Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft
File:                     rU1lO4NcTh3pjsZjdoiamoN2SwI.mft (raw, json)
Hash identifier:          c9ZaPGCUi2EIPbXTJUXz8bqwpZmj+zwH10PXRZo+vzM=
Subject key identifier:   63:BA:C5:83:D0:CC:DE:A7:DB:BE:B3:0A:20:2E:C3:45:64:2B:B0:83
Authority key identifier: AD:4D:65:3B:83:5C:4E:1D:E9:8E:C6:63:76:88:9A:9A:83:76:4B:02
Certificate issuer:       /CN=A914B669/serialNumber=AD4D653B835C4E1DE98EC66376889A9A83764B02
Certificate serial:       3569
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU1lO4NcTh3pjsZjdoiamoN2SwI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft
Manifest number:          3569
Signing time:             Tue 18 Aug 2026 14:46:15 +0000
Manifest this update:     Tue 18 Aug 2026 14:46:15 +0000
Manifest next update:     Tue 25 Aug 2026 14:46:15 +0000
Files and hashes:         1: rU1lO4NcTh3pjsZjdoiamoN2SwI.crl (hash: o63umaZ0zpY7L/L82nUMv61N187AKgMRAcT64Qlxtrc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.crl
                          rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU1lO4NcTh3pjsZjdoiamoN2SwI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 14:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13673 (0x3569)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B669, serialNumber=AD4D653B835C4E1DE98EC66376889A9A83764B02
        Validity
            Not Before: Aug 18 14:46:15 2026 GMT
            Not After : Aug 25 14:46:15 2026 GMT
        Subject: CN=6a847037-8872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:91:68:bf:20:24:98:de:ff:24:03:d6:28:56:
                    e1:9b:4a:d1:83:e3:80:18:98:68:a3:dc:e3:7f:39:
                    2e:ce:67:c6:3a:4d:79:fa:d0:28:8a:09:e0:31:96:
                    d2:e7:2e:54:cf:46:87:ab:04:48:47:6c:db:7d:df:
                    0e:f0:31:09:96:5e:fd:d6:0e:3d:53:f2:1f:b9:98:
                    97:75:73:6f:99:25:1d:4a:35:cd:fa:1f:ab:46:f5:
                    5c:8e:bb:56:39:dd:ba:16:89:0d:1e:26:53:c5:4f:
                    ad:0e:cd:7e:54:cb:c2:6c:68:15:58:15:b2:80:71:
                    eb:70:7c:1c:a3:a1:f7:cf:80:98:93:d2:35:e3:d8:
                    d0:5b:d3:fc:a6:70:94:e8:3f:1e:f5:5e:1c:85:17:
                    6c:dd:c7:f3:a6:56:6d:73:c3:29:e6:21:5a:d5:30:
                    96:f6:b6:67:e7:f1:60:66:c8:86:a6:ad:c6:6e:82:
                    39:20:7f:11:cf:90:9b:43:a5:8d:06:b1:72:16:91:
                    f7:b8:61:d4:60:5a:d8:f7:43:ad:85:19:f5:cb:11:
                    42:02:ec:25:bb:da:2b:97:60:76:48:f9:ab:22:8b:
                    6b:70:ed:03:28:90:94:bc:41:31:25:02:25:02:c7:
                    a8:94:d9:ef:65:49:0a:59:08:26:e7:dc:ed:0d:e8:
                    a2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BA:C5:83:D0:CC:DE:A7:DB:BE:B3:0A:20:2E:C3:45:64:2B:B0:83
            X509v3 Authority Key Identifier:
                keyid:AD:4D:65:3B:83:5C:4E:1D:E9:8E:C6:63:76:88:9A:9A:83:76:4B:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU1lO4NcTh3pjsZjdoiamoN2SwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:59:7f:5a:e7:59:5e:8d:7e:31:d4:65:9f:a6:63:1a:78:19:
         8d:60:50:a2:8e:84:10:49:4b:14:45:67:f3:bb:f4:79:8e:d0:
         d4:15:58:aa:58:a4:d4:0f:a5:40:37:ef:23:ed:a6:7a:54:4e:
         8e:f1:1a:af:0c:b4:2f:72:13:a0:9d:85:1f:83:57:80:dd:2f:
         db:39:32:e4:e1:d2:25:86:38:ad:c0:a9:54:16:6b:15:8d:93:
         82:bd:42:f6:26:b0:bd:0d:e8:99:4a:2a:78:8e:79:4e:12:b3:
         3d:96:3a:34:50:1a:ef:49:a6:5d:1c:28:5a:a3:4d:50:10:10:
         04:bd:11:28:53:da:7e:a0:29:fd:f8:4d:f1:49:8b:20:4c:15:
         dc:c2:53:13:c9:a3:13:a9:4b:ba:74:7a:bb:70:66:6f:ad:3d:
         72:3a:b8:7d:6c:ef:92:b2:27:a5:68:ff:13:ee:c2:ba:bf:7f:
         82:89:6e:9b:80:30:af:fc:d5:6f:a8:ed:01:9d:7a:8e:da:20:
         94:1c:77:bb:e8:b4:06:dc:05:5a:b2:47:c3:80:01:87:1d:f1:
         ec:30:4c:42:8b:32:3f:df:31:65:9c:db:25:1d:df:61:7a:d1:
         b0:50:77:b5:b3:1c:fb:80:ae:ab:13:6b:b6:ce:40:6f:05:8f:
         08:b8:97:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:47:02 2026 by rpki-client