Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
File:                     EY5vss8Va51aJq7AUfscX37-AeM.mft (raw, json)
Hash identifier:          wxgGW3V70pQXl9SacQgZKYaaqGDI2GKyPVK5EF9f3zc=
Subject key identifier:   39:C7:B8:A9:22:17:D9:D5:DB:1F:66:EC:62:D5:BD:D7:6D:CA:C7:FA
Authority key identifier: 11:8E:6F:B2:CF:15:6B:9D:5A:26:AE:C0:51:FB:1C:5F:7E:FE:01:E3
Certificate issuer:       /CN=A914DA3F/serialNumber=118E6FB2CF156B9D5A26AEC051FB1C5F7EFE01E3
Certificate serial:       02AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
Manifest number:          02A0
Signing time:             Wed 19 Aug 2026 02:13:09 +0000
Manifest this update:     Wed 19 Aug 2026 02:13:09 +0000
Manifest next update:     Wed 26 Aug 2026 02:13:09 +0000
Files and hashes:         1: EY5vss8Va51aJq7AUfscX37-AeM.crl (hash: 7Mx8ZPhvPO9ui7x2A6rxMRZIUmIrUoD3XeuDhtwJkzY=)
                          2: 487A18B804CA11F1B2B56954083D8C67.roa (hash: ycuyie7LwkxG6yrjgKRl5/hSDxED87sOezbxhhIb1w0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.crl
                          rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:13:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 683 (0x2ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DA3F, serialNumber=118E6FB2CF156B9D5A26AEC051FB1C5F7EFE01E3
        Validity
            Not Before: Aug 19 02:13:09 2026 GMT
            Not After : Aug 26 02:13:09 2026 GMT
        Subject: CN=6a851135-ff23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:73:8e:68:8d:d5:03:a4:6b:d2:8f:bc:94:cf:
                    2e:96:ea:9d:8b:19:eb:e4:a5:50:3d:70:0e:fb:b2:
                    b5:9e:9e:e4:0c:59:0a:19:96:0c:de:72:15:d1:ef:
                    30:20:72:bc:a8:d7:5b:88:14:20:82:99:cc:b9:76:
                    f3:e1:2f:8d:07:bd:e3:d3:48:55:c2:1d:61:4f:a8:
                    74:63:8c:2c:27:0c:a5:a4:72:b8:8a:c6:34:dd:55:
                    c5:3a:5a:05:25:f5:18:72:00:53:89:84:34:91:71:
                    83:70:af:a4:e2:22:d0:99:a1:5b:b0:c8:3b:c2:0f:
                    32:0d:19:39:e0:9b:16:3e:d4:5f:c6:1b:a6:af:7c:
                    eb:28:19:18:3a:46:09:17:7c:c6:92:49:1b:31:d9:
                    75:8d:35:1e:91:e9:36:7f:1a:1f:e0:3d:77:4d:40:
                    33:04:3c:3d:5d:76:46:41:f4:52:47:b0:c7:ac:de:
                    5d:5e:e5:9d:20:bd:42:1f:6f:0d:3d:39:5d:bb:1f:
                    da:c8:a4:9a:84:87:a1:02:e7:73:33:49:b1:c4:8f:
                    58:66:ef:c0:c5:5e:2c:5e:73:d9:55:7c:36:66:71:
                    57:f8:68:62:de:2e:6d:99:28:7f:f8:3a:6b:5e:cc:
                    da:0f:bb:4b:d2:5f:2e:f6:91:42:5e:7e:dc:9a:71:
                    82:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C7:B8:A9:22:17:D9:D5:DB:1F:66:EC:62:D5:BD:D7:6D:CA:C7:FA
            X509v3 Authority Key Identifier:
                keyid:11:8E:6F:B2:CF:15:6B:9D:5A:26:AE:C0:51:FB:1C:5F:7E:FE:01:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:38:e8:5e:ce:00:44:3a:23:44:17:18:4f:6c:d4:98:c7:44:
         05:11:af:3a:e9:ea:82:1a:8e:c7:42:3a:91:49:5e:95:55:c1:
         7d:e5:94:c7:b0:01:57:de:eb:50:27:4e:a5:b8:7a:a4:c7:1d:
         9a:dd:7d:9b:14:82:42:dc:91:22:a3:70:96:05:84:8c:eb:08:
         0a:58:45:47:07:36:61:c4:95:f1:dd:9a:62:1d:2f:40:24:38:
         cc:0a:d9:d5:d5:43:11:d5:e1:9f:6d:52:95:97:f1:1d:c7:fe:
         f7:69:2d:91:0a:1e:1f:a6:ec:36:7a:84:a3:fd:09:0d:93:8d:
         2c:a4:1c:f3:fd:7b:03:09:fb:c8:9e:66:32:99:5d:fb:9d:5f:
         74:3e:db:8c:3f:7e:e4:19:76:8a:f8:87:89:c5:73:eb:47:5e:
         7c:0a:28:f7:a7:6d:3a:00:12:c2:c3:33:cd:af:0e:52:17:15:
         c1:79:f3:5a:cd:9c:8a:4e:6e:11:ca:6e:0d:c9:17:dc:dd:0a:
         52:27:6b:aa:33:22:6f:f1:28:79:d4:0e:a1:bc:6c:70:40:00:
         a6:26:e2:86:35:60:1a:13:72:c9:5e:ca:a0:70:8c:bc:82:5b:
         12:12:25:25:0a:a0:a5:03:0f:e7:e3:2a:62:9a:2d:47:ec:aa:
         1b:71:c5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:03:24 2026 by rpki-client