Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913EECE/574BB49849E211F19145C78FB0833773/fdt5B7eWYwk_a_OC2oySdjuuHyo.mft
File:                     fdt5B7eWYwk_a_OC2oySdjuuHyo.mft (raw, json)
Hash identifier:          y3IxrH+rgCyWCPMBJOwRZK17Px1H7xzwT8ZxzCqBzIc=
Subject key identifier:   8A:90:38:D2:D0:3C:9B:9A:02:82:5D:31:FB:CF:B7:6A:21:7A:3E:14
Authority key identifier: 7D:DB:79:07:B7:96:63:09:3F:6B:F3:82:DA:8C:92:76:3B:AE:1F:2A
Certificate issuer:       /CN=A913EECE/serialNumber=7DDB7907B79663093F6BF382DA8C92763BAE1F2A
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fdt5B7eWYwk_a_OC2oySdjuuHyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EECE/574BB49849E211F19145C78FB0833773/fdt5B7eWYwk_a_OC2oySdjuuHyo.mft
Manifest number:          3B
Signing time:             Tue 25 Aug 2026 08:29:42 +0000
Manifest this update:     Tue 25 Aug 2026 08:29:41 +0000
Manifest next update:     Tue 01 Sep 2026 08:29:41 +0000
Files and hashes:         1: fdt5B7eWYwk_a_OC2oySdjuuHyo.crl (hash: h0L5XFFlO24sDHQmgIWUsZ95A/q2AwnUddctXVS4jog=)
                          2: EF8B56A0838A11F19573539171A30FBC.roa (hash: hNudVENLr6N/IfkZvDwKoVpTI9spzdJ1NFaX8Ir4zJE=)
                          3: 670F51BA49E611F1A9E07428B5833773.roa (hash: i0rrVfRZcMuLASMWtvqI+waoaniI+Rv5lolA1yOyLxg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EECE/574BB49849E211F19145C78FB0833773/fdt5B7eWYwk_a_OC2oySdjuuHyo.crl
                          rsync://rpki.apnic.net/member_repository/A913EECE/574BB49849E211F19145C78FB0833773/fdt5B7eWYwk_a_OC2oySdjuuHyo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fdt5B7eWYwk_a_OC2oySdjuuHyo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 08:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EECE, serialNumber=7DDB7907B79663093F6BF382DA8C92763BAE1F2A
        Validity
            Not Before: Aug 25 08:29:41 2026 GMT
            Not After : Sep  1 08:29:41 2026 GMT
        Subject: CN=6a8d5276-0c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:14:ab:44:a0:d8:38:0d:a3:79:bc:97:96:98:
                    3b:a0:b2:90:07:68:2e:c7:73:1d:1c:cd:df:1c:f5:
                    51:3f:11:44:d5:24:22:78:81:e8:5d:a5:c6:56:be:
                    4f:7e:76:70:d2:fc:e2:e6:02:21:17:8e:44:ac:b7:
                    81:22:33:88:fd:39:3a:78:d7:d8:20:44:b5:a9:c0:
                    71:7d:ed:4f:7f:ba:17:65:5c:40:cb:6f:bd:98:f5:
                    c6:b3:bb:54:f4:78:ba:38:80:0b:45:71:ab:21:15:
                    78:28:75:f9:5a:74:1b:8f:6f:07:7b:ae:5f:07:98:
                    38:83:8c:ad:36:aa:ca:5e:32:96:7f:9e:63:5d:dd:
                    3e:34:6e:60:46:1d:04:b3:ec:d8:42:7e:03:2d:1f:
                    56:d4:67:61:b5:87:04:2a:e9:8c:09:5e:21:64:b0:
                    ca:b6:99:c9:f0:77:00:a8:fb:24:f1:47:fc:77:fb:
                    51:75:7a:f4:b1:0d:b5:ca:f7:22:8f:50:4f:73:9c:
                    51:4e:8a:03:7c:de:42:e7:fd:75:55:da:84:68:f7:
                    92:63:fb:09:98:e4:10:86:77:45:5b:ce:61:00:26:
                    9d:0c:9e:06:dc:d9:af:03:ca:8f:77:dc:6d:09:4c:
                    5b:cd:56:6f:b0:fe:7a:ac:77:08:e9:15:a9:07:13:
                    28:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:90:38:D2:D0:3C:9B:9A:02:82:5D:31:FB:CF:B7:6A:21:7A:3E:14
            X509v3 Authority Key Identifier:
                keyid:7D:DB:79:07:B7:96:63:09:3F:6B:F3:82:DA:8C:92:76:3B:AE:1F:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EECE/574BB49849E211F19145C78FB0833773/fdt5B7eWYwk_a_OC2oySdjuuHyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fdt5B7eWYwk_a_OC2oySdjuuHyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EECE/574BB49849E211F19145C78FB0833773/fdt5B7eWYwk_a_OC2oySdjuuHyo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:1f:72:d0:3f:0d:b0:58:d2:b8:1c:8f:8d:c1:4c:28:97:29:
         7a:ac:da:ef:f6:d3:af:29:81:9f:76:f2:90:00:01:ce:ab:86:
         a7:d8:23:34:36:6b:59:a6:bf:f1:13:1a:da:d5:a0:35:bc:96:
         26:0f:d6:81:d3:ef:3e:72:73:53:88:9b:09:50:73:f8:a2:94:
         ef:2e:b4:7f:cb:a7:3a:fb:84:ba:c2:06:f4:34:78:2b:62:33:
         06:e1:68:f4:97:37:b2:d9:a5:1c:ee:6f:12:3f:58:e1:06:06:
         cc:0e:cb:0a:7d:cc:ff:57:c1:b0:d2:32:8b:c7:ea:fd:d3:59:
         02:ed:a5:d0:ef:3e:ea:1f:0f:1d:f7:07:84:ec:a2:96:5e:2b:
         71:1e:34:02:22:ed:4c:59:f3:38:9c:2a:1b:3e:9d:db:41:86:
         3f:a0:07:d3:db:67:bd:cb:ed:f8:51:af:78:03:3c:8a:34:8a:
         ba:7f:2e:84:6a:20:d0:3d:de:3b:12:9a:a5:b3:99:51:0f:98:
         00:92:8c:ce:3c:01:0e:5a:bb:4d:23:b5:ff:c7:47:f9:59:0d:
         2b:5c:6b:68:06:d9:c3:7a:b9:f4:47:b2:d3:14:f8:f2:10:64:
         73:a9:57:e9:53:11:34:14:9f:76:79:e2:a4:52:25:74:d4:31:
         43:4f:0f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 12:18:42 2026 by rpki-client