Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
File:                     zQysDn6E4-geSHYXTiwhQIUJQmk.mft (raw, json)
Hash identifier:          SLNfK3IkIzPqESCr9+r7OjuDc91SCu+LhpbyY/Swuss=
Subject key identifier:   FC:F9:9F:0E:D1:BA:E7:89:81:5B:58:91:14:E7:02:18:ED:5F:C3:50
Authority key identifier: CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69
Certificate issuer:       /CN=A914D249/serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269
Certificate serial:       03F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
Manifest number:          03E6
Signing time:             Wed 19 Aug 2026 00:54:35 +0000
Manifest this update:     Wed 19 Aug 2026 00:54:35 +0000
Manifest next update:     Wed 26 Aug 2026 00:54:35 +0000
Files and hashes:         1: zQysDn6E4-geSHYXTiwhQIUJQmk.crl (hash: 3FyvlDkIrsXEm/SeljQ6DVwV0GbjzEDipYsWopxc+gI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl
                          rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1009 (0x3f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D249, serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269
        Validity
            Not Before: Aug 19 00:54:35 2026 GMT
            Not After : Aug 26 00:54:35 2026 GMT
        Subject: CN=6a84fecb-b21e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:30:fa:21:fd:bb:6a:59:dd:61:ea:3e:54:67:
                    3c:67:62:de:9e:d3:98:a1:6e:d7:ca:38:2c:3e:29:
                    23:12:6e:0e:99:05:25:82:0d:f2:14:d9:3b:b2:6b:
                    22:b9:79:75:55:08:d9:a5:a7:85:12:81:33:d9:a1:
                    7b:bd:50:1e:fc:3c:ca:34:04:3f:60:7a:63:98:67:
                    3e:2f:38:55:29:c7:1e:55:54:c7:b8:44:35:1c:42:
                    81:4c:f8:6c:f1:ec:7e:b8:58:4c:9c:6a:05:0d:cc:
                    23:29:98:33:b0:e4:a8:3c:e6:5e:57:b4:76:09:43:
                    9c:c3:49:d9:f5:eb:85:30:71:0a:07:7e:5b:4e:cc:
                    5a:6c:b6:1c:0b:30:10:ba:4e:db:9b:f8:e1:bf:c4:
                    4e:17:3b:b3:a3:48:2c:8f:34:f6:d1:ef:30:7e:02:
                    fa:38:7d:9d:7f:73:90:ba:55:a2:51:4e:f0:21:7b:
                    78:57:ae:03:86:0a:26:83:a9:03:18:f7:b2:67:6a:
                    43:80:92:46:0a:bf:cb:81:be:3b:c8:1b:b6:bf:73:
                    f2:3b:f1:5b:8e:95:95:06:6d:23:f9:95:9c:7d:73:
                    f7:e4:9f:23:ef:24:32:f1:d0:36:ea:8e:42:6c:2b:
                    a6:21:f4:0c:fc:b7:84:e7:2d:34:7f:59:36:c8:48:
                    2e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F9:9F:0E:D1:BA:E7:89:81:5B:58:91:14:E7:02:18:ED:5F:C3:50
            X509v3 Authority Key Identifier:
                keyid:CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:54:e3:85:12:83:39:a6:6c:1d:e5:e2:d1:1e:a6:da:62:77:
         e4:51:96:68:93:cd:ea:4f:1a:b5:41:e6:6d:a5:7b:f8:5d:1d:
         59:2d:ad:c0:2e:14:d5:dd:2b:c8:4b:26:c5:78:43:c2:d7:a8:
         85:d5:fc:b2:a2:bf:e2:1d:56:5b:55:43:0d:f5:46:81:07:3c:
         4a:19:b1:50:82:ff:93:76:a2:de:8a:39:49:cc:b0:54:3e:5e:
         e4:b1:d4:73:33:5c:dc:c4:b0:ae:67:5c:6a:5f:14:f8:1a:64:
         6a:db:c4:e9:06:a5:57:a4:42:82:81:c8:a2:35:e2:99:03:88:
         32:18:2b:cb:5e:2d:eb:73:b2:1e:a1:4c:0e:f1:5a:53:3f:80:
         f9:95:9c:67:59:1b:48:0d:e9:e6:3e:91:9e:8f:fa:69:b4:63:
         c3:c7:37:e6:f9:49:ee:2f:d1:45:26:48:8d:18:49:50:03:1d:
         61:55:2c:c5:79:21:c3:31:0e:18:d2:90:b6:87:57:ce:0f:24:
         04:39:ee:c4:44:f6:3c:85:f5:7c:53:ca:93:e8:e4:7e:1c:4f:
         e9:62:06:9e:d3:78:1a:d8:83:da:13:46:95:ce:4f:45:10:b9:
         31:8c:b4:15:72:91:6f:4b:dd:25:b5:59:b3:3f:cb:6a:2f:16:
         66:7c:62:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:09 2026 by rpki-client