Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft
File:                     XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft (raw, json)
Hash identifier:          QEnSxyVQRgXPJkHcP9DtIr2KXTpqT5GtVcxfRg+UTFE=
Subject key identifier:   CC:C6:72:04:CD:00:E1:40:26:2F:F5:69:E7:95:C6:EB:73:76:1D:47
Authority key identifier: 5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6
Certificate issuer:       /CN=A914CB9F/serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6
Certificate serial:       0D31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft
Manifest number:          0D25
Signing time:             Tue 18 Aug 2026 18:28:15 +0000
Manifest this update:     Tue 18 Aug 2026 18:28:14 +0000
Manifest next update:     Tue 25 Aug 2026 18:28:14 +0000
Files and hashes:         1: XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl (hash: vc53LON45G3mNByPv4/WGwWdJpAYm88Bapb+heCACcI=)
                          2: 4EE9B36406C711EA84978821C4F9AE02.roa (hash: v4JJqmVnA1Gl+V2/Swavhny8pf1dKrgrSE3o8it+IXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl
                          rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3377 (0xd31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CB9F, serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6
        Validity
            Not Before: Aug 18 18:28:14 2026 GMT
            Not After : Aug 25 18:28:14 2026 GMT
        Subject: CN=6a84a43f-ba43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:36:b6:11:51:eb:b6:5e:a3:a8:0c:59:46:3e:
                    b9:e0:29:c3:aa:1c:5f:90:91:5d:9f:38:07:8d:0a:
                    46:ba:36:ed:13:5d:cb:db:df:54:76:d3:ba:fb:7d:
                    b8:92:27:67:fe:97:11:6d:bc:8d:9b:4e:00:52:ed:
                    24:e8:63:04:91:78:24:01:ea:56:9e:8e:60:1d:ac:
                    e1:8a:51:bf:06:14:68:7e:03:61:4e:da:62:a4:d2:
                    a5:b9:a8:f7:1d:5e:88:37:93:4c:df:12:23:7e:dd:
                    ce:90:da:2f:a8:2d:c8:58:9f:1a:92:52:5f:f9:22:
                    8b:cf:93:45:44:65:3b:e8:8a:4f:39:0b:ab:53:90:
                    ae:61:3d:de:d6:67:d5:72:6c:54:75:a5:98:78:77:
                    6a:57:4e:e3:f6:07:d5:04:11:df:9d:a9:2f:23:25:
                    ea:cf:6c:e5:93:23:db:2d:99:01:e2:1f:11:7f:d6:
                    d0:38:0e:74:eb:0b:55:48:85:34:70:63:f1:9b:db:
                    62:5b:39:8c:f1:c8:3a:81:13:ea:02:8a:7d:6e:62:
                    d1:8b:7b:c7:8b:78:b4:d1:8e:76:70:7b:40:fb:ab:
                    3d:1a:0c:d0:c2:2d:57:9a:30:6d:1b:be:c8:b7:1e:
                    24:87:c0:50:0e:59:d7:63:64:7d:d5:e5:5f:1f:46:
                    04:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C6:72:04:CD:00:E1:40:26:2F:F5:69:E7:95:C6:EB:73:76:1D:47
            X509v3 Authority Key Identifier:
                keyid:5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a3:48:e8:90:72:6c:d8:b0:c9:4a:c9:e6:57:18:b6:72:a1:
         f9:c7:b8:49:82:7b:62:40:fa:a6:5c:8b:6a:65:07:c5:d9:37:
         d2:ad:c0:0c:c1:cd:db:d8:80:db:e0:35:5f:0d:4f:c1:7b:d7:
         38:44:8f:72:05:7a:67:1e:dd:e9:67:91:2e:23:f2:60:5a:8e:
         80:e3:72:43:07:d1:46:0b:d3:20:d0:be:ee:ca:01:bf:6e:34:
         38:97:ed:17:1c:15:22:6b:2e:bf:e6:24:72:a3:ae:68:96:52:
         51:e3:1e:2e:42:cd:9b:be:a0:bc:7f:12:bc:08:5b:bc:6d:b9:
         a9:d6:dd:b0:af:f0:78:1d:a0:a0:7f:82:8e:e8:4b:55:a5:0c:
         23:39:3c:25:d0:12:bf:9f:f3:24:78:6a:26:45:3e:85:e4:fe:
         ce:46:4f:fa:9b:8d:a2:99:bb:5c:66:24:08:b8:5e:c0:df:c7:
         f1:9f:35:2c:df:d6:25:25:9f:34:31:ef:f7:cc:3f:cf:f4:61:
         9a:b5:03:dc:88:20:b0:9d:09:2b:c4:45:1b:d2:79:c4:05:93:
         7e:a1:79:bb:dd:ef:6a:7d:19:5b:07:31:f4:fd:9f:34:79:78:
         a9:e5:fe:b6:38:ec:5e:eb:20:68:e2:6a:3c:ef:85:b9:54:97:
         43:80:94:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:59 2026 by rpki-client