Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
File:                     fWXr4UwwRuc-OYaVcwKibggfGvg.mft (raw, json)
Hash identifier:          Pnq2kOuiqc/DpfsrgMifSkF+Tf5qyeXwaq///JZ1edk=
Subject key identifier:   08:DE:F1:78:E5:BF:7C:CD:BB:56:C3:09:D1:B9:3B:53:5A:96:3F:A3
Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
Certificate issuer:       /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Certificate serial:       2B37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
Manifest number:          2861
Signing time:             Thu 20 Aug 2026 15:41:15 +0000
Manifest this update:     Thu 20 Aug 2026 15:41:14 +0000
Manifest next update:     Thu 27 Aug 2026 15:41:14 +0000
Files and hashes:         1: fWXr4UwwRuc-OYaVcwKibggfGvg.crl (hash: nCn/xsJ179tseblkPDrOKLWA/JO1Bmph+RsHUqTeT/U=)
                          2: BDA4E3289A8311EF8E25CE76C4F9AE02.roa (hash: bzhCrQH0hMV6GwTT9Fky+Ng66RvLKid6IIkFtJLfLw8=)
                          3: 3F2B28B4D94411E98E28CD85C4F9AE02.roa (hash: AZvWQK7f06xAUJY4dpO/43UlHLvvZaFe+yz/9QGpu78=)
                          4: 7196A634B0F311E5AB30F151C4F9AE02.roa (hash: +uTaJ8Rj+UnTn6fqXJKu97grWg3Inp45q80KvpeBPoE=)
                          5: E5AA11C2974A11EFAE16EC38C4F9AE02.roa (hash: xA6PcsRf5rrlNsUqqrZA+NMMruiid6Mp5HpwLfnHSrM=)
                          6: 918BE5EC8B1411F18A2313643511F970.roa (hash: vxsnByrCZUpe6Of5imm9qM8Ez1HhEn6XAPRty/rAnsg=)
                          7: E4E0C13C5EBF11EAB066F050C4F9AE02.roa (hash: gYSiajQnldLQ+bhLkdvSUk22LCvrmILnk900/5TLqxc=)
                          8: 40397ED6D94411E98E28CD85C4F9AE02.roa (hash: RCDVrbOFK+BOjf+F8tLDTvqoaDuTE/WxNPyCILtMNOA=)
                          9: 3E054AE6D94411E98E28CD85C4F9AE02.roa (hash: VMsebuY/KjYkOZDKDQ+sWlCCgBaMwtN9dtZo4xSiGRw=)
                          10: 2022CF028A2511EF8F560567C4F9AE02.roa (hash: ymXeudYHCI8zpVZ2e/jZOTCy5TCAEr1QJnGSEI08A5Q=)
                          11: 73464EBCB0F311E5AB30F151C4F9AE02.roa (hash: TwM3EXcFHiXvi0EIeUODBSHXe97DPS2zMVFcj/ziZTE=)
                          12: 4F8D63203EBF11EBA940A946C4F9AE02.roa (hash: LE0VTi8+0pbCSkcwe7ACdLaQayeRS2CPbE1XwFL3hMM=)
                          13: 40E8489ED94411E98E28CD85C4F9AE02.roa (hash: IGqsj2S5MFPo+sMtzxor83kzXwSyYSdo4rKvaE65ctE=)
                          14: E44FF288EE9811EF88F8B953C4F9AE02.roa (hash: afV6U8t3veePRtjOVBHBCot2VaYRsKobn1zoWsCBuT0=)
                          15: 1A2663C68B0311F1A9F645306E11F970.roa (hash: FUMeDr3YV1UL+W9JEaVkbdGOajfTUHKFjI6g5b0VH30=)
                          16: EC5BF06C8A3411EFBF173E5BC4F9AE02.roa (hash: Egiyt5Y6+l8zvE04CeW/T7nuqk4euVkVCblN0FjLlEk=)
                          17: 3C670256D94411E98E28CD85C4F9AE02.roa (hash: RgHFzuAi29Dcs41jG9doEl6kMdmp47ukl6nST3l+pYg=)
                          18: 089CB7F8E41C11E9AD4A8D16C4F9AE02.roa (hash: t058ffng+WPFnQQqOvRCJsAWcgnwC+R4AESogqQsfo8=)
                          19: 3D7A10E8D94411E98E28CD85C4F9AE02.roa (hash: Tf4Y3IEFlgzkdN+VQKmY7om/f7fRT2uQg57Npx45GaM=)
                          20: 68356576B0F311E5AB30F151C4F9AE02.roa (hash: YdRvCfWbMSCV8g9Rl5rj3jDrFMcbMYhwYG0c4TJGKSE=)
                          21: 69CB6C488A3111EF85E56411C4F9AE02.roa (hash: EUCQ55x2UAgluzfxAghXZwkcta20C7tTCTK7POVNono=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
                          rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11063 (0x2b37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
        Validity
            Not Before: Aug 20 15:41:14 2026 GMT
            Not After : Aug 27 15:41:14 2026 GMT
        Subject: CN=6a87201b-0b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ee:fa:51:1c:84:96:5f:73:ab:5b:4d:ac:46:
                    63:11:cb:73:55:0f:3d:4e:5b:ab:83:b4:97:e6:3c:
                    57:51:70:cf:97:76:b4:e7:af:2e:0c:28:12:57:dd:
                    da:13:ad:d7:fa:78:23:b7:22:ec:cc:84:c4:b7:61:
                    3a:ab:40:59:51:42:dd:92:7f:24:33:da:af:f5:4e:
                    93:01:af:ac:0e:bf:79:f6:d5:61:01:af:00:14:5f:
                    47:43:63:82:a4:96:71:0e:2c:03:18:31:d3:80:db:
                    24:9a:bc:98:1c:05:95:49:b0:cc:20:24:91:eb:6b:
                    d9:94:ca:22:e7:56:df:d0:54:59:3c:4f:9e:31:ba:
                    53:10:82:89:4c:1b:6a:f5:d0:e2:75:fb:04:ab:85:
                    63:93:9a:04:c0:f1:a2:fa:84:00:38:a2:fe:d7:d6:
                    b6:15:8c:47:72:c7:68:16:a6:75:48:aa:0b:ee:54:
                    e4:4d:0c:46:a3:bd:66:0f:87:3c:ce:43:b4:aa:a2:
                    42:1a:b0:3a:80:e6:1f:46:d8:d0:9a:9b:c0:13:58:
                    8c:b2:ee:6f:fa:f7:cc:45:d4:e6:b3:14:07:95:6e:
                    c1:2f:ed:c5:15:d3:35:59:51:b9:b3:41:a6:5d:b8:
                    40:6d:d7:17:52:78:9b:96:f0:d5:70:06:69:d8:ea:
                    4b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DE:F1:78:E5:BF:7C:CD:BB:56:C3:09:D1:B9:3B:53:5A:96:3F:A3
            X509v3 Authority Key Identifier:
                keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:18:45:5e:6d:4f:ad:63:66:53:05:a7:a2:17:cf:f9:90:64:
         91:8d:43:9f:de:43:5b:b3:b4:fe:28:2d:70:d1:1b:3c:73:58:
         bd:0d:7b:d0:2a:57:0c:6f:6a:7c:18:f6:bf:d4:7d:ea:ca:24:
         a0:60:4e:73:5e:2f:79:a2:8e:fc:86:e7:ec:64:da:b5:9b:a4:
         5b:b1:79:39:18:9e:58:dc:ab:6f:88:af:c6:06:66:78:fb:30:
         18:e7:14:74:20:16:d4:82:48:47:a3:55:0f:cb:d0:2f:b7:54:
         36:d4:eb:b9:8f:85:e9:25:0e:7e:fa:04:6c:08:0f:f2:22:94:
         5a:34:9b:ee:d5:4c:af:9b:3e:0d:e4:f7:8f:88:ef:64:52:7d:
         49:63:36:3b:6c:30:cf:3e:f9:81:52:b1:fb:65:7a:68:81:0c:
         9f:7c:73:8c:6b:7e:37:60:e8:b7:27:cd:12:d3:45:e0:ca:4a:
         2b:b9:f7:74:01:bf:84:cb:17:c4:4a:60:7d:96:86:f8:a2:d5:
         6d:91:2b:1b:17:1a:ba:b3:03:6c:85:5a:f8:45:29:1f:f2:d5:
         e1:40:a5:ec:de:bd:0d:74:73:f9:4e:51:bd:0b:ac:4d:2f:03:
         17:7f:90:f8:44:3a:21:35:3a:35:e2:42:48:5a:00:a5:12:a1:
         d1:05:d7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:48:48 2026 by rpki-client