Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft
File:                     89pR_oC82pcIdSXiBGIeqfVXQZk.mft (raw, json)
Hash identifier:          lmrTr530iWfcW+8D8arx70BSCOkp78InTDZzskDbumg=
Subject key identifier:   44:E8:3B:A7:7A:3F:B9:79:D6:07:E5:F6:3E:9C:BC:4E:08:53:46:D5
Authority key identifier: F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99
Certificate issuer:       /CN=A9147CDA/serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199
Certificate serial:       02A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft
Manifest number:          0287
Signing time:             Wed 19 Aug 2026 02:47:01 +0000
Manifest this update:     Wed 19 Aug 2026 02:47:00 +0000
Manifest next update:     Wed 26 Aug 2026 02:47:00 +0000
Files and hashes:         1: 89pR_oC82pcIdSXiBGIeqfVXQZk.crl (hash: kcQXsqnY7hIXJ4x22rEjF7OQPubnm5v+5d956HakedQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl
                          rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:46:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 675 (0x2a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147CDA, serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199
        Validity
            Not Before: Aug 19 02:47:00 2026 GMT
            Not After : Aug 26 02:47:00 2026 GMT
        Subject: CN=6a851925-0dc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e6:1e:19:4d:2a:1e:d6:a1:4f:76:6d:2b:de:
                    d2:ac:0a:e8:6e:e3:35:44:81:4c:a4:c0:bd:f0:e3:
                    01:ae:e5:17:6d:c0:24:ed:1f:99:7c:0b:8b:3d:25:
                    79:af:f7:68:08:fd:35:5e:02:94:fd:c9:1e:99:a2:
                    f2:41:28:84:62:e0:20:e8:d8:21:74:f2:15:3d:17:
                    c5:f2:69:53:b7:80:d7:c1:f8:00:c1:52:86:b1:94:
                    04:3b:27:ee:69:39:fe:6d:64:50:ea:6a:22:ef:0c:
                    01:2c:68:2f:59:2c:74:64:6e:cb:76:b7:7b:f3:13:
                    2d:e0:5b:b0:c6:64:9d:57:d7:5c:49:53:fd:59:6b:
                    3c:37:e5:e7:ee:83:02:6c:fb:d7:b2:63:aa:3e:9e:
                    fd:25:ae:dc:67:f7:1b:73:1b:46:5f:ab:94:26:e5:
                    21:97:6f:c4:e0:69:88:e0:f7:48:55:50:ee:c2:84:
                    b9:80:86:5f:d5:df:c2:17:d8:5b:57:9e:96:8f:ab:
                    88:35:27:a8:50:0c:92:c7:8a:4d:b0:b6:56:75:29:
                    3a:8c:9b:cf:62:dc:77:ba:37:a8:f9:ff:87:3c:4a:
                    12:78:9c:3d:19:c7:d0:5c:22:7e:1c:66:e6:c4:56:
                    77:17:a1:e0:1b:ff:8e:c1:c2:1c:ab:ae:6f:19:40:
                    47:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E8:3B:A7:7A:3F:B9:79:D6:07:E5:F6:3E:9C:BC:4E:08:53:46:D5
            X509v3 Authority Key Identifier:
                keyid:F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ca:6e:16:a0:de:d3:23:10:a9:a3:9d:69:c5:57:3b:35:84:
         60:93:cb:64:13:e8:de:f5:ac:85:9e:17:79:01:49:45:5f:91:
         2d:3f:8e:08:07:61:b7:af:1f:d1:b4:13:35:7f:e6:8c:55:e2:
         28:81:ea:36:7a:78:26:9d:a0:60:9c:9a:9c:3e:60:a4:7b:15:
         d7:d4:f4:29:4c:76:65:35:0b:8a:0f:61:af:d1:5b:54:b5:a5:
         b3:2d:44:6e:2f:3d:06:c5:2b:94:bc:f1:5f:a4:68:1b:74:52:
         35:1e:e4:88:a3:d7:cb:01:2e:90:50:21:92:1a:bd:8f:6e:38:
         42:d9:6b:66:43:51:b3:cc:c2:03:92:91:bb:bc:9e:b8:03:1f:
         c1:f8:f0:69:8f:ff:b9:eb:55:9b:b6:f7:d5:8f:13:57:3e:dc:
         43:49:b2:61:08:24:bc:e2:93:2f:b7:cd:cc:b5:df:5e:e1:4f:
         f0:a7:2d:ca:9f:33:3f:ef:39:e0:f9:45:65:33:6b:c9:cc:60:
         e0:e0:17:77:fd:23:0e:54:51:fd:26:49:c7:d5:7e:91:9d:12:
         a1:cb:01:94:0d:97:85:9c:e2:e3:09:d7:7c:e1:78:4d:55:a7:
         a3:f0:ac:46:16:c7:10:48:45:d7:7b:f3:38:3d:e2:be:75:3d:
         6e:14:d7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:59 2026 by rpki-client