Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F772/DBE68B8A84D211F1B663606C59A30FBC/EMVedFlEwW86zDvFtbEz7Wem1Sw.mft
File:                     EMVedFlEwW86zDvFtbEz7Wem1Sw.mft (raw, json)
Hash identifier:          /6R+Dy6y4/LL4w7mH1dD9bK6XwvlJJu7r2aCaFQKHD8=
Subject key identifier:   B5:08:0D:C5:C2:E2:7C:70:73:5F:26:61:D2:88:64:A4:AF:A0:37:4B
Authority key identifier: 10:C5:5E:74:59:44:C1:6F:3A:CC:3B:C5:B5:B1:33:ED:67:A6:D5:2C
Certificate issuer:       /CN=A913F772/serialNumber=10C55E745944C16F3ACC3BC5B5B133ED67A6D52C
Certificate serial:       11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMVedFlEwW86zDvFtbEz7Wem1Sw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F772/DBE68B8A84D211F1B663606C59A30FBC/EMVedFlEwW86zDvFtbEz7Wem1Sw.mft
Manifest number:          11
Signing time:             Wed 19 Aug 2026 09:47:59 +0000
Manifest this update:     Wed 19 Aug 2026 09:47:59 +0000
Manifest next update:     Wed 26 Aug 2026 09:47:59 +0000
Files and hashes:         1: EMVedFlEwW86zDvFtbEz7Wem1Sw.crl (hash: 72+8XzIHiUBaBR7qmC1rKZpGfkTDaafSf9YcUff2H/c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F772/DBE68B8A84D211F1B663606C59A30FBC/EMVedFlEwW86zDvFtbEz7Wem1Sw.crl
                          rsync://rpki.apnic.net/member_repository/A913F772/DBE68B8A84D211F1B663606C59A30FBC/EMVedFlEwW86zDvFtbEz7Wem1Sw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMVedFlEwW86zDvFtbEz7Wem1Sw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F772, serialNumber=10C55E745944C16F3ACC3BC5B5B133ED67A6D52C
        Validity
            Not Before: Aug 19 09:47:59 2026 GMT
            Not After : Aug 26 09:47:59 2026 GMT
        Subject: CN=6a857bcf-abdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a4:3f:d2:f6:aa:c4:36:50:d7:60:55:78:56:
                    d1:20:1d:3a:52:6c:e8:41:5f:5b:f6:1f:3f:94:d7:
                    ea:79:39:6e:62:4e:6f:b4:11:15:f2:c6:d9:65:74:
                    e7:f0:08:66:c1:65:b9:b7:3b:5a:2c:b9:41:f1:b5:
                    d8:fc:5a:ea:19:ae:c0:3b:06:39:8a:20:83:ed:fd:
                    74:70:ab:3c:78:4b:1c:84:71:40:07:17:db:87:41:
                    c9:86:75:bf:90:93:1c:6c:23:f8:a0:c1:4e:7a:aa:
                    bd:aa:cd:45:05:3d:fc:88:4e:92:e8:b5:ba:8a:ce:
                    23:78:b1:4f:f0:6e:bd:61:ae:4a:09:9f:41:aa:13:
                    65:91:f9:a6:1c:a2:6f:8e:a8:ec:36:72:dd:d2:a6:
                    3a:01:48:f8:6e:aa:26:14:fc:0d:c5:f1:a2:71:9b:
                    2e:9b:34:c3:66:15:15:06:98:0e:68:15:40:6d:f7:
                    6c:55:0e:45:d9:b3:4d:c0:d0:27:3b:af:c1:de:dc:
                    6b:81:72:e4:fd:86:70:6b:b7:f8:90:63:a9:71:6f:
                    a1:1d:49:45:ea:54:2f:ef:a4:89:6a:a2:1b:3c:46:
                    1b:76:16:7f:b1:fd:f4:fd:66:86:fe:9f:e3:84:0a:
                    58:7d:64:1f:13:0d:06:dd:1a:1f:b6:8b:6e:89:44:
                    df:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:08:0D:C5:C2:E2:7C:70:73:5F:26:61:D2:88:64:A4:AF:A0:37:4B
            X509v3 Authority Key Identifier:
                keyid:10:C5:5E:74:59:44:C1:6F:3A:CC:3B:C5:B5:B1:33:ED:67:A6:D5:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F772/DBE68B8A84D211F1B663606C59A30FBC/EMVedFlEwW86zDvFtbEz7Wem1Sw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMVedFlEwW86zDvFtbEz7Wem1Sw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F772/DBE68B8A84D211F1B663606C59A30FBC/EMVedFlEwW86zDvFtbEz7Wem1Sw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:d4:c1:8e:22:56:2b:d9:ad:e9:05:b3:54:dd:89:2d:a2:03:
         1a:79:51:61:81:e8:62:2c:46:c6:05:09:d5:ad:ab:86:82:41:
         fa:0e:cf:c0:90:b1:0b:74:22:b7:27:7d:4b:ab:71:9d:20:a4:
         6c:3f:b0:8c:89:cd:9a:57:b5:0d:b8:8e:3b:b8:a2:c1:04:f6:
         4b:bf:a0:67:39:fa:79:b1:6f:4e:b5:ee:62:89:1e:08:6f:34:
         85:73:eb:16:52:39:62:94:0d:88:c7:8a:45:14:2f:14:f1:19:
         a9:43:e2:31:82:aa:bc:1c:9c:ed:ac:03:e9:ad:11:8a:af:f6:
         17:0a:d5:ee:b8:ea:d7:1c:f6:36:a8:98:c4:29:0f:55:52:90:
         d9:2f:99:ec:fe:2d:d4:b7:40:52:9e:e2:2f:ca:54:9a:40:3e:
         8c:4d:bc:b1:51:a8:b2:19:a5:ed:9a:1c:36:d3:19:5a:f3:8e:
         56:7c:27:c4:91:18:d3:ce:4e:bf:c4:c3:4e:a1:71:ad:91:21:
         e4:09:48:4e:fb:ad:fc:4b:c5:5e:53:3b:14:8f:b9:79:1e:5a:
         6f:23:e0:96:a8:0d:e9:1b:a7:8e:ad:ec:c3:66:81:c7:45:41:
         2c:19:52:36:3a:51:a5:30:de:7d:b4:ae:a7:d4:e5:68:c7:5c:
         f2:75:1c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:43:48 2026 by rpki-client