Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
File:                     4JyfckW5hJiukjOxmA17T0xzjQ8.mft (raw, json)
Hash identifier:          WTSisC22YhpRRanpk0F1f1FJq4LRggSINMJb5oKdAJM=
Subject key identifier:   52:50:BC:DA:CD:DA:D5:ED:17:8B:0B:07:DC:CD:5C:D2:2B:C3:14:1E
Authority key identifier: E0:9C:9F:72:45:B9:84:98:AE:92:33:B1:98:0D:7B:4F:4C:73:8D:0F
Certificate issuer:       /CN=A914287F/serialNumber=E09C9F7245B98498AE9233B1980D7B4F4C738D0F
Certificate serial:       0831
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
Manifest number:          0823
Signing time:             Sun 02 Aug 2026 21:31:52 +0000
Manifest this update:     Sun 02 Aug 2026 21:31:51 +0000
Manifest next update:     Sun 09 Aug 2026 21:31:51 +0000
Files and hashes:         1: 4JyfckW5hJiukjOxmA17T0xzjQ8.crl (hash: 4suyw+GFphH8uye/vQJwot26o9cXlIaES77ifaF9kSs=)
                          2: 45CED05E2D2511EBAA63DE82C4F9AE02.roa (hash: sWItZVAsoO/9NQlv0a6tFISakAe8J+H+LJW2vp4Rwhk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.crl
                          rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Aug 2026 21:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2097 (0x831)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914287F, serialNumber=E09C9F7245B98498AE9233B1980D7B4F4C738D0F
        Validity
            Not Before: Aug  2 21:31:51 2026 GMT
            Not After : Aug  9 21:31:51 2026 GMT
        Subject: CN=6a6fb748-a804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:56:08:62:7e:1a:a0:af:6c:27:e3:82:00:8b:
                    ad:20:ff:f4:cf:da:00:99:1b:d8:1b:7a:72:83:29:
                    68:bf:66:6b:19:4c:1f:18:89:90:a2:8a:f4:d1:b5:
                    00:5b:86:8d:a8:ad:2e:ac:e4:15:6b:6e:4c:d7:a3:
                    66:8b:0b:fc:31:6b:72:7e:98:10:d5:86:2f:a9:ee:
                    13:3b:b5:ee:d2:15:2e:9b:85:65:02:72:ec:e5:05:
                    7e:01:62:8d:fb:70:fa:1b:58:a6:53:ad:73:d0:5f:
                    4e:d0:6b:bb:49:0d:67:45:38:ac:14:90:1f:3a:cf:
                    c0:12:22:23:fa:f1:22:89:b6:61:eb:f0:27:e0:41:
                    d5:ec:5b:28:73:32:06:de:58:77:11:85:27:47:dd:
                    9e:e5:fc:b3:dc:f6:54:82:5c:21:bc:d5:37:98:6f:
                    20:94:78:89:d0:e6:42:af:04:bc:f5:0b:e5:a9:ca:
                    91:85:24:da:86:bc:c7:58:ce:ef:58:7c:45:09:a7:
                    c8:b7:40:22:40:62:56:10:cb:fb:2c:98:79:5b:33:
                    66:28:96:5a:ce:0d:27:85:ae:7c:75:fd:31:03:78:
                    5d:9d:14:54:d6:53:b0:a2:bd:b2:56:15:fa:39:04:
                    0b:99:c7:81:53:df:c3:bb:d7:34:47:0d:fe:13:79:
                    93:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:50:BC:DA:CD:DA:D5:ED:17:8B:0B:07:DC:CD:5C:D2:2B:C3:14:1E
            X509v3 Authority Key Identifier:
                keyid:E0:9C:9F:72:45:B9:84:98:AE:92:33:B1:98:0D:7B:4F:4C:73:8D:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c4:60:ef:4e:7a:f3:9e:5a:48:5f:67:86:58:92:a7:e8:3a:
         c6:25:25:c3:d1:d1:cf:dc:a7:bf:7e:cd:ca:43:9b:22:74:db:
         26:75:af:bf:9a:51:35:23:ab:d8:96:9b:ff:0f:be:30:cc:a1:
         58:40:ef:b7:84:aa:ce:3c:d7:ec:33:75:56:75:b0:4f:26:11:
         d5:1b:2d:c6:a9:7a:bc:d1:e9:88:18:14:1a:b3:ff:52:a5:d0:
         f4:17:66:61:a0:60:39:d7:e2:86:b1:b2:9f:0b:86:a5:b4:cb:
         0b:60:75:ad:eb:94:cb:d3:ef:d1:d1:af:68:b7:a8:53:3f:f3:
         5b:ef:97:9f:49:7a:f7:b4:e3:0b:7b:36:e9:69:4f:70:b9:91:
         f9:b1:bb:25:07:d1:4b:be:0a:1a:15:fe:93:01:ff:4a:2b:1b:
         34:08:35:e5:d9:05:a2:19:3e:b4:9a:88:76:a9:42:2c:cd:3d:
         1e:03:cf:9b:c6:85:40:42:4e:4f:fe:de:4c:82:d7:af:e2:ed:
         14:3f:76:2b:00:b2:12:73:39:2b:75:96:d1:39:e2:02:56:95:
         43:2a:8a:a9:f6:b6:cb:2a:df:cd:36:41:9d:2c:fc:80:db:b3:
         5c:06:45:86:e7:a9:53:d3:03:cf:a5:c3:4c:22:ee:a1:d3:33:
         7d:27:cf:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:40:43 2026 by rpki-client