Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft
File:                     K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft (raw, json)
Hash identifier:          BRmsAt6rn6L2qxsYWcD5/U+8e38cE6iFtLSsG0wCYQk=
Subject key identifier:   CC:49:B1:D9:46:26:05:DA:3E:48:82:8E:7F:AB:35:57:76:AD:D8:C1
Authority key identifier: 2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D
Certificate issuer:       /CN=A9144DEA/serialNumber=2BCACF6165B58740590E59718433D8183FF9466D
Certificate serial:       0182
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft
Manifest number:          017C
Signing time:             Wed 19 Aug 2026 05:14:53 +0000
Manifest this update:     Wed 19 Aug 2026 05:14:52 +0000
Manifest next update:     Wed 26 Aug 2026 05:14:52 +0000
Files and hashes:         1: K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl (hash: 8zOEfDokJ4iC0tNSC+n0EB5z0ds0WzuYCB5Q3FrjBZc=)
                          2: DC10E79AABF211F0AF7B0010C4F9AE02.roa (hash: zrqCL04jUGgsbKaYOZp7KQyNgp8nrR3Fm1zIFrxXnuE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl
                          rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:14:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144DEA, serialNumber=2BCACF6165B58740590E59718433D8183FF9466D
        Validity
            Not Before: Aug 19 05:14:52 2026 GMT
            Not After : Aug 26 05:14:52 2026 GMT
        Subject: CN=6a853bcd-2567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:80:ea:fd:79:ed:02:a6:e7:46:c7:ac:ac:e3:
                    45:b0:40:65:c4:a8:09:8e:7d:94:4a:31:29:f0:10:
                    2c:d6:d4:80:4a:17:05:c6:28:1e:a9:b0:b2:a1:84:
                    0c:5d:5b:4d:cc:8d:7f:7f:68:9b:22:80:bc:b1:6e:
                    b6:d2:93:31:7a:f1:b0:d8:00:02:40:ad:ba:14:bc:
                    21:d2:bc:e8:c0:b1:2c:9a:9c:8f:df:10:d8:c1:98:
                    09:c9:d3:b5:b8:d7:a9:d9:19:58:b2:07:a1:01:3d:
                    0d:7f:a9:ad:f7:4c:cf:28:bc:b3:9a:9a:29:cb:c6:
                    a9:e4:5a:14:32:93:5e:f8:3d:78:c5:62:f0:59:73:
                    35:93:a1:cd:92:4c:6e:a4:c4:5d:12:c4:32:b7:01:
                    2f:03:22:25:2d:a2:ff:80:38:cb:fc:76:95:b7:ea:
                    ce:e8:d0:1e:4e:1b:86:90:9d:4a:94:a7:8d:1e:e8:
                    43:9f:e2:e8:90:68:e5:ab:c6:99:10:21:b1:61:b4:
                    8c:13:ec:7f:41:93:ff:d9:15:be:60:81:d0:51:2f:
                    dd:07:4c:1b:84:0c:ee:65:b6:03:a6:46:a0:f1:40:
                    df:5f:fe:ea:89:0a:88:e5:74:4d:a5:2e:16:dc:f3:
                    b2:8d:24:3e:71:fa:36:76:f3:7b:55:2b:87:10:cd:
                    1d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:49:B1:D9:46:26:05:DA:3E:48:82:8E:7F:AB:35:57:76:AD:D8:C1
            X509v3 Authority Key Identifier:
                keyid:2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e2:7c:da:5c:6e:33:9f:d0:be:ce:aa:26:58:15:0b:5e:c9:
         a3:b7:fa:8f:bc:45:ae:f1:ac:66:74:9e:f2:51:1e:f8:af:19:
         4c:fb:85:f1:63:b5:a5:e1:d7:58:51:7a:68:28:16:60:ba:92:
         89:a1:9e:1f:87:ce:58:12:ed:ae:da:20:d6:55:32:4a:73:81:
         86:53:c3:16:89:18:cb:47:2f:12:6b:bb:ef:d5:45:2b:9e:73:
         03:6c:f2:76:a2:fd:a3:d5:3e:fb:a7:85:6b:46:c1:92:a3:3f:
         f5:52:ab:db:50:00:6f:4c:1d:66:bb:f0:76:fd:b7:21:8e:0b:
         d6:1d:38:73:c3:a3:6c:c1:46:11:a1:a2:a2:75:6b:97:bf:02:
         b7:66:a8:96:33:ee:ca:e6:a8:a7:e0:2e:20:97:f2:91:eb:0f:
         33:05:af:a4:d7:a9:a8:e8:ef:5c:73:b3:3a:4c:09:83:e9:92:
         7f:40:ec:5b:2f:de:07:2d:2a:c1:67:5b:e0:72:35:86:01:4d:
         85:a7:07:45:01:3b:5c:1f:ca:92:8e:ce:93:8b:a4:91:6c:99:
         20:74:88:46:86:1f:5b:7b:0f:55:f2:fb:21:f6:f6:e8:5d:ed:
         3b:42:64:a1:c3:e5:07:0e:7a:c6:a8:6c:8f:2e:b8:67:d3:6a:
         5d:98:67:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:09 2026 by rpki-client