Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft
File:                     4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft (raw, json)
Hash identifier:          tgdl8oCnI7TpAyLmy/Pp31fh6qLkNB1qkMS6rOh+Rfg=
Subject key identifier:   92:3C:D9:72:53:50:5A:8D:1A:72:EE:C1:E6:C4:E6:41:13:69:42:58
Authority key identifier: E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32
Certificate issuer:       /CN=A914D0E3/serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932
Certificate serial:       0170
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft
Manifest number:          0167
Signing time:             Thu 03 Sep 2026 05:10:25 +0000
Manifest this update:     Thu 03 Sep 2026 05:10:24 +0000
Manifest next update:     Thu 10 Sep 2026 05:10:24 +0000
Files and hashes:         1: 4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl (hash: uBp1iXVeuWeBj54tPAJB9TG8cCTAAtV+XY47Lp9e95w=)
                          2: 84CC9A10957111F18DA344A36D11F970.roa (hash: k55agLSIaP5N2zf0tHKzs/9MtU/5VvxHelGsDQykezo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl
                          rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 05:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D0E3, serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932
        Validity
            Not Before: Sep  3 05:10:24 2026 GMT
            Not After : Sep 10 05:10:24 2026 GMT
        Subject: CN=6a990140-c4af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cd:40:7a:87:82:b2:89:e4:82:e0:de:15:c7:
                    46:21:e4:ba:4a:84:07:ab:31:71:52:87:a9:fe:b1:
                    88:af:be:9c:0e:ba:63:01:eb:8e:17:0a:95:08:a6:
                    56:42:e8:c9:95:32:b0:61:05:a1:2e:f8:38:7d:c7:
                    aa:da:21:c6:ee:03:65:88:f8:69:eb:f4:ac:02:d9:
                    47:bb:c5:47:f0:63:23:fb:ac:9f:7c:6e:00:03:4f:
                    37:87:06:23:72:4e:25:06:5b:a1:00:e0:47:42:df:
                    d1:af:81:15:96:36:5c:cc:5b:3e:2e:fd:6a:ab:69:
                    e4:7c:3f:7e:42:01:3e:5e:46:2a:7b:5f:d9:45:35:
                    b7:d1:ef:c3:9a:cc:b9:01:e9:2e:26:e3:b6:ec:ae:
                    ad:1b:3c:5f:e2:e3:ec:55:6d:35:7b:d6:73:dc:5f:
                    9b:23:fa:67:68:7b:8e:d8:5c:98:7e:f1:a0:f1:72:
                    68:14:21:fb:e3:49:c7:d7:c3:4d:11:42:e0:c4:75:
                    ca:75:e7:52:89:47:31:3f:ab:55:ab:37:bd:0d:8d:
                    0b:06:7d:60:79:a7:41:fb:48:ba:ab:a7:7b:2a:cf:
                    7d:ae:76:ec:2f:f4:ea:51:79:0d:f0:1c:25:b3:f0:
                    71:20:51:ca:09:67:12:07:59:fd:dd:8b:de:a6:80:
                    94:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3C:D9:72:53:50:5A:8D:1A:72:EE:C1:E6:C4:E6:41:13:69:42:58
            X509v3 Authority Key Identifier:
                keyid:E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d4:5f:56:fe:c2:e2:53:66:db:3d:c3:cf:61:73:45:69:b0:
         fc:9d:bd:63:94:82:07:6f:0a:3a:2d:28:d7:a8:38:a3:4b:b7:
         ae:a1:ab:78:55:44:e8:cb:86:57:4c:78:3c:83:d1:58:36:44:
         dc:0c:f8:bb:a4:b5:4c:83:26:87:5f:e4:74:2c:b0:36:89:3b:
         60:82:10:ff:f8:e9:12:20:77:3c:aa:d9:72:c6:67:94:8c:08:
         31:26:90:77:22:8d:29:55:d2:01:4a:44:57:1e:4d:c2:93:88:
         56:e3:65:72:14:34:43:6e:80:17:00:a1:d2:e9:e8:19:37:58:
         aa:63:0b:a6:aa:3b:57:75:87:1d:4d:06:51:06:76:f2:40:02:
         e1:5c:7a:40:eb:8d:b0:98:1b:14:fb:a4:3f:d0:a5:00:87:f0:
         c1:e6:db:61:4c:c5:0a:e1:e7:78:37:42:bb:7d:4f:45:7c:3e:
         b9:f7:b0:a5:2a:30:64:f4:28:e7:95:35:da:28:28:d0:cb:39:
         60:ec:80:56:e1:c5:da:5d:24:da:7e:ab:df:92:1d:f2:ea:d9:
         1f:b2:0f:32:36:33:d2:5c:48:8f:55:3f:bb:2f:14:ae:e6:8a:
         f7:44:77:5f:9b:9a:ba:77:42:15:5f:76:79:ba:18:89:c5:b3:
         00:e7:7c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:01:07 2026 by rpki-client