb:f5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:28 2026 by rpki-client