Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft
File:                     iavBOYslsdbOj_e_sysS6fCWc_k.mft (raw, json)
Hash identifier:          pB2VZ92ANe1XNpDBX4lCaEn91qPjDPHNF/47tN0QJ0Q=
Subject key identifier:   B5:A6:8A:D1:74:B3:F5:33:71:DD:A6:DA:A9:D9:FF:80:B4:70:D0:66
Authority key identifier: 89:AB:C1:39:8B:25:B1:D6:CE:8F:F7:BF:B3:2B:12:E9:F0:96:73:F9
Certificate issuer:       /CN=A9143035/serialNumber=89ABC1398B25B1D6CE8FF7BFB32B12E9F09673F9
Certificate serial:       0547
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft
Manifest number:          053F
Signing time:             Tue 18 Aug 2026 23:50:40 +0000
Manifest this update:     Tue 18 Aug 2026 23:50:39 +0000
Manifest next update:     Tue 25 Aug 2026 23:50:39 +0000
Files and hashes:         1: iavBOYslsdbOj_e_sysS6fCWc_k.crl (hash: j8AMhwNezhPrs9MfeLYkAXh0P9FUrJhL9V6vnW1d668=)
                          2: 6B47EC68529E11EC9C7C2081C4F9AE02.roa (hash: r8OdCls35VkGR5BYn+Xw2ps0AhkdTQVuJUU7goTrFY4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.crl
                          rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 23:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1351 (0x547)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143035, serialNumber=89ABC1398B25B1D6CE8FF7BFB32B12E9F09673F9
        Validity
            Not Before: Aug 18 23:50:39 2026 GMT
            Not After : Aug 25 23:50:39 2026 GMT
        Subject: CN=6a84efd0-1dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:33:f3:71:da:88:b3:28:74:90:f3:5f:bb:04:
                    b6:84:f4:54:db:5f:aa:7b:ef:82:da:a4:38:05:b2:
                    eb:68:82:6d:8d:04:4e:fe:a5:f1:ec:f5:60:4e:7c:
                    bc:56:be:f8:82:1c:a0:41:74:d9:7d:9d:40:1d:75:
                    f4:7d:2c:87:85:87:b8:b1:32:b6:6b:2b:16:f6:7b:
                    f0:33:6c:c3:43:ee:33:22:56:91:40:4c:59:18:8a:
                    04:38:b9:84:cc:2b:72:ac:df:71:38:99:2e:9c:35:
                    c9:85:54:68:9f:f7:1c:23:e4:19:8a:07:06:68:7c:
                    05:eb:19:37:60:7a:7c:62:30:96:7b:0c:4f:ee:2a:
                    cc:e9:4b:b6:d4:fb:ff:5d:fe:65:c6:90:aa:63:20:
                    3c:ba:13:db:22:86:03:03:3a:1d:34:e9:ff:08:36:
                    1c:9d:f4:a3:2a:c6:18:54:5b:09:60:ff:af:4a:89:
                    cc:70:8f:b1:5b:40:79:3d:50:5e:21:8d:a3:84:f3:
                    c6:c9:d4:b9:bc:67:49:8a:1e:dd:04:95:3c:28:b0:
                    52:ef:10:b4:10:95:0e:23:0d:f8:e2:d8:8d:33:ca:
                    f3:5b:81:9c:af:de:0a:74:b7:36:80:fb:99:ce:82:
                    8f:a6:ef:b6:78:b1:3f:a0:0b:c1:dc:a1:e0:4c:fa:
                    ee:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A6:8A:D1:74:B3:F5:33:71:DD:A6:DA:A9:D9:FF:80:B4:70:D0:66
            X509v3 Authority Key Identifier:
                keyid:89:AB:C1:39:8B:25:B1:D6:CE:8F:F7:BF:B3:2B:12:E9:F0:96:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:7c:73:1a:08:39:a8:27:95:7b:da:63:2a:ab:58:36:da:d1:
         0d:f4:dc:6e:b9:f2:32:c7:c9:f5:94:12:bd:53:8e:ae:ad:77:
         fd:49:81:31:91:96:b7:11:e9:e8:0f:42:99:20:1f:ab:ae:60:
         7d:3f:b9:47:fc:52:0e:cb:9c:aa:05:09:52:9e:09:ee:29:fc:
         83:47:05:86:81:70:a3:bb:df:02:e4:75:55:cb:e4:37:99:08:
         66:ac:01:7f:e1:5c:9a:3b:2f:77:6b:c5:e4:36:b1:d3:41:ab:
         fa:c6:83:d1:d1:b6:7c:cb:bb:a1:b0:d5:21:4f:a1:e1:78:d1:
         69:b2:35:ff:02:9f:86:70:f1:32:df:78:59:4e:ea:2c:0d:5b:
         dc:8e:c0:b8:e8:10:1d:24:0f:1c:b4:a0:f5:92:b2:6e:87:81:
         df:d5:f5:80:ec:85:4b:05:3e:2b:82:e2:6f:14:f0:82:a0:ea:
         62:9a:de:bb:cc:23:9b:1e:1b:4d:7d:77:0a:4f:9c:f3:8c:59:
         dd:f7:fd:07:6c:22:18:f9:e0:73:93:b4:3d:30:dd:35:88:a2:
         56:e7:4c:7d:bb:85:4d:49:94:ad:bd:e1:99:75:e1:f3:84:d6:
         62:80:3b:b9:dd:3b:05:49:96:48:68:5e:97:0c:89:b3:fc:c3:
         3f:d1:97:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:48:17 2026 by rpki-client