Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.mft
File:                     X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.mft (raw, json)
Hash identifier:          /PS8aXcI8OzVm9pnIL6wWP2esI9a1O7Lt8WFgC3WIls=
Subject key identifier:   4B:93:B2:91:D6:58:2D:39:23:E3:EC:FA:AA:8F:BC:88:EC:51:43:48
Authority key identifier: 5F:E1:54:3C:85:B0:65:30:A1:64:CF:90:E1:A2:7D:A8:DB:72:45:0E
Certificate issuer:       /CN=A9145418/serialNumber=5FE1543C85B06530A164CF90E1A27DA8DB72450E
Certificate serial:       0583
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.mft
Manifest number:          057A
Signing time:             Tue 18 Aug 2026 23:39:45 +0000
Manifest this update:     Tue 18 Aug 2026 23:39:45 +0000
Manifest next update:     Tue 25 Aug 2026 23:39:45 +0000
Files and hashes:         1: X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.crl (hash: Spvyz2rLO6DL8uLrb31cHvvq1L4GDhpNEj233H9mZCY=)
                          2: FA5399BC3AE211ECA119BA68C4F9AE02.roa (hash: x1DOv6cF85uK2W/k4T89nA4T7d/X6L92YVXFUsvPnr8=)
                          3: C9C2D86874FC11F1A737AC8869A30FBC.roa (hash: I52c5n8f1ZmCxHkwKhWCBl/YqMPCfhHB5y7LP5rCQB8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.crl
                          rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 23:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1411 (0x583)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145418, serialNumber=5FE1543C85B06530A164CF90E1A27DA8DB72450E
        Validity
            Not Before: Aug 18 23:39:45 2026 GMT
            Not After : Aug 25 23:39:45 2026 GMT
        Subject: CN=6a84ed41-a97c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d2:f3:1d:e9:52:12:0f:7c:a5:6e:25:53:63:
                    85:13:f6:fd:de:17:02:0b:42:cb:4c:8f:10:23:82:
                    cb:49:69:ef:77:ae:26:92:da:ff:d6:af:a9:b9:86:
                    f2:89:87:2a:3d:1c:d5:b9:27:a7:f5:16:59:56:22:
                    27:0f:43:12:3d:14:43:98:ea:61:b8:b8:0d:44:df:
                    f8:0d:b9:69:d7:9c:57:07:f4:9c:65:f0:e9:9d:13:
                    23:29:fd:51:c5:ac:a2:d5:f3:b4:23:d4:16:cf:99:
                    55:2d:a6:db:96:df:7f:82:9a:f6:92:c9:2c:02:94:
                    90:7a:81:62:6e:74:f5:78:c5:c1:ff:7d:09:8f:95:
                    90:66:4c:4c:a3:8e:68:e9:e0:58:0f:e1:26:62:e8:
                    99:6f:42:d5:14:2f:f5:a9:3c:e8:5d:83:1f:c2:5d:
                    b9:6a:71:d4:88:1e:53:23:5f:d7:19:27:bb:7e:c8:
                    e3:25:d4:d6:0e:ee:e0:38:85:6c:fd:75:20:2d:8c:
                    6a:8e:c6:3b:7e:28:d4:4b:70:60:e9:d8:ce:66:98:
                    97:b7:d8:d3:9b:06:79:32:55:e8:65:77:7e:93:7d:
                    36:08:e4:94:36:6e:9c:f8:18:3b:8c:6c:7b:28:75:
                    5f:ec:dd:42:a0:1f:38:53:ee:67:b0:3c:aa:9c:30:
                    04:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:93:B2:91:D6:58:2D:39:23:E3:EC:FA:AA:8F:BC:88:EC:51:43:48
            X509v3 Authority Key Identifier:
                keyid:5F:E1:54:3C:85:B0:65:30:A1:64:CF:90:E1:A2:7D:A8:DB:72:45:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:c0:c6:cb:28:9b:3c:41:78:6b:d2:29:15:bd:fa:ee:72:5f:
         9c:21:43:43:eb:ca:06:74:b6:90:ba:e9:f3:e7:0e:a4:48:30:
         2b:56:db:bd:03:e4:7a:f9:e5:cc:88:4c:47:58:f4:e5:c1:bc:
         c1:cb:a6:01:cf:f3:30:00:cf:37:9a:d2:25:f6:98:77:76:b0:
         17:41:dd:68:be:73:8c:15:06:a7:25:91:bd:05:72:e5:57:5b:
         eb:c4:3a:66:eb:95:be:2e:10:78:d7:71:f5:33:18:85:f2:f0:
         2b:95:72:50:5a:53:92:3d:7b:1d:8c:65:77:c9:43:9d:86:4a:
         d1:c8:d6:d7:36:31:5b:e8:02:ae:15:5d:ec:45:40:27:1a:ed:
         f4:e1:bc:47:96:fd:24:2d:a1:2f:da:a9:1c:21:58:0a:c6:b7:
         36:c3:72:59:ac:7a:7b:3c:c1:a4:8a:f8:77:6e:1d:b2:92:a9:
         19:6f:1e:21:71:65:bd:34:5d:5f:75:18:92:5c:43:bd:dd:dc:
         e9:5e:02:9f:35:74:cd:a6:bd:6a:3e:d2:41:13:11:56:2d:7c:
         eb:5f:b3:d9:f1:0f:2d:32:d6:16:78:d3:69:d0:8b:9b:e5:c1:
         19:bf:ab:9e:7e:a3:eb:1f:fc:6f:39:bb:0f:0f:9f:00:1e:19:
         ce:de:30:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:54:18 2026 by rpki-client